How to Hire a Security Guard Company: A Step-by-Step Guide (2026)

Choosing a security company is a decision you don't want to get wrong: the wrong provider means unreliable coverage, uninsured liability, and staff who quit within weeks. The good news is that vetting a security firm follows a clear, repeatable process — the same checklist a professional facilities or risk manager would use. This guide walks through all eight steps, including how licensing and training standards differ across states, so you can hire with confidence whether your site is in California, Texas, New York, or anywhere between.

Step 1: Define your security needs

Scope drives everything downstream — the license category, the staffing plan, and the cost. Before you contact a single vendor, do a quick site risk assessment. Skip this and you'll collect quotes you can't compare and buy coverage you don't need.

How to run a quick site risk assessment

You don't need a consultant for a first pass. Walk your property with five questions — the same asset-threat-vulnerability logic a professional risk manager uses — and write the answers down:

• Assets. What are you actually protecting — people, cash, inventory, equipment, data, brand/reputation, or just liability exposure? Rank them. A cannabis dispensary protects cash and product; a corporate lobby protects people and access control.
• Threats. What has actually happened here or at comparable sites — theft, trespassing, vandalism, workplace violence, after-hours break-ins, loitering, medical events? Pull your own incident log and, if you can, local crime data for the address.
• Vulnerabilities. Where is the site exposed — unmonitored entrances, poor lighting, a large perimeter, blind spots, shift-change gaps, a lobby anyone can walk into?
• Existing controls. What's already in place — cameras, alarms, access cards, fencing, lighting? A guard is often the wrong first dollar if a $200/month camera and monitoring setup closes the gap.
• Coverage gaps. Overlay your incidents against your hours. If 80% of problems happen between 10 p.m. and 4 a.m., you need a night post or overnight mobile patrol, not a 9-to-5 lobby officer.

That one page tells you whether you're buying deterrence, response, access control, or documentation — and it becomes the backbone of the scope every vendor bids against.

Translate the assessment into scope

• Armed or unarmed? Most sites need trained unarmed officers; armed coverage is for genuine, documented threats (see armed vs. unarmed security).
• Static post or patrol? A fixed guard, a mobile patrol that visits on a schedule, or a mix.
• Coverage hours. A single shift, business hours, or 24/7. Continuous coverage of one post runs about 4.2 full-time equivalents — that's simply the raw math of covering 168 weekly hours with 40-hour work weeks (168 ÷ 40 = 4.2). Once you also fund PTO, sick time, training, and turnover, realistic staffing is closer to 4.5–5 FTE, which is why a 24/7 post costs what it does.
• Special requirements. Access control, CCTV monitoring, reception duties, or industry-specific experience (healthcare, cannabis, construction, retail).

Source and shortlist licensed providers

With your scope defined, build a shortlist of three to five licensed candidates before you start vetting in depth — enough to compare meaningfully without drowning in sales calls. Strong sources include peer referrals from facilities or operations managers who run similar sites, your insurance broker or property manager (who see which firms actually pay claims and show up on time), and industry directories that pre-screen for a verifiable license.

Searching by your metro tends to surface the firms that already staff sites like yours — providers serving Los Angeles or Chicago, for instance — because local density usually means faster fills and supervisors who can actually reach your post.

Match the shortlist to the work. A lobby, campus, or office program leans toward firms with a real corporate security practice; a site with a documented threat needs a provider with genuine armed security depth, not one that treats guns as an afterthought. Screen out anyone you can't confirm holds a current license before they get a slot on the list.

One sourcing check that saves grief later: confirm the company will self-perform the work rather than quietly subcontract your post to a smaller firm you never vetted. Ask directly whether the officers on your site will be the provider's own W-2 employees, and treat a broker that farms coverage out to unknown crews the same way you'd treat an unlicensed firm — you can't hold a chain of hand-offs accountable when something goes wrong at 3 a.m. From a clean shortlist, the fastest path is to request quotes from several licensed companies at once on identical scope.

Step 2: Verify the state license

A legitimate provider holds a company-level license, and in most states its officers hold individual registrations. Confirm both. The licensing body differs by state — California's BSIS, Illinois' IDFPR, Texas' DPS Private Security Program, Florida's FDACS, New York's Department of State — and a few states (Colorado, Missouri) or Pennsylvania license only at the local or county level.

Ask for the license number in writing and check it yourself on the state's official lookup rather than trusting a logo or a verbal claim. Our companion guide, how to verify a security company's license, has the agency, credential names, and official lookup for 20+ states.

Step 3: Confirm insurance with a COI

Request a current Certificate of Insurance (COI) and require your business to be named an additional insured before you sign — reputable firms provide this without hesitation. Confirm three coverages at minimum:

• General liability — commonly $1M per occurrence / $2M aggregate, and higher for armed work. Several states set a floor tied to the license (California requires $1M for PPOs; Maryland requires $1M for larger agencies).
• Workers' compensation — for every officer, so an injured guard's claim runs against the firm, not you.
• Commercial auto — if patrol vehicles are used.

Get the COI directly from the insurer or broker, not as a forwarded PDF, and for armed coverage confirm a specific firearms / assault-and-battery endorsement. Our guide to security contracts and insurance covers the full picture.

How to actually read the COI (ACORD 25 cheat sheet)

The COI you'll receive is almost always an ACORD 25 form. Don't just file it — read it:

• Occurrence vs. claims-made. You want occurrence-based general liability, which covers incidents that happen during the policy period even if the claim is filed years later. Claims-made policies only pay if the policy is still active when the claim is filed — a gap that can leave you exposed after the contract ends.
• Additional insured box. Confirm your legal entity name is listed as an additional insured, not just referenced in the description. A blanket "additional insured as required by written contract" endorsement should back it up.
• Limits and dates. Check the per-occurrence and aggregate limits meet your contract's requirement, and that the policy period is current (not expiring next month).
• Firearms / assault-and-battery endorsement. Standard general liability often excludes assault, battery, and firearms. For any armed post, verify the endorsement that adds them back — its absence is the single most common uninsured-exposure trap in armed contracts.
• Cancellation notice. Look for language giving you notice (commonly 30 days) if the policy is cancelled mid-term.

Step 4: Check training and vetting

Ask what state-mandated training officers complete and how the company documents it — and know that the baseline varies dramatically by state. Some states require 40 hours before a guard works a post; others mandate none at the state level and leave training to the employer. Use the matrix below as a reference, then confirm the specifics with the provider and the agency, because several states are actively raising these floors.

Note on Georgia: unarmed guards need not personally register with the Board, but a minimum of 24 hours of classroom instruction has been state-mandated since January 1, 2022 under OCGA 43-38-7.1. Ohio, Michigan, Massachusetts, and Indiana remain genuinely no-state-mandate for unarmed work — there, a good company's own training program is the differentiator, so ask about it directly.

Regardless of state, confirm the firm runs criminal background checks, drug testing, and reference verification, and look for baseline CPR/first aid and de-escalation training. Treat every figure above as a current baseline and verify it with the provider.

Step 5: Evaluate supervision and accountability

Guard quality collapses without oversight, so ask how officers are monitored on post. Look for:

• Field supervisors who conduct unannounced site visits.
• A reasonable supervisor-to-officer ratio. One field supervisor stretched across dozens of posts can't meaningfully oversee any of them — ask how many officers each supervisor covers and how often they physically visit each site.
• GPS-based patrol/tour verification that proves rounds were actually walked.
• Real-time incident reporting you can access.
• A 24/7 operations center or on-call supervisor, with a clear escalation protocol that distinguishes a routine incident from a life-safety emergency.
• A defined fill plan — how fast a replacement arrives if a guard calls out.

A company that can't explain how it supervises its own people will not supervise them well on your site.

Step 6: Check references and track record

Ask for two or three references you can actually call — ideally clients in a similar industry or with similar needs. But don't stop at the references the vendor hand-picks; a thorough buyer checks the independent record too.

Independent record checks (do all four)

• State licensing board disciplinary history. The same agency that issues the license usually publishes enforcement actions, license suspensions, and complaint records. Search the company (and its principals) for any disciplinary history — a firm with a pattern of violations is a firm cutting corners.
• Better Business Bureau. Check the BBB profile for the complaint pattern and how the company responds — a few resolved complaints are normal; a wall of ignored ones is a signal.
• Court and litigation records. A quick search of county/state court records (or PACER for federal) for the company name surfaces negligence suits, wage-and-hour claims, and injury litigation. Repeated negligent-security or unpaid-wage cases predict exactly the problems you'll inherit.
• Online reviews. Corroborate with independent reviews, looking for a consistent pattern of professionalism rather than isolated complaints — and weigh how the firm answers criticism.

What to ask a reference — and how to grade the answer

Use a short script so every reference call is comparable:

• "How reliable is post coverage — how often do guards no-show, and how fast do they backfill?"
• "What's your guard turnover been on this account?"
• "When something went wrong, how did the company handle it?"
• "How responsive is your account manager and supervisor?"
• "Would you rehire them today?"

What a good answer sounds like: specific and slightly imperfect — "We had two no-shows in a year, they had a replacement on site within 90 minutes both times, and the supervisor called me personally." Real clients remember details and admit small problems.

What a bad answer sounds like: vague and uniformly glowing — "Oh, they're great, no issues ever." That's either a coached reference or a client who isn't paying attention. An inability or refusal to provide references at all is itself a red flag, as is a company that has been in business only a few months under a name with no track record.

Step 7: Compare bids and understand pricing

Get a transparent cost breakdown — the hourly bill rate, the guard pay rate, any equipment or technology fees, and charges for overtime or emergency response — rather than a single blended number. The load-bearing rule of this whole guide is simple: a bill rate at or below the guard's own wage is impossible to deliver legally. Here's why, built from the ground up.

How a legitimate unarmed bill rate is built

The median US guard wage is about $18/hour (BLS OEWS median, ~$38,370/year). That's the starting cost, not the bill rate. Watch what has to stack on top:

Now the red flag is concrete: if a vendor quotes $19 or $20/hour, there is no room in that number for burden, supervision, insurance, and margin. Something is being skipped — the guard is being underpaid (fueling turnover), workers' comp is missing, training is fictional, or workers are misclassified as 1099 contractors to dodge payroll costs. Any of those becomes your liability the moment there's an incident.

Compare at least three licensed providers on identical scope, and treat the cheapest bid with suspicion, not relief. Our cost guide breaks down how rates vary by state, city, and service type.

Off-duty police vs. contract security: which fits?

Buyers weighing a visible, high-authority presence often consider hiring off-duty police officers instead of a contract security firm. Both have a place — the right call depends on what you're buying.

• Authority. Sworn officers can make arrests and carry the deterrent weight of a uniform and badge. Contract guards observe, report, and detain only within citizen-arrest limits — enough for the vast majority of commercial sites.
• Cost. Off-duty rates run roughly 2–3× contract unarmed rates, which makes them impractical for 24/7 or long-term programs.
• Liability & authority-of-employment. When an off-duty officer acts, it can be legally murky whether they're acting as your employee or as a public officer — which complicates indemnification and can drag your business or the department into a claim. A contract firm carries its own general liability and workers' comp and indemnifies you by contract.
• Management & continuity. A security company gives you account management, supervision, tour verification, incident reporting, and guaranteed fills. Off-duty officers are individuals — if one is called back to active duty or takes a shift elsewhere, your coverage gap is your problem.

Rule of thumb: off-duty police for a short-term event, a specific credible threat, or a deterrent show of force; contract security for ongoing posts, patrols, and programs where cost, supervision, and a clean liability chain matter.

Step 8: Sign a clear contract

Insist on written post orders (the per-post playbook), a defined service-level agreement covering fill rate and response expectations, and clear termination terms. Prefer a short initial term or trial period over an immediate long lock-in so you can validate performance. Make sure the insurance and indemnification clauses match the COI you were shown, watch for auto-renewal traps, and have counsel review indemnification language for higher-risk armed engagements. See what to check in a security contract.

Build your Scope-of-Work / RFP in one page

The single best way to get comparable bids is to hand every vendor the same written scope. Copy this template into a doc, fill it in from your Step 1 risk assessment, and send it to your shortlist:

• Site & hours: address(es), posts, and exact coverage hours per post (e.g., "one post, 24/7" or "one post, 6 p.m.–6 a.m. daily").
• Armed / unarmed and required certifications.
• Duties: access control, patrols/tours, CCTV monitoring, reception, incident reporting, key/opening-closing responsibilities.
• Officer requirements: minimum training hours, background/drug screening, industry experience, uniform standard, English/bilingual needs.
• Supervision & reporting: supervisor visit frequency, GPS tour verification, reporting system and your access to it.
• Insurance: required GL limits, additional-insured, workers' comp, firearms/A&B endorsement for armed.
• Pricing format: require a line-item bill rate, guard pay rate, overtime/holiday rate, and any equipment fees — no blended lump sums.
• SLA & term: fill-rate guarantee, response times, trial period, and termination notice.

When three vendors bid the same one-pager, price differences become meaningful instead of guesswork. Submit your scope to matched, licensed providers here.

National, regional, or local — which type of company?

Security providers come in three broad flavors, and the right fit depends on your footprint.

National companies (the large, well-known brands) offer consistency across many locations, deep resources, and mature technology and reporting — ideal for multi-site or multi-state programs. The trade-off can be less flexibility, higher turnover at the guard level, and a less personal relationship.

Regional firms often hit the sweet spot: enough scale to be professional and well-insured, with more responsiveness and local knowledge than a national chain.

Local companies can offer the most attentive service, lower overhead, and strong community ties, which matters for a single site — but vet their insurance limits, depth of coverage (can they fill a call-out at 2 a.m.?), and financial stability more carefully.

There's no universally "best" tier — match it to your scope. A single office is often best served by a strong regional or local firm; a national retail chain needs a provider that can standardize across states.

Technology you should expect

Modern security is as much software as it is people, and a capable provider should bring both. Ask any shortlisted firm to show you their tools live, not in a brochure:

• GPS tour and checkpoint verification — timestamped proof that patrols and rounds were actually completed, not just logged on paper.
• Digital incident reporting with photos, time stamps, and a client portal you can log into to see what happened on your site in real time.
• Live video monitoring / remote guarding — increasingly, camera systems with monitored analytics can reduce the number of on-site hours you need, cutting cost while preserving response. Monitoring typically runs $30–$200/month depending on scope.
• Scheduling and time-and-attendance systems that flag no-shows and prevent the buddy-punching and unfilled shifts that plague low-tech firms.
• Mass-notification and escalation tools tied to the operations center for life-safety events.

Technology doesn't replace a well-trained officer, but its absence is a tell: a firm still running on paper logs and phone calls will struggle to prove coverage, respond quickly, or give you the visibility you're paying for.

Putting it together

Vetting a security company isn't guesswork — it's a checklist. Start from a one-page risk assessment, verify the license and insurance yourself, demand documented training and real supervision, check the independent record (not just hand-picked references), and compare at least three bids built on the same written scope. Above all, remember the pricing math: a legitimate unarmed program is built on a bill rate around $22–$35/hour, and a number below the guard's own wage is a promise no honest firm can keep. When you're ready, get matched with licensed, insured providers and put this checklist to work.