DFIR firm, CISSP, GCFA, GCFE credentialed, federal and government response.
Visit crowdstrike.com Incident response services, their own page →Public-tier claims with issuer citations; registry verification pending.
Certifications are held by individuals, never organizations. Org-level status below is a DERIVED rollup of named holders, the org claims nothing its holders do not hold. Issuer directories (GIAC, (ISC)², ISACA) list individual certificate holders with expiration dates, registry lookups resolve at the named-holder level and require no carrier data.
CISSP ((ISC)²) claimed with issuer citation; no expiration date published. Registry verification: https://credly.com/ (ISC)² badge lookup.
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
GCFA (GIAC (SANS)) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://gc.giac.org/verification.aspx).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
GCFE (GIAC (SANS)) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://gc.giac.org/verification.aspx).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
GCIH (GIAC (SANS)) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://gc.giac.org/verification.aspx).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
EnCE (OpenText (Guidance Software)) claimed with issuer citation; no expiration date published. Registry verification: https://www.opentext.com/encase-certification.
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
DFIR firm, CISSP, GCFA, GCFE credentialed, federal and government response.
5 shared certifications · 6 shared insurance panels
DFIR firm, CISSP, CISM, GCFA credentialed, federal and government response.
5 shared certifications · 5 shared insurance panels
DFIR firm, CISSP, GCFA, GCIH credentialed, federal and government response.
4 shared certifications · 5 shared insurance panels
Not documented
Priority response under retainer. Named on carrier panels: AEGIS, AIG, Allianz, Ambridge, Arch, Ascot, Aspen, AXA XL, Axis, Beazley, Berkley Cyber Risk, Berkshire Hathaway Specialty Insurance, Bowhead, Brit, Chubb, CNA, Coalition, Crum & Forster, Everest, Great American, Liberty, Mosaic, QBE, Resilience, Ryan Financial Lines, Sompo, Starr, Swiss Re, The Hartford, Tokio Marine Kiln, Westfield, Zurich. Federal and government response capability documented.
Sourced from third-party DFIR research (September 2026); the platform's full verification pass is pending.
Carrier relationships also documented: AIG, Chubb, Beazley, Coalition, Zurich, AXIS, CNA, Allianz, QBE, AXA XL.
Carrier relationships also documented: AIG, Chubb, Beazley, Coalition, Zurich, AXIS, CNA, Allianz, QBE, AXA XL.
Carrier relationships also documented: AIG.
Carrier relationships also documented: Coalition.
Corroborated by the September 2026 research pass: publishes the Services Retainer (priority access to elite responders) alongside Falcon Complete MDR with a documented 1-minute median time to contain.
The firm has publicly documented this work on their own site. Every entry links to the source, so you can read it at the origin.
CrowdStrike's blog publishes detailed write-ups of real incident response engagements, including attack chain analysis, threat actor identification, and remediation guidance from active cases.
Read at the source →