Home Use Cases Applications Differentiator About Request Demo
About VIGIL

Security assessment
was broken.
We fixed the methodology.

Every year, organisations commit billions in capital to critical sites on the basis of assessments that cannot be reproduced, evidence trails that are incomplete, and findings that cannot be defended when challenged.

VIGIL exists because that is not a problem of competence. It is a problem of infrastructure. And infrastructure can be built.

The problem VIGIL solves

Three failures.
One structural cause.

The security assessment industry is not failing because of bad people or bad intentions. It is failing because the tools have not kept pace with the decisions they are asked to support. Capital commitments that will shape an asset for thirty years are being made on the basis of methodology designed for a different era.

01
The finding cannot be reproduced

Two qualified assessors evaluate the same site with the same information and produce different scores. The difference is not expertise — it is the absence of a structured methodology that generates the score from evidence rather than from judgement. The finding belongs to the person who produced it. It does not belong to the organisation that commissioned it.

02
The confidence level is unknown

An assessment backed by 6 of 14 required data points is presented with the same confidence as one backed by 14 of 14. There is no mechanism for asking how well the finding knows what it concluded — and no mechanism for answering. The buyer has no way to distinguish a verified conclusion from a well-argued inference.

03
The future was never assessed

A site is assessed as suitable today. The question of whether it will remain suitable over a 20-year asset lifecycle — given climate trajectory, threat actor evolution, infrastructure change, and regulatory development — is not asked. It is never asked. Until the gap between the original finding and the current reality becomes expensive.

"The constraint was always there. The trajectory was always visible. The question was never structured correctly — and the methodology never ran long enough to find the answer."

Why VIGIL exists

Not to replace
the assessor.
To make the assessment
institutional.

A skilled security consultant brings twenty years of experience, pattern recognition across dozens of markets, and a professional judgement that cannot be replicated by a software platform. VIGIL does not attempt to replace that.

What VIGIL does is make the consultant's expertise reproducible. When a finding is produced through VIGIL's methodology — anchor statements matched to evidence, scores generated by the framework, sources rated for quality before they reach the assessment — the finding belongs to the methodology, not to the individual.

The assessor changes. The methodology does not. The finding holds.

Because capital decisions deserve findings, not opinions

A $400M data centre commitment, a critical infrastructure expansion, a 20-year logistics lease — these decisions are made once. The assessment that supports them must be able to withstand scrutiny for the life of the asset, not just the week the report was delivered.

Because the environment never stops changing

A site suitable in 2022 may not be suitable in 2027. Climate trajectories shift. Threat actors adapt. Infrastructure ages. Urban boundaries expand. An assessment methodology that does not account for the lifecycle of the site is not an assessment of the site — it is a snapshot of a moment.

Because the audit question always comes

Every significant decision is eventually audited — by a board, by an insurer, by a regulator, by an acquirer's legal team. The question is always the same: how do you know? VIGIL makes that question answerable. Not with a report. With a traceable, reproducible, evidence-backed finding.

Because no other platform was built for this

Risk monitoring platforms watch the environment. Threat intelligence platforms aggregate data. Consulting firms produce reports. No platform before VIGIL combined structured assessment methodology, confidence scoring, lifecycle continuity, and trajectory analysis into a single, reproducible finding engine.

What VIGIL is

A decision engine.
Not a dashboard.

VIGIL is not a monitoring platform. It is not a threat feed. It is not a risk register tool. It is a decision engine — built to take a site, a mission, and a body of evidence, and produce a finding that can be defended in any room.

Intelligence

The world
around the site.

400+ sources across 85 cities. Country risk, regional intelligence, neighbourhood data, environmental hazards, conflict events, geopolitical indices. Every source rated for authority, recency, coverage, and bias before it reaches the assessment engine. Intelligence scored for reliability — not just collected.

Assessment

The site
against its mission.

114 indicators across 6 domains. Mission-specific weights. Anchor statements at five levels — the assessor selects, the framework scores. Greenfield MSA for sites under consideration. Brownfield TVRA for operating facilities. The same evidence standard regardless of who runs it.

Confidence

How much to
trust the verdict.

The Mission Confidence Index scores the quality of intelligence behind every MSI verdict. Source authority, recency, coverage, verification, completeness — all scored separately. A finding with MCI 34 is a provisional conclusion. A finding with MCI 91 is a verified one. The difference is always explicit.

Trajectory

Where the environment
is heading.

The Mission Risk Index assesses the 20-year trajectory of the risk environment — not its current state. Threat trajectory, resilience erosion, dependency concentration, strategic stability. Four components. One trajectory band. The question a 20-year lease requires answered.

One of a kind

Why nothing else
does what VIGIL does.

These are not feature claims. They are structural capabilities that do not exist in any other security assessment platform — and the reason they matter to every capital decision made on the basis of a site assessment.

01

The assessor selects.
The framework scores.

In every other assessment methodology — digital or manual — the assessor assigns a score based on professional judgement. In VIGIL, the assessor selects the evidence-backed anchor statement that matches the observed condition. The framework converts that selection into a score. Two assessors, same site, same evidence: same result. This does not exist elsewhere. It is the foundational capability that makes everything else defensible.
02

The verdict scores
its own confidence.

Every other platform produces a score. VIGIL produces a score and a confidence level in that score. The Mission Confidence Index measures source authority, recency, geographic coverage, independent verification, and data completeness — and produces a separate index that tells the buyer how much to trust the MSI verdict. No other platform in the security assessment market does this. The MCI does not exist elsewhere. It was built by VIGIL because no one else built it.
03

Assessment is an event.
The site is permanent.

Every other platform treats assessment as a deliverable — a report produced at a point in time, delivered, and closed. VIGIL treats the site as the permanent object and every assessment as an event in its lifecycle. The same site, the same methodology, the same evidence standard — from greenfield evaluation through construction monitoring through operational TVRA through portfolio expansion through reassessment. A 20-year asset requires a 20-year assessment platform. VIGIL is the only one designed for that.
Built by ARRC Global

Decades of practice. Codified.

Anshin Risk & Resilience Consulting (branded as ARRC Global) is a specialist consulting practice operating at the intersection of risk, resilience, sustainability, and the built environment across the Middle East, South Asia, Southeast Asia, Africa, and Europe. Through assessments, reviews, and advisory engagements spanning critical infrastructure, healthcare, education, logistics, commercial real estate, industrial facilities, and assets of national importance, ARRC’s practitioners have helped investors, developers, operators, and public-sector organisations understand the conditions that influence asset viability, operational resilience, and long-term performance.

VIGIL is the codification of that practice. Every indicator, anchor statement, and weighting decision within the platform is rooted in operational experience and tested against published standards, industry research, and structured expert review. The methodology was forged through repeated application across diverse geographies, sectors, operating environments, and asset classes, and the recurring challenges faced by those responsible for planning, developing, operating, and protecting such assets.

VIGIL is ARRC’s answer to a question the industry has struggled to address: how can complex assessments be made consistent, transparent, defensible, and repeatable throughout the life of an asset? By transforming practitioner knowledge into a structured assessment framework, VIGIL enables organisations to make decisions that are not only informed today, but capable of standing scrutiny tomorrow.

Organisation
ARRC Global — Security & Resilience Consultancy
Operating since
1994 · Thirty years of field practice
Geographies
Middle East · South Asia · Southeast Asia · Africa · Europe
Sectors served
Data Centres · Critical Infrastructure · Commercial · Supply Chain · Hospitality · Government
VIGIL methodology
114 indicators · 6 domains · 21 categories · MSI + MCI + MRI
Platform status
Operational · Active development · Available for demonstration

Trustworthy judgement.
Structured as a standard.

VIGIL does not replace what skilled practitioners know. It makes what they know reproducible, auditable, and defensible — across every site, every mission, and every decision that follows from them.