Six ways in. One aim: see clearly.
Start with the concern, not the label. We confirm scope and licensing before recommending a service.
Threat intelligence & dark web monitoring
Verified information about people, exposure and context, plus partner-delivered monitoring for exposed credentials, impersonation and leaked data.
- An executive facing unwanted attention, impersonation or exposed personal information.
- Leaked credentials or data tied to leadership or the brand.
- Ongoing visibility after an investigation or breach.
- Legal teams that need lawful OSINT.
- Established factsVerified findings, with confidence and limitations made clear.
- Prioritized risk factorsThe exposures that matter now and the indicators to watch.
- Monitored identifiers and triageDomains, brand terms and names you authorize; alerts reviewed for relevance before anyone is notified.
- Escalation and reportingWho is notified, how often, and what to do next.
Define the question, the identifiers and the response you can act on.
Lawfully accessible sources; specialist partners provide dark web collection.
Test sources, claims and alerts for relevance and credibility.
Recommend next steps and escalation within the agreed limits.
Forged-CS does not claim in-house dark web monitoring technology, continuous around-the-clock staffing or a guaranteed response time. Response hours and escalation are agreed in the written scope. Remediation means lawful takedown requests through platforms, registrars and courts. No hacking back, and no guaranteed removal.
Does Forged-CS operate its own dark web monitoring platform?
No. Monitoring technology and the underlying collection are provided by specialist partners. Forged-CS defines the scope, coordinates the partner and manages triage and advisory follow-up.
Can you guarantee detection or removal of exposed information?
No. No monitoring service can guarantee full coverage of dark web and private sources, and removal of exposed information is not guaranteed. The scope defines realistic coverage and any remediation process.
Risk assessment & site security
One engagement: we assess credible threats and vulnerabilities, then show how to secure the site, covering access, perimeter, cameras and guarding, in a practical order of work before you spend.
- A site has changed: new operations, public attention, incidents or staffing.
- You need to secure a site, yard or facility and want the right mix of access control, perimeter, cameras and guards.
- Security spend is unclear and there is no client-owned standard.
- Leadership needs proof that existing controls reduce the risks they were meant to address.
- Offices, industrial and energy-adjacent sites, and multi-site programs across Canada.
- Exposure mapA risk register that separates facts from assumptions.
- Prioritized findingsSite and access vulnerabilities, people, process and technology gaps.
- Site security recommendationsAccess control, perimeter and lighting, camera coverage and guarding needs, specified so licensed partners can quote and deliver.
- Immediate, 30-day and 90-day actionsClear ownership, an executive briefing and an action roadmap.
Clarify the decision, assets, stakeholders and constraints.
Review the environment, controls and real working practices.
Assess likelihood, consequence and control effectiveness.
Deliver a practical roadmap with clear ownership.
Assessments across Canada and internationally are scoped before work begins.
How is a security risk assessment different from a site survey?
A site survey examines conditions at a location. A security risk assessment also considers threats, people, information, operating routines and the effectiveness of existing controls. The engagement may combine both, depending on the decision you need to make.
Is a security risk assessment the same as hiring security guards?
No. A security risk assessment decides what the risk actually is and which controls are worth the cost. Guarding is one possible control after that decision, not the starting point.
Corporate threat assessment
For organizations facing a specific concern about people, unwanted attention or changing exposure.
- Workplace concerns: concerning communications, harassment, threats or a contested termination.
- Executives facing stalking, repeated unwanted attention or fixated behaviour.
- Insider and targeted threats involving access, relationships or sensitive business activity.
- Faith, community and high-profile gatherings, including places of worship: a known time, a known address, people concentrated inside and an approach path that can be watched.
- Threat matrix and risk registerConcerns, evidence, confidence and priorities.
- Escalation protocolsIndicators, decision owners and communication steps.
- Stakeholder briefingFindings, limitations and responsibilities.
- Phased mitigation roadmapImmediate priorities and review points.
Clarify the concern, urgency, decision owners and records.
Review communications, incidents, access and controls.
Consider behaviour over time; bring in legal or clinical expertise where needed.
Prioritize actions, owners, escalation thresholds and review points.
Not an emergency channel. If anyone is in immediate danger, call 911 or local emergency services.
What information should we provide first?
Begin with your organization, location, decision deadline and a short description of the concern. Do not send sensitive case records through the initial form. We agree the information-handling process and required records during scoping.
Is this a psychological diagnosis or a prediction of violence?
No. Security consulting evaluates available evidence and protective options. Clinical assessment, legal advice and law-enforcement decisions require the appropriate specialists.
Executive protection planning
Executive and close protection planning shaped around the principal, their routines and the actual exposure.
- Leaders whose visibility has increased through public activity, disputes or online exposure.
- Travel, events and public appearances that create exposure.
- Family offices and visiting principals across Canada and internationally.
- Existing coverage that lacks one standard and clear oversight.
- Protective risk assessmentThreat, visibility, routines and points of exposure.
- Advance and movement planningRoutes, venues, arrivals, contingencies.
- Coverage design and coordinationRoles, provider standards and client-side oversight.
- Active reviewThe plan changes as new information appears.
Establish the person, threat, environment and consequences.
Design proportionate controls and clear contingencies.
Align people, movement and licensed providers.
Monitor change and revise the protective posture.
Forged-CS designs the program. We do not field a standing guard roster; regulated protection is delivered only through appropriately licensed providers.
What is the difference between executive protection and close protection?
Executive protection describes the wider program around a person’s safety and continuity, including intelligence, planning and coordination. Close protection usually refers to the protective presence near that person.
Can the plan cover an event or business trip?
An engagement can be scoped around a defined event, journey or recurring routine. Share the destination, dates, principal’s requirements and known concerns so that local delivery, provider requirements and responsibilities can be confirmed.
Private investigations
Corporate private investigations, due diligence and lawful OSINT research for decisions that need a clearer factual basis.
- A claim needs testing: conflicting accounts, allegations or incomplete records.
- A person, vendor or partner needs context before a transaction.
- Unexplained information exposure or conflicts of interest suggest an internal concern.
- A fragmented threat picture needs connecting and prioritizing.
- Clear investigative scopeQuestion, authority, sources and evidentiary standard.
- Verified findingsFacts, source confidence, contradictions and limitations.
- Relationship and event analysisConnections, timelines and material changes.
- Recommended next actionOptions matched to evidence and urgency.
Define the question, stakes, authority and decision.
Gather relevant open, human and specialist information.
Test sources, identities, claims and timelines.
Present findings, confidence and next actions clearly.
Where regulated investigative work is required, Forged-CS defines the scope and coordinates appropriately licensed providers.
What does OSINT mean in an investigation?
Open-source intelligence uses lawfully accessible information to answer a defined question. Collection alone is not enough: sources need context, identity checks and corroboration.
What should a corporate investigation report contain?
The report should explain the question, scope, method, sources, findings and limitations. It should identify what is verified, what is alleged and what remains unresolved.
AI camera monitoring
AI camera setup and monitoring begins with a site requirement and a defined response.
- Existing cameras miss approaches, transitions or assets that matter.
- Analytics produce too many false or low-value alerts.
- Installers, monitoring providers and internal teams lack one standard.
- Coverage and placement planFields of view, choke points, lighting, priority assets.
- Analytics and alert logicScenarios, thresholds, schedules and false-alarm controls.
- Response workflowVerification, escalation and evidence handling.
- Provider oversightAcceptance tests, reporting and periodic review.
Define the site, scenarios, assets and constraints.
Map coverage, analytics, verification and escalation.
Coordinate technology and qualified installation partners.
Test detection and response against the standard.
Continuous human review is not implied. Monitoring hours, responsible reviewers, escalation contacts and response arrangements are agreed in writing.
Can existing cameras be used?
Possibly. Reuse depends on the camera and recorder capabilities, network, software licensing and the required detection features. The assessment confirms compatibility before recommendations are made.
How do we evaluate the installation?
Agree acceptance criteria before deployment: coverage of the required areas, representative detection scenarios, alert delivery, access permissions and escalation handoffs.
Which decision needs a clearer scope?
We will confirm licensing boundaries and whether a vetted partner is required.