A UK drone inspection practice,
built for scrutiny.
Specialist security-assessment work for insurance-sensitive sites, plus broader drone inspection, mapping and aerial photography across six sectors.
I’m Martin. I fly the drone, run the OSINT, and write the report.
Critical Asset is a one-person practice. I’m CAA-authorised, ICO-registered and Cyber Essentials certified, with a cyber threat intelligence background — an MSc in Computer Science, nine years of structured OSINT and threat-actor analysis in financial services, plus GIAC GCTI, GIAC GOSI, Treadstone 71 Certified Threat Intelligence Analyst and the CAA Remote Pilot Certificate (RPC Level 1). The flagship Site Security Vulnerability Assessment came from one observation: most drone operators don’t carry out intelligence work, and most security consultancies don’t fly. The vulnerabilities that matter most on remote sites sit exactly where those two disciplines meet — and few suppliers combine both in a single fixed-scope engagement. So I built a productised engagement that does, in one fixed-price visit, with one analyst. It grew on solar farms, where the loss-event economics are most obvious (£3,950 + VAT against £50k–£500k+ incidents).
Three other ways in sit alongside the flagship. Incident Response is for sites that have already been hit — cable theft, arson, vandalism — combining post-incident drone capture with an OSINT indicator review, deployment usually targeted within 48–96 hours where conditions permit. Managed Capture handles recurring drone work on a fixed cadence (quarterly through monthly) for construction, infrastructure, property, built-environment, agriculture and industrial sites. Standalone drone inspection, mapping and photogrammetry briefs are quoted per engagement. Same operating discipline across all four engagements; documented scope boundary and clean evidence trail throughout, with dual-graded findings on the SSVA and Incident Response packs. And if you’re not sure whether drone work fits at all, the Discovery Call is a free 30-minute conversation.
For intrusive cyber testing I recommend that the client instruct an appropriately accredited cyber provider, such as a CREST-accredited firm.
Everything you need before signing.
We work on insurance-sensitive sites — rural renewables, large estates, critical-infrastructure adjuncts — where client confidentiality is often part of the value the engagement delivers. For that reason we don't publish a client list on the website.
Instead, everything a prospect reasonably needs to evaluate us is packaged for the scoping call. Tell us the asset type, the brief and any underwriter questions you're trying to answer, and we'll assemble a proof pack tailored to your site before the first conversation.
- Methodology walkthrough — what we do, how findings are graded
- Insurance, CAA and ICO certificates
- Project references we can discuss under NDA
- Indicative scope and fixed-price quote
Qualified, insured, accountable.
Professional kit for professional jobs.
Four ways in — pick the one that fits your brief.
- Site Security Vulnerability Assessment — the flagship. For insurance-sensitive sites: solar farms, rural estates, remote commercial assets.
- Incident Response — if your site has already been hit. Deployment usually targeted within 48–96 hours where conditions permit, broker- and insurer-facing evidence pack with an OSINT indicator review.
- Managed Capture — recurring drone work on a fixed retainer for known deliverables across six sectors.
- Discovery Call — free 30 minutes if you’re not sure which of the above fits, or whether a drone helps at all.
Scope and fixed price back within 2 working days.
Request an Assessment →