Investigate | Intelligence | Resilience
Respond Decisively
Recover RapidlyExpert cyber incident response and digital forensics
We investigate and remediate cyber attacks, closing down threats and limiting business impact with speed, precision, and deep expertise.
Is your organisation facing an active cyber incident?
Cyber incidents are stressful - but they happen every day. Our DFIR experts are on standby 24/7 to help you respond, recover, and get back in control fast.
Our Solutions
End-to-End Cybersecurity
Fully customisable solutions combining DFIR expertise with cyber resilience.
Investigate
Expert-led digital forensics and incident investigation to uncover the full scope of a breach, preserve evidence, and provide actionable intelligence.
Explore digital forensics servicesIntelligence
Proactive threat intelligence and monitoring to identify emerging risks, track adversaries, and inform strategic security decisions.
Explore threat intelligence servicesResilience
Comprehensive programmes to strengthen your defences, test your readiness, and ensure your business can withstand and recover from cyber events.
Explore cyber resilience servicesRecover
Recovery support, network restoration, threat actor engagement, and ransom payment facilitation to return your business to safe, operational status after a cyber incident.
Explore cyber recovery servicesHow We Can Help
Expert cyber & forensic services
Our range of services enable clients to handle incidents confidently and get back up and running quickly.
Ransomware Investigations
Ransomware Investigations
Contain infections, investigate incidents, and restore critical systems rapidly
Business Email Compromise
Business Email Compromise
Investigate account takeover and cloud email compromise incidents to uncover timelines and threat actor activity
Data Breach Review
Data Breach Review
Data minimisation and searching for sensitive information within breached datasets
Threat Intelligence
Threat Intelligence
Dark web monitoring, open source research, and cryptocurrency investigations
Forensic Investigations
Forensic Investigations
Investigate allegations of fraud and internal data breaches using digital forensics
Proactive Services
Proactive Services
Tabletop exercises and incident response planning to reduce risk and impact of potential incidents
Our Mission
Protecting what matters most
Our mission is to minimise the impact of cyber incidents on organisations through expert response, thorough investigation, and forward-thinking preparation - empowering our clients to recover with confidence and resilience.
Our Values
What drives us
Integrity
We operate with transparency and honesty in every engagement, earning trust through our actions.
Collaboration
We work as an extension of our clients' teams, sharing knowledge and building lasting partnerships.
Excellence
We pursue the highest standards in every investigation, continuously refining our methods and expertise.
Empathy
We understand the pressure of a cyber incident and support our clients with care and urgency.
Our Team
The people behind Capra Cyber
A world-class team of cyber security professionals dedicated to protecting your business.
Steve Sandford
Chief Executive Officer
Steve Sandford
Chief Executive Officer
Seasoned cybersecurity leader with extensive experience in Digital Forensics, Incident Response and Strategic Consulting. Previously worked in a law enforcement cyber unit, led Ankura's UK IR team, and built CyXcel's DFIR capability to NCSC CIR approval. Driving Capra Cyber's mission to redefine elite cyber services.
steves@capracyber.com
Brent Riley
President
Brent Riley
President
Veteran cyber investigator and incident response leader with experience across law enforcement and consulting. Previously Co‑founded Lyra Recovery and led Ankura's Americas IR practice before helping transition CyXcel LLC into Capra Cyber. Former detective running a sheriff's digital forensics lab and cybercrimes special agent for the Ohio Bureau of Criminal Investigation.
brentr@capracyber.com
Jim Salter
Chief Technology Officer
Jim Salter
Chief Technology Officer
Digital Forensics, Incident Response and Threat Intelligence specialist experienced with complex incidents across cloud, Linux, and critical infrastructure. Formerly at Asceris and Lodestone, Jim managed CyXcel's NCSC-accredited DFIR lab and aligned capabilities with cyber risk strategy.
jims@capracyber.comWhy Choose Us
How we're different
We deliver elite cyber services backed by expert DFIR Investigators, empowering our customers to prepare confidently and recover swiftly from cyber incidents.
Global expertise
Local touch, worldwide reach — we meet our clients' needs wherever and whenever they arise.
Experience-led preparation
We use our incident response experience to improve our clients' planning and preparation for future threats.
Industry partnerships
We collaborate with vendors who share our values, drive for excellence and client-first mindset, ensuring best in class expertise across all technical domains.
Rapid Recovery
Capra Cyber delivers faster safe recovery using Zero Trust principles and proven containment, investigation and restoration methods.
24/7 Incident Response
Experiencing a security incident? Our response team is available around the clock.
Emergency Email
incident@capracyber.com
Emergency Hotline
UK: +44 208 059 9822
US: +1 855 490 4945
Get in Touch
Contact Us
Prefer to be prepared? Speak to our experts to plan your cyber incident readiness