For DFIR firms · Overflow support
Too many cases? Hand us some.
When incidents pile up faster than your team can work them, Authene can take cases, analysis or reporting off your desk. We work under your brand, to your standards, so your clients get the response you promised. Our goal is simple: a stronger incident response industry across Australia and New Zealand.
For
DFIR and incident response firms, MSSPs and SOCs
Work
Full cases, analysis, reports and QA, surge responders
Brand
Yours. We work white-label
How
Remote, on Australian and New Zealand time
What we can take
As much or as little as you need.
Take one piece off your plate or a whole case. You decide where the line sits.
Full investigations
We take a case end to end: triage, evidence collection, analysis and the report, run under your name.
Analysis only
You collect the evidence and we analyse it, whether that’s Microsoft 365 and email fraud, endpoints or logs, and hand back findings.
Report writing and QA
We draft reports and timelines from your findings, or peer-review yours before they go to the client.
Surge responders
Extra responders who join your team during a large incident and work to your lead and your process.
White-label
Your brand, your client.
- We work under your brand and write in your report template
- We never contact your client unless you ask us to
- We don’t pitch our services to your clients
- We’ll sign your confidentiality agreement before any case detail is shared
- We check for conflicts before we accept work
Why we do this
A stronger industry helps everyone.
When a major campaign or vulnerability hits, every response firm in the region gets busy at once. Clients wait, evidence ages and good teams burn out.
We’d rather help a peer keep their promise than watch a client wait. Sharing the load makes response better for every organisation that needs it, and that’s good for all of us.
How it works
From backlog to handover.
Tell us what’s piling up
Email us the type of work, rough volume and your deadline. No client names needed yet.
Conflicts and scope
We check for conflicts, agree what you need answered and confirm the effort before we start.
Set up the handover
Your template, your standards, how we access the evidence and who we report to.
We do the work
Remotely and securely, with regular updates to your lead so nothing surprises you.
Hand back
Findings and drafts go to you for review. The client relationship stays with you.
Also useful
More for security teams.
Questions
Questions from partner firms.
Can you work under our brand?
Yes. We work white-label, write in your report template and follow your process. Your client deals with you, not us, unless you ask us to join a call or meeting.
Will you contact or pitch to our client?
No. We never contact your client unless you ask, and we don’t pitch our services to them. The relationship stays yours.
What kinds of incidents can you take?
Business email compromise and Microsoft 365 compromise, ransomware, cloud and website compromise, insider and data leak cases, and more. If you’re not sure whether a case fits, ask.
How do you get access to the evidence?
However you and your client agree, remotely and securely. We confirm access, handling and storage in the handover before any evidence moves.
How is overflow work priced?
We agree the scope and effort for each case or block of work before we start, so there are no surprises for you or your client.
Can you help at short notice?
Often, yes. For urgent surge support, email response@authene.com.au with “Urgent” in the subject. A responder replies within 15 minutes, 24/7/365, and we’ll tell you straight away what we can take on.
Overflow support
Drowning in cases? Let’s talk.
Tell us what’s piling up and when it’s due. We’ll tell you honestly what we can take on. For an urgent surge, put “Urgent” in the subject line.