A private military company (PMC), also known as a private military contractor or security contractor, is a private company that provides military and security services to governments, non-governmental organizations (NGOs), and other clients.

PMCs are distinct from traditional military forces, as they operate on a for-profit basis and are not part of a nation’s armed forces.

Can You Start a PMC Without Military Experience?

Yes, you can start a private military company in the United States without military experience as an investor, or partner with someone who has the required military experience, and exposure and not as an active player in the business.

This is because the sensitive nature of the business, and the fact that securing the needed licenses, permits, and in some cases, security clearance to operate in a private military company requires some level of experience in the military.

Steps on How to Start a Private Military Company

1. Conduct Market Research

Do not begin by recruiting hundreds of security personnel. Begin with customers.

Ask what organizations in your target market are already purchasing. Potential clients may need:

• Facility-security assessments
• Travel-security programs
• Executive protection management
• Security operations centers
• Crisis-management planning
• Remote workforce protection
• Industrial-site security
• Infrastructure security
• Humanitarian field-security support
• Corporate investigations
• Security training
• Government security-support contracts.

Talk to corporate security directors, procurement professionals, risk managers, insurance brokers, infrastructure operators, logistics companies, NGOs, and government-contracting specialists.

Find out:

• Which services they outsource
• Typical contract duration
• Insurance requirements
• Required certifications
• Personnel-vetting standards
• Reporting requirements
• Experience requirements
• Geographic restrictions
• Human-rights and compliance requirements.

You should also determine whether customers want a security company that physically provides personnel or a risk-management company that primarily manages subcontractors and security programs. The second model can require substantially less startup capital.

a. Who is the Target Market?

Your potential clients can include:

• Government agencies
• Government contractors
• Mining companies
• Energy companies
• Oil and gas companies
• Construction companies
• Shipping and logistics companies
• Telecommunications companies
• Hotels and resorts
• International NGOs
• Humanitarian organizations
• Financial institutions
• Technology companies
• Manufacturers
• High-net-worth individuals
• International businesses with traveling employees.

b. Is a Private Security and Risk Company Profitable?

Yes, but this can be a low-margin business if you simply supply personnel and compete primarily on price.

The more attractive margins often come from specialized expertise. For example, compare these two contracts: A client hires 40 security personnel through your company.

You have to pay salaries, benefits, insurance, supervisors, training, administration, transportation, and compliance costs. Revenue may be substantial, but so are expenses.

Another client pays your company $100,000 to conduct security-risk assessments and develop a multi-location security-management program using a small senior consulting team.

The second contract can potentially produce a much stronger margin. This is why a diversified company may combine personnel-intensive services with:

• Consulting
• Security assessments
• Training
• Program management
• Protective intelligence
• Crisis planning.

Profitability depends on:

• Contract pricing
• Personnel utilization
• Insurance
• Compliance costs
• Travel and logistics
• Employee turnover
• Training expenses
• Subcontractor costs
• Government payment cycles
• Client concentration.

c. What Niches Exist?

You can specialize in:

• Corporate security consulting
• Critical-infrastructure security
• Energy-sector security
• Mining security management
• Maritime-security management
• Executive protection management
• Travel-risk management
• Humanitarian security
• Government contracting
• Security training
• Protective intelligence
• Crisis management
• Security operations centers
• Remote-site security
• Security compliance auditing
• Security logistics.

A beginner should resist the temptation to claim expertise in all of these areas. Start with the services your management team can genuinely deliver.

d. Who are the Major Competitors?

Depending on your niche, competitors may include global security companies, defense-support contractors, specialist risk consultancies, executive-protection firms, government contractors, and large guarding companies.

Examples of companies operating in overlapping areas include organizations such as:

• GardaWorld
• Constellis
• Control Risks
• Allied Universal
• Securitas
• Regional specialist security contractors.

You do not necessarily need to compete with a multinational company immediately.

You may begin by subcontracting, serving a specialized industry, operating in one region, or providing services that larger companies prefer to outsource.

e. What Laws and Regulations Apply?

This is one of the most important sections of the business. Your requirements can include:

• Private security company licensing
• Individual security-guard licensing
• Corporate registration
• Government-contractor registration
• Export-control compliance
• Import/export authorizations
• Immigration and work permits
• Insurance requirements
• Data-protection laws
• Anti-bribery laws
• Sanctions compliance
• Human-rights requirements
• Host-country security laws.

If you operate internationally, you need competent legal counsel familiar with both your home jurisdiction and the country where the contract will be performed.

Do not assume that a license issued in one country authorizes security services somewhere else.

If your company provides services that legally qualify as defense services, military training, technical assistance, or other controlled activity, additional government authorization may be required. Get legal advice before signing the contract—not after deployment.

f. What International Standards Matter?

Professional companies should consider recognized security-management and human-rights frameworks. Relevant benchmarks can include:

• ISO 18788 security operations management principles
• International Code of Conduct for Private Security Service Providers
• Montreux Document good practices
• Client-specific human-rights standards
• Government-contracting standards.

Certification is not simply something to place on your website. Large corporations, governments, NGOs, insurers, and international organizations may use certifications and management standards when evaluating vendors.

g. Is There a Franchise?

Traditional private military and international security companies rarely operate through conventional franchise systems. The industry relies more heavily on:

• Government contracts
• Corporate contracts
• Joint ventures
• Subcontracting
• Regional partnerships
• Approved-vendor relationships.

A more realistic entry strategy may be to become a subcontractor to a larger security organization before attempting to win major prime contracts yourself.

h. What Do You Need to Start?

• Experienced management team
• Corporate entity
• Specialized legal counsel
• Security-company licenses
• Insurance
• Bonding where required
• Compliance program
• Personnel-vetting procedures
• Human-rights policy
• Code of conduct
• Incident-reporting system
• Secure communications
• Secure IT systems
• Training program
• Client contracts
• Subcontractor-management procedures
• Working capital.

2. Choose a Memorable Business Name

Your brand should sound professional rather than aggressive. Corporate and government customers are more likely to take a company called “Global Risk Solutions” seriously than one with a name designed to sound like a combat unit.

Some ideas include:

• Meridian Global Security, Inc.
• Sentinel Risk Solutions, Inc.
• Aegis Meridian Security, Inc.
• Frontier Risk Management, Inc.
• Atlas Protective Services, Inc.
• Global Shield Risk Solutions, Inc.
• Vanguard Security Group, Inc.
• IronGate Risk Management, Inc.
• Strategic Guardian Services, Inc.
• Praetorian Risk Solutions, Inc.
• Northstar Security Group, Inc.
• Fortress Global Risk, Inc.
• Horizon Protective Services, Inc.
• Sentinel International Risk, Inc.
• Guardian Field Services, Inc.
• Strategic Shield Security, Inc.
• Atlas Global Protection, Inc.
• Meridian Risk & Security, Inc.
• Frontier Protective Solutions, Inc.
• Global Sentinel Group, Inc.

Check corporate and trademark records before adopting any name.

3. Register Your Business

a. What Business Structure is Best?

A smaller security consultancy may begin as an LLC. A larger international company seeking government contracts, investors, multiple subsidiaries, or operations in several countries may find a corporation more suitable.

The structure should be selected with legal and tax advice because international operations can become complicated quickly.

b. Basic Registration Steps

• Select the corporate structure
• Register the business
• Obtain an EIN
• Open corporate banking accounts
• Create governance documents
• Register for applicable taxes
• Apply for security-company licenses
• Complete government-contractor registration where applicable
• Purchase insurance
• Create compliance policies
• Establish accounting controls.

c. What Licenses May Be Required?

Depending on your services and jurisdiction:

• Private security company license
• Security agency license
• Individual personnel licenses
• Investigation licenses where applicable
• Government-contractor registrations
• Export-control registrations or authorizations where applicable
• Local operating permits
• Foreign-company registration
• Work permits and visas.

The company should maintain a licensing matrix showing exactly which entity and employee is authorized to perform which service in each jurisdiction.

d. Useful Certifications and Standards

Depending on your target clients, useful credentials may include:

• ISO 18788
• ISO 9001
• ISO 27001 for information-security systems
• ICoCA membership or certification where appropriate
• Recognized security-management qualifications
• First aid and emergency-care certifications
• Government-required training credentials.

e. Documents You Need

• Formation documents
• Business licenses
• Insurance certificates
• Client contracts
• Employee contracts
• Subcontractor agreements
• Background-check records
• Training records
• Code of conduct
• Human-rights policy
• Anti-bribery policy
• Sanctions-screening procedures
• Incident-reporting procedures
• Whistleblower policy
• Privacy policy
• Data-security procedures
• Emergency-response plans
• Travel-risk procedures
• Insurance records
• Contract-performance reports.

f. What Insurance Should You Carry?

This is not a business where you should purchase the cheapest insurance policy available online. Coverage can include:

• General liability
• Professional liability
• Workers’ compensation
• Employer liability
• Commercial auto
• Cyber liability
• Kidnap and ransom coverage where appropriate
• Foreign voluntary workers’ compensation
• Defense Base Act coverage where legally required
• Political-risk or specialist international coverage where appropriate.

Your client may specify minimum coverage limits before allowing you to bid.

4. Cost Analysis and Budgeting

a. How Much Does It Cost to Start?

The cost varies enormously according to whether you are primarily a consulting firm or a multinational company managing large security contracts.

For planning purposes:

• Small domestic advisory/security firm: approximately $75,000 – $250,000
• Medium regional/international security company: approximately $400,000 – $1.5 million
• Large multi-country operation: approximately $2 million – $10 million+.

For this guide, we will use:

• Small: $150,000
• Medium: $750,000
• Large: $3 million.

b. Small Operation – Approximately $150,000

• Insurance and bonding – $30,000
• Legal and compliance – $25,000
• Recruiting, screening, and training – $20,000
• Secure IT and communications – $15,000
• Business development – $20,000
• Office and administrative equipment – $10,000
• Working capital – $30,000
• Total – $150,000.

c. Medium Security and Risk Company – Approximately $750,000

• Insurance and bonding – $150,000
• Legal, licensing, and compliance – $100,000
• Recruiting and personnel vetting – $100,000
• Working-capital reserve – $100,000
• Vehicles and field logistics – $90,000
• Secure communications, IT, and office systems – $80,000
• Training and certifications – $70,000
• Business development and tendering – $60,000
• Total – $750,000.

d. Large Multi-Country Operation – Approximately $3 Million

• Insurance and bonding – $500,000
• Legal, licensing, and international compliance – $300,000
• Recruitment and vetting – $400,000
• Vehicles and field logistics – $500,000
• Secure IT and communications infrastructure – $300,000
• Training and certification – $250,000
• Regional office setup – $250,000
• Business development – $150,000
• Working capital – $350,000
• Total – $3,000,000.

e. What Determines Startup Cost?

• Countries of operation
• Number of employees
• Insurance limits
• Contract requirements
• Vetting requirements
• Travel
• Vehicles
• Technology
• Certification
• Government-contracting requirements
• Working capital.

f. Why is Working Capital So Important?

Large clients may pay invoices 30, 60, or even 90 days after submission. Your employees still expect to be paid every payroll cycle.

Suppose a contract requires $250,000 of monthly payroll and operating expenses.

If your customer pays after 60 days, you may need several hundred thousand dollars available before the first substantial payment arrives. A profitable contract can still bankrupt an undercapitalized company.

g. What are the Ongoing Expenses?

• Payroll
• Contract personnel
• Insurance
• Training
• Background checks
• Travel
• Accommodation
• Vehicles and transport
• Communications
• Cybersecurity
• Legal fees
• Licensing
• Office operations
• Recruitment
• Business development
• Accounting
• Compliance audits.

5. Write a Business Plan

a. Executive Summary

Aegis Meridian Security & Risk, Inc. is a proposed private security and international risk-management company based in Virginia.

The company will provide lawful security-management, risk-consulting, protective-support, crisis-management, training, and security-logistics services to corporate, government, infrastructure, and NGO clients.

Aegis Meridian will begin with approximately $750,000 in startup capital. The company will initially focus on:

• Corporate security assessments
• Infrastructure security programs
• Executive protection management
• Travel-risk management
• Crisis planning
• Security training
• Government subcontracting.

Services requiring specialized government authorization will not be provided until all necessary registrations, licenses, approvals, insurance, and legal controls are in place.

The company’s competitive strategy will focus on compliance, experienced management, properly vetted personnel, strong reporting, transparent contracts, responsible conduct, and dependable client service.

b. Mission Statement

“At Aegis Meridian Security & Risk, Inc., our mission is to help organizations protect their people, operations, facilities, and reputation through professional security management, responsible risk reduction, lawful operations, accountable personnel, and disciplined compliance.”

c. Vision Statement

“Our vision is to build Aegis Meridian into a trusted international security and risk-management company recognized for professionalism, accountability, human-rights compliance, strong governance, and dependable performance in complex environments.”

d. Goals and Objectives

The company will track:

• Contract revenue
• Gross margin by contract
• Revenue per deployed employee
• Employee turnover
• Training completion
• Incident frequency
• Client retention
• Proposal win rate
• Insurance claims
• Audit findings
• Payment collection time.

A major objective will be to avoid dependence on a single government or corporate customer. Losing one contract should not destroy the company.

e. Organizational Structure

• Board of Directors
• Chief Executive Officer
• Chief Operating Officer
• General Counsel/Compliance Director
• Director of Security Operations
• Director of Risk Consulting
• Human Resources and Vetting Manager
• Training Manager
• Information Security Manager
• Business Development Director
• Finance Director
• Project Managers
• Security Personnel
• Risk Analysts
• Administrative Support.

Marketing Plan

a. SWOT Analysis

Strengths

Specialized security expertise can command premium professional fees. Long-term contracts can also produce recurring revenue.

Weaknesses

Insurance, vetting, training, and compliance costs can be substantial. The company may also need significant working capital before customers pay invoices.

Opportunities

Opportunities include:

• Critical infrastructure
• Energy
• Mining
• Corporate travel security
• Government subcontracting
• NGO security
• Cyber-physical risk integration
• Security training
• Protective intelligence.

Threats

Threats include:

• Regulatory violations
• Loss of licenses
• Employee misconduct
• Human-rights allegations
• Political instability
• Contract cancellation
• Insurance claims
• Sanctions
• Late government payments
• Reputational damage.

b. How Does the Company Make Money?

• Security-management contracts
• Corporate security programs
• Risk assessments
• Protective-service management
• Travel-risk retainers
• Crisis-management retainers
• Training contracts
• Security audits
• Government contracts
• Government subcontracts
• NGO contracts
• Security program management.

c. Sales Strategies

This industry is relationship driven. Potential strategies include:

• Government tendering
• Prime-contractor subcontracting
• Corporate procurement registration
• Energy-industry conferences
• Mining-industry relationships
• Insurance-broker referrals
• Risk-management partnerships
• NGO procurement networks
• Thought-leadership reports
• Executive security briefings
• Referral relationships with law firms and consultants.

Do not market your company with aggressive imagery suggesting uncontrolled force.

Serious clients care about reliability, governance, compliance, documentation, and accountability.

Financial Projection

a. How Should Contracts Be Priced?

Calculate each contract independently. A useful formula is:

Contract Price = Direct Personnel Cost + Insurance Allocation + Travel/Logistics + Management + Compliance + Administration + Contingency + Desired Profit.

Do not simply take employee wages and add 20%. Security contracts can contain large hidden costs.

b. Five-Year Revenue and Profit Projection

Cumulative five-year revenue under this model would be approximately $14 million. Cumulative projected net profit would be approximately $1.636 million.

c. Sample Five-Year Profit and Loss Projection

d. What Determines Profit?

• Contract value
• Personnel costs
• Insurance
• Personnel utilization
• Travel and logistics
• Client payment speed
• Compliance costs
• Subcontractor pricing
• Employee turnover
• Percentage of consulting revenue
• Contract renewal rates.

e. What is the Profit Margin?

The illustrative model begins with approximately a 7% net margin and grows toward approximately 14%.

The improvement assumes the company gradually shifts toward higher-value consulting, training, program-management, and specialist contracts while improving administrative efficiency.

6. Set Up Your Office and Operations Infrastructure

You do not need an intimidating headquarters. You need a professional and secure one. Your headquarters may include:

• Executive offices
• Operations room
• Secure communications
• Training room
• Human-resources and vetting office
• Compliance department
• IT/security systems
• Document storage
• Meeting rooms.

Location should be driven by clients, qualified labor, airport access, government-contracting opportunities, insurance availability, and licensing—not appearances.

Protect Your Information

Security companies can hold sensitive information about:

• Executive travel
• Corporate facilities
• Security weaknesses
• Employee identities
• Government contracts
• Incident reports.

Cybersecurity therefore needs to be part of the business from the beginning.

7. Hire and Vet Employees

Do not recruit people simply because they have military or law-enforcement backgrounds.

Past experience can be valuable, but your company needs people who can also follow corporate policies, local law, client procedures, reporting requirements, and professional conduct standards.

Your vetting process can include:

• Identity verification
• Employment history
• Qualification verification
• Criminal background screening where lawful
• Reference checks
• Driving records where relevant
• Sanctions screening
• License verification
• Medical fitness where job-related and lawful.

Employees should also receive training on:

• Company code of conduct
• Human rights
• Anti-bribery rules
• Use-of-force law and company policy
• Incident reporting
• Data protection
• Client confidentiality
• Emergency procedures
• First aid appropriate to their role.

The purpose of training is professional judgment and lawful conduct—not creating personnel who act independently of the rules.

8. Launch the Business Properly

Do not make your first contract a massive overseas project simply because somebody offers you the opportunity.

Start with contracts your management team can control. A sensible progression may look like:

• Security assessments
• Corporate consulting
• Training and policy development
• Domestic protective-security management
• Government subcontracting
• Regional international work
• Larger prime contracts.

a. What Makes the Business Successful?

• Compliance – Never treat legal requirements as paperwork.
• Management quality – Clients are buying judgment.
• Personnel vetting – One unsuitable employee can damage the entire company.
• Insurance – High-consequence risks require serious coverage.
• Human-rights controls – Responsible conduct matters operationally and commercially.
• Strong contracts – Clearly define scope and responsibility.
• Working capital – Large contracts can consume cash before payment arrives.
• Reporting – Government and corporate customers expect documentation.
• Client diversification – Do not depend entirely on one contract.
• Reputation – Trust may be your most valuable asset.

b. What Happens During a Typical Day?

The operations team may begin the morning reviewing all active contracts. Managers check staffing, incidents, travel changes, client instructions, and outstanding reports.

The compliance department reviews licenses and upcoming renewals. Human resources conducts background checks on prospective employees.

A risk consultant prepares a security assessment for an energy company opening a new regional office.

The business-development team works on a government subcontract proposal. The finance team checks invoices and contract receivables.

One project manager holds a video conference with a client whose employees are traveling internationally and need updated risk guidance.

The training department prepares an upcoming compliance and emergency-management course. At the end of the day, senior management reviews:

• Active contracts
• Incidents
• Personnel status
• Client concerns
• Cash flow
• Compliance issues
• Upcoming proposals.

c. What Skills Do You Need?

• Security management
• Risk assessment
• Corporate governance
• Contract management
• Compliance
• Human resources
• Financial management
• Government procurement
• International business
• Crisis management
• Client communication.

You do not need to personally have every skill. But your leadership team does.

If you have never managed professional security operations before, your first investment should be experienced leadership rather than expensive equipment.

• Hire people who understand licensing.
• Hire experienced compliance counsel.
• Develop responsible policies.
• Build a strong vetting system.
• Understand insurance.
• Learn government procurement.
• Win smaller contracts.
• Document performance.
• Then scale.

The companies that survive in this industry are not necessarily the ones that look the most military.

They are the companies that clients trust to manage high-consequence risk professionally, lawfully, predictably, and responsibly.

If you build the company around compliance, disciplined management, properly vetted personnel, excellent reporting, strong insurance, reliable financial controls, and services you are legally authorized and genuinely qualified to provide, you can develop a serious private security and risk-management business without attempting to operate as an uncontrolled private army.