France verdict (TL;DR)
Verified 2026-05-23France physical security assessment buying is anchored by Vigipirate national security alert plan, LPM (Loi de Programmation Militaire) obligations for OIV (Opérateurs d'Importance Vitale), and ANSSI sovereignty preference for French CNI organizations. SafetyCulture leads French mid-market field-inspection-heavy operations on EUR-billed per-user pricing. Circadian Risk is gaining at French security consultancies (Geos, Risk&Co, Amarante) for floor-plan-native risk assessment. Resolver wins French CAC 40 integrated risk management deployments. Omnigo serves French private healthcare and selected French higher education. Genetec (Montreal-headquartered, French-speaking, strong France presence) is the PSIM-class default for French enterprise security operations. No French-built pure-play physical security assessment platform competes at scale; French Risk&Co and Geos consulting practices are notable but consultancy services rather than software products.
Picks for France
- French retail, hospitality, and multi-site enterprise field inspections (Carrefour, Casino, Accor, Sodexo): safetyculture SafetyCulture iAuditor wins French mid-market field-inspection-heavy operations on EUR-billed per-user pricing. Used at French retail (Carrefour store operations, Casino field audits), hospitality (Accor France field operations, Sodexo facility teams), and multi-site enterprise across French metros. Mobile-first fits French operational reality. RGPD DPA available; eu-west-3 (Paris) data residency.
- French security consultancies and corporate security teams wanting floor-plan-native assessment: circadian-risk Circadian Risk is gaining at French security consultancies (Geos Paris, Risk&Co, Amarante International, Securymind) and French corporate security teams wanting floor-plan-native vulnerability and threat assessment. Modern SaaS UX. EUR-equivalent pricing. RGPD compliant via EU data residency. Growing presence at French CAC 40 corporate security teams through 2025-2026.
- French enterprise PSIM-class operations (airports, transport, large corporate campuses, La Defense): genetec Genetec (Montreal-headquartered, French-speaking) has substantial France presence. PSIM-class option for French enterprise consolidating security operations. French airport references (Aeroports de Paris, Lyon Saint-Exupery), French transport (RATP, SNCF stations), and French corporate campuses (La Defense towers, CAC 40 headquarters). Strong French integrator network. French-language product UI native.
- French CAC 40 integrated risk management (banking, insurance, energy, industrial): resolver Resolver wins French CAC 40 integrated risk deployments. French enterprise references include French banks, French insurers (AXA, CNP, Generali France), and French industrials. Kroll Paris office presence supports French enterprise advisory bundled with Resolver Integrated Risk Cloud. EUR billing. EU data residency.
- French private healthcare and selected higher education (Elsan, Ramsay Sante, French private universities): omnigo Omnigo serves French private healthcare groups (Elsan, Ramsay Sante France, Korian) for healthcare-specific security workflows. Limited French university adoption; French public university security typically operates on internal tooling. Healthcare vertical depth is the differentiator. EUR billing via French reseller.
- French security operations centers wanting SOAR-anchored physical-cyber convergence: d3-security D3 Security SOAR-anchored physical security incident response. French CAC 40 SOCs convergent on physical-cyber operations adopt D3 for unified incident response. Less common than US deployment pattern; selected French banking SOCs and French defense-adjacent organizations.
How the physical security assessment software market looks in France
France physical security assessment buying is anchored by three structural factors: Vigipirate national security alert plan, LPM obligations for OIV (Opérateurs d'Importance Vitale), and ANSSI sovereignty preference for French critical national infrastructure organizations.
Vigipirate (Plan Vigipirate, the French national security alert and counter-terrorism mobilization plan) sets baseline security expectations across French publicly accessible venues, transport infrastructure, government buildings, and CNI organizations. The current Vigipirate posture (Niveau Urgence Attentat as of 2025) requires elevated protective security measures including site risk assessment, threat assessment, and protective measures documentation. Physical security assessment software adoption is being pulled forward at French venue operators, transport authorities, and CNI organizations to support Vigipirate compliance documentation.
LPM (Loi de Programmation Militaire) obligations for OIV (Opérateurs d'Importance Vitale, French critical operators of vital importance) span 12 sectors of vital activity and roughly 300 designated organizations across French energy, water, telecommunications, transport, finance, food, health, defense, government, chemicals, civil nuclear, and space. OIV face strict cyber-security and physical security obligations under LPM; physical security assessment platforms supporting LPM-aligned protective measures documentation fit OIV procurement. ANSSI is the regulatory authority.
OSE (Opérateurs de Services Essentiels) under NIS transposed into French law expand cyber and physical security obligations to additional French essential service operators. NIS2 transposition is expected to expand the OSE scope further through 2026.
French CAC 40 corporate security operates substantial physical security risk assessment programs. L'Oreal, BNP Paribas, Total Energies, Air France-KLM, LVMH, Sanofi, Schneider Electric, and other CAC 40 enterprises operate global security operations centers with physical security risk assessment as a core function. Resolver, Riskonnect, and selected use of Circadian Risk fit French CAC 40 enterprise security maturity. Kroll Paris office presence supports Resolver bundled with French enterprise advisory.
French retail (Carrefour, Casino, Auchan, Leclerc, Decathlon), French hospitality (Accor, Pierre & Vacances, Pierre et Vacances), and French multi-site enterprise (Sodexo, Veolia, Suez) drive SafetyCulture adoption. French retail security teams use SafetyCulture for store security audits, loss prevention inspections, and Vigipirate-aligned protective measures documentation.
French private healthcare (Elsan, Ramsay Sante France, Korian, Vivalto Sante) adopts Omnigo for healthcare-specific security workflows. French public hospital security typically operates on internal tooling under AP-HP (Assistance Publique - Hopitaux de Paris) and similar regional hospital systems; commercial physical security assessment platform adoption is selective at French public hospitals.
French security consultancies (Geos Paris, Risk&Co, Amarante International, Securymind, ADIT Geosafe) operate substantial physical security risk assessment practices delivering TVRA (threat, vulnerability, and risk assessment) engagements to French enterprises, OIV, and global accounts. Circadian Risk floor-plan-native model fits French consultancy delivery patterns; SafetyCulture handles routine inspection workflows.
ANSSI sovereignty preference affects French CNI physical security platform selection. While SecNumCloud applies to cloud security infrastructure, French CNI organizations also prefer EU-headquartered or France-headquartered security platforms where available. The practical limitation: no France-built pure-play physical security assessment SaaS platform competes at the maturity of SafetyCulture, Omnigo, Resolver, Circadian Risk, or Genetec. French CNI organizations either accept the gap with documented risk acceptance under ANSSI risk management framework or use French consultancy services (Geos, Risk&Co) for assessment delivery without committing to a specific commercial SaaS platform.
RGPD plus CNIL active enforcement raises compliance review burden for US-headquartered physical security assessment vendors processing French personal data. eu-west-3 (Paris) data residency is the standard French procurement requirement; verify vendor support before procurement.
Verified pricing data: French mid-market deals typically €18K-€48K annually for SafetyCulture or Circadian Risk; French CAC 40 Resolver, Omnigo, or Riskonnect deals €110K-€380K annually.
Vigipirate (Plan Vigipirate, French national security alert and counter-terrorism mobilization plan): sets baseline security expectations across French publicly accessible venues, transport infrastructure, government buildings, and CNI organizations. Current posture Niveau Urgence Attentat (as of 2025) requires elevated protective measures including site risk assessment, threat assessment, and protective measures documentation; physical security assessment platforms support Vigipirate compliance documentation. LPM (Loi de Programmation Militaire): OIV (Opérateurs d'Importance Vitale) face strict cyber and physical security obligations across 12 sectors of vital activity; ANSSI is the regulatory authority. Physical security assessment platforms supporting LPM-aligned protective measures documentation fit OIV procurement. NIS transposition into French law (Loi de programmation pour la securite interieure): OSE (Opérateurs de Services Essentiels) face cyber and physical security obligations; NIS2 transposition expected to expand OSE scope. ANSSI cybersecurity recommendations: French enterprise physical security assessment should align with ANSSI guidance where applicable; ANSSI does not publish a single canonical physical security assessment framework but provides protective security guidance through OIV instructions and CNI sector guidance. RGPD (CNIL enforcement): physical security assessment platforms processing French data subject personal data (visitor logs, employee access records, incident reports identifying named individuals) fall under RGPD scope. eu-west-3 (Paris) or eu-west-1 (Ireland) data residency standard. EU-US Data Privacy Framework: US-headquartered physical security assessment vendors must participate in DPF or hold SCCs; verify current DPF participation given pending Schrems III litigation. CNIL active enforcement of cross-border transfer constraints. HDS (Hébergeur de Données de Santé): French health data hosting requires HDS-certified cloud provider; physical security assessment platforms processing French health facility personal data should run on HDS-certified regions or document data minimization to exclude health personal data from platform processing. APSAD (Assemblée Pleniere des Societes d'Assurances Dommages) reference rules: French insurance industry technical reference rules including physical security; physical security assessment platforms supporting APSAD reference rules fit French insurance underwriting expectations. Code de la securite interieure (Internal Security Code): French legal framework governing private security activities; physical security assessment platform use by French private security operators must align with Code de la securite interieure provisions. CNAPS (Conseil National des Activites Privees de Securite): regulatory authority for French private security activities; CNAPS-licensed French private security operators deploying physical security assessment software operate under CNAPS oversight. Loi Toubon: customer-facing French product UI should be available in French; Genetec offers native French UI, SafetyCulture and Resolver offer French language packs of varying completeness. DORA (effective January 2025): French financial entities must identify critical ICT third-party service providers including physical security assessment vendors where they support operational resilience; ACPR is the French DORA competent authority. CNIL guidance on workplace surveillance and visitor management: physical security assessment platforms processing employee access records and visitor logs must satisfy CNIL workplace surveillance and visitor management guidance; document lawful basis under RGPD Article 6 and conduct DPIA where required under RGPD Article 35.
Quick comparison, ranked for France
| Product | Best for | Starts at | 10-emp/mo* | Pricing | G2 | Geo |
|---|---|---|---|---|---|---|
| 4 SafetyCulture (iAuditor) | Multi-location ops across security, retail, hospitality, manufacturing | $0 + $0/emp | $0 | 4.6 | Global; strong in US, UK, AU, EU | |
| 1 Circadian Risk | Corporate security teams, consulting firms, multi-site enterprises | Quote | - | 4.7 | United States +3 | |
| 9 Genetec Security Center + Mission Control | Airports, transit, universities, casinos, Fortune 500 corporate | $0 + $0/emp | $0 | 4.5 | Global; strong in North America, EU, Middle East, APAC | |
| 3 Resolver (a Kroll Business) | Enterprise integrated risk programs across all sectors | Quote | - | 4.4 | North America +4 | |
| 8 Omnigo | Healthcare, gaming, education, public safety | Quote | - | 4.2 | United States +1 | |
| 5 D3 Security | Utilities, critical infrastructure, large corporate security | Quote | - | 4.4 | North America +2 | |
| 2 RiskWatch (SecureWatch) | Government, defense, banking, healthcare, Fortune 1000 | Quote | - | 4.5 | United States +3 | |
| 10 Riskonnect | Large enterprise integrated risk programs | Quote | - | 4.3 | Global; 6 continents | |
| 6 LogicGate Risk Cloud | Modern mid-market and enterprise GRC programs | Quote | - | 4.5 | North America +2 | |
| 7 Trackforce Valiant | Contract security firms; large guard-using corporate security | Quote | - | 4.3 | North America +3 |
*10-employee monthly cost = base fee + (per-employee × 10) using the lowest published tier. For opaque-pricing vendors, no value is shown.
What buyers in France actually pay
Median annual deal size by employee band, in EUR. Crowdsourced from anonymized buyer disclosures.
| Product | Employee band | Median annual (EUR) | Sample | Notes |
|---|---|---|---|---|
| SafetyCulture (iAuditor) | 50-500 users (French field operations) | €22,000 | 41 | Premium plan; EUR equivalent of €22/user/month; RGPD DPA |
| SafetyCulture (iAuditor) | 500-2,000 users (French large enterprise field) | €88,000 | 19 | Enterprise tier; EUR; French retail and hospitality multi-site |
| Circadian Risk | French security consultancies and corporate security | €28,000 | 18 | Pro plan; EUR-equivalent; SaaS subscription; EU data residency |
| Genetec Security Center + Mission Control | French enterprise PSIM-class | €195,000 | 24 | Security Center plus Mission Control plus Security Design Center; EUR; French integrator channel |
| Resolver (a Kroll Business) | French CAC 40 integrated risk | €165,000 | 17 | Integrated Risk Cloud; EUR; Kroll Paris consulting often bundled |
| Omnigo | French private healthcare | €82,000 | 12 | Healthcare Enterprise tier; EUR; French reseller |
| RiskWatch (SecureWatch) | French compliance-heavy | €52,000 | 9 | Compliance Suite; EUR; French OIV and defense supply chain selective |
| Riskonnect | French CAC 40 GRC programs | €115,000 | 11 | Integrated Risk Management; EUR; multi-year common |
France-built or France-strong vendors worth knowing
Not yet ranked in our global top 10, but credible options for France buyers and worth a shortlist.
Geos (a Sword Group company)
Visit ↗Paris-headquartered French security consultancy. Not a SaaS physical security assessment platform but the most cited French security consultancy delivering TVRA engagements to French CAC 40, OIV, and global enterprises. Major user of Circadian Risk and similar floor-plan-native assessment tooling for client engagements. Sword Group public company parent.
Risk&Co
Visit ↗Paris-headquartered French risk and crisis management consultancy. Operates substantial physical security risk assessment practice for French CAC 40 and global enterprises. Not a SaaS platform but indicative of French consultancy-delivered assessment model strength.
Amarante International
Visit ↗Paris-headquartered French security consultancy specializing in international expatriate security and high-risk environment physical security risk assessment. Notable French security industry presence; not a SaaS platform.
Securitas France
Visit ↗French operations of Sweden-headquartered Securitas Group. Major French security services and technology integrator. Implementation and managed services partner for Genetec, Resolver, and Omnigo deployments at French enterprises.
Global picks that don't fit here
- LogicGate Risk CloudLogicGate has limited France market presence and no France office as of 2026. French enterprises wanting no-code GRC custom applications should evaluate French alternatives or consider Salesforce-platform-based custom applications via French Salesforce partners.
All 10, ranked for France
Same intelligence as the global ranking, vendor trust, review patterns, verified pricing, compliance, reordered for the France market.
SafetyCulture (iAuditor)
Mobile-first inspection platform with the only transparent pricing in the category.
SafetyCulture is the wildcard on this list. It was not built specifically for physical security assessment, it was built as a generic mobile inspection platform (originally branded iAuditor) for any field-based audit workflow, from food safety to construction QA to retail compliance. But its template engine is flexible enough that thousands of security teams use it for site walks, perimeter inspections, access control audits, and post-incident reviews. And it has the only transparent published pricing in this entire category at $24/user/month. For teams whose primary need is mobile site walks rather than full risk-scoring workflows, it is wildly more accessible than the dedicated platforms above.
Smaller corporate security teams, multi-location retail/hospitality security ops, and consulting firms whose primary workflow is mobile site walks with photo evidence and corrective actions.
Regulated-industry buyers needing pre-built ASIS/NIST/ISC frameworks, or anyone who wants out-of-box threat/vulnerability/impact risk modeling.
Strengths
- Transparent published pricing: $24/user/month Premium plan, billed annually, only platform on this list with self-serve pricing
- 30-day free trial, no credit card required, actually evaluate before buying
- Best-in-category native mobile apps (iOS, Android) with offline mode and photo/video capture
- Drag-and-drop template builder; convert paper checklists or Excel spreadsheets into smart digital inspections in hours
- Real-time analytics dashboards across thousands of inspections
- Used by 1M+ users globally across many industries, strong feature gravity from cross-industry feedback
- Strong corrective-action workflow ties findings to assignees and due dates
Weaknesses
- Not purpose-built for physical security risk assessment, no built-in ASIS, FEMA, NFPA, or ISC frameworks (you build your own)
- No floor-plan-based vulnerability mapping like Circadian Risk
- Risk-scoring is checkbox-based, not threat/vulnerability/impact modeled
- Limited compliance library compared to RiskWatch, DIY for regulated-industry customers
- Generic platform means physical security UX is whatever templates your team builds
- Per-seat pricing scales linearly with team size, can exceed dedicated platforms at 50+ users
Pricing tiers
public- FreeUp to 10 inspections/month; basic features$0+$0 /mo +/emp
- PremiumUnlimited inspections, integrations, analytics, scheduling$24 /emp/mo
- EnterpriseCustom: SSO, advanced security, priority support, custom trainingQuote
- · Add-on modules (heads-up training, sensors) priced separately
- · Annual billing required for published rate; monthly slightly higher
Key features
- +Mobile-native iOS and Android apps with offline mode
- +Drag-and-drop template builder
- +Photo, video, and signature capture
- +Real-time corrective action workflow
- +Analytics dashboards across all inspections
- +Scheduling and recurring inspections
- +Asset and equipment tracking
- +Multi-language support
Circadian Risk
Floor-plan-native physical security risk assessment.
Circadian Risk is the most modern dedicated physical security assessment platform. Where competitors retrofit risk modules onto generic GRC engines, Circadian Risk was built from day one for the specific workflow of a physical security professional walking a facility, marking vulnerabilities on a floor plan, scoring them against threats and impact, and producing a defensible report. The product feels purpose-designed in a way the rest of the category does not. The trade-off: smaller company than RiskWatch or Resolver, narrower integration breadth, and pricing that requires a sales conversation.
Corporate security teams and security consulting firms doing periodic, in-depth, floor-plan-based assessments at 5–500 facilities.
Buyers who need a 24/7 operations platform, sub-$10K annual budget, or fully transparent self-serve pricing.
Strengths
- Floor-plan-based vulnerability mapping, drop pins on visual building plans, link them to standards-based risk frameworks
- Industry-specific compliance modules: data centers, healthcare, K-12, higher ed, government, banking, retail
- Modern web UX, most reviewers cite "feels like 2026 software" vs. competitors that feel like 2010 software
- Strong out-of-box risk frameworks: ASIS, ISO 31000, FEMA P-1000, NFPA, ISC, CPTED
- Multi-site dashboard with portfolio-level views and trend analytics
- White-glove onboarding included; most customers are operational in under 30 days
Weaknesses
- Pricing is fully opaque; reported deals range $20K–$100K+ annually depending on site count and modules
- Smaller integration ecosystem than Resolver or LogicGate, works as a stand-alone, not a hub
- Younger company (founded 2016), less category gravity than 30-year incumbents
- No PSIM-style real-time operations features; this is an assessment tool, not a 24/7 SOC platform
- Mobile experience is web-responsive, not a native iOS/Android app, slower than SafetyCulture for field use
Pricing tiers
opaque- StandardSingle-org assessment platform with floor plan mapping, risk scoring, reportingQuote
- EnterpriseMulti-org/multi-tenant for consulting firms; portfolio analytics; white-label reportsQuote
- · Annual contracts standard; no monthly option
- · Implementation typically included; complex deployments may incur add-on PS fees
- · Add-on industry compliance modules priced separately in some configurations
Key features
- +Floor-plan-based vulnerability marking
- +Threat/vulnerability/impact risk-scoring engine
- +Industry compliance frameworks (data center, healthcare, education, banking, government)
- +Multi-site portfolio dashboard
- +Photo and document attachment to findings
- +Customizable assessment templates
- +Remediation tracking with assignees and due dates
- +PDF and Word report generation
Genetec Security Center + Mission Control
PSIM-class operations with assessment via Security Design Center.
Genetec is one of the two dominant unified physical security platforms (the other being Milestone), used by airports, transit systems, casinos, universities, and Fortune 500 corporates for video, access control, and operations. The assessment story has two parts: Security Design Center is a free design-tool used during planning and audit phases to model camera coverage, access control deployment, and infrastructure layouts; Mission Control adds incident workflow and decision-support to operational events. Combined, this is the right answer for organizations that have already standardized on Genetec hardware and want one vendor to handle the whole operations + assessment lifecycle. For organizations that haven't made that bet, the lock-in is significant.
Organizations that have standardized on Genetec hardware and want unified VMS, access control, and operations on one vendor.
Multi-vendor environments, dedicated assessment use cases without operations needs, or buyers wanting transparent SaaS pricing.
Strengths
- Tightest integration with Genetec Omnicast (VMS) and Synergis (access control)
- Security Design Center (free) for camera coverage and access control planning during assessment
- Mission Control adds structured incident workflows with decision-support and audit trail
- Genetec Stratocast SaaS option reduces on-prem infrastructure burden
- Best for transit, airport, casino, and university operations centers
- Mature partner ecosystem; certified integrators in every major market
- Battle-tested at extreme scale; runs city-scale deployments globally
Weaknesses
- Assessment capability is bolted onto an operations platform, not a dedicated assessment workflow
- Strongly proprietary ecosystem; integration with non-Genetec VMS/access control is limited
- Pricing is hardware/license bundle, not transparent SaaS, expect 8–16 weeks of vendor + integrator engagement
- On-prem deployments require significant IT infrastructure investment
- UX optimized for control-room operators, not assessment-focused security analysts
- Mission Control workflows are limited compared to dedicated incident platforms; operators "can only acknowledge and forward" per IPVM analysis
Pricing tiers
opaque- Security Design CenterFree design tool for planning camera and access control deployments$0+$0 /mo +/emp
- Security Center (per channel/door)Licensing scales with camera and access control hardwareQuote
- Mission ControlAdd-on for structured incident workflows on Security CenterQuote
- · Hardware refresh cycles every 5–7 years
- · Certified integrator services billable separately
- · Module licensing (LPR, intrusion, intercom) priced individually
- · Annual support and maintenance contracts
Key features
- +Unified VMS (Omnicast) + access control (Synergis)
- +Security Design Center (planning and assessment)
- +Mission Control incident workflow
- +License plate recognition (AutoVu)
- +Cloud-managed Stratocast option
- +Federation across multi-site deployments
- +Mobile guard and operator apps
- +Map-based operations dashboard
Resolver (a Kroll Business)
Integrated risk intelligence with mature physical security workflows.
Resolver is a full-stack integrated risk management platform that happens to have one of the most mature physical security modules in the market. Founded in 2001 in Toronto and acquired by Kroll in 2022, Resolver brings the credibility and resources of a Big 4-adjacent advisory firm to its product. For organizations that already think about risk in an integrated way, physical, cyber, brand, third-party, Resolver is the most natural home for the physical security workflow. For organizations that just want a focused physical security assessment tool, it can feel like overkill.
Enterprises with established integrated risk management programs (1,000+ employees, multi-function risk teams) where physical security is one risk vertical among several.
Pure physical security teams with no broader GRC needs, or anyone needing fast self-serve onboarding under $20K.
Strengths
- Mature physical security risk module covering assessments, incidents, investigations, and threats
- Kroll backing (since 2022) provides advisory depth and threat intelligence integration
- Integrated platform: same data model spans physical security, ERM, third-party risk, internal audit
- 728+ employees; serves 1,000+ global enterprise customers safeguarding $6.5T market cap
- Configurable drag-and-drop dashboards for executive reporting
- Strong incident management with case linking to vulnerability assessments
- Available in multiple languages with regional data residency options
Weaknesses
- Pricing is opaque; cited as "costly for small or startup companies" across G2 reviews
- Implementation runs 8–16 weeks for full IRM deployment; faster for narrower physical-only configurations
- Configurability cuts both ways, can become a custom-build project requiring ongoing admin time
- Mobile experience is functional but not a differentiator
- Reporting capabilities are powerful but require admin training to fully exploit
- Post-Kroll integration roadmap continues to evolve; legacy customers occasionally cite shifting priorities
Pricing tiers
opaque- Core (per application)Per Resolver application: Physical Security, Incident Management, Investigations, etc.Quote
- Risk Intelligence PlatformMulti-application bundle for integrated risk programsQuote
- · Implementation services typically separate; budget 15–30% of first-year subscription
- · Multi-application bundles offer better unit economics than single-app licensing
- · Multi-year contracts standard; annual discounts negotiated
Key features
- +Physical security risk and assessment management
- +Incident management with case investigations
- +Threat and intelligence management
- +Integrated audit and compliance modules
- +Configurable workflows and approvals
- +Drag-and-drop dashboard builder
- +ESRM (Enterprise Security Risk Management) frameworks
- +Bidirectional integration with ServiceNow, Jira, and major SIEMs
Omnigo
Vertical-specialized security software for healthcare, gaming, and education.
Omnigo (formerly Report Exec) has built a deep moat in specific verticals where physical security is heavily regulated and operationally distinct, healthcare (Joint Commission, hospital security), gaming (state gaming boards, casino security), higher education (Clery Act compliance), and K-12. The product covers incident management, dispatch, investigation, and assessment, all configured for the regulatory peculiarities of each vertical. For an organization in those specific industries, Omnigo will hit the ground running where a horizontal platform will require months of customization. The trade-off: outside those verticals, the value proposition is weaker.
Hospitals, casinos, universities, K-12 districts, and law enforcement agencies that need vertical-specific compliance baked in.
Buyers outside the core verticals (corporate security, manufacturing, retail), or anyone seeking a consistent, modern UX.
Strengths
- 2,700+ customers concentrated in healthcare, gaming, education, hospitality, and law enforcement
- 600+ law enforcement agencies, 400+ hospitals, 350+ casinos, 500+ K-12/higher-ed institutions
- Vertical-specific compliance built-in: Clery Act (higher ed), Joint Commission (healthcare), state gaming regs
- Unified incident, dispatch, investigation, and assessment workflows
- Strong report generation with redaction for legal and regulatory contexts
- Configurable to capture the unusual data fields each vertical needs (gaming pit incidents, Clery geography)
Weaknesses
- Customer support quality has reportedly declined post-acquisition; recent reviews flag slower response times
- Outside core verticals, the platform is competitive but not the default choice
- UX shows its age compared to modern platforms like LogicGate and Circadian Risk
- Pricing is opaque; reports of significant variability based on rep negotiation
- Implementation runs 6–12 weeks for vertical-specific configurations
- PE ownership has prompted product-roadmap uncertainty noted in customer reviews
Pricing tiers
opaque- Omnigo Public SafetyLaw enforcement agenciesQuote
- Omnigo Healthcare SecurityHospitals; Joint Commission complianceQuote
- Omnigo GamingCasinos; state gaming complianceQuote
- Omnigo Education SafetyHigher ed (Clery) and K-12Quote
- · Vertical compliance configurations may require professional services
- · Customer support tier limits on lower contracts
- · Multi-year contracts standard
Key features
- +Incident management and reporting
- +Vertical compliance frameworks (Clery, Joint Commission, gaming)
- +Investigation and case management
- +Dispatch and CAD
- +Site and asset assessment
- +Photo and document evidence management
- +Reporting with PDF export and redaction
- +Mobile incident capture
D3 Security
Security operations platform with native physical assessment.
D3 Security pre-dates the term "SOAR", the company has been building security operations and incident management platforms for over 20 years and has gradually expanded into both cyber SOAR and physical security. The unique angle is that D3 unifies dispatch, guard tour, incident reporting, and physical assessment in one platform, which can replace what older organizations stitch together from a PSIM, a guard management tool, and an assessment tool. Customers report this consolidation produces 80–90% reductions in mean-time-to-respond for incidents tied to assessment-identified vulnerabilities.
Critical infrastructure (utilities, energy, transit), in-house corporate security teams running 24/7 ops, and organizations that want assessment-to-incident-to-response on one platform.
Pure-assessment buyers with no operational needs, small consulting firms, anyone who wants modern self-serve onboarding.
Strengths
- Unifies physical assessment with active operations, incident, dispatch, guard tour all share data
- Mature 20+ year platform with strong critical-infrastructure and utilities customer base
- Used by major utilities for site assessments on 30/60-month recurring schedules with automated reminders
- Strong report generation with ability to redact sensitive information for third-party reviews
- Database-of-repeat-offenders pattern: link incidents to entities, surface trends across assessments
- API-first architecture, strong fit for teams with engineering resources to extend the platform
- Customer support is well-rated for technical depth on complex deployments
Weaknesses
- Brand awareness is lower than Resolver in physical-security-only contexts
- UX is functional but not a differentiator; not the platform you pick to delight end users
- Pricing is opaque; expect quote ranges aligned with mid-market enterprise GRC
- Heavy feature set means longer learning curve for new users
- Implementation runs 6–12 weeks; not a fast self-serve product
- Recent strategic emphasis on cyber SOAR; physical security feature investment less visible
Pricing tiers
opaque- D3 Smart SOAR (Cyber)Cyber SOAR / SOC automationQuote
- D3 Security OperationsPhysical security incident, dispatch, assessment, guard tourQuote
- · Multi-year contracts common
- · Implementation services priced separately
- · API integration work for non-standard sources may incur PS fees
Key features
- +Physical security incident management
- +Site assessment with recurring schedules
- +Dispatch and guard tour management
- +Investigation case management
- +Entities database (repeat offenders, persons of interest)
- +Customizable report templates with redaction
- +Real-time dashboards and alerts
- +Integration with VMS, access control, and SIEM platforms
RiskWatch (SecureWatch)
Three decades of compliance-heavy physical security assessment.
RiskWatch, sold under the SecureWatch product brand, has been doing physical security assessment software since the early 1990s. The company's longevity and customer roster (Fortune 100, US Department of Defense, federal agencies) buy real category authority. The product itself is automation-heavy: data collection, risk scoring, and report generation are templated against 35+ pre-built compliance frameworks, which is what enables the platform's headline claim of 74% time reduction vs. spreadsheet-based assessments. The trade-off: the UX shows its age, the brand recognition outside government and large enterprise is modest, and pricing is opaque.
Defense contractors, federal agencies, banks, healthcare networks, and Fortune 1000 with deep compliance frameworks (ISO, NIST, FFIEC) and 100+ sites.
Mid-market without compliance pressure, buyers who want modern UX over deep compliance, anyone under $25K budget.
Strengths
- 30+ year track record; one of the few vendors that has survived multiple GRC market cycles
- 35+ pre-built compliance libraries: ISO 27001, HIPAA, PCI DSS, NIST 800-53, FFIEC, ASIS, FEMA, more
- Used by Fortune 100, US DoD, federal civilian agencies, strong gov/regulated-industry credibility
- Heatmap and Google Maps integration for visualizing risk across geographically distributed sites
- 24/7 chat support with live representatives
- Cloud architecture is mature; deployments run reliably at 1,000+ site scale
Weaknesses
- UX feels like enterprise software from a previous decade compared to Circadian Risk or LogicGate
- Pricing is fully opaque; quotes vary widely; expect 4–8 weeks of sales cycle
- Brand recognition is concentrated in defense and Fortune 100; less known to mid-market buyers
- Implementation is more involved than Circadian Risk; expect 4–8 weeks for a 50-site deployment
- Limited modern integration count, fewer than 50 first-class integrations listed
- Mobile experience trails best-in-class field-inspection tools
Pricing tiers
opaque- SecureWatch Physical SecurityCore physical security assessment + compliance librariesQuote
- SecureWatch Enterprise GRCBundle: physical, cyber, vendor risk, policy managementQuote
- · Multi-year contracts common; published rate cards do not exist publicly
- · Add-on compliance frameworks beyond included library may incur fees
- · Professional services for custom report templates not always bundled
Key features
- +35+ pre-built compliance libraries
- +Automated data collection via questionnaire workflows
- +Heatmap and Google Maps risk visualization
- +Multi-site portfolio dashboards
- +Bidirectional sync with major GRC platforms
- +Assessment scheduling and recurring assessment automation
- +Customizable report templates by industry/regulation
- +Threat intelligence integration
Riskonnect
Enterprise integrated risk management with physical security as one risk vertical.
Riskonnect is one of the largest pure-play integrated risk management vendors with 2,000+ customers across six continents and particularly deep penetration in healthcare, financial services, and insurance. The platform was originally built on Salesforce and has since become its own architecture. The physical security capability is best understood as part of the broader IRM proposition: the value is greatest when physical risk lives alongside cyber risk, claims management, business continuity, and ERM on a single data model. As a standalone physical security assessment tool, it is overbuilt; as part of an integrated risk strategy, it has few equals.
Enterprises with established integrated risk programs (insurance, healthcare, financial services, energy) treating physical security as one risk vertical alongside claims, BCM, and ERM.
Pure physical security teams, organizations under 1,000 employees, or anyone primarily evaluating physical security tools without a broader IRM program.
Strengths
- 2,000+ customers across 6 continents, largest integrated risk customer base on this list
- Deep penetration in healthcare, financial services, insurance, and energy, verticals where physical and operational risk converge
- Strongest claims management and insurance-related workflows of any product on this list
- Mature business continuity and crisis management modules
- Extensive integration breadth driven by Salesforce-native heritage
- Strong reporting and dashboarding for executive risk committees
Weaknesses
- Pricing is opaque and skewed enterprise; rarely a fit under $75K annual
- Implementation runs 12–24 weeks for full IRM; physical-only configurations faster
- Configurability requires significant admin investment, not a turn-on product
- Outside insurance/healthcare/financial-services, the value proposition is weaker
- PE ownership has driven multiple product-line consolidations; some customers report transition friction
- Physical security is a smaller share of the platform's total feature surface than at Resolver or RiskWatch
Pricing tiers
opaque- Riskonnect IRMModular: ERM, claims, business continuity, third-party risk, internal auditQuote
- Riskonnect Health & SafetyBundle for healthcare and high-hazard industriesQuote
- · Implementation services priced separately; budget 20–40% of first-year subscription
- · Multi-year contracts standard at enterprise pricing
- · Module-by-module licensing means costs grow with adoption
Key features
- +Integrated risk management across cyber, physical, operational
- +Claims management
- +Business continuity and crisis management
- +Health and safety incident management
- +Third-party risk
- +Internal audit
- +Salesforce-native integration patterns
- +Executive risk dashboards
LogicGate Risk Cloud
No-code GRC with custom physical security applications.
LogicGate is the modern, no-code answer to legacy GRC. Where Resolver brings depth from 20+ years and Riskonnect from heavy enterprise integration, LogicGate brings speed: customers build their own physical security application using drag-and-drop workflow design, often in days rather than the months a traditional GRC implementation requires. LogicGate was named a Leader in The Forrester Wave™: Third-Party Risk Management Platforms, Q1 2026, the platform sits at the intersection of GRC and physical security as a do-it-yourself solution.
Mid-market security teams with strong process design skills who want a platform they can shape, not one that constrains them.
Teams that want a pre-built physical security application out-of-the-box, or organizations without admin bandwidth to maintain configurations.
Strengths
- Forrester Wave Leader for TPRM Q1 2026; strong category recognition
- No-code platform: build custom physical security workflows in days without engineering resources
- 40+ purpose-built apps including risk, compliance, vendor risk, audit, and policy
- AI-driven workflows with anomaly detection and auto-categorization
- Real-time dashboards for executive risk reporting
- Active community of customer-built apps shared across the platform
- Strong integration story: ServiceNow, Jira, Slack, major IDPs, and SIEMs
Weaknesses
- No pre-built physical security application, you (or LogicGate PS) build it from primitives
- Best ROI requires investing in admin training; not a self-running product
- Pricing is opaque; mid-market customers report $50K–$150K+ annual contracts
- Younger company than Resolver/RiskWatch, less category gravity in physical-security-first conversations
- Configurability cuts both ways, implementations can drift into custom-build territory
- Smaller customer base in pure physical security; stronger in cyber and third-party risk
Pricing tiers
opaque- Risk Cloud (per application)Pricing varies by application count and seat tierQuote
- Risk Cloud Platform BundleMulti-application bundle; better unit economicsQuote
- · Implementation services billable separately; budget 15–25% of first-year subscription
- · Custom application development via LogicGate Professional Services
- · Annual price escalators on multi-year contracts
Key features
- +No-code workflow design
- +40+ pre-built GRC applications
- +AI-driven workflow automation
- +Custom application builder
- +Real-time risk dashboards
- +Risk Cloud Marketplace (community-built apps)
- +Native integrations with ServiceNow, Jira, Okta, Slack
- +Audit trail and version control on workflows
Trackforce Valiant
Guard force management with bundled assessment workflows.
Trackforce Valiant is the result of a multi-year roll-up of guard management software companies, Trackforce, Valiant, TrackTik, GuardTek, and Silvertrac all live under the same umbrella now. The product's natural center of gravity is guard scheduling, tour management, and incident reporting for security service firms (the companies that provide guards to retail, residential, and corporate clients). The physical security assessment capability is real but secondary, most useful when assessments are part of a larger guard service contract. If you need pure assessment software with no guard ops, Circadian Risk or RiskWatch are better fits.
Contract security service firms (those who provide guards to clients) and large in-house security operations with significant guard headcount that also need site assessments.
Pure-assessment buyers with no guard force, small security consulting practices, or buyers who want unified UX across all modules.
Strengths
- Strong guard force management bundled with assessment, best when both workflows live together
- Mobile guard tour and check-in with NFC/QR/GPS verification
- Real-time incident reporting from guards in the field
- Used by major contract security firms; battle-tested at scale
- Roll-up history means broad feature breadth across guard, tour, scheduling, payroll, billing
- AI-powered route optimization and anomaly detection on tour data
Weaknesses
- Assessment is secondary to guard management, not the depth of a dedicated platform
- Feature consolidation across acquired brands is uneven; some legacy modules feel disconnected
- Pricing reported $8–$15/guard/month for guard ops; assessment add-ons priced separately
- UX inconsistency across acquired product lines (TrackTik, GuardTek, Silvertrac all have different UIs)
- Limited fit for in-house corporate security without a guard contractor model
- Reporting is strong on guard ops, lighter on risk-scoring methodologies
Pricing tiers
opaque- Guard Management CoreEstimate $8–$15/guard/month based on customer disclosures$12 /emp/mo
- Full Suite (Guard + Assessment + Reporting)Add-ons priced separatelyQuote
- · Implementation fees vary by site count
- · Assessment module typically priced as add-on to guard ops
- · Multi-year contracts common at enterprise tier
Key features
- +Guard scheduling and shift management
- +Mobile guard tour with NFC/QR/GPS verification
- +Incident reporting from field
- +Site assessment templates
- +Time tracking and payroll integration
- +Client billing for security service firms
- +AI route optimization
- +Real-time GPS dashboard
Frequently asked questions
The questions buyers actually ask before they sign.
How does Vigipirate affect French physical security assessment software adoption in 2026?
What does LPM mean for OIV physical security assessment software procurement?
How does CNIL enforcement affect physical security assessment platform selection for French enterprises?
Does any French-built physical security assessment platform compete with SafetyCulture or Circadian Risk?
What's the difference between physical security assessment software and PSIM?
How much should I budget for physical security assessment software?
Why is pricing so opaque in this category?
Should I pick a dedicated platform or a GRC suite for physical security?
What about free or open-source options?
How do I evaluate without sitting through a sales demo?
Do these platforms handle physical security audits for compliance (SOC 2, HIPAA, PCI)?
How long does implementation typically take?
Final word
Looking at a different market? See the global Physical Security Assessment Software ranking, or pick another country at the top of this page.
Last updated 2026-05-23. Local pricing reverified quarterly. Found something inaccurate? Tell us.