Sweep & counter-surveillance
Portable RF and physical sweep kits for offices, residences and meeting rooms, with an operator checklist your own staff can run between professional sweeps.
Home/Capabilities
Practice areas
Capabilities
Four disciplines that are usually sold separately and fail separately. We run them as one perimeter, because an attacker does not respect the boundary between your server room and your front door.
01/ PRACTICE
Digital
Defense
Built for organizations without a security department — and for those whose security department is one very tired volunteer.
Attack-surface mappingIdentity & MFACloud posture
Email authenticationEndpoint hardeningIncident response
We start from the outside: what does an adversary see when they look at your organization with no credentials and no goodwill? Then we work inward until the gap between what is exposed and what is understood is closed.
Exposure & attack-surface review
Domains, subdomains, cloud tenants, public repositories, document metadata, staff and vendor relationships. Everything an outsider can enumerate, mapped and ranked.
Identity & access hardening
MFA that resists fatigue and push bombing, conditional access, privileged account separation, joiner/mover/leaver discipline, and a password policy people can actually follow.
Email, domain & brand protection
SPF, DKIM and DMARC to enforcement, lookalike-domain monitoring, impersonation takedowns, and mail-flow rules that stop the invoice-fraud attempt before it lands.
Endpoint & data discipline
Device baselines, disk encryption, backup that has been restored at least once, and a short, tested plan for the day a laptop with the donor list walks out.
Incident response & readiness
Named roles, a one-page escalation card, evidence preservation, insurer and counsel coordination, and a communications posture agreed before the incident — not during it.
Authorised testing only
Any technical test — phishing simulation, credential audit, network probe — runs under a
signed scope with defined targets, windows and a stop condition. No exceptions, including
for clients who ask us to "just check".
02/ PRACTICE
Physical
Protection
The part most consultants skip: standing in the parking lot at 7:40 a.m. and watching how the building actually behaves.
Facility TVAAccess controlCamera review
Guard standardsExecutive protectionEvent security
CPTEDDrills
A security plan that exists only on paper is a liability — it creates the impression of protection while removing the vigilance that was doing the work. We assess what is actually operating, then fix the operating part first.
Threat & vulnerability assessment
Walkthrough and interview-based assessment of every entrance, approach, sightline, utility and choke point. Delivered as a ranked fix list — not a binder.
Access control & credential integrity
Badge and key inventory, reader placement, tailgating reality, door hardware that fails safe or fails open, and the contractor who still has a fob from 2019.
Camera & detection design review
Coverage versus claim, retention, export procedure, and whether the footage would actually identify anyone at the distance that matters.
Guard force & post orders
Recruitment standards, written post orders, radio discipline, escalation matrix, and drills that are run rather than filed.
Executive & principal protection
Residential exposure review, route and travel planning, advance work for public appearances, and a protective detail scaled to the actual threat picture.
Schools and campuses
For institutions with minors on site, the assessment is written to be read by parents,
boards and insurers — and every recommendation is costed in staff time as well as money.
03/ PRACTICE
Intelligence
& Monitoring
Open-source only, legally obtained, and documented so it can support a police report or an insurance claim.
Threat monitoringExposure removalHostile mapping
Travel riskLaw-enforcement liaisonBoard briefings
Most organizations learn about a threat campaign after it has already named them. We watch the places where targeting is planned and discussed, and we tell you what we see in language your board can act on.
Named-asset monitoring
Your organization, leadership, address ranges and event calendar tracked across public channels for indicators of planning, not just mentions.
Doxxing & exposure response
Locate what has been published about your people, assess the real risk, pursue removal where possible, and prepare the household for the part that cannot be removed.
Hostile-network mapping
Who is coordinating, how they recruit, which accounts amplify, and where the campaign is likely to move next. Analytical product, not a feed of screenshots.
Event & travel risk
Pre-event intelligence brief, route and venue review, on-site liaison, and a decision-ready go / no-go recommendation.
Law enforcement & institutional liaison
We prepare the package — timeline, exhibits, preservation letter — so that the report you file is one an agency can actually work.
Legal boundary
We do not conduct surveillance of private individuals, access accounts we do not own, or
gather information by deception. Intelligence work is open-source, documented, and
reviewed against applicable law before it is delivered.
04/ PRACTICE
Field Technology
The lab is not a side project. It is how a small firm delivers capability that usually requires a defence contractor — sweep kits, sensors, alerting mesh and hardened communications, built for the buildings our clients actually occupy.
Access & credential audit
Bench and field tools to test whether the badge, fob or keypad on your door is doing what the vendor brochure claimed it does.
Alerting & communications
Low-cost mesh alerting for campuses and events, plus hardened comms plans that survive a cell outage or a jammed band.
05/ SCOPE
What an engagement produces.
| Engagement | What it covers | Typical shape | Output |
|---|---|---|---|
| Threat & vulnerability assessment | One facility, full walkthrough, physical and digital exposure, staff interviews | 2–3 weeks | Ranked fix list, costed |
| Digital posture review | Attack surface, identity, email, endpoints, backup and response readiness | 2–4 weeks | Posture report + remediation plan |
| Event security package | Venue review, intelligence brief, staffing plan, on-site command | Per event | Security plan + post orders |
| Standing programme | Monitoring, quarterly re-test, drills, on-call escalation, lab support | Annual retainer | Quarterly posture delta |
| Field build | Custom hardware or software for a specific environment or gap | Project | Deployed kit + operator training |
Boundaries
Sicarii 613 does not provide offensive tooling for sale, surveillance of private
individuals, or services that require a licence we do not hold. Where a matter needs a
licensed private investigator, armed guard service or legal counsel, we say so and coordinate
with the firm you retain. Recommendations are made in writing, with the reasoning attached.