Executive Office Bug Sweeps

Who this service is for

• Corporate boardrooms on Bay Street and King Street West
• C-suite offices and executive floors
• Family offices, ultra-high-net-worth wealth managers, single-family offices
• Legal chambers and confidential litigation venues
• M&A war rooms and diligence data rooms
• Private-equity partner meetings and IC gatherings
• Investor days, closed briefings, and post-mortem meetings

What we sweep for

• Covert audio bugs and cellular listening devices in furniture, fixtures, and A/V
• Hidden video cameras in wall art, plants, HVAC vents, and ceiling tiles
• Conference-phone tampering, VoIP interception, teleconference bridge compromise
• Compromised laptops, projectors, smart displays, and video-bar cameras
• Rogue Wi-Fi access points and evil-twin networks impersonating corporate SSIDs
• Unauthorized RF transmitters powered from mains, PoE, or USB
• Non-linear junction detection for dormant devices concealed in walls and ceilings

How the engagement is conducted

The technician arrives outside business hours in unmarked attire. No corporate signage is left, no invoice is posted to reception, no line item mentions "sweep" on any billing. A written report is delivered directly to a nominated principal within 72 hours. Repeat quarterly and pre-meeting sweeps are common for boards under active pressure.

For an environment where a single overheard conversation can move a share price or a settlement figure, the cost of the sweep is negligible against the cost of the leak.

How the sweep is performed

Every engagement runs the same ten-pass instrument sequence. Each pass is documented, timestamped, and included in the written report so the client — or their counsel — can see exactly what was inspected and what was measured.

• Full-spectrum RF analysis, 10 kHz – 24 GHz — a continuous sweep of the licensed and unlicensed radio bands using the REI OSCOR Green and Aaronia Spectran V6. Every transmitter in the environment is captured, classified, and matched against a known device list. Anything that does not belong is flagged.
• Wi-Fi survey — 2.4 GHz, 5 GHz, 6 GHz, and 7 GHz Wi-Fi 6E / Wi-Fi 7 bands — visible and hidden SSIDs enumerated, rogue access points identified, evil-twin networks impersonating the client’s SSID exposed, deauthentication-attack fingerprints logged.
• Bluetooth Classic and BLE mesh scan — 2.402 – 2.480 GHz — enumerates every paired and unpaired device, beacon, and mesh node within range, including Airtag-class trackers hidden inside upholstery or vehicle trim.
• Cellular baseband monitoring — LTE B4 / B7 / B13, 5G n41 / n71 — powered by Ettus USRP. Detects covert cellular listening devices, unauthorized modems, and IMSI-catcher activity attempting to impersonate the carrier.
• Sub-GHz and mesh IoT scan — Zigbee, Z-Wave, LoRa, 433 MHz, 868 MHz, 915 MHz — used to catch consumer bug hardware sold on retail markets that operates below the standard Wi-Fi bands.
• Non-linear junction detection (ORION 2.4 HX) — best-in-class NLJD, the same unit used by federal counterintelligence services. Locates dormant, powered-off, or physically hidden semiconductor devices even when they are not transmitting. Finds devices behind drywall, inside furniture, sewn into upholstery, and embedded in vehicle trim.
• Thermal imaging — FLIR E86 — the heat signature of any active electronic component reads through drywall, plaster, and wood. Identifies hidden cameras, transmitters, and modified outlets that emit no RF at the time of the sweep.
• Wired network audit — VLAN and switch-port inspection, ARP-table analysis, unauthorized DHCP detection, port-mirroring evidence, unauthorized VPN endpoints. Applies to boardroom Ethernet, executive-office switches, private-club conference bridges, and residential router configurations.
• Physical inspection — every A/V fixture, wall outlet, HVAC vent, ceiling tile, smoke detector, thermostat, teleconference camera, and switched device is opened, examined, and either cleared or seized under chain of custody.
• Written report with evidence exhibits — spectrum plots, thermal captures, network audit logs, chain-of-custody documentation, and a plain-language summary for principals. Prepared to Ontario Bar Association standards, admissible in civil and criminal proceedings.

No pass is skipped. No pass is delegated to a technician who was not on site. The report reflects exactly what the instruments saw at the moment they saw it.