Active Incident? 24/7 Response →
SleuthX

Family Office Services

Executive threat assessment, coordinated with a licensed Florida PI.

Executive protection risk assessment for founders, public figures, and family office principals. We coordinate referrals to licensed Florida PI partners.

Executive threat field work is a licensed-PI service. We refer.

We do not perform private investigation field work in Florida.

When a principal needs a protective intelligence assessment with a human-source and field component, we coordinate with a licensed Florida private investigator in our network who specializes in executive and HNW work.

They run the field portion under their license.

We run the digital exposure portion under our own work.

Quinn coordinates the introduction; both halves are delivered discreetly.

How the referral works

  1. You contact us. Direct, NDA-protected conversation. The principal is not named in writing until engagement framework is in place.
  2. We scope the matter. Trigger event, current security posture, EP firm involvement, family composition, geography.
  3. We introduce you to the right licensed FL PI. A partner with HNW and family-office track record, not volume.
  4. Both engagements run. The partner's field-and-human-source assessment under their license. Our digital exposure assessment under ours. The two halves combine into a single written threat picture.

What we do, what the partner does

Who this is for

Founders and CEOs after a trigger event.

Public figures with active grievance subjects.

Family-office principals and their adult family members.

Judges, prosecutors, and elected officials.

Healthcare and biotech executives.

The pattern: a specific principal, a specific trigger, a current need for an honest read on threat reality.

Why a referral, not direct delivery

The human-source and field portion of protective intelligence is licensed-PI work in Florida.

The partners we refer to do this with the discretion the matter demands.

We coordinate the introduction and run the digital portion, which is where most of the modern exposure actually sits anyway.

Cross-references

How engagements are scoped

PI-partner assessment rates are set by the partner and scoped per matter, typically in the high-four to mid-five-figure range, with ongoing-monitoring retainers as a separate line item when the principal wants continuous coverage.

The partner provides a written estimate before the retainer, and we do not mark up partner fees.

The SleuthX digital exposure portion is examiner-delivered, under our own engagement letter and scoped on a confidential consult, at a $5,000 refundable engagement retainer and $400/hr flat, with a milestone cap.

Most principals enter through our family-office services, where this sits alongside the rest of the household's security and privacy program.

Plain terms

What we are, and what we are not

What we are

A digital forensics practice with an AI investigator at the center. Credentialed examiners, documented chain of custody, explainable findings you can verify, and court-admissible reports under FRE 901/902. When field work is needed — backgrounds, locates, physical surveillance — we coordinate with licensed private investigators. Lawful, confidential, on your side.

What we are not

Spyware, stalkerware, or a way to secretly monitor another person. We do not “hack back,” promise guaranteed money recovery, or touch any account or device without its owner's lawful authorization. We decline engagements that ask us to.

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 9 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

How We Work

A confidential, structured engagement.

01

Confidential Consultation

A direct conversation with Quinn, the founder and CEO who oversees every engagement. NDA-protected. No sales process.

02

Scoped Engagement

A clear written proposal with defined deliverables, timeline, and pricing. No hidden costs.

03

Investigation and Findings

Forensic work conducted to court-admissible standards, with regular communication and a written summary you can act on.

Certified Expertise

GIAC

Frequently asked about executive threat referrals

What is a protective intelligence assessment?
A protective intelligence assessment is a structured analysis of the threats facing a specific principal: who is paying attention to them, what their digital and physical exposure looks like, what known threat actors or grievance subjects are present, and what the likely vectors of harm are. The licensed PI partner runs the field and human-source portion. We run the digital exposure portion, social-media monitoring, dark-web mentions, OSINT reconstruction, doxxing risk. The output is a written assessment a security director or family-office principal can act on.
Who actually needs this?
Founders and CEOs after a public dispute, a layoff, an IPO, or an inflammatory media moment. Public figures with active grievance subjects. Family office principals with adult children whose lifestyles attract attention. Judges and prosecutors after threats. Healthcare and biotech executives who become targets after policy decisions. The pattern is the same: a specific principal whose risk profile changed, and who needs a current read on what is actually happening around them.
How is this different from executive protection?
Executive protection is the people who physically accompany the principal, the close-protection detail, residence security, transportation security. Protective intelligence is the analysis layer that tells the EP detail what to actually worry about. Some EP firms run their own intelligence; many do not, or want a second opinion from outside their own personnel. We coordinate with EP firms or directly with the principal's security director.
How does this pair with your digital exposure work?
It pairs naturally. The licensed PI partner handles the human-source side: known grievance subjects, prior litigation history, on-the-ground reconnaissance. We handle the digital side: what the principal looks like to a doxxer or threat actor right now, where their home address sits in data-broker exposure, what social-media reconnaissance reveals about routine and family, what dark-web mentions exist. The combined product is a current threat picture, not a stale risk register.
How do you handle discretion?
Engagements are NDA-protected from the first conversation. The licensed PI partner is selected on track record with HNW and family-office work, not on volume. Reports are delivered to a named recipient on a need-to-know basis. We do not use principal names in marketing, on the website, or in any conversation outside the engagement. If discretion is the entire point, we treat it that way.
Is there real search demand for this term?
Effectively no. People who need this work do not Google "executive protection risk assessment." They get referred by a security director, a family-office advisor, an attorney, or another principal. This page exists to give those referrers and inbound callers something concrete to read, not to capture cold search traffic.
Quinnlan Varcoe, Founder & CEO
Quinnlan Varcoe
GIAC-certified · Founder & CEO

Schedule Your Session

Schedule a confidential consultation

A direct conversation with Quinn, the founder and CEO who oversees every engagement. NDA-protected. No sales process. Most engagements begin within 48 hours.

Free, confidential · NDA-protected · no obligation.

  1. 1. Book a 30-minute call — we scope your situation, no charge.
  2. 2. You get a written scope — deliverables, timeline, and price — before any work begins.
  3. 3. Approve it and we start; most engagements begin within 48 hours.

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management