Contact

Tell us what you have. We will tell you what is watching it.

Most conversations start with a free 45-minute posture assessment — no slides, no scare deck, just a look at your estate and an honest read on where the gaps are. Use the form for anything that can wait a working day. If something is happening right now, skip the form and call.

Go to the form Something is happening now

Start a conversation

Everything except your message is short. We ask for endpoint count because it is the only number that changes the answer on pricing.

We reply from a person, not a sequence.
Laptops, desktops and servers. 20 is our minimum.
What you run today, who supports it, what prompted you to look. Two lines is plenty.

We use what you send here to answer you and nothing else — no list, no sequence, no reselling. If you would rather not use a form, hello@warddigitalhq.com reaches the same three people.

If it is happening now

If you are mid-incident, do not wait on us.

If you believe you are mid-incident — files renaming, a ransom note, an account you no longer control, a supplier telling you they received something strange from your domain — a web form is the wrong channel. It sits in a queue, and we are not yet staffed to empty it at 3am.

Incident line: not live yet

Ward Digital is pre-launch, so there is no responder on a phone tonight. We will not publish a number that rings nowhere. If you are mid-incident right now, call a working incident-response firm or your national cyber authority — do not wait on us. Mail security@warddigitalhq.com and we will answer, but treat that as slow.

Answered by a responder, not a switchboard. Ward customers are identified by account; if you are not a customer we will still take the call, give you the first three steps free, and tell you plainly whether you need a full incident-response firm rather than us.

  • Disconnect affected machines from the network — cable out, Wi-Fi off.
  • Do not power them off. Shutting down destroys memory evidence.
  • Do not delete anything, including the ransom note.
  • Write down the time you first noticed. It matters more than you think.

What happens after you send it

  • A person reads it

    Not a routing bot. One of the founding team, usually the same day it arrives.

  • You get a reply within one working day

    Either a couple of times for a call, or a straight answer if your question did not need one.

  • 45 minutes, no slides

    We walk your estate: what runs where, who supports it, what happens today when an alert fires at night.

  • A short written read

    Two pages: what you have, the gaps we saw, what we would do first — yours to keep whether or not you buy anything.

Response times

Form and email
1 working day
Posture assessment call
Within 5 working days
MSP partnership enquiry
2 working days
Incident line
Answered live, 24/7

These are targets we hold ourselves to, published here so you can hold us to them too. Ward is pre-launch and a small team; if we miss one, say so and we will tell you why.

Other routes

Security disclosure
security@warddigitalhq.com
Incident line
Not live until launch

Found a flaw in something we run? Mail the disclosure address. We will acknowledge inside two working days and we will not send a lawyer.

Before the call, it helps to know

  • Roughly how many laptops, desktops and servers you run
  • Whether email is Microsoft 365, Google Workspace or something else
  • Who currently supports your IT, and what hours they cover
  • Any client or insurer requirement you are being asked to meet

If you do not know some of these, that is itself a useful answer and we will work it out together.