Kestralis Group Advisory — enterprise security consulting
← Small-business compliance
Kestralis Group · Corporate Security Advisory
Security advisory, workplace violence prevention, and business continuity for U.S. organizations that take the work seriously — led by operators who have done it inside the enterprise and in the field.
The Problem
The category is crowded with generalists selling compliance theater — templated plans, one-day trainings, binders that satisfy a procurement checklist and nothing else. When a threat actually materializes, those programs fail quietly and then loudly.
Kestralis Group works differently. Our principals have designed and run security programs inside Fortune-scale organizations, and operated in environments where getting it wrong had irreversible consequences. We bring that discipline to mid-market clients who need serious capability and cannot afford a full-time security director.
40+
Years combined security & investigations experience
— Free tool · ~90 seconds
Find your 3-year California workplace violence exposure across Cal/OSHA penalties, civil liability, workers’ comp, productivity, and insurance — from federal and state data, with a personalized PDF.
— Capability
Seven service lines · Engaged individually or as an integrated program
Program · Retainer
Program design and management that goes beyond California SB-553 — built by practitioners, not HR generalists. Includes IIPP Assessment for complete Cal/OSHA written-program coverage.
Program · Retainer
Resilience programs built for the moment they're needed — led by a Certified Business Continuity Professional.
Case · Retainer
KTI-W-based assessments and management plans — Kestralis's proprietary structured professional judgment instrument — when employees, customers, or outside parties become a concern.
Assessment · Program
Security program design and physical security assessments by people who have operated against hardened targets.
Advisory · Retainer
Risk-first cyber advisory for mid-market organizations without a full-time CISO — governance, framework alignment, and program design over tool sprawl.
Case · Retainer
Licensed workplace investigations and background due diligence — conducted with legal defensibility in mind from day one.
Expert · Case
Expert witness services and litigation support for workplace violence, negligent security, and threat assessment matters.
See also
Engagement model— Compliance penalty
Effective 2025-01-01
$162,851
Maximum per-willful-violation Cal/OSHA penalty.
Serious violations carry up to $25,000.
Source: Cal/OSHA 2025 civil penalty schedule, California Department of Industrial Relations. Adjusted annually to mirror federal OSHA’s CPI-based increase.
Every covered employer must maintain a written plan, violent incident log, and annual training. Cal/OSHA's permanent standard drops by end of 2026 — every existing plan will need to be updated.
View the national compliance hub →Smaller operation?
Plans, training, and support from $199, built for businesses that don't need a custom advisory engagement.
— The Practice
Cumulative experience · Kestralis Group LLC
U.S. military veterans across the Army and the Marine Corps, with combat deployment spanning tactical, operational, and strategic roles — and a Tier 1 Special Operations background.
Senior risk, resilience, and violence prevention leadership inside Fortune 100 organizations across consumer, chemical, life sciences, financial services, and healthcare diagnostics. Programs designed to meet duty-of-care obligations, deliver demonstrable ROI, and reinforce the operating business rather than constrain it.
Crisis and emergency management experience earned in federal and state capacities — applied to corporate continuity, incident response, and tabletop exercise design. Trained in the doctrine and frameworks that regulators, federal partners, and operating leadership actually rely on under pressure.
A licensed private detective agency capability behind every engagement — the operational standing and investigative methodology that most consulting firms cannot offer.
Recognized professional credentials in fraud examination, business continuity, executive protection, and threat assessment.
Why Kestralis
Every engagement is led by a principal who has done this work at enterprise scale and in the field — not an analyst applying a template.
When a threat assessment escalates, we don't hand you off. A licensed PI agency is in the same firm, working the same case.
Every deliverable is written to hold up in front of a Cal/OSHA inspector, a plaintiff's attorney, or a board. That is the standard.
— Start here
Thirty minutes with a principal. No sales pitch, no procurement gauntlet. If we're the right fit, we'll say so. If we're not, we'll tell you who is.
