Your guide to starting a California security company

This guide is written for the person who is seriously thinking about opening a licensed security company in California, and who wants the honest version — not the brochure. You can read it in one sitting and walk away knowing what the road actually looks like, what it costs, where new owners get hurt, and the exact order of steps to get licensed.

I've built security companies in this state from nothing, including taking one from zero to more than 50 officers and several million dollars in revenue. I've also made most of the mistakes in this guide myself, which is the only reason I can warn you about them.

1 · What a PPO is, and what it is not

A Private Patrol Operator, or PPO, is the license that lets a company provide contract security guard services in California. The guards are your employees, and you contract their services out to clients. The company holds the license; the guards hold a registration — a guard card — not a license of their own.

The most common point of confusion is the difference between a PPO and a Proprietary Private Security Employer (PSE). A PSE employs its own in-house officers to protect a single employer and cannot contract those officers out. If your plan is to sell security services to clients — a bank, a dispensary, an apartment complex, an event — you need a PPO. The whole system is governed by the Private Security Services Act (Business and Professions Code §§ 7580–7588.8) and the regulations in Title 16 of the California Code of Regulations. The regulator is BSIS, a division of the Department of Consumer Affairs. Operating without the license is a misdemeanor, so don't take shortcuts on the license itself.

2 · The honest reality before you spend a dollar

Contract security is a low-margin, high-liability, people-heavy business. Your real product is reliable labor and trust. Net margins often land in the single digits. You win not by charging the most, but by running clean and keeping good people on post.

You need working capital. You'll pay your officers every week or two, but your clients may not pay you for 30 to 60 days. That gap is where undercapitalized companies die. Advance billing is a structural advantage worth pursuing, but you'll still need cash to float startup and payroll.

The biggest risk in this business is not the dramatic incident on the post. It's wage-and-hour compliance: missed meal and rest breaks, sloppy timekeeping, and inaccurate paychecks. Under California Labor Code 558.1, those mistakes can reach you personally — as the owner and as the qualified manager — not just the company.

3 · The Qualified Manager: your linchpin

Every PPO must have one designated Qualified Manager (QM) who is in active charge of the business day to day. You can be your own QM if you qualify, or you can hire one. This single person is the legal heart of your license.

As of January 1, 2025, after Assembly Bill 1244, the experience bar is higher than the old guidance many websites still show. The current standard is 6,000 hours of compensated experience: at least 4,000 hours as a patrolperson, guard, or watchperson, plus at least 2,000 hours in a management or administrative role under a licensed and current PPO. The QM must also pass a two-hour multiple-choice exam.

A QM who is named on your license but does not actually manage the company is exactly the arrangement that draws Bureau discipline — and that person can be held personally liable for wage-and-hour problems. If you are a one-QM company, you are one resignation away from a suspended license. Start building a bench of future QMs from the day you open.

4 · Pick the right legal structure

You'll choose a legal structure before you can apply — usually a corporation. (Note that a PPO license cannot be held by an LLC.) Many experienced owners choose a corporation for stronger liability protection, because security is a lawsuit-heavy field and most claims are wage-and-hour claims that can name individuals. BSIS ties your PPO license to the exact legal entity you register with the Secretary of State, and you cannot simply swap the entity later without creating a licensing problem. Pick the structure and the name carefully the first time — and sit down with an employment attorney and a CPA before you file.

5 · The BSIS license application

Here's the order of operations: form your legal entity with the Secretary of State; complete Live Scan fingerprinting (DOJ and FBI background checks) for every owner, partner, corporate officer, and the QM; have your QM pass the exam; request authorization of your business name (list five in order of preference); then submit the company application with fees and your certificate of insurance.

Fees and timeline. Plan for roughly $1,450 in BSIS company fees (often shown as about a $605 application fee plus an $847 license fee), along with a separate QM application and exam fee in the few-hundred-dollar range. These figures change — confirm the current BSIS fee schedule before you pay. Expect about four months when the application is clean. More than half of applications come in with errors on the first try, which is the main cause of delay, so slow down and get it right. The Bureau recommends applying online through BreEZe. Once issued, a PPO license is valid for two years.

6 · Insurance you must — and should — carry

Insurance is a condition of licensure, not an afterthought. By law, a PPO must carry commercial general liability coverage of at least $1,000,000. For armed work this has historically been framed as $500,000 for bodily injury and $500,000 for property damage. Your certificate of liability insurance must show your exact approved business name — which is why you obtain it after the Bureau approves your name. If you have employees (and you will), workers' compensation is required. Strongly consider errors-and-omissions coverage and commercial auto insurance if you run patrol vehicles.

7 · Building and training your workforce

Your guards are registered, not licensed. A guard card requires a minimum age of 18, background checks, and is valid for two years. Before a guard card is issued, the officer must complete Power to Arrest and Appropriate Use of Force training (8 hours). The full skills training totals 40 hours — 16 within the first 30 days and 16 more within the first six months — plus 8 hours of continuing education every year.

If you provide armed services, the bar is higher: a firearms permit requires a minimum age of 21, a 14-hour course of classroom and range training, an assessment of judgment and self-control, and requalification four times over the two-year permit. Batons and pepper spray each require their own permit and training. A BSIS firearms permit allows exposed carry on duty only — it is not a concealed-weapon permit. As the licensee, you are responsible for confirming that every officer holds a current, valid registration before they ever work a post. Build a simple tracking system on day one.

8 · Staying licensed: compliance that keeps you alive

Getting the license is the beginning, not the finish line. Keep your employee, training, firearm, and incident records organized at your licensed place of business. If you open, close, or move a branch office, notify the Bureau in writing within 10 days or face fines ($500 for the first violation, $1,000 after).

Guard your QM relationship. If your QM disassociates from the company, you must notify the Bureau within 30 days or the license is automatically suspended. That single rule has ended more small companies than most owners realize. Two areas deserve special attention: since July 2024, most California employers must maintain a written Workplace Violence Prevention Plan, keep a violent-incident log, and train employees — build yours for real (and consider offering that support to clients as a paid service). And manage wage-and-hour risk relentlessly: provable timekeeping, compliant meal and rest breaks, correct wage statements, and prompt final pay.

9 · The business model and your first clients

Your money lives in the spread between your bill rate and your fully loaded cost per hour. Loaded cost isn't just the wage — it includes payroll taxes, workers' comp, general liability, training time, supervision, uniforms, equipment, and overhead. Know that number cold before you quote a single contract. Pursue advance billing where you can. Write real contracts with clear scope, written post orders, billing terms, liability and indemnification language, and termination provisions.

Choose your niche deliberately. Cannabis, healthcare, logistics, residential, and events all have different demands. A niche with real compliance complexity — cannabis is a good example — is defensible precisely because the cheapest low-bid provider cannot serve it well. Win on reliability and professionalism, not on being the lowest price in the room. The race to the bottom is exactly where guard companies go to die.

10 · Mistakes that sink new PPOs

Most new PPOs don't fail because of a dramatic event. They fail for a handful of avoidable reasons:

• Underpricing because they never calculated their fully loaded cost per hour.
• Thin capitalization, so they can't float payroll while waiting on client payments.
• Sloppy timekeeping that turns into a wage-and-hour claim — often a personal one.
• A paper qualified manager who doesn't actually run the company.
• Letting unregistered or untrained guards work a post.
• Letting insurance lapse or naming the wrong insured.
• Chasing every contract instead of the profitable ones.
• Ignoring the rising regulatory load until a fine or a lawsuit forces attention.

Every item on that list is a choice, not bad luck. The owners who survive treat compliance and cost discipline as the core of the business, not a chore at the edge of it.

Closing thoughts

Starting a PPO in California is harder than the license mills make it sound and more rewarding than the cynics will admit. The barriers — the experience requirements, the insurance, the training, the compliance — are real, but they're also a moat. They keep out the people who aren't serious, which leaves room for operators who are. Build this company on clean payroll, real training, honest pricing, and a genuine commitment to your officers and clients, and you won't just survive the rising standards in this state — you'll be the company that benefits from them while weaker operators fall away.