Our story
When something goes wrong, a small team needs a checklist, not a sales call.
I'm Johnny Mobley. I started building systems for other people in 2000, when I was 16, and I've been doing it ever since. Along the way I automated most of my own work, and the tools I built for myself became these companies. Each one runs on rules I wrote down, not on paid AI calls, which is why it can cost so little.
Most small companies don't have an incident-response plan until the day they need one. Ransomware, a phished inbox or a leaked file all start the same way: nobody is sure what to do first. I built Areshiva to hand you the standard steps right away, in the order the NIST and SANS guidance puts them: identify, contain, eradicate, recover, then learn from it.
It's a short written checklist, not a product that touches your systems. It doesn't scan anything, doesn't act on anything and isn't legal or insurance advice. You pick the kind of incident, read it, and download it as a file you can keep.
What works today
- Gives a ransomware response checklist, step by step from identification to lessons learned
- Gives the same kind of checklist for a phishing or business email compromise
- Gives the same kind of checklist for a data breach or exposed data
What it doesn't do yet
incident.io still does things Areshiva doesn't:
- Running a live incident in Slack or Teams, with a channel, roles and a timeline.
- On-call schedules and paging people when something breaks.
- A public status page for your customers.
- Postmortems and reports built from what actually happened.
- Areshiva's checklists are short: two steps per phase, three incident types on the free tier.
What it costs
| What you get | Price | |
|---|---|---|
| incident.io Team, billed monthly | Incident response inside Slack or Teams, on-call across teams, alerting and workflows. Their free Basic plan already runs incidents in Slack with a status page. | $19/user/mo |
| Areshiva | The ransomware, phishing and data-breach checklists above, no account needed. An optional $4 30-day pass adds DDoS, insider-threat and vendor-compromise checklists and a section on reporting deadlines and evidence. | Free |
incident.io's price is from their pricing page as of October 29, 2026. Prices change, so check theirs before you compare.
Open Areshiva— Johnny