Security and risk advisory for Ukraine.

We advise international companies, investors, NGOs and institutions on protecting people, projects and operations in Ukraine.

Our partner-led work combines security and risk management with strategy, intelligence, operations and market entry.

Where can we support you?

Every assignment is led by a partner and scoped to the decision, project or operating requirement.

Core service

Security risk management

Assess exposure and establish proportionate security arrangements for people, projects and operations.

Includes assessments, management plans, ongoing oversight, monitoring and incident readiness.

Core service

Executive, project and crisis support

Support leaders, teams and sites before and during work in Ukraine.

Includes delegation support, project and site reviews, contingency planning, exercises and training.

Advisory service

Strategy and market entry

Set direction against current market, institutional and operating realities.

Includes sector assessment, entry strategy, stakeholder engagement, partnerships and operating models.

Advisory service

Intelligence and operations

Support decisions with relevant context, evidence and local coordination.

Includes country analysis, counterparty intelligence, monitoring and implementation oversight.

Custom services can be arranged. Where regulated physical-security or other specialist services are required, we coordinate vetted, appropriately licensed Ukrainian providers.

How can we work together?

Focused assessment

A concise answer to a defined question.

  • A risk, market-entry, partner or project assessment
  • Clear findings and recommendations

Defined project

A defined workstream with agreed outcomes.

  • Market-entry planning, stakeholder engagement, partnership development, security setup or executive support
  • A delivery plan, defined outputs and coordination through completion

Ongoing advisory support

Senior support for continuing work in Ukraine.

  • Country and partner intelligence, market monitoring, fractional security management and local coordination
  • Agreed availability, reporting schedule and response times

We agree scope, deliverables, timing, responsibilities and fees before starting. Where qualified specialist input is needed, its role is made explicit in the scope.

Discuss an assignment →

When does a question need deeper investigation?

Commission a deeper investigation when an initial check leaves a material question unanswered. This may follow a Ukraine 1 assessment or start with a question you bring directly.

A report can draw on ownership and control, management, public exposure, procurement history, sanctions and PEP indicators, court and tax signals, operating capacity, local context, site conditions, and infrastructure exposure — scoped tightly to the question in front of you.

Bring us in when ownership or procurement patterns need closer examination, a shortlist needs hands-on prioritisation, or a site, facility, asset or damage claim needs location-specific verification. The report sets out the findings, their sources and any questions we could not resolve.

Which intelligence products can you commission?

Each intelligence assignment is scoped to the request — through investigation, source review beyond the automated set, and written judgement.

Start with a focused assessment or a full counterparty report, scale up to a deep-dive review or batch pipeline analysis, or set up ongoing monitoring and custom site intelligence.

Focused assessment

Human Assessment Report

A concise written read on a single Ukrainian counterparty, site, asset or question.

We review the available sources and explain the findings, their significance and any remaining gaps.

Core intelligence product

Counterparty Intelligence Report

The core report on a Ukrainian company, NGO, supplier, partner, contractor, grantee, investee, distributor, or local representative.

It examines identity, ownership and control, management, public exposure, sanctions / PEP / Russian-control indicators, procurement behaviour, court and tax signals, operating capacity, and the inconsistencies that don't add up.

Researched, sourced, interpreted, and written into a single clear view of the counterparty.

Deep dive

Enhanced Intelligence Review

A deeper investigation into a counterparty, relationship, ownership structure, or exposure pattern.

It extends into related entities, network proximity, public-sector exposure, adverse conduct, reputation and political exposure, and operational capacity.

For subjects where the first layer raised more questions than it answered.

Pipeline

Pipeline Intelligence

Assessment across many Ukrainian suppliers, vendors, grantees, partners, subcontractors, or investees at once.

Delivered as a ranked intelligence table: priority entities, key signals, exposure indicators, and where to look next.

Monitoring

Ongoing Intelligence

Continuous monitoring of the Ukrainian counterparties, sites, and exposures you can't afford to stop watching.

We track material shifts in status, ownership, sanctions and PEP indicators, procurement behaviour, and operating context — and flag the changes that matter.

Ground intelligence

Ground & Site Intelligence

Assessment of sites, facilities, assets, land plots, damage claims, accessibility, and infrastructure exposure across Ukraine.

Remote and source-based, or field-verified where conditions, scope, and safety allow.

Delivered with coordinates, visible evidence, a source trail, confidence level, limitations, and clear next steps.

Additional service

Ukraine 1

Scoped Ukrainian counterparty research and verification for questions that open sources or standard screening cannot settle.

Work is source-led and uses public and properly licensed information, with findings, professional judgement and limitations stated separately.

Explore Ukraine 1 →

How is an intelligence report produced?

01Frame the request
We define the subject — counterparty, site, asset, relationship, ownership structure, shortlist, or operating environment — and what it feeds into.
02Review the sources
The relevant records are collected and structured: public sources, ownership indicators, sanctions and PEP exposure, procurement behaviour, court and tax signals, site data, local context, and anything you provide.
03Analyse the information
We interpret the signals, patterns, inconsistencies, exposure indicators, capacity markers, and relationship links — separating noise from what matters.
04Deliver intelligence
You receive a source-cited report with a clear judgement, confidence level, stated limitations, and recommended next steps.

What conclusion does an assessment report reach?

Assessment reports use the following calls within the agreed scope and risk threshold. Consulting projects and ongoing support use the deliverables and milestones agreed for that assignment.

Proceed

The evidence shows no material unresolved concern within the scope of the question.

Review

The evidence shows uncertainty, exposure, or inconsistency that warrants deeper review or mitigation before you commit.

Stop

The evidence points to exposure, conflict, or non-credibility beyond your risk threshold.

Deepen

The evidence isn't conclusive yet — but it shows exactly where to investigate, verify, or escalate next.

What can an intelligence report include?

Depending on scope, a report can include:

Counterparty or site intelligence summary Ownership and control analysis Management and related-party review Sanctions, PEP, and Russian-control indicators Procurement behaviour and public-sector exposure Court, tax, status, and adverse signals Operational-capacity indicators Network, sector, and geography context Materiality assessment: what matters, what does not, and why Judgement and confidence level Source trail, limitations, and recommended next steps

For ground and site assessments, reports may also include coordinates, visible evidence, accessibility, infrastructure exposure, damage indicators, and recommended verification steps.

Where does specialist review come in?

Our intelligence reports support commercial, procurement, investment, partnership, security-risk and operational decisions.

Each report states its scope, sources, confidence level and limitations. It does not replace legal, tax, accounting, investment, sanctions, export-control, engineering, valuation, insurance or regulated physical-security services. Where specialist work is needed, we make that explicit and can coordinate vetted, appropriately licensed Ukrainian providers within the agreed scope.

What research informs the work?

What do you need to move forward in Ukraine?

Tell us about your objective, the context, your timing and the support you need. We will suggest a practical scope, whether it is a focused assessment, a defined project or ongoing advisory work.