Services

Start with the problem, not the service

Service lists are organised for the firm's convenience, not the client's. Almost nobody arrives here wanting "integrated security solutions"; they arrive because something specific has happened or is about to. So it is worth mapping the common situations to where they actually go, and being honest about the ones that need less than they appear to.

Something is being stolen and we do not know how. If it is happening at a perimeter or a gate, that is a guarding problem. If the numbers say it is happening inside, overt guarding will make it hide rather than stop, and it belongs with investigations — usually covert observation combined with records reconciliation.

An employee is leaving and we think they took something. That is a preservation emergency before it is anything else. Devices and accounts must be secured before they are wiped or reissued. See data loss prevention and digital forensics, and act in hours rather than days.

A person has been threatened. Assessment first — protective intelligence and digital exposure — then a proportionate protective posture. A great many of these are answered without a standing detail.

We think we have been breached. Do not reimage anything. Isolate, preserve logs, call counsel, and see cyber.

We are being asked for security evidence by an insurer, auditor or prime contractor. That is an assessment and documentation problem, and it is usually smaller than it looks once the actual controls are inventoried.

We need a body at a door tomorrow. Fire watch, event coverage, a termination, a court appearance. That is a post, and short-notice coverage is available — see security services.

The four practices

Physical security — standing posts, patrols, armed and unarmed coverage, and sector programmes written specifically for banking, healthcare, logistics, construction, retail, residential communities, government and critical infrastructure. Written post orders per site, supervision that is documented, and reports built for the reader who was not there.

Executive protection — close protection, travel and advance work, event coverage, residential and family programmes, secure transport. Sized to an assessment rather than to a package, and frequently smaller than the client expected once the advance work is done.

Investigations — corporate and internal matters, financial and asset work, insurance and claims, legal support, surveillance, background screening and due diligence. Run to a standard that survives examination rather than one that merely satisfies curiosity.

Cyber and digital forensics — assessment, hardening and managed security, incident response, forensic examination of devices, accounts and cloud tenants, insider risk, and compliance-driven work. Built backwards from what has to be provable.

Alongside those sit training, aerial operations, research and evaluation, and a counter-surveillance store that exists because clients kept asking what to buy and deserved a narrower answer than the internet gives them.

What one contract is actually worth

Security problems rarely stay inside the discipline they started in. The theft becomes an investigation, the investigation becomes a forensics matter, the forensics finding becomes a personnel matter, the personnel matter becomes a protection question. Handled by three vendors, each transition means a new scope, a new procurement, and an interval in which nobody owns the evidence — and that interval is where cases are lost and where the client, not the vendors, ends up doing the integration during the worst week of the year.

Here the transitions happen inside the firm. Same case file, same chain of custody, same person answering the phone. That is the whole design argument, and it is the reason the licences sit under one roof rather than in a partnership.

How engagements start

Every engagement begins with a consultation and, for anything site-based, a survey. We do not quote a post from a phone call or a case from a summary, because a proposal written without them is a guess with a price attached. Scope and price go in writing before work starts, including what is out of scope — the term that prevents the argument later.

Posts are priced per post per hour; investigations hourly against a retainer with an agreed reporting cadence and a spend checkpoint; cyber assessments fixed-scope; managed service per user and per endpoint. Where a scope genuinely cannot be fixed, we say so rather than quoting a number we would need to revise.

And where a client needs less than they asked for, we say that too. It happens often — a post replaced by a lighting and gate-procedure change, a full forensic examination replaced by a preservation and a targeted review. Overselling the first engagement is a poor way to earn the second.

Frequently asked questions