Skip to Content
Physical Security Consulting

Find out if anyone gets there in time.

Good security is not a product decision. It starts with what you have worth taking, who would take it, and whether your site detects them early enough for a response to arrive. We answer that with path analysis methods built for high-security facilities, and write a specification any qualified integrator can bid on.

Paid by the day, never discountedTender the report to anyone
6Phases, asset to validation
0Brand names in the spec
$2,500CAD per consultant day
Site assessmentSample · redacted
8Findings
6Closed without equipment
2Need equipment
CriticalMain gate left open at shift changeProcedure
CriticalPallets on the fence act as a ladderLayout
HighLoading dock dark after 21:00Maintenance
Medium9 master keys unaccounted forProcedure
The question that matters

Detected while there is still time to respond.

A camera count tells you nothing about whether a site is protected. The question that matters is whether an intruder is detected while enough of their task remains for a response to arrive and stop them. That is a question about minutes, and it can be measured.

Adversary task timeline in minutes, same site, same 8-minute responseInterrupted Too late
024681012141618
Detected at the target
Interior camera, no outer layer
FenceYardDoorInteriorTask at target
Response arrives 3 min after the task is done
Detected at the door
Contact and video at the building shell
FenceYardDoorInteriorTask at target
Response arrives with 3 min to spare
Detected at the fence line
Perimeter analytics with verified alarm
FenceYardDoorInteriorTask at target
Response arrives with 6 min to spare
Critical detection pointDetection after minute 6 cannot be answered in time

Illustrative timings. In an assessment each value is estimated for your site: delay from the materials of each barrier against the tools your design basis adversary would carry, and response from alarm assessment, dispatch and travel to your address. Delay placed before the point of detection buys nothing, which is why we design detection outward and delay inward.

Delay the adversary
Protect
Barriers, access control, lighting, hardening and site layout. Protection rarely stops a determined adversary outright. Its job is to buy time, and the only useful measure of a barrier is how many minutes it adds before a target is reached.
Know early enough to act
Detect
Sensors, thermal, video analytics and alarm verification. Detection is only worth something if it happens while enough delay remains for a response to arrive and interrupt. Detection at the target is detection after the loss.
Close the loop
Respond
A ULC-certified monitoring centre, verified-alarm dispatch, live audio talk-down, police and guard escalation, and written response procedures per site. Without a response path, protection and detection just produce a well-documented theft.
How the engagement runs

Six phases, asset to validation.

1
Assets, consequence and flow
We map what matters and how it moves: material from receiving to dispatch, equipment from yard to site, people from parking to shift. Each asset is ranked by the consequence of losing it, including downtime, contract penalties and reputational damage, not just the replacement cost.
2
Threat and the design basis threat
Local incident data, your own loss records and the adversaries relevant to your sector, each assessed on intent, capability and access. Insiders with legitimate access are assessed alongside outsiders. The result is a written design basis threat: the adversary the system is built to defeat.
3
Path analysis
The site is modelled as layers between adjacent areas, and every credible entry and exit path is traced through them. Each element on a path is given a detection probability and a delay time. The weakest path, not the average one, defines how well the site is protected.
4
Risk characterization
Likelihood, consequence and the effectiveness of existing safeguards are combined into a ranked register. Frequent, low-value losses are separated from rare, severe ones, because they call for different treatment and different budgets.
5
Safeguard design and treatment
Countermeasures are specified by the performance they must deliver, balanced so that no path is materially weaker than the rest, and costed over their full life: design, installation, operation, maintenance, IT and replacement. Each risk is reduced, transferred, avoided or accepted, and the decision is recorded.
6
Validation and reassessment
Once installed, the design is tested the way an adversary would test it: walk tests against the analytics, delay checks on barriers, and timed alarm-to-dispatch runs. Nuisance and false alarm rates are tracked from the first week. The site is reassessed when the layout, the threat or the loss data changes.
Start with the site walk
Find out where your site would be detected, how long each barrier really holds, and whether anyone gets there in time.
or call 1-833-927-0192
Sample assessment

Most findings are fixed without buying anything.

Every assessment starts with a site walk, by day and again after dark. Each finding is ranked by risk and paired with the least expensive treatment that closes it. Equipment is recommended only where nothing cheaper delivers the required performance.

In the sample shown, six of the eight findings are closed with a procedure, a layout change, routine maintenance or a documented decision to accept the risk. That is the point of paying for judgement rather than a quote.

  • Threat, vulnerability and risk assessment
  • Day and night site walk
  • CPTED review of lighting, sightlines and territory
  • Post orders, access control and key control
  • Treatments ranked by risk retired per dollar
SECURITY ASSESSMENTSample · client details redacted
RiskAreaFindingTreatment
CriticalMain gateLeft open at shift change; no one is assigned to close itProcedure
CriticalRear yardPallets stacked on the fence act as a ladder; first detection is at the building wallLayout
HighLoading dockPhotocell failed; dock dark after 21:00Maintenance
High████████ walkwayVegetation blocks the sightline from the officeCPTED
MediumKey control31 master keys issued, 9 unaccounted forProcedure
MediumEast fence140 m of fence with no detection before the buildingTechnology
LowSide entranceExposed hinge pins on an outward-opening doorHardening
LowScrap binRecurring low-value loss, below the cost of any controlAccept
8 findings6 closed by procedure, layout, maintenance or acceptance2 need equipment
Finding: detection happens after the delay is spent

At the rear yard the first point of detection is the building wall. The pallets let an intruder clear the fence in seconds, so the fence adds almost no delay, and what delay remains comes after detection, not before it.

Treatment Move pallet storage 3 m inside the fence line and keep it clear. No equipment required. Re-test the path after the change and record the new time from fence to wall.Ref: ANSI/ASIS PAP.1, ISO 22341
Deliverables

What you walk away with.

A ranked risk register

Every risk scored on likelihood, consequence and current safeguard effectiveness, with the reasoning shown, in an order you can defend to a board, an insurer or a client.

Adversary path analysis

Your site plan with credible paths traced, detection points and delay times marked, and the critical detection point identified for each target.

A design basis threat

A written definition of the adversary the system must defeat, so every later purchase can be tested against it instead of guessed at.

A performance specification

What each safeguard must achieve, in detection probability, minutes of delay and response time. No brands, so it can be tendered to any qualified integrator.

A phased, life-cycle costed plan

Countermeasures sequenced by risk retired per dollar, with the full cost of ownership shown, so the first phase buys the most protection and nothing is bought twice.

A validation plan

The tests that prove the installed system performs as designed, and the triggers that send the site back for reassessment.

Independence

Judgement, not a sales visit.

When you engage us as a consultant, you are paying for judgement across every option you have: procedures, people, layout, lighting, maintenance, insurance and technology, whoever supplies it. A consultant who also sells equipment has an obvious conflict, and a cheap assessment from a vendor is usually a sales visit. These are the rules we work under so that ours is neither.

Paid by the day, at a published rate
The rate is on this page and the day count is agreed in writing before we start. The assessment is never free, never discounted to win installation or monitoring, and never credited against either.
Tender it to anyone
The specification states required performance, not part numbers. You own the report and can put it out to any qualified integrator, including our competitors.
Our interest declared
Any recommendation Aventyr could supply is marked as such in the report, and we sign a conflict of interest statement before work begins.
The cheapest effective fix wins
Lighting, landscaping, key control, post orders and procedures often retire more risk per dollar than technology. When they do, the report says so.
The report is a controlled document
It is a map of your weaknesses. Copies are numbered, distribution is agreed with you, and working files are handled under a non-disclosure agreement.
Pricing

A published rate, billed by the day.

Consultant day rate
$2,500CAD / day
Senior consultant, on site or at the desk. US sites are quoted in USD at the equivalent rate.
  • On-site walk by day and after dark
  • Threat, path and risk analysis
  • Written report and performance specification
  • Findings briefing with your team
  • One remote follow-up within 30 days
Typical engagements
Single yard, depot or compound
1 day on site, 2 days analysis and report
3 days$7,500
Industrial plant or terminal
2 days on site, 3 to 5 days analysis and report
5 to 7 days$12,500 to $17,500
Multi-site portfolio
Full assessment of a representative site, then scaled per site
Scopedper site
Terms
  • Day count agreed in writing before work starts; you are billed for days used, never more
  • Half days billed at half the rate
  • Travel and accommodation at cost, with no markup
  • No referral fees or commissions from any manufacturer or integrator
  • The fee is not credited against equipment or monitoring. The assessment stands on its own
Optional

If you want us to build and run it.

Most consulting ends at the report, and the execution risk comes back to you: sourcing equipment, judging vendor claims, and confirming that what got installed actually performs as the report assumed. If you choose Aventyr to implement, the same people who characterized the risk tune the analytics to the paths in the report, and our ULC-certified monitoring centre runs response procedures written for your site. Detection performance then becomes something we are measured against, not a finding in next year's audit.

Method

Method and deliverables.

The questions the site walk and analysis have to answer before anything is designed.

Assets
People, plant, inventory, data and continuity of operations
Asset flow
Each asset traced through receiving, storage, process and dispatch
Threat
Intent, capability and access, for insiders and outsiders
Design basis threat
A written definition of the adversary the system must defeat
Path analysis
Detection probability and delay time for every element on every path
Risk
Likelihood, consequence and existing safeguard effectiveness combined

Countermeasures chosen across all three functions, then balanced and costed.

Protection
Barriers, access control, lighting, hardening and site layout
Detection
Thermal, video analytics, sensors and verified alarm assessment
Response
Monitoring procedures, verified dispatch, talk-down and escalation
Balance
No path materially weaker than the rest
Treatment
Reduce, transfer, avoid or accept, each decision recorded
Cost
Full life-cycle cost, sequenced by risk retired per dollar

Documents you own outright, written to be acted on or tendered to anyone.

Risk register
Ranked and scored, with the reasoning shown
Path analysis
Site plan with paths, detection points and delay times marked
Specification
Performance-based and brand-neutral, ready to tender
Phased plan
Costed in priority order, with life-cycle cost
Validation plan
Walk tests, delay checks and timed alarm-to-dispatch runs
Reassessment
Triggers tied to changes in the site, the threat or the loss data

Published standards and bodies of knowledge, so every conclusion can be checked.

Risk assessment
ANSI/ASIS/RIMS RA.1 and ISO 31000
Asset protection
ANSI/ASIS PAP.1 and the ASIS Protection of Assets body of knowledge
System design
Protection in depth, balanced protection and timely detection
Site design
CPTED per ISO 22341: surveillance, access, territory and maintenance
Monitoring
CAN/ULC-S561 and UL 827 certified signal handling
Evidence
Timestamped, auditable event records for insurers and investigators

Who Runs This Already

🛡
UL 827 Listed
📋
ULC-Certified Monitoring
🏗
Serving All of North America
📞
1-833-927-0192

In Their Words

Start with the site walk

Find out where your site would be detected, and whether anyone gets there in time.

Get a number

Tell us about the site

Send the basics and we come back with a unit count, a plan and a price. No obligation.

Rather talk it through?

Book a 15-minute call

Walk us through the site, the risk and the timeline. No sales script.

  1. Your siteLayout, assets and what has been happening
  2. Our planWhat we would deploy and how it is monitored
  3. Your priceA fixed monthly number, no obligation
ULC-certified 24/7Canada and the US