Sold by: Blackpanda
Deployed on AWS
IR-1 by Blackpanda is a cost-effective cyber incident response subscription that eliminates the need for expensive annual retainers. For a fraction of the cost, IR-1 provides coverage and a one-time cyber incident response activation credit, giving organizations guaranteed access to expert responders when a ransomware attack or breach occurs.
Overview
Traditional incident response (IR) retainers can cost hundreds of thousands of dollars annually, locking organizations into costly agreements even if no incidents occur. IR-1 by Blackpanda offers a smarter, more affordable alternative. Usually delivered as a subscription, IR-1 ensures your business is covered when the worst happens. Every subscriber receives a one-time incident activation credit during the subscription term, guaranteeing rapid access to Blackpanda's elite digital forensics and incident response (DFIR) team in the event of a ransomware attack or other major incident.
With IR-1, organizations gain:
Affordable protection - a subscription model that replaces high retainer fees with predictable, cost-efficient coverage. Rapid response activation - the "big red button" makes it easy to activate an incident response, anytime. Our SLAs guarantee an initial response within 4 hours of activation. Recovery assurance - integration with Lloyd's of London-backed cyber insurance partners to reduce downtime and financial loss. Blackpanda is Asia's leading cyber crisis management firm, with operations across Singapore, Hong Kong, Japan, and the Philippines. Trusted by many customers across the region, IR-1 makes world-class incident response accessible to organizations of all sizes without the financial burden of traditional retainer contracts.
Highlights
- A cost-effective alternative to expensive incident response retainers.
- Guaranteed access to expert DFIR responders with a fixed-term subscription and one-time activation credit.
- Backed by Lloyd's of London-aligned cyber insurance partners for full incident lifecycle support.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
IR-1 Annual Term | Blackpanda IR-1 includes one-time incident response credit(s), weekly attack surface scans and endpoint coverage based on quantity purchased per annual subscription term. | $30.00 |
Dimensions summary
You buy IR-1 as a single annual subscription, priced by the quantity of units you purchase. Each unit bundles three things: one-time incident response credits, weekly attack surface scans, and endpoint coverage. As you increase the quantity, your included credits, scan volume, and endpoint coverage scale up together. There are no separate tiers to choose from here. You commit for a 12-month term and set the quantity to match the size and coverage needs of your organisation.
Top-of-mind questions for buyers
An incident response credit funds emergency response work when you report a cyber incident. Blackpanda responders investigate, contain, and neutralise the threat, run digital forensics, and deliver a final report with remediation steps. Each IR-1 unit includes one-time credits, so higher quantities give you more upfront response coverage.
Attack Surface Readiness scans run weekly to map your external footprint. They cover domain asset discovery, remote software exposure checks, external and web application vulnerability scans, and dark web email scanning. Endpoint coverage tracks the devices monitored under your subscription. These run in the cloud with nothing to install.
You raise the quantity of units on your annual subscription. The three bundled elements — incident response credits, weekly scan volume, and endpoint coverage — scale up together with quantity. There are no separate tiers to move between. You set the quantity once for the 12-month term to match your coverage needs.
www.blackpanda.com+1
Helpful?
Vendor refund policy
No money will be refunded.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Our Customer Success team can be reached at customercare@blackpanda.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
From cases involving rogue insiders to organized crime syndicates and nation-state threats, Unit 42 performs more than 1,000 incident response investigations each year. The Unit 42 Retainer gives you deep forensics and response expertise when you need it most, with predetermined service-level agreements (SLAs). You can also allocate your retainer credits for proactive Unit 42 cyber risk management services scoped during your retainer term. Our trusted advisors can assist your team with security strategy, assessment of technical controls, and overall program maturity.
Speed matters when it comes to a cyber attack. The Arctic Wolf JumpStart Retainer combines a prioritized response time with IR planning, incident runbooks, and preferred rates to our insurance-approved IR team.
Presidio and Fortinet have come together with a Cloud Security Posture Assessment (CSPA) service that evaluates your organization’s security posture across your AWS accounts and provides recommendations to strengthen your overall security defenses against today’s sophisticated attacks.
Incident Response PRO Plans by Check Point Services (formerly Infinity Global Services) provide structured incident planning, readiness testing, threat intelligence, policy review, and dedicated response hours. The service improves preparedness, accelerates response, and strengthens overall security posture.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.