Incident Response Services
At any moment, day or night, your organization can be victimized by devastating cybercrime. You can’t predict when cyberattacks will happen, but you can use proactive incident response to quickly mitigate its effects or prevent them altogether.
Emergency Response Hotline
I’m under a cyber attack and need help now!
For additional questions to Check Point about the Sunburst attack
email to: Sunburstattack@checkpoint.com
Want to work with a local partner? Call or email us and we’ll refer you to an expert in your area.
Three Steps to Take in an Emergency
Check Point Incident Response is a proven 24x7x365 security incident handling service. It’s a single hotline phone call away. When you call us we rush into action. We help you contain the threat, minimize its impact, and keep your business running.
Consider these three steps in a cyber emergency:

Preserve the Crime Scene
Collect attack details from your team. Include your assessments of the security attack, how it was discovered, possible cause(s), its impact, and any initial actions you’ve taken.
Contact Us Now
Call us toll-free using the emergency response number listed above. If your country is not listed, please email us and we will respond immediately.
You do not have to be a current client or Check Point customer for this initial contact.
Get Back on Track
We will identify points of compromise, provide daily Active Threat reports, and work with your team to fully eradicate the threat. We’ll also help you communicate the details and ramifications of the attack back to your business and management.
Incident Response Services

Instant Response
Dedicated 24/7 experts respond immediately to any security attack. This includes denial of service, malware, virus, data loss incidents, and more
Speedy Recovery
Accelerate your ability to contain threats, reduce downtime, limit damages and costs, and keep your business running
Mitigate Future Risks
After an incident, we help you apply industry best practices to strengthen your security controls, and provide latest threat intelligence

- Incident Response Planning
- Tailored “Threat” Consulting
- Table Top Exercise
- Policy Creation
- Intelligence Sharing
- Attack Surface Evaluation
- Customized Threat Management
- SOC Training/Playbook Creation

- Attack Mitigation
- Full Incident Handling
- Malware Forensics
- Endpoint/Network/Mobile Forensics
- Threat Intelligence
- Attack Landscape Analysis
- Full Actionable Reporting

- Domain Takedown Services
- Compromise Assessment
- Threat Hunting Engagement
- Active Actor Management
- Attack Disruption Services
Incident Response Features
Check Point Incident Response is a full-featured service to help you immediately respond to a cyberattack. After full containment, we work with you to strengthen your cybersecurity controls in order to thwart further attacks. Here are a few of the key features:
Multi-threat Analysis
Check Point is the only company to offer insight and remediation for several different types of threats including malware, denial of service, firewall, IPS, applications, data loss, botnets, among others.
Documentation and Guidance
As our customer, you receive detailed documentation and best practices guidelines to improve processes, response speed, and meet compliance and reporting requirements. Included are incident response analysis, remediation, attack profiling, and other information.
Real-time Remediation
Real-time remediation is only possible with access to real-time data. During an engagement Check Point will gather forensics information from the network, endpoint and your cloud infrastructure to determine the threat and provide mitigations for the threat. If you don’t have the necessary remediation, Check Point will provide, where appropriate, the necessary control, free of charge during an incident, such as network sensors, Next Gen Protections, or even cloud mitigations such as O365 controls.
Custom Security Controls
We provide expert recommendations to enhance your security protection. This includes custom signatures, traffic and attack analysis, rule-based protection activations, customized protections, and third-party systems and service provider protection.

The Check Point Incident Response team helped Connexus develop an incident response plan.
“Check Point not only delivered outstanding security solutions and effective management capabilities,” said Rono, “they have helped our entire company build a stronger security posture. That’s the kind of engagement we wanted to protect our systems, operations, and customers.
Jon Rono, Group Leader for Technology Services at Connexus Energy Read the Story
Emergency Response Hotline
I’m under a cyber attack and need help now!
Want to work with a local Partner? Call or email us and we will refer you to an expert in your area.