Capstone Security Solutions was born out of equal parts frustration and hope.
After years in the security industry, we kept seeing the same pattern: Threat & Vulnerability Assessments that checked boxes but failed to deliver real insight. Reports were produced, binders were filled, yet decision-makers were still left unsure of what mattered most or where to begin. On the compliance side, the challenge was just as clear. For those launching or managing a Private Patrol Operator (PPO) business in California, there was no clear roadmap — only fragmented guidance scattered across BSIS regulations, the Penal Code, and labor requirements. We had lived that complexity firsthand.
In 2024, in Southern California, we founded Capstone Security Solutions to change that. Our goal was simple: make security assessments meaningful and compliance oversight approachable. That philosophy was shaped long before Capstone had a name. As the Qualified Manager for one of the nation’s largest security companies, our CEO rebuilt a compliance program from the ground up — without templates or guidebooks — grounded in accountability, clarity, and measurable standards. That experience became the foundation for how Capstone approaches every engagement.
Our COO is the heart of the firm — the organizational engine and the steady presence behind every client interaction. Together, we balance structure with empathy, process with purpose. The name Capstone reflects what we believe in: the final stone that completes a structure, placed with precision, care, and pride. It symbolizes completeness, quality, and reliability — values that guide how we work and who we work with. Since 2024, Capstone has grown into a trusted partner for organizations seeking meaningful risk and compliance insight, while remaining a husband-and-wife family business focused on strengthening the industry we care deeply about.
If you’re building something that deserves protection — whether safeguarding people, property, and operations or launching a CA PPO — we’d be honored to help you finish it strong. After all, every great structure deserves its Capstone.
Security Threat and Vulnerability Assessments (TVAs):
Effective security assessments require more than technology or checklists. They demand professional judgment, structured methodology, and experience evaluating real-world risk across complex environments.
Capstone Security Solutions is led by a security professional whose credentials and experience are directly aligned with Threat & Vulnerability Assessments (TVAs) and defensible risk analysis. Our leadership holds the Certified Protection Professional (CPP) designation issued by ASIS International, the globally recognized standard for security risk management, threat assessment, and protective strategies.
Capstone is also a Certified CPTED Practitioner (CPD) firm through the U.S. CPTED Association, reflecting specialized expertise in Crime Prevention Through Environmental Design. These principles inform how we evaluate site layout, lighting, access control, territorial reinforcement, and environmental factors during Threat & Vulnerability Assessments.
In addition, our leadership holds the Certified CARVER Assessment Professional (CCAP) designation through the University of South Florida, supporting a structured and defensible approach to evaluating criticality, accessibility, recoverability, vulnerability, effect, and recognizability. This methodology strengthens assessment outcomes by ensuring risks are prioritized using consistent, analytical criteria rather than subjective judgment.
California BSIS Private Patrol Operator (PPO) Qualified Manager (QM):
For California-licensed Private Patrol Operators, Capstone also provides Qualified Manager (QM) services as a licensed PPO Qualified Manager regulated by the California Bureau of Security and Investigative Services (BSIS). This role applies the same assessment-driven discipline to regulatory compliance, training oversight, and operational accountability.
Together, these credentials represent more than professional certifications. They reflect a commitment to recognized standards, continuous professional development, and practical application. Combined with decades of real-world experience in physical security and public safety operations, they ensure Capstone’s assessments and advisory services are precise, defensible, and grounded in operational reality.
Contact us today to schedule a consultation and learn how we can help your business thrive.
Capstone Security Solutions works with organizations that face heightened safety, insurance, or funding-related security requirements. Our Threat & Vulnerability Assessments support a wide range of environments where risk must be understood, prioritized, and addressed responsibly.
We commonly work with:
• Houses of worship and faith-based organizations
• Nonprofits and community organizations
• Healthcare clinics and outpatient facilities
• Property managers and multi-tenant properties
• Private schools and other public-facing organizations
Our Threat and Vulnerability Assessments (TVAs) and advisory services are tailored to the operational realities and risk profile of each environment we support.
Organizations invest in Threat and Vulnerability Assessments (TVAs) for reasons that go beyond security improvements alone. In many cases, assessments are driven by external expectations tied to funding, insurance, governance, and accountability.
Grant and Funding Requirements:
Many security-related grant programs require organizations to clearly identify threats, vulnerabilities, and priorities before funding is awarded. A TVA provides the foundation needed to explain why certain improvements are necessary and how they address real conditions rather than assumptions.
Insurance and Risk Management Expectations:
Insurers increasingly expect organizations to understand foreseeable risk and demonstrate how it is managed. A documented assessment supports underwriting, renewals, and loss-control discussions by showing that risks were identified thoughtfully and addressed intentionally.
Decision Accountability:
When incidents occur, leaders are often asked what risks were known and what actions were taken. A TVA helps organizations explain their decisions by showing how concerns were identified, evaluated, and prioritized over time.
Ultimately, a Threat and Vulnerability Assessment helps organizations focus resources where they matter most, align security decisions with real-world conditions, and communicate those decisions clearly to stakeholders.
Capstone conducts Threat and Vulnerability Assessments (TVA) to help organizations understand where risk exists and how it could realistically materialize. These assessments identify priority areas, highlight practical improvement options, and support informed decision-making related to safety, operations, funding, and governance.
TVAs are commonly used to support capital planning, grant applications, insurance discussions, and leadership accountability by providing clear insight into current conditions and areas of concern.
Separately, Capstone provides BSIS Qualified Manager (QM) oversight and compliance support for California-licensed Private Patrol Operators (PPOs) operating under the Private Security Services Act. These services focus on regulatory compliance, documentation, training standards, and ongoing oversight required by the California Bureau of Security and Investigative Services. QM services support day-to-day compliance obligations, audit readiness, and regulatory continuity, and are administrative in nature.
This service is provided independently from any TVA consulting work.
Capstone conducts Threat and Vulnerability Assessments using a structured, step-by-step process designed to help leaders understand risk and make informed choices.
Step One: Asset Inventory
We begin by identifying the assets that matter most, focusing on specific spaces, functions, and operational elements that support the organization’s mission.
Step Two: Design Basis Threat
Next, we identify credible threats and risk scenarios based on the environment, activities, and real-world conditions the organization faces.
Step Three: Countermeasures
We review existing security measures, procedures, and practices to understand what protections are already in place and how they are functioning.
Step Four: Risks to Other Assets
We examine how vulnerabilities or incidents involving one asset could create secondary or unintended risks elsewhere.
Step Five: Cost Benefit Analysis
Finally, we evaluate potential improvements and trade-offs to help prioritize actions based on impact, feasibility, and available resources.
This process results in clear findings and practical recommendations that support planning, accountability, and responsible investment.
Capstone Security Solutions is a Certified CARVER Assessment Professional (CCAP) firm. We apply the CARVER methodology to prioritize risk at the asset level by evaluating how specific assets could realistically be accessed, exploited, and impacted.
CARVER considers multiple factors to understand risk from different angles. The example below illustrates how one factor—Vulnerability—translates this framework into practical, real-world insight.
Vulnerability – How Easily Can the Asset Be Exploited?
An asset’s vulnerability is measured by whether it can be successfully exploited using realistic and available attack methods. For example, within a house of worship, a secondary sanctuary door that remains unlocked during services, lacks active monitoring, and is poorly lit presents a vulnerable asset. An individual could enter unnoticed and move toward occupied or restricted areas without challenge. This absence of effective physical and procedural safeguards results in a higher vulnerability rating.
Capstone’s use of the CARVER+ platform supports consistent, data-informed assessments with qualitative and quantitative insights. CARVER+ aligns with DHS and ASIS standards and is SOC 2 Type 1 and Type 2 certified, ensuring assessment data is protected to high standards of security, confidentiality, and operational integrity.
A Qualified Manager ensures your PPO operations align with California Bureau of Security and Investigative Services (BSIS) regulations, helping you navigate California’s complex security contracting environment with confidence. Proper oversight reduces exposure to regulatory violations, audits, and enforcement actions that can threaten business continuity.
Capstone’s QM services support audit readiness and compliance discipline, allowing PPO leadership to focus on growth, client delivery, and operational stability without losing sight of regulatory obligations.
A Qualified Manager supports continuous improvement by monitoring regulatory changes, refining policies and procedures, and strengthening training and documentation practices. This proactive approach helps PPOs stay ahead of industry shifts rather than reacting to compliance issues after they arise.
By integrating compliance and risk management into daily operations, Capstone helps PPOs build sustainable programs that support consistent service delivery and long-term competitiveness.
A Qualified Manager demonstrates a PPO’s commitment to professionalism, accountability, and regulatory compliance. This commitment strengthens credibility with clients, regulators, and contracting entities, supporting business development in a competitive marketplace.
Capstone’s QM services have supported PPOs in securing security contracts within one of California’s five largest counties by ensuring compliance, documentation, and operational readiness aligned with client and regulatory expectations.
