How an engagement works

Operator and security lead sign a written scope and rules of engagement. Nothing happens outside it. The scope names the controls under review, the areas we may enter, the dates and times, the approved scenarios, and the safety controller who can stop work at any moment. If the right signatures are not in place, the engagement does not start.

Policies, staffing, credential design, and past incidents, before anyone sets foot on site. We read your security plan, post orders, and credential scheme against how your events actually run, so field time is spent testing the gaps that matter rather than discovering paperwork.

Only the approved scenarios, in the approved areas, with a live stop-work line to your safety controller. Observations are recorded as field notes tied to the scenario, zone, and time window. No weapons, replicas, or controlled substances are ever involved.

Confidential report in 48–72 hours, named action owners, and a follow-up to confirm the fix held. Each finding is tied to a specific policy clause, rated for impact and confidence, and paired with a recommended control. The retest confirms whether the change survived contact with a real event night.