Ransomware and Virus Recovery

Arete

Fairfield, United States

Arete is a leading cyber risk management firm specializing in ransomware incident response, digital forensics, and managed detection and response. Headquartered in Fairfield, Connecticut with global operations, Arete provides end-to-end ransomware recovery including threat containment, negotiation, decryption, data recovery, and post-incident EDR deployment. The company publishes the quarterly Arete Ransomware Report and works extensively with cyber insurance carriers and breach counsel firms.

Coveware by Veeam

Westport, United States

Coveware is the category-defining cyber extortion incident response firm, founded in Westport, Connecticut by CEO Bill Siegel and CTO Alex Holdman. Acquired by Veeam in April, Coveware handles over 1,000 ransomware cases annually with 24/7 response, bundling forensic triage, extortion negotiation, cryptocurrency settlement, and decryption via its proprietary Unidecrypt platform. More than 70% of Coveware-supported clients avoid payment entirely.

CrowdStrike Services

Austin, United States

CrowdStrike is a publicly listed cybersecurity company (NASDAQ: CRWD) founded by George Kurtz and headquartered in Austin, Texas. CrowdStrike Services provides elite incident response, ransomware recovery, compromise assessment, and proactive threat hunting powered by the Falcon platform and CrowdStrike Intelligence. The firm is known for responding to the most sophisticated nation-state and criminal intrusions and publishes the widely cited Global Threat Report each year.

GroupSense

Arlington, United States

GroupSense is a digital risk protection and ransomware negotiation firm founded and headquartered in Arlington, Virginia. The company's Ransomware Response team provides expert negotiation, threat actor profiling, cryptocurrency payment facilitation, and sanctions compliance for organizations facing active ransomware incidents. GroupSense also offers continuous dark web monitoring, executive protection, and brand intelligence services through its TraceLight platform.

Mandiant

Reston, United States

Mandiant is one of the world's most respected cybersecurity incident response and threat intelligence firms, founded by Kevin Mandia in 2004 and now part of Google Cloud (acquired for $5.4 billion). Headquartered in Reston, Virginia, Mandiant provides elite ransomware response, nation-state threat investigation, and digital forensics for Fortune 500 enterprises and governments. The company is known for investigating some of the highest-profile breaches in history and publishing the widely cited M-Trends report.