Residential Bug Sweeps — Toronto

Who this service is for

• Homeowners after a separation, custody dispute, or contested access
• Families of executives, judges, and public figures
• Ultra-high-net-worth private residences and estates
• Family offices operating from a residential floor
• Condo owners in downtown Toronto luxury buildings
• Short-term rental properties before or after occupancy

What we sweep for

• Covert audio bugs — mains-powered, battery-powered, and Wi-Fi-enabled
• Hidden cameras — pinhole, disguised-object, IR-only, and Wi-Fi IP cameras
• Cellular GSM/LTE listening devices and Wi-Fi microphones
• Unauthorized Bluetooth beacons and airtag-class trackers
• Power-line surveillance and modified smoke detectors, outlets, thermostats
• Compromised smart-home devices, routers, and networked appliances
• Rogue access points and evil-twin Wi-Fi networks
• Non-linear junction detection for dormant / powered-off electronics inside walls

How the visit unfolds

A single technician arrives in an unmarked vehicle. The sweep is conducted room by room — RF spectrum analysis first, then thermal imaging of walls and ceilings, then physical inspection of every fixture, outlet, and personal effect flagged by the instruments. A written report is delivered by hand within 72 hours. Nothing about the visit appears on any public record.

The instruments used on your home are the same ones we deploy for private members’ clubs. There is no consumer tier.

How the sweep is performed

Every engagement runs the same ten-pass instrument sequence. Each pass is documented, timestamped, and included in the written report so the client — or their counsel — can see exactly what was inspected and what was measured.

• Full-spectrum RF analysis, 10 kHz – 24 GHz — a continuous sweep of the licensed and unlicensed radio bands using the REI OSCOR Green and Aaronia Spectran V6. Every transmitter in the environment is captured, classified, and matched against a known device list. Anything that does not belong is flagged.
• Wi-Fi survey — 2.4 GHz, 5 GHz, 6 GHz, and 7 GHz Wi-Fi 6E / Wi-Fi 7 bands — visible and hidden SSIDs enumerated, rogue access points identified, evil-twin networks impersonating the client’s SSID exposed, deauthentication-attack fingerprints logged.
• Bluetooth Classic and BLE mesh scan — 2.402 – 2.480 GHz — enumerates every paired and unpaired device, beacon, and mesh node within range, including Airtag-class trackers hidden inside upholstery or vehicle trim.
• Cellular baseband monitoring — LTE B4 / B7 / B13, 5G n41 / n71 — powered by Ettus USRP. Detects covert cellular listening devices, unauthorized modems, and IMSI-catcher activity attempting to impersonate the carrier.
• Sub-GHz and mesh IoT scan — Zigbee, Z-Wave, LoRa, 433 MHz, 868 MHz, 915 MHz — used to catch consumer bug hardware sold on retail markets that operates below the standard Wi-Fi bands.
• Non-linear junction detection (ORION 2.4 HX) — best-in-class NLJD, the same unit used by federal counterintelligence services. Locates dormant, powered-off, or physically hidden semiconductor devices even when they are not transmitting. Finds devices behind drywall, inside furniture, sewn into upholstery, and embedded in vehicle trim.
• Thermal imaging — FLIR E86 — the heat signature of any active electronic component reads through drywall, plaster, and wood. Identifies hidden cameras, transmitters, and modified outlets that emit no RF at the time of the sweep.
• Wired network audit — VLAN and switch-port inspection, ARP-table analysis, unauthorized DHCP detection, port-mirroring evidence, unauthorized VPN endpoints. Applies to boardroom Ethernet, executive-office switches, private-club conference bridges, and residential router configurations.
• Physical inspection — every A/V fixture, wall outlet, HVAC vent, ceiling tile, smoke detector, thermostat, teleconference camera, and switched device is opened, examined, and either cleared or seized under chain of custody.
• Written report with evidence exhibits — spectrum plots, thermal captures, network audit logs, chain-of-custody documentation, and a plain-language summary for principals. Prepared to Ontario Bar Association standards, admissible in civil and criminal proceedings.

No pass is skipped. No pass is delegated to a technician who was not on site. The report reflects exactly what the instruments saw at the moment they saw it.