6 min read
How we page a human at 3 am without waking you
The rules behind night coverage: what pages an analyst, what waits for morning, and what always wakes your team.
Marcus Shaw
Night shift analyst
Night coverage is a promise with rules. Here is what happens between 6 pm and 8 am.
What pages our analyst
Any critical case, and any high case that involves an admin account, production infrastructure or money movement. The analyst acknowledges within five minutes and starts with containment you have pre-approved: revoke a session, suspend an account, block an app.
What wakes your team
Only two things: containment you have not pre-approved, and anything involving customer data leaving your systems. Last quarter that was 2 pages out of 31.
Everything else waits for a written hand-off at 8 am.
Send us one week of logs. We send back what we found.
Connect one source with a read-only key. Within 48 hours you get a written report of what Wardell would have caught. No contract, and you can disconnect at any time.