Loading...
Loading...
Free tool
Price restoring, rebuilding and paying against each other — with the obligations that block payment shown before the money, and the rebuild your ransom does not remove counted in.
This tool does not tell you whether to pay. No tool honestly can. It shows what each course of action is likely to cost, what you have not yet checked, and how much of the answer rests on figures you guessed.
Restore, rebuild clean, pay for a decryptor, pay for suppression, a hybrid, or retire the systems. A team that sees only "pay or rebuild" has already made its first mistake.
Sanctions screening, counsel, insurer consent, jurisdiction. Until those resolve, the payment options are not priced at all — because they may not be lawfully available at any price.
A decryption key returns data. It does not remove the attacker. The model always carries the eradication work, and shows what happens if the key does not work.
The whole calculation runs in your browser. Your revenue, margins and insurance limits never leave your device, and the PDF is generated locally too.
// resilience — the largest lever on the whole answer
Attackers attempted to reach the backups of 94% of ransomware victims. An untested backup is an unproven one.
// cyber insurance
Common market wording. Without confirmed consent the estimate assumes NO insurance recovery on any payment option.
Every default figure carries a citation. The settlement ratios come from Sophos research showing organizations whose backups survived negotiated down to about 82% of the demand, while those whose backups were reached paid about 98% — backup posture is a negotiating variable, not only a recovery one. Decryptor efficacy, repeat-attack rates and breach costs come from Sophos, Coveware, Verizon DBIR, IBM/Ponemon and Cybereason. The legal gates reference the OFAC advisory on facilitating ransomware payments and Australia's mandatory payment-reporting regime.
This is a planning and training estimate. It is not legal, financial or incident response advice, and it does not determine whether a payment would be lawful. Engage counsel and law enforcement before acting on a real incident.