DFIR firm, Cisco/CCNP, Splunk, OWASP credentialed.
Visit underdefense.com Incident response services, their own page →Public-tier claims with issuer citations; registry verification pending.
Certifications are held by individuals, never organizations. Org-level status below is a DERIVED rollup of named holders, the org claims nothing its holders do not hold. Issuer directories (GIAC, (ISC)², ISACA) list individual certificate holders with expiration dates, registry lookups resolve at the named-holder level and require no carrier data.
Cisco/CCNP is not a recognized certification in the platform registry, flag for review.
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
Splunk is not a recognized certification in the platform registry, flag for review.
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
OWASP is not a recognized certification in the platform registry, flag for review.
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
None documented
Not documented
2 / 4 / 12-hour SLA options. 24/7 response and retainer availability documented.
Sourced from third-party DFIR research (September 2026); the platform's full verification pass is pending.
No publicly documented case work was found on the firm's own site at the time of our research. Some firms publish engagement details under NDA restrictions; some simply do not publish. The absence of documented work is a fact, not a judgment.
