Talos
TALOS SERVICES GROUP
Global Reach · Intelligence · Response
Request Support
06 / Mission Record — Sanitized Case Record

The work, documented. Names, redacted.

Clients engage Talos with the expectation of discretion. The cases below are drawn from live engagements across all three disciplines, with identifying detail removed. Theaters, durations, and outcomes are accurate. Where operations are public and the client has consented, we'll discuss them on request.

Engagements
427Protection, consultation, crisis response
Countries operated
27Active standing relationships
Evacuations
38Executed; zero serious injuries
Retained principals
94%Multi-year renewal rate
01 · Protection — Executive · Asset · Facility

Standing presence. Low signature. Measured outcomes.

Protection engagements are evaluated on incident prevention, not incident response. The best protective programs are the ones you never notice.

Selected protection engagements

Discipline 01 · 12 cases / 47 engagements live
Executive ProtectionMulti-year

Standing protective retainer for a Fortune 100 principal and family

Situation: Principal targeted by a credible non-state threat following public positions on a geopolitical issue. Existing in-house security limited in travel and international coverage.

Theater
US · EU · occasional MENA
Posture
24/7 close protection · residential layer · travel advance
Duration
Active · year 4
Outcome Zero intrusion events. Four credible approaches intercepted and escalated to federal partners. Principal's public calendar unaffected.
Residential ProgramDesign-build

Multi-layer residential security for an UHNW family compound

Situation: Newly acquired compound with minimal prior security architecture. Client required a layered program covering perimeter, access, surveillance, and embedded response.

Theater
US · Southeast
Scope
Assessment · design · staffing · 24/7 ops
Duration
90-day build · ongoing operations
Outcome Full program operational in 12 weeks. Three attempted trespass incidents neutralized without law-enforcement escalation. Family privacy envelope preserved.
Travel AdvanceHigh-risk venue

Senior delegation travel through a non-permissive environment

Situation: Fortune 500 delegation traveling to a country with active sanctions surveillance and an uncertain host-nation protective posture.

Theater
Central Asia
Scope
Advance · escort · venue sweeps · return extraction
Duration
9 days
Outcome All movements completed on schedule. Two venue changes executed mid-trip on emerging surveillance indicators surfaced by Watchtower.
Facility SecurityAsset protection

Biopharma R&D facility posture rebuild

Situation: Repeated IP-theft attempts against a research campus. Prior vendor's posture had not materially reduced attempts; the client wanted an honest third-party re-design.

Theater
US · Northeast
Scope
Assessment · access control redesign · personnel vetting
Duration
6 months · now quarterly review
Outcome Attempted intrusions dropped 88% in the trailing year. Two insider-threat cases surfaced by revised vetting process, managed to termination without litigation exposure.
02 · Consultation — Advisory · Assessment · Program Design

Judgment work. Named senior lead on every engagement.

Consultation engagements are structured to produce decisions clients can act on — not deliverable piles. Every engagement has a senior lead who signs the product and stays on the phone after delivery.

Selected consultation engagements

Discipline 02 · 9 cases / 34 engagements this year
Threat AssessmentBoard-level

Board-level threat assessment for a multinational manufacturer

Situation: Activist pressure escalating to targeted actions against named executives. Board asked for an independent assessment and prioritized program recommendations.

Theater
US · EU · two APAC sites
Scope
60-day assessment · exec briefing · program roadmap
Duration
60 days
Outcome Five of six recommendations adopted within 90 days. Two named executives moved to interim protective posture before the quarterly earnings release.
Program DesignGreenfield

Ground-up corporate security program for a pre-IPO SaaS firm

Situation: Company approaching IPO with essentially no corporate security function. Needed program architecture, staffing model, and governance that would hold up to S-1 disclosure.

Theater
US · SF / NYC / London
Scope
Architecture · hiring plan · ops cadence · S-1 narrative
Duration
120 days
Outcome Program stood up with first three hires in place pre-IPO. Clean disclosure, no security-related diligence findings at quiet-period review.
Crisis AdvisoryLive incident

Senior advisory during an active insider-data-theft incident

Situation: Client discovered credible evidence of a former employee exfiltrating IP during their final week. Legal, HR, and forensics needed coordinated direction under time pressure.

Theater
US
Scope
Crisis advisory · forensic coordination · recovery posture
Duration
21 days active · 90 days monitoring
Outcome IP recovered through negotiated resolution. No litigation. Residual monitoring program handed back to the client's permanent security lead.
TrainingTiered curriculum

Senior-leadership crisis exercise program · 3 cohorts / 2 years

Situation: Global NGO with senior leadership exposure in five high-risk jurisdictions requested a sustained training cadence rather than one-off tabletop exercises.

Theater
Global · 5 country cohorts
Scope
Curriculum design · quarterly exercises · AAR reporting
Duration
2-year program · now annual
Outcome Measurable improvement in live-incident decision latency across cohorts. One country team executed a self-led evacuation on-plan during a real event in the program's second year.
03 · Crisis Response & Evacuation — Evacuation · Recovery · Continuity

When the environment breaks, we deploy.

Crisis response is the discipline that distinguishes a risk consultancy from a real firm. We measure crisis response work on two things: time to on-the-ground presence, and the outcome for the client and their people.

Selected crisis response engagements

Discipline 03 · 38 evacuations executed · median activation 14 hrs
Evacuation14-hour activation

Executive family extraction during a rapid political deterioration

Situation: Capital-city crisis with rapidly closing airports. Client's family and two household staff required same-day extraction to a third country.

Theater
MENA
Scope
Route planning · dual-corridor execution · third-country placement
Duration
11 days total · 14-hour activation
Outcome All principals extracted safely. Residential protection continued at third-country destination for 90 days. No media exposure.
Crisis ResponseOn-site embed

Manufacturing complex secured after hostile occupation

Situation: Strike action escalated into hostile occupation of a manufacturing complex. Negotiation stalled; operations had been offline for six days when Talos was engaged.

Theater
LATAM
Scope
Negotiation support · security re-posture · on-site embed
Duration
Crisis response 9 days · embed 90 days
Outcome Occupation resolved without police action. Operations resumed day 10. Revised security posture held through the remainder of the labor dispute.
K&R ResponseNegotiated recovery

Recovery of an expatriate executive following an abduction

Situation: Client executive taken from a secondary site in a country with active K&R activity. Family and employer required a unified response structure.

Theater
West Africa
Scope
Family liaison · negotiation advisory · recovery operations
Duration
47 days
Outcome Principal recovered safely. Medical and psychological support coordinated for 60 days post-recovery. Employer security posture re-architected for remaining staff.
Natural DisasterContinuity

Hurricane recovery & continuity for a distributed-ops client

Situation: Category 4 hurricane landfall in a country where client operated four sites and employed 340 staff. Needed coordinated welfare checks, facility assessments, and continuity plan activation.

Theater
Caribbean
Scope
Welfare ops · facility assessment · continuity activation
Duration
18 days active · continuity 6 months
Outcome All 340 employees accounted for within 72 hours. Three of four sites operational within 10 days. No personnel losses.
04 · Deployment log — Trailing 90 days · sanitized

Current operational picture.

A sanitized snapshot of recent activations. Client identifiers removed; regions and timelines preserved. Refreshed on the first of each month.

GSOC · Miami Deployment Log Classification · Public Sanitized
Ref Operation Discipline Region Status
OP-26114 Executive evacuation · capital-city crisis14-hour activation · dual-corridor execution Crisis Response MENA Complete
OP-26103 Standing protective detail · principal + familyYear 4 of multi-year retainer Protection US · EU Active
OP-26098 Facility posture rebuild · biopharma R&D campusAccess redesign · personnel vetting overhaul Protection US · NE Complete
OP-26092 Board-level threat assessmentActivist targeting of named executives Consultation US · EU · APAC Complete
OP-26087 Hurricane recovery & continuity340 personnel welfare ops · 4 sites Crisis Response Caribbean Complete
OP-26079 Senior delegation travel · non-permissive environmentActive surveillance countermeasures · two venue pivots Protection Central Asia Complete
OP-26072 Manufacturing complex secure / recoveryNegotiated resolution · 90-day embed Crisis Response LATAM Monitoring
OP-26066 Pre-IPO corporate security programArchitecture · hiring · S-1 narrative Consultation US · UK Complete
OP-26058 Crisis advisory · active insider data theftNegotiated IP recovery · no litigation Consultation US Complete
OP-26051 Expatriate recovery · post-abduction47-day operation · negotiated recovery Crisis Response West Africa Complete
Confidentiality note What we publish, what we don't. Client names, locations identifiable at the neighborhood or facility level, principal identities, specific timelines beyond a week, and any detail that could narrow the client set are withheld as a matter of policy. Regions, disciplines, outcomes, and durations are accurate. Where a client has publicly acknowledged an engagement and given written consent, we'll discuss it on request.
05 · From the record — A client perspective
“
They did the work nobody wanted to do, on a schedule nobody thought possible, and they did it without a single phone call ending up anywhere it shouldn't have. That's what we paid for and that's what we got.
— Chief Security Officer · Fortune 500 industrial · Engagement anonymized

If the pattern matches, reach out.

TSG takes new engagements by direct introduction or through the Request Support form. If you see a case on this page that looks like yours, we can usually respond within 48 hours.

Request Support → Explore Capabilities