Fri, Nov 5, 2021

Gartner Names Kroll a Representative Vendor for Digital Forensics and Incident Response Services Third Year in a Row

New York – Kroll, the world’s premier provider of services and digital products related to valuation, governance, risk and transparency, today announced that its Cyber Risk practice has been named in the 2021 Gartner Market Guide for Digital Forensics and Incident Response Services for the third consecutive year, confirming its position as a leading incident response provider. Kroll’s place in the guide reflects its continuum of services addressing the multifaceted nature of incident response, including digital forensics, malware analysis, incident readiness services such as tabletop and red teaming exercises, and breach notification services.  

The 2021 Gartner Market Guide for Digital Forensics and Incident Response (DFIR) examines trends in this evolving market and outlines common characteristics of incident response (IR) agreements, how to find the right vendor, maximize cyber insurance policies and benefits, and limitations some vendors may carry. 

“We are proud to have been recognized once again among the leading IR vendors in the world. Kroll handles thousands of cyber incidents every year across a variety of industries, leveraging our deep investigative background and frontline threat intelligence to help clients respond confidently no matter the threat,” said Ioan Peters, managing director in Kroll’s EMEA Cyber Risk practice.  

The Gartner DFIR market guide recommends security leaders consider both proactive services, ranging from compromise assessments and incident response plan development to simulations and tabletop exercises, and reactive services, such as malware analysis, digital forensics and threat intelligence. Kroll is uniquely positioned to deliver effective proactive and reactive solutions thanks to its frontline expertise, proprietary digital forensics tools, extensive relationships with cyber insurance and law firms, and client-friendly retainers

The guide also advises favoring DFIR providers with deep knowledge of and experience in handling evidence and supporting court cases as incident response investigations go much further than responding to alerts and require the mindset of a forensic examiner to know the right artifacts to examine, the proper way to collect evidence and how to support clients in the event of litigation.

In response, Rob Phillips, associate managing director in Kroll’s APAC Cyber Risk practice commented: “No matter the threat, Kroll has the experience and resources (human and technology) to respond quickly, discern, isolate and secure valuable evidence to investigate the digital trail, wherever it may lead. We have the proven expertise to help organizations make confident decisions at every stage of the incident.” 

“Clients also benefit from our DFIR expertise with Kroll Responder, our managed detection and response solution staffed by seasoned investigators. With our unlimited response capabilities, we help shorten the entire incident lifecycle, with detection, investigation, remediation, notification, monitoring and restoration under a single agreement, something no other cyber security provider is able to match.” 

Gartner clients can download the DFIR market guide here. More details about previous editions of the Gartner Market Guide for Digital Forensics and Incident Response can be found here and here.

About Kroll
Kroll is the world’s premier provider of services and digital products related to valuation, governance, risk and transparency. We work with clients across diverse sectors in the areas of valuation, expert services, investigations, cyber security, corporate finance, restructuring, legal and business solutions, data analytics and regulatory compliance. Our firm has nearly 5,000 professionals in 30 countries and territories around the world. For more information, visit

Cyber Risk

Incident response, digital forensics, breach notification, managed detection services, penetration testing, cyber assessments and advisory.

Computer Forensics

Kroll's computer forensics experts ensure that no digital evidence is overlooked and assist at any stage of an investigation or litigation, regardless of the number or location of data sources.

Cyber Risk Retainer

Kroll delivers more than a typical incident response retainer—secure a true cyber risk retainer with elite digital forensics and incident response capabilities and maximum flexibility for proactive and notification services.

Cyber Litigation Support

Whether responding to an investigatory matter, forensic discovery demand, or information security incident, Kroll’s forensic engineers have extensive experience providing litigation support and global eDiscovery services to help clients win cases and mitigate losses.

End-to-End Litigation Support Services

Experienced investigators deliver case-changing insights to support the entire litigation lifecycle.

Kroll Responder

Stop cyberattacks. Kroll Responder managed detection and response is fueled by seasoned IR experts and frontline threat intelligence to deliver unrivaled response.

Incident Response Tabletop Exercises

Kroll’s field-proven incident response tabletop exercise scenarios are customized to test all aspects of your response plan and mature your program.