Frequently asked questions
Everything you need to know before starting a ransomware analysis with us.
Common questions about ransomware decryption service
Why does the analysis have a cost?+
Our forensic analysis is performed by senior engineers who reverse-engineer the encryption, validate recoverability against our case database, and produce a written report. The fixed fee covers that engineering time and is fully credited toward your recovery cost if you proceed.
Can you guarantee 100% recovery?+
No serious recovery firm can guarantee 100% — anyone who does is lying. What we guarantee is the opposite: no recovery, no fee. You pay for the analysis. If we cannot decrypt your files, the recovery cost is zero.
How long does ransomware recovery take?+
Standard analysis is delivered in under 24 hours. Premium analysis in under 12 hours. Full decryption typically runs 24–72 hours depending on data volume and strain complexity.
Is my data safe with you?+
Yes. All uploads are encrypted in transit, processed in isolated environments, and deleted after the case closes. We sign NDAs on request and have served hospitals, banks, and state-owned enterprises with strict confidentiality.
Do I need to send my hard drive anywhere?+
No. The entire process is remote. Our engineers connect through your existing IT channels (TeamViewer, AnyDesk, RDP over VPN) and perform decryption on your hardware. No drives leave your premises.
Which ransomware types can you handle?+
We have handled 700+ strain variants including LockBit, STOP/Djvu, Dharma/CrySiS, WannaCry, Cerber, Locky, Ryuk, TeslaCrypt, CryptoWall, and Globe families. Even if your strain is new, our team analyses the sample and tells you honestly whether recovery is feasible.
Your data is recoverable. Don't wait.
Every hour of delay increases the risk of permanent data loss. Our engineers are on call 24/7.