Practical tools, clear responsibility.
Cybercrime first aid
Ransomware First Aid routes broad, self-reported warning signs into a short next-step brief. It distinguishes suspected encryption, threats and access problems, keeps uncertainty visible and links to official recovery resources. It does not detect malware, identify a ransomware family, decrypt files, verify attacker claims or authorize recovery. It is a focused entry point to our broader Incident Response Checklist, not an emergency response service.
Cyber Decision Lab is operated by Paragamix GmbH, a company based in Angern, Germany. We publish free browser-local tools for incident preparation, response coordination and practical privacy checks.
Privacy tools and practical guides
The QR scanner decodes image content without visiting its destination or checking its reputation. The JPEG metadata remover edits supported containers locally, verifies a copy before download and explicitly lists retained display information. Neither tool establishes that a link is safe or a person is anonymous.
Our guides explain how to use these tools and where their limits matter. They distinguish implementation behavior from external guidance, link to primary sources, and identify the publisher and publication date. They are developed with AI assistance; no independent human security-expert review or endorsement by cited organizations is claimed. See the practical guides.
Who is responsible?
Paragamix GmbH is the publisher and operator. Alexander Graf Schulenburg represents the company. Company registration and contact details are available in our legal notice.
For product questions or corrections, contact info@paragamix.com. This mailbox is not an emergency response service. Do not send passwords, evidence files, personal data about affected people, or confidential incident details.
Email & Link Check
This tool reads original emails locally: stored HTML targets, sender and reply addresses, and attachment names and declared types. It does not score wording, authenticate senders, visit websites or scan attachment contents. The file stays in the browser.
Legitimate emails can also contain differences. A lack of differences does not establish safety. No independent detection or false-alarm rate has been established. Results are not a safety clearance for payments, sharing data or installing software. Known limits are displayed in the tool.
How the checklist works
The builder uses a fixed set of rules and published guidance. Your choices select and adapt prewritten actions; they are not sent to an AI service or a server. Unknown information remains unconfirmed, so the checklist highlights gaps instead of assuming controls exist.
The incident response content draws on NIST SP 800-61 Rev. 3 and the CISA #StopRansomware Guide. The lab links to further references. These organizations do not endorse this website.
Guidance is aimed at organizational preparation and coordination, with US references. It does not determine which laws apply to your organization or replace approved technical playbooks, qualified responders, or legal advice.
Publication and review status
Last content update: . The implementation and content have been developed with AI assistance. Automated software checks cover generation rules, browser-local data handling, and core interactions.
No independent human incident-response expert review is claimed. Software tests cannot establish that a checklist is sufficient for your incident. Have your own qualified team validate and exercise it before relying on it operationally.
Report a correction
Email the page address, the action or section title, and a non-sensitive description of the issue to info@paragamix.com. Include a public source if one helps explain the correction.
Privacy and funding
The tools are free to use without an account. Optional Google Analytics loads only after consent and never receives your tool choices, notes, images, decoded content, or downloads. Ordinary website requests still reach our hosting server. Read the privacy notice for the distinction.