bluestoneprotection.com

What It Is

Bluestone Security & Investigations is a U.S.-based security and investigations provider. Its website positions it as a “high-standard security and investigations” firm serving law firms, corporations, insurance organizations, government agencies, and high-risk private clients. It is not a typical cybersecurity SaaS or MDR vendor; instead, it combines physical security, protective intelligence, OSINT/deep web monitoring, private investigations, and executive protection. It is suited to high-consequence scenarios involving personal safety, litigation risk, asset tracing, and reputational threats.

Core Capabilities

Based on the disclosed information, its services fall into four categories: Security, Executive Protection, Protective Intelligence, and Private Investigations. Key highlights include 24/7/365 GSOC operations center oversight, in-house operators, no subcontracting of sensitive work, and reports, chain-of-custody materials, statements, and trial preparation documents delivered to court-ready standards by default. The website also showcases a private hardened client console for viewing alerts, watch posture, asset locations, operator communications, and OSINT updates. Its deployments are based in Michigan, cover the entire United States, and handle international coordination on a case-by-case basis.

Pricing

Pricing is relatively transparent: Standard starts at $2,500 per week and is suitable for single-domain investigations or short-term protection; Standing starts at $8,500 per week and is intended for ongoing protective intelligence and executive protection programs, including 24/7 GSOC oversight; Crisis is quoted custom for incident response, multi-jurisdictional matters, and rapid reinforcement. Final pricing depends on the number of operators, GSOC coverage hours, geographic scope, and depth of evidence required.

Pros and Cons

Its strengths include structured processes, litigation-oriented deliverables, 24-hour operational support, disclosure of licensing/bonding/insurance information, and an emphasis on personnel with federal law enforcement, military, and special operations backgrounds. For law firms and corporate security buyers, these factors help reduce the risk of unusable deliverables and non-compliant evidence. Limitations include the lack of disclosed information security certifications such as SOC 2 or ISO 27001, as well as no clear description of API, SIEM, EDR, or other cybersecurity system integration capabilities. Details on payment methods, data retention, and privacy compliance are also insufficient.

Best Fit and Access from China

It is better suited to legal litigation, insurance SIU, executive protection, family offices, public figures, and U.S.-based crisis response scenarios. If an organization is looking for purely cybersecurity products such as firewalls, EDR, or vulnerability management, it is not the first choice. Access from mainland China is not addressed in the main text, so its status is unknown.