Practitioners, not slide decks
You work with people who investigate incidents, review evidence, and translate findings into practical decisions.
Practical advisory
About Us
Incident response and security advisory specialists.
We combine rapid intervention, rigorous investigation, and clear recommendations for teams that need practical cybersecurity support.
HOW WE WORK
How we support teams before, during, and after incidents.
Evidence before opinion
We base recommendations on logs, timelines, controls, and operational context, not assumptions or generic checklists.
Evidence-led work
Procedures teams can use
We write playbooks, escalation paths, and checklists that are clear enough to use during pressure, not only after a workshop.
Usable procedures
Calm incident coordination
We help teams structure decisions, containment steps, recovery actions, and management updates during active incidents.
Coordinated response
OUR TEAM
A focused expert team involved directly in the work.
Vlad Ardeleanu
Security expertMDR & Incident Response Specialist
Incident Response
Consultancy
EDR/SIEM/SOAR
Playbook Design
Leads investigations and remediation of critical incidents, providing clear technical guidance and advisory support while aligning processes with EDR/SIEM/SOAR to reduce response times.
- Coordinating and advising on incident investigations & response
- Tactical EDR/SIEM/SOAR & OSINT analysis for complex cases
- Standardising incident response processes & playbooks across teams
- Briefing and mentoring security teams and management
Silviu Matei
Security expertSOC & Incident Response Specialist
Incident Response
Consultancy
EDR/XDR
SIEM
Orchestrates enterprise-scale incident triage, correlating data from multiple sources and advising on response steps and SOC playbooks to ensure fast, consistent action.
- In-depth analysis and post-incident evaluation
- Log correlation and incident triage across environments
- Developing and advising on operational SOC playbooks
- Technical training and decision support for L1/L2 teams
Mihaela Bercaru
Security expertSOC & Incident Response Specialist
Incident Response
Consultancy
SIEM/SOAR
OT Security
Leads SOC operations and incident response, from alert triage to containment and lessons learned, advising stakeholders while fine-tuning SIEM/SOAR use cases and team workflows.
- Coordinating SOC operations and incidents
- Security log analysis and correlation in SIEM
- Improving SOC playbooks and procedures, including advisory on best practices
- Mentoring and advising security analysts and OT/IT teams
Remote-first support for European and international teams.
TrustedOrb is based in Romania and supports teams remotely across Europe and international environments, from advisory and training to incident response coordination.