The firms we bring with us.
A short list, kept short on purpose. These are standing relationships a client can be handed to, not a directory of everyone we have worked alongside.
Most of what a client needs in a hard moment sits outside any one firm. We would rather name the few we rely on than claim we do all of it.
We work inside whatever response team a client already has, and we do not displace it. A partnership on this page means something narrower and more useful: a firm whose judgment we have tested, who will take a call from us about a live matter, and whose work and ours are designed to be read together rather than stacked.
Foretell
Strategic communications, brand and narrative strategy, public affairs, crisis responseForetell is a strategic advisory firm working across communications and public affairs, founded in 2024. It helps organizations establish what they stand for, build and communicate their story, manage reputation, and respond through consequential moments.
The partnership puts protective intelligence and communications counsel in the same conversation rather than in sequence. We establish what is actually in the environment, who is moving it, and how it connects to a client's exposure. Foretell advises on what to say, when, and whether saying anything reduces the problem or widens its audience.
The two judgments are not separable. A communications decision changes a person's security environment, and a protective action carries reputational consequences. Made apart, each can undo the other.
Not every hostile post is a threat, not every rumor deserves a response, and not every exposed record creates the same risk. Knowing the difference early is the whole value, because it is what leaves a client with options.
The risks are connected. The advice should be, too.
helloforetell.com ↗What exists in the environment, who is moving it, what it connects to in a client's exposure, and whether attention is turning into intent.
What the client says, to whom, through what channel, and whether a response reduces the problem or hands it a larger audience.
GSIS
Global Security Innovative Strategies · Washington, DCGSIS brings private sector, homeland security, public sector and international experience to work at a scale most firms do not attempt: securing borders, supply chains, critical infrastructure and aviation, major event and venue security planning, SAFETY Act attainment, and end-to-end security assessment, design and implementation.
Alongside that it runs a government affairs practice covering congressional relations, federal agency engagement, funding and grant capture and coalition management, and a business advisory practice covering market entrance, crisis and consequence management, business continuity, and financial, insider risk and intellectual property investigations.
Scale is the point of the partnership. Our work is built around a person: what can be found about them, who is paying attention, and what reaches their household. GSIS works at the scale of the institution around that person, and of the places and systems they move through.
Those two scopes meet constantly. An executive's exposure is rarely separable from the organization's, and a threat to a facility, a venue or a supply chain is a threat to the people inside it. We have bid for work together on exactly that basis.
A person is not separable from the institution around them.
gsis.us ↗The individual and the household. What is findable, what can be removed, what is being said, and whether attention is turning into intent.
The institution and its physical ground. Facilities, borders, supply chains, events and infrastructure, and the government affairs around them.
CORGI Global
Collection Operations Requirements Group for IntelligenceCORGI Global is a defense and intelligence firm founded in 2015 by Adam Taichi Kraft, who serves as its National Security Advisor. Kraft spent twenty-six years in the United States Army, retiring as a Major, and served as an operations officer with the 82nd Airborne Division, the 173rd Airborne Brigade, V Corps and the 1st Infantry Division, with deployments across Europe, the Middle East, Africa and the Americas.
He is a West Point graduate, holds a Georgetown certificate in Congress and the Intelligence Community, and is a Certified Collection Management Professional. The firm's name is its discipline: collection operations and requirements, which is the practice of turning a decision-maker's question into a collection plan that can actually answer it.
That discipline is the one most adjacent to our own. Most of what goes wrong in private intelligence goes wrong before collection starts, in a requirement written loosely enough that any finding appears to satisfy it.
CORGI brings the defense side of that practice to matters where a client's exposure touches national security, foreign state interest, or a threat environment that does not stop at a commercial boundary.
A finding is only as good as the question that asked for it.
corgiglobal.com ↗The commercial and open-source exposure picture: what is findable about a client, who holds it, and what hostile activity surrounds them.
Defense and intelligence experience, and the collection management discipline that keeps a requirement tight enough to be answerable.
B2G Global Strategies
Santa Clarita, California · United States, Canada, Latin America, Europe, AsiaB2G is an international consulting and investigations firm working in cyber security, due diligence investigations, and security and threat assessments for businesses and government entities across the United States, Canada, Latin America, Europe and Asia. It is chaired by Timothy McNally, with Matthew Kraig Kelly as chief executive.
Its directors and officers are, in the firm's own description, seasoned professionals who in many cases joined after a full career elsewhere, amounting to roughly two hundred years of collective experience. The firm's own line is that its network is the solution, and reach is the point of it.
Our collection is open-source, commercial and lawful by design, and it stops at the edge of what can be observed from outside. Some questions cannot be answered from there: whether a counterparty is who they say they are, what a filing leaves out, what is actually true about someone in a jurisdiction where the public record is thin or hostile.
That is B2G's work, and it is why the relationship earns its place on cross-border matters. The useful answer is often held by a person who has worked that country for twenty years rather than by any database.
Some answers are not in any database.
b2gstrategies.com ↗What is findable, who holds it, and the exposure and threat picture around a client, from open and commercial sources.
Counterparties, cross-border due diligence, and the questions whose answers sit in jurisdictions and sources that open collection cannot reach.
The Cyber Samaritans
Austin, Texas · Service-disabled veteran-owned small businessThe Cyber Samaritans is an enterprise cybersecurity consultancy. Jack Britton and his team work across identity and privileged access management, security operations, security engineering, and security awareness, and the firm reports more than twenty years of security experience, over fifty enterprise security projects, and seven billion dollars in client assets protected.
Their stated approach is the one we would have asked for. They advise, implement and execute rather than hand over a report, and they build a client's own capability rather than a dependency on the consultancy. Their team brings intelligence community experience to commercial work, which is the same inheritance ours has.
This is the longest-standing relationship on this page. We have worked with them for about two years, and when a client or a matter needs cybersecurity work, they are the firm we call.
The division is clean. We work outside the perimeter, on what an adversary can find and act on without touching a network at all. They work on the perimeter itself: credentials, privileged access, detection, and the part of a compromise that begins with a login rather than a search.
Most targeting needs no intrusion. Some of it still does.
thecybersamaritans.com ↗Exposure outside the network, and hostile activity around a person or organization that requires no intrusion to carry out.
Identity and privileged access, security operations, detection engineering, and the capability a client's own team keeps afterward.
How we work with counsel.
A great deal of our work is engaged through lawyers, and a great deal of what we produce is written to be filed on. No law firm is listed above, and that is a decision rather than a gap.
Where a lawyer directs an investigation, the work can carry privilege. That protection depends in part on the investigator being engaged by counsel to help counsel advise a client, rather than operating as a commercial extension of the firm. A page presenting a named practice as our partner argues against the thing we most want to be true if a matter is ever contested.
We take no referral fee and we pay none. Introductions run both ways on the merits of the matter, and a client who already has counsel keeps them.
We would rather be useful to your lawyer than listed beside them.
Where a matter needs counsel and a client does not have the right one, we make an introduction on the call, to a lawyer chosen for that matter. That is a relationship between the client and the lawyer from the first minute, and we are not a party to it.
The first step is a call.
A confidential call with us establishes your baseline exposure, your risk profile, and whether we are the right fit. Where a matter needs more than one of us, we say so on that call rather than after.