Unit 42: Intelligence driven, response ready

By bringing together industry-leading threat intelligence, incident response and cyber risk expertise backed by Palo Alto Networks technology, Unit 42 has become a strategic advisor to CISOs around the globe.


Our daily mission is to protect the digital world from cyberattacks.

We wake up every day focused on collecting and analyzing the most up-to-date threat intelligence and applying our analysis to respond to cyberattacks.

We make sure that your worst days aren’t as bad as they might have been without us.

Don’t panic. Unit 42 has you covered.

The 42 in our name serves as a nod to Douglas Adams’ “The Hitchhiker’s Guide to the Galaxy.” And while the number itself may not provide the ultimate answers to all your cybersecurity questions, our team is here to do exactly that.

An elite leadership team of cybersecurity experts

Unit 42® brings together world-renowned threat researchers, incident responders and security consultants to create an intelligence-driven, response-ready organization that's passionate about helping you proactively manage cyber risk. Our team serves as your trusted advisor to help assess and test your security controls, transform your security strategy with a threat-informed approach and respond to incidents in record time.

Under the leadership of Wendi Whitmore, Unit 42 has become a globally recognized incident response leader. She previously led IBM’s X-Force incident response and threat intelligence teams. Wendi is an appointed member of the Department of Homeland Security’s inaugural Cyber Safety Review Board.
Wendi Whitmore

Wendi Whitmore


Michael Sikorski, Unit 42’s CTO and VP of engineering, is a world-renowned expert in reverse engineering and wrote the best seller, “Practical Malware Analysis.” He has over 20 years of experience working on high-profile incidents and leading R&D teams, including at Mandiant and the NSA.
Michael Sikorski

Michael Sikorski


Sam Rubin, global head of operations, has spent 20 years in cybersecurity, helping organizations defend against cyberthreats. He guides Unit 42’s consulting offering strategy and has expertise in incident response, digital forensics and cyber risk management.
Sam Rubin

Sam Rubin

Global Head of Operations

Tim Erridge, managing partner - EMEA, is a recognized innovator with over 20 years of experience in intelligence-led cybersecurity for organizations of all sizes and all industries. He has led teams of subject matter experts in threat intel, incident response and offensive security.
Tim Erridge

Tim Erridge

Managing Partner - EMEA

André Reichow-Prehn’s expertise covers OT security, threat intelligence, incident response, communication interception, exploits, digital forensics, cybersecurity architecture, and GRC. He has led industry-leading teams with expertise in incident response, threat intelligence, penetration testing and OT security. Before joining Unit 42, André was a Partner at EY responsible for industrial cybersecurity and part of the German Cybersecurity leadership team.
André Reichow-Prehn

André Reichow-Prehn

Managing Partner - Central Europe, Southern Europe and LATAM

Philippa Cogswell has over 20 years of global security, technology, and leadership experience. Philippa has led cybersecurity teams and capability development across defensive security, incident response, threat intelligence, cyber strategy and risk management. Prior to Unit 42, Philippa was a Partner with PwC, and has worked with both Australian and British lead security agencies, as well as UK’s Centre for Protection of Critical Infrastructure.
Jessica Smith

Philippa Cogswell

Managing Partner - JAPAC

Sharon Maydar, Vice President, Managed Services, has over 20 years of experience in tech, leading R&D and product teams in enterprise companies and startups. Prior to joining Unit 42, she led the development of Lightcyber's Behavioral Detection Engine and its integration into Cortex XDR®.
Sharon Maydar

Sharon Maydar

Vice President, Managed Services


Intelligence driven. Response ready.

Palo Alto Networks
Swift data collection for investigation
Swift data collection for investigation
Swift data collection for investigation
Security Updates
Observed attacker techniques & indicators of compromiseSwift data collection for investigation
Security Updates

Why choose us

Industry-approved incident response

Unit 42 was recently named a Leader in “The Forrester Wave™️: Cybersecurity Incident Response Services, Q2 2024”, so we know for a fact that our approach 100% aligns with industry best practices as well as our clients' best interests.







As Seen In


Go from reactive to proactive

Our consultants serve as your trusted advisors to assess and test your security controls against the right threats, transform your security strategy with an intelligence-informed approach and respond to incidents in record time.
Please complete reCAPTCHA to enable form submission.
By submitting this form, you agree to our Terms. View our Privacy Statement.