BreachRx has expanded its Rex Platform with Out-of-Band Comms, a communications and collaboration environment that enables organizations to manage cyber incidents when corporate systems are compromised, unavailable or no longer trusted.

The new capabilities provide secure email, chat, video and audio meetings, collaborative workspaces and mobile executive visibility to help organizations maintain response coordination when ransomware, destructive malware, identity compromise or business email compromise disrupts their normal communications infrastructure.

According to BreachRx, these disruptions can create a secondary crisis by preventing the teams responsible for containing an incident and managing its business consequences from communicating through trusted channels.

The need for dedicated out-of-band communications has also been emphasized in Google Cloud's 2026 guidance on preparing for destructive attacks. The guidance urges organizations to establish a prevalidated communications platform that is completely decoupled from the corporate identity plane and to practice recovery using those channels.

BreachRx's Out-of-Band Comms extends beyond providing an alternative place for teams to communicate. The capabilities keep communications connected to the broader incident response process, including cross-functional coordination, task ownership, privileged workstreams, decision-making, documentation and the incident record.

“When the systems you trust are compromised, your incident response can’t be,” said Andy Lunsford, CEO and co-founder at BreachRx. “Out-of-band communication is essential, but keeping people talking is only part of the problem. Security, legal, leadership, and other business leaders still have an incident to manage. We built Out-of-Band Comms so organizations can move the response, not just the conversation, out of band.”

Communications and Collaboration for Cyber Response

The new capabilities provide internal teams and approved external stakeholders with a dedicated environment for continuing incident response activities when normal communications systems cannot be trusted.

Organizations can use Mail, Chat and Meetings when corporate email, messaging or voice and video conferencing systems are unavailable or compromised. The platform's Scratch Pad supports collaboration around the active incident, allowing teams to capture findings, hypotheses, handoffs, remediation details and draft communications.

Mobile Command gives leadership protected mobile access to current status, material changes and decision-ready context. Controlled workstreams support sensitive legal discussions while maintaining the context needed to manage the broader response.

The platform also keeps actions, decisions, ownership, evidence and response activity connected to the governed Rex system of record.

BreachRx said communication continuity alone is insufficient during a major cyber incident. Security and IT teams must coordinate containment and recovery while legal and privacy teams evaluate obligations and risk. Communications teams need current facts, executives require decision-ready information and outside counsel, forensic firms, insurers and other response partners may need to participate.

“An out-of-band war room is not an incident response capability. Neither is a backup chat app,” said Matt Hartley, co-founder and chief product officer at BreachRx. “Both give you somewhere to talk, not a way to run the response. In a real incident, the conversation, the decisions, the actions taken, the privilege you're protecting, and the record you'll be judged on aren't separate, they're one. The Rex Platform keeps that intact when the systems you normally run on don't.”

Extending the Rex Platform for Enterprise Resilience

The addition expands the Rex Platform's role in coordinating cyber incident response across security, legal, privacy, IT, communications, compliance, leadership, outside counsel and response partners.

Rex's agentic AI capabilities help orchestrate work, adapt procedures, track obligations, capture evidence, generate reporting and maintain an authoritative incident record as facts and conditions change.

Organizations can prepare their out-of-band environment before an incident by establishing participants and access permissions. They can also use the environment for tabletop exercises and response simulations to practice coordination before a crisis occurs.

When an incident disrupts trusted systems, teams can continue communicating and coordinating through the dedicated platform rather than relying on personal email accounts, text threads, temporary conferencing tools and disconnected documents.

BreachRx Out-of-Band Comms is available today as part of the Rex Platform.