About us
Ransomware experts. Clear guidance when it matters most.
When your business is hit by ransomware, every decision feels urgent. We bring the experience, technical expertise and personal support to help you understand your options and move forward with confidence.
Speak to a specialist: +49 89 55209466
Available 24/7 · Free initial assessment

A message from our founder
The first hours decide how a ransomware attack ends.
I founded BeforeCrypt in Germany in 2019 because companies hit by ransomware had nowhere to turn. Their IT partners knew how to run systems, not how to handle a criminal attack. Insurers, lawyers and authorities each covered one piece of the problem. Nobody took responsibility for the whole crisis.
Since then we have handled more than 1,700 ransomware and cyber extortion cases. The attack itself is rarely what does the most damage. The damage comes from decisions made in the first hours, under pressure and without experience: systems switched off that should have stayed on, backups restored before anyone checked them, messages sent that can’t be taken back.
Our job is to take those decisions off your shoulders, tell you honestly where you stand, and get your business working again.
+49 89 55209466
“As the owner of a small business, a cyber attack was an absolute nightmare. Their fast and professional action didn’t just save my data, it gave me my peace of mind back.”
Martin Czasch · Owner, IntraProfil GmbH · 4.86 / 5 on ProvenExpert
The people behind BeforeCrypt

Janos S. Konetschni

Benjamin Roth

Tim Heuser

Gareth Clark

Christian Dück

Christian Jünemann

Phil Becker

Robin Holzträger

Dagmar Hebenstreit

Dennis Movsjumov

Kristina Assafova

Nick Strøger
Why companies choose BeforeCrypt
Proven Ransomware Experts
Ransomware is our specialty. More than 1,700 ransomware and cyber extortion cases since 2019 mean we have very likely seen your attacker before.
24/7 Emergency Response
Ransomware doesn’t wait for office hours, and neither do we. Day or night, an expert starts on your case within 2 hours of your first contact.
One team, start to finish
Identification, decryption, contact with the attackers and the paperwork for your insurer and the authorities. One team handles it, so you don’t coordinate five vendors.
Our partners
Supporting Insurers in Cyber Incidents
As a leading cyber insurance provider, Markel works with us to support insured clients during ransomware incidents. Together, we ensure swift recovery, compliance, and financial protection in high-stakes cyber crises.
Insurance
Enhancing Cybersecurity for Insurers
Partnering with Mobiliar enables us to assist businesses on the front line. We provide expert ransomware recovery services and advise on preventative strategies while ensuring policyholders receive fast, secure, and compliant incident handling.
Insurance
Building Cyber Resilience Together
As a member of Allianz für Cyber-Sicherheit, we contribute to strengthening cybersecurity resilience across businesses. Our collaboration ensures access to best practices, intelligence, and rapid response strategies against ransomware threats.
Strategic partner
Driving alternate decryption methods
We align with No More Ransom to explore decryption solutions and alternative recovery options for ransomware victims. This partnership enhances our ability to recover encrypted data without ransom payments whenever possible.
Strategic partnerFounded in Germany. Working worldwide.
BeforeCrypt started in Germany in 2019. Today we handle ransomware cases for companies across Europe, the United States and beyond: remotely, around the clock, in German and English.
- Founded in Germany, 2019
- 1,700+ cases for clients worldwide
- 24/7 remote response, on site when needed
Awards & certifications




You are currently viewing a placeholder content from Wistia. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from reCAPTCHA. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More Information