When being seen is the problem

There are situations where uniformed presence escalates rather than deters, alarms the people it is meant to reassure, or simply tells a hostile party exactly what is being protected. In those cases the coverage has to be there without announcing itself.

Covert coverage is protective work, not investigation, though the two often run together. Agents blend into the setting, maintain protective distance, and hold the same response capability as a visible detail. Every deployment is documented the same way.

What we deliver

What this actually means — and what it does not

“Covert” in a legitimate security practice means one thing: the security presence is not identifiable as one. It does not mean unlawful, and it does not mean deniable. Every engagement described on this page is authorised in writing by someone entitled to authorise it, conducted within the law, and documented so that what was done can be explained afterwards to a court, a regulator or a jury.

There is a version of this service sold by other people that involves pretexting, unauthorised access, illegal recording and deniability. We do not do it, and the reason is practical as much as ethical: the moment a covert operation crosses a legal line, everything it produced becomes worthless as evidence and the client inherits the liability. A covert operation is only useful if it survives disclosure.

The four things clients actually buy

Plainclothes security. Officers on site who look like customers, guests or staff. In retail, hospitality and events this changes what you can see — an offender behaves differently around a uniform, and behaviour is the thing you are trying to observe. Usually paired with uniformed presence rather than replacing it, because the two do different jobs: the uniform deters, the plainclothes officer documents.

Undercover placement. An investigator placed into a workforce as an employee to develop information on internal theft, substance use on shift, safety falsification or a hostile environment. This is the most powerful tool in internal investigation and the one with the most legal freight attached to it, and it is the one clients most often ask for when a simpler method would work.

Discreet protective coverage. Low-profile protection where a visible detail would be counterproductive — a principal who does not want to be seen with security, a family situation, a workplace where the presence of a guard would itself create a problem. This runs under executive protection methodology with the profile turned down.

Integrity and control testing. Structured tests of whether a control actually works: whether a cashier follows the void procedure, whether a gate verifies a seal, whether a receiving door is watched, whether an access control point can be walked through by somebody carrying a box and looking confident. Authorised physical access testing is included here — always with a written authorisation letter carried by the tester, and always with a named client contact reachable in real time to stop it.

The legal frame, and one rule most employers do not know

Undercover and covert work in a workplace runs into a body of law that has nothing to do with security licensing, and getting it wrong is expensive.

The most important: under federal labour law, employers may not surveil or create the impression of surveilling employees’ protected concerted activity — discussion of pay and conditions, organising, or acting together about workplace issues. That protection applies whether or not there is a union, and an undercover operation that collects information about it, even incidentally, can produce an unfair labour practice finding regardless of what the operation was actually looking for. Our undercover engagements are scoped in writing to exclude it, and our investigators are briefed on what to do if they encounter it, which is to record nothing and report the boundary.

Alongside that: no covert recording in areas where privacy attaches — Arizona’s surreptitious recording statute, A.R.S. §13-3019, is serious, and restrooms, changing areas and similar spaces are absolutely out. No recording of conversations we are not party to. No pretexting of financial institutions or medical providers. No entry to areas outside the authorisation. No conduct designed to induce someone to commit an offence they were not otherwise going to commit — beyond being wrong, it destroys the case.

Investigative work in Arizona is licensed under A.R.S. Title 32, Chapter 24 and guard services under Chapter 26; Honeybadger holds licences 1759795 and 1759798. Our people are not peace officers, never represent themselves as law enforcement, and hold no authority to detain or search.

How an undercover engagement is actually run

It starts with a scoping conversation that often ends with a recommendation not to do it. Undercover placement takes weeks to produce anything, costs more than most alternatives, and is disruptive to unwind. Where exception reporting, targeted surveillance or a properly conducted interview programme would answer the question, we will say so.

Where it is right, the structure is fixed: written authorisation and scope defining what is and is not within the engagement; a single named client contact, usually in legal or the most senior available position, and no one else informed; a cover story and hiring route agreed with that contact; scheduled reporting through a channel that does not run through the site; a defined duration with review points; and an exit plan settled before the placement begins, including what happens if the investigator is identified.

Reports are factual and contemporaneous. Where the outcome is disciplinary or criminal, the file is built to be produced — which is the point at which an engagement conducted carelessly falls apart and one conducted properly does its job.

Where it connects

Covert methods are a technique, not a service line, and they sit inside larger pieces of work: internal theft in retail and industrial environments; financial investigation where the loss has a paper trail; digital forensics where devices and accounts are involved; counter-surveillance where the concern is that someone is doing this to you; and security consulting where the finding is that the control itself was never going to work.

How it is priced

Plainclothes coverage is quoted per officer, per hour, at a modest premium to uniformed coverage. Undercover placement is quoted as a programme with a defined duration, review points and an exit, including the investigator’s wage cost, which is normally borne through your payroll as part of the cover. Integrity and access testing is quoted per test programme. Discreet protective coverage is quoted as a protective detail.

Included: scoping, written authorisation and boundary documentation, the operation, and reporting built to be produced. Quoted separately: forensic examination, extended surveillance, interview programmes, and any testimony required later.

Frequently asked questions

Who this is for

• Executives
• Domestic matters
• Workplace threats
• Legal proceedings
• Public figures
• Corporate settings
• Family protection