Skip to content
Solvex Space
DFIR & ForensicsFixed price — $899Signed authorization

Hacked Device & Account Recovery

Locked out or compromised? We help you regain control of your own devices and accounts, remove the attacker's access, and secure everything so they can't get back in — for the accounts and devices you own and can prove are yours.

Verified Solvex Specialist

Verified by Solvex

Direct specialist contact for Solvex engagements

What this means. An authorized Solvex administrator registered and approved this exact public identity. What it does not. Solvex has not inspected the account on the platform, and this is not the platform's own verification.

Solvex specialists never ask for your passwords, recovery phrases, one-time codes, or payments to a personal account. Work, scope and invoices are agreed in writing through the official channels on this site.

Signed authorization required. This engagement is performed only against systems you own or are contractually authorized to have tested, under an agreed scope. See the responsible testing policy.

What's covered

  • Assessment of the compromise and attacker access
  • Regaining control of your own devices and accounts
  • Removal of attacker persistence and access
  • Password, MFA and recovery-option resets
  • Connected-account and session review
  • Hardening to prevent recurrence

What you receive

  • Recovered access to your devices and accounts
  • Removal of attacker footholds
  • Security-hardening actions
  • Recovery report
  • Prevention guidance

Evidence and reporting

How the work is kept honest
  • Evidence, frozen at issuanceFindings tie to something observed. When the report is issued, the evidence behind it is frozen in the same transaction and cannot be edited afterwards.
  • A signed reportAn Ed25519 signature covers both the report content and the delivered file. Alter a byte of either and verification fails.
  • Signed scope firstTesting starts only after written scope and signed authorization for systems you own or are entitled to have tested.

Anyone holding a Solvex report can verify it publicly without seeing its contents.

Our boundaries

What this engagement does not do, stated before it starts.

  • Only devices and accounts you own, with proof of ownership
  • We never access or recover another person's accounts
  • Some platforms' recovery depends on their own processes
  • No hacking of third parties to 'recover' anything

How this engagement runs

  1. 01

    Intake

    Tell us the system, the goal and the constraints. If the work is not a good fit, we say so before anyone is invoiced.

  2. 02

    Scope and authorization

    Written scope and signed authorization before anything is touched. Security testing runs only against systems you own or are contractually entitled to have tested.

  3. 03

    Investigation or build

    Specialists matched to the work. Findings are proven by hand — scanner output is a lead, never a finding.

  4. 04

    Evidence

    Every finding ties to something observed. When a report is issued, its evidence is frozen in the same transaction, so what backed the report cannot change afterwards.

  5. 05

    Delivery

    A signed report: an Ed25519 signature over both the content and the file, with a short verification reference you can read down a phone.

  6. 06

    Verification and retest

    Anyone holding the report can verify it publicly without seeing its contents. Fixes are retested as part of the engagement — “fixed” means we confirmed it.

Questions we are asked

Can you get back an account I've been locked out of?
For accounts you own and can prove are yours, we help you through recovery, remove the attacker's access and secure them. We work within each platform's legitimate recovery processes — we never hack accounts.
What proof of ownership do you need?
Evidence that the device or account is genuinely yours — purchase records, prior access, identity verification. This is essential: we will not help access anything that isn't demonstrably yours.
How do you stop it happening again?
We reset credentials and recovery options, enable strong MFA, review connected sessions and apps, and check your devices for malware that could re-compromise you.