SafetySync

Core Service

Defensible documentation.
Not a checklist.

On-site vulnerability assessments and insider risk program development, aligned to current FEMA and CISA preparedness frameworks (THIRA, SPR, IST). Written for boards, insurers, and grant reviewers.

What we deliver

Four engagements, one methodology.

Each service draws on 20+ years of operational law enforcement and FBI National Academy training, scaled from a single site to multi-campus programs.

Flagship

Risk & Vulnerability Assessment

On-site walkthrough of every zone: perimeter, parking, lighting, entries, worship or meeting space, children's areas, offices, communications, and policies. Delivered as a written report mapped to actionable mitigations.

  • Risk = Threat × Vulnerability × Consequence
  • Current FEMA and CISA preparedness framework alignment
  • Findings mapped to NSGP cost categories where relevant
Request a quote →
Program development

Insider Risk Program

Full-lifecycle program build: policy frameworks, behavioral indicators, detection workflows, response protocols, and recurring training. Drawn from federal investigative practice.

  • Policy and governance frameworks
  • Behavioral indicator detection
  • Training and tabletop exercises
Request a quote →
Faith & education

Houses of Worship & Schools

Congregation and campus assessments tuned to pastoral, educational, and community-care realities. Access control, crisis response, EOPs, staff training, threat assessment.

  • Supports NSGP applications
  • Insurance and liability documentation
  • Diocesan or denominational programs
Request a quote →
Private sector

Private Sector Risk Consulting

Facility security, workplace violence prevention, business continuity. Frameworks aligned to OSHA general-duty obligations and insurance underwriter expectations.

  • Workplace violence prevention
  • Business continuity planning
  • Premises-liability defense
Request a quote →

What's in the report

  • On-site walkthrough of every zone. Perimeter and vehicle approach, lighting, entries, lobby, main meeting space, children's and ancillary areas, offices, communications, technology posture, and written policies.
  • Risk-scored findings. Each item scored by Threat × Vulnerability × Consequence, prioritized by severity, and tied to a specific mitigation.
  • Mitigation map. Prioritized findings linked to recommended controls, cost ranges, and (where relevant) NSGP cost categories so your budget traces cleanly to the evidence.
  • Threat review. National, regional, and site-level incidents you can cite, with sourcing guidance for insurance, board, or grant audiences.
  • Program advisory. A working session on your Investment Justification draft, insider risk program design, or workplace violence policy, depending on your engagement.
Clear roles. SafetySync delivers the assessment and advises on program design. Your organization owns and submits grant applications, insurance documentation, and internal policy.

How it works

  1. Free consultation. Thirty minutes to confirm scope, timeline, and what documentation you need the report to support.
  2. Proposal and agreement. A fixed price for your site, with travel and turnaround spelled out.
  3. Site visit. Usually a half day. We walk the property in daylight and, when lighting matters, after dark. For houses of worship, we try to observe a service to see real traffic and volunteer coverage.
  4. Report delivery. We walk through findings with your leadership or security team.
  5. Advisory review. Written feedback on your IJ, policy, or program draft before you submit or adopt.

Pricing

ServicePrice
Vulnerability assessment, single site$2,500–$5,000
Investment Justification advisory review$500–$1,500
Insider risk program developmentScoped per engagement
Private sector consultingScoped per engagement

Price depends on facility size, number of buildings, and travel. Multi-site organizations receive one proposal covering every site. Based in Hampton Roads, VA; serving organizations across Virginia and the broader region.

Who pays for the work

For 501(c)(3) nonprofits and houses of worship, SafetySync's assessments are an approved expense under the Nonprofit Security Grant Program (NSGP). For private-sector clients, assessments are typically funded through security, risk, or insurance budgets, and often reduce premiums or deductibles when shared with underwriters. For local governments, SHSP and UASI funding frequently applies.

Why SafetySync

Federal-grade rigor at nonprofit scale.

Every engagement is led by a public safety and insider risk expert and former FBI Joint Terrorism Task Force member with 20+ years of operational law enforcement experience.

20+ Years

Operational law enforcement and national security, including criminal investigations and counterterrorism work.

FBI NA

Graduate of the FBI National Academy.

JTTF

FBI Joint Terrorism Task Force experience.

M.P.S.

Master of Public Safety, University of Virginia.

Veteran

Iraq War combat veteran.

Common questions

Before the first call.

How long does the site visit take?

Most single-site visits take a half day. We walk the property in daylight and, when lighting matters, after dark. For houses of worship, we try to observe a service or event so we see real traffic and volunteer coverage.

Do you write grant applications or policy documents?

No. Your organization writes and submits grant applications, insurance documentation, and internal policy. SafetySync delivers the assessment and advises on your drafts with written feedback.

Can you guarantee a grant award or insurance outcome?

No one can. Awards and underwriting outcomes depend on your threat profile, your findings, your project quality, and factors outside anyone's control. What we can do is make sure the assessment gives decision-makers specific, traceable evidence to work with.

Do you work outside Hampton Roads?

Yes. We are based in Hampton Roads, VA and serve organizations across Virginia and the broader region. Travel outside Hampton Roads is quoted with your proposal.

What's the difference between a vulnerability assessment and an insider risk program?

A vulnerability assessment is a point-in-time study of your physical and procedural posture: what an attacker could exploit. An insider risk program is an ongoing capability: policies, indicators, workflows, and training to detect and respond to threats from people inside your organization. The two complement each other, and most organizations benefit from both.

Documented defense. Before the incident.

Start with a free 30-minute consultation. Tell us about your site, what you're protecting, and what documentation you need the report to support.