Discreet Fact-Finding
Sensitive internal inquiries where early disclosure would let evidence be destroyed, positions aligned or assets moved.
Special Service / Clandestine Service
Discreet capability, under written authorization.
Some engagements cannot be run in the open: an internal fraud inquiry that disclosure would destroy, a protective detail that must stay invisible, a security test that means nothing if the defenders are warned. Clandestine Service covers that work, at low visibility and strictly within the law of the operating jurisdiction.
Engagement types
Quiet work, documented to the same standard as open work.
Discretion applies to how an engagement is conducted, never to whether it is lawful, authorized or recorded. Every mandate is scoped in writing and reviewed against local law.
SP-12CS-A CS-B CS-C CS-D CS-E
Clandestine Offensive Security
Adversary emulation run without warning the defenders.
Explore →
Low-Visibility Protective Coverage
Protective presence that does not advertise itself, for principals whose exposure rises when a visible detail signals importance.
Enhanced Counterparty Diligence
Beneficial ownership, litigation, sanctions and reputational risk in markets where public filings are not sufficient.
Asset & Exposure Tracing
Lawful tracing of misappropriated assets, leaked data and counterfeit distribution to support recovery or referral.
Confidential Situational Reporting
Periodic assessment of a specific threat picture, delivered to a named recipient through a controlled channel with sourcing stated.
Engagement controls
What keeps discreet work defensible.
These are conditions of engagement rather than options. An instruction that cannot meet them is declined at intake, in writing.
Intake
Named sponsor, written mandate, defined objective, lawful basis and success criteria agreed before any activity begins.
Legal review
Jurisdiction check, licensing requirements, privacy and employment law constraints, and referral to instructed counsel where litigation is involved.
Compartmentation
Need-to-know team structure, separated workstreams, controlled communications and restricted document handling.
Method limits
No unlawful interception, no unauthorized system access, no impersonation of officials, no entrapment, no coercion, no unlicensed armed activity.
Evidence handling
Chain of custody, source grading, confidence levels, retention limits and secure destruction on closure.
Reporting
Single named recipient, controlled channel, factual separation of observation from assessment, defined closure briefing.
Typical deliverables
- Intake and lawfulness memorandum before commencement.
- Interim situational updates at agreed intervals.
- Findings report separating observed fact, corroboration and assessment.
- Evidence pack with chain of custody for legal use.
- Recommended actions with risk and escalation options.
- Closure certificate confirming data retention and destruction.
Where we decline
- Any instruction requiring unlawful access to accounts, devices or networks.
- Surveillance intended to harass, intimidate or suppress lawful activity.
- Work targeting journalists, regulators or whistleblowers in their protected capacity.
- Mandates whose real purpose cannot be stated to the sponsor in writing.
- Activity requiring licences or permissions the engagement does not hold.
- Instructions that place personnel or third parties in foreseeable unlawful risk.
Discretion is a method. Legality is a condition.
Every engagement is subject to applicable law, licensing, regulatory authorization, professional ethics and client-specific engagement controls in each operating jurisdiction. Capability descriptions on this page are indicative and do not constitute an offer to conduct any activity that is unlawful in the territory concerned.