Individuals
Account takeover, scams, lost devices, phishing — clear recovery steps, free.
Sign in to run this tool AI analyses and live lookups run on a metered service, so an account is required. Signing in is free, needs no credit card, and gives you a higher daily allowance than anonymous use ever did. Sign in or create an account
// incident response
Something's wrong — let's fix it, step by step
Tell us what happened and we'll give you a calm, prioritized plan: contain the damage now, then recover, then prevent it next time. The built-in checklists are always free.
FREE1/1 AI-tailored plan left this month
// who this helps
Small business
Ransomware, invoice fraud, website hacks — contain fast, recover safely.
Enterprise
Adds evidence, notification, and regulatory duties. Pair with the SOC console for live incidents.
Frequently asked questions
What should I do first if I have been hacked?
Stay calm and stop the bleeding: change passwords from a clean device, revoke active sessions and tokens, enable multi-factor authentication, and isolate affected devices before investigating.
What incidents does this assistant cover?
Account takeover, ransomware, financial fraud, business email compromise, lost or stolen devices, and data exposure — each with a guided playbook.
Is the incident response plan free?
The built-in playbooks are always free. An AI-tailored plan based on your description is metered: one free request, with higher limits on Pro.
Can it tailor advice to my situation?
Yes. Describe what happened and choose your audience (individual or business) and it adapts the containment, eradication, and recovery steps to your case.
How to use AI Incident Response
Manual & worked example — inputs, output, limits, what it does not do, and a worked example.
Open the reference →