Incident response that works when your systems don't.
In a ransomware attack or major infrastructure failure, your incident response tool needs to work when the internet doesn't. Offline Mode keeps plans, contacts, runbooks and infrastructure available on enrolled devices, with no network connection required. It's part of the Bastion Command add-on, and available to everyone during the free trial.
Most incident response tools depend on the same infrastructure that might be down.
Cloud-hosted security information and event management (SIEM) tools, shared drives, and communication platforms are exactly what attackers target first. If your incident response documentation, contact lists, and runbooks are stored in the same environment that's compromised, they're unavailable precisely when you need them most.
BastionIQ's offline mode is designed for this scenario. Everything your team needs is encrypted and available locally, independently of your cloud environment, your network, and your primary communication infrastructure.
Always on. Always available.
Enrol your devices
Enrol the devices your response team will use. BastionIQ stores encrypted copies of your plans, runbooks, contacts and infrastructure on each one.
Keep your offline copy current
When the device is online, your offline copy picks up changes to plans, contacts and runbooks, so it's ready when you need it.
Unlock with a PIN or biometrics
When you need offline access, unlock BastionIQ with your PIN or your device's biometrics, and search your content locally. No internet, no VPN, no company network required.
Log the incident, sync on reconnect
Declare and log the incident offline. When connectivity returns, the record syncs and is marked as declared offline.
What offline mode includes
Encrypted copies on enrolled devices
Enrolled devices hold encrypted copies of your plans, runbooks, contacts and infrastructure records.
PIN or device biometrics
Unlock your offline copy with a PIN or your device’s biometrics. No internet, no VPN, no company network required.
Local offline search
Search your offline content on the device itself, so you can find the right runbook or contact with no connection.
Offline incident declaration
Declare and log an incident with no network connectivity. It syncs when you reconnect and is marked as declared offline.
On-device AI model (optional)
Download an optional AI model to the device, so AI assistance is still available during a full network outage.
Part of Bastion Command
Offline Mode is included in the Command add-on, and available to everyone during the free 30-day trial.
Offline Mode comes with Bastion Command. See Incident Command →
Don't rely on the infrastructure that might be the problem.
Offline Mode is included in the free trial and in the Bastion Command add-on.