Investigation, Guard, and Armored Car Services (U.S.) — NAICS 56161

An investor's rollup primer for a general audience — relevant to both public-market and private investors. This level is synthesized from its three child industries and our ground-truth U.S. federal statistics for NAICS 56161. NAICS (North American Industry Classification System) is the standard federal scheme for classifying businesses by activity [3]. Reported facts and forward-looking judgments are distinguished in the wording.

1. Overview

This is the private-sector business of protecting people, property, information, and money — the outsourced "physical trust" layer of the economy. It bundles three activities that most people never think of as one industry: the detectives and background screeners who vet who you hire and investigate what went wrong; the uniformed guards who watch lobbies, campuses, and construction sites; and the armored crews who move cash between stores, banks, and the Federal Reserve. What unites them is that a customer pays an outside firm to bear a security or trust burden it would rather not carry in-house.

Why it matters to an investor: this is a large (~$46.8 billion in federal receipts), labor-heavy, recurring-revenue corner of business services that runs on outsourcing and consolidation [1]. But it is not one market — it is three very different businesses stapled together by the federal codebook, and the single most useful thing this primer can do is show how they differ. One is a low-margin labor-arbitrage business (guards); one is a high-operating-leverage data and screening business (investigation); one is a capital-heavy route-logistics oligopoly (armored car). They have different margins, different owners, different growth stories, and — crucially — very different ways to buy them.

For public-market investors, the punchline is that exposure is thin and uneven: there is a clean U.S.-listed large-cap in armored car (Brink's), essentially one listed pure-play in screening (First Advantage), and no U.S.-listed pure-play in guarding at all — the guard giants are private or foreign-listed. For private investors, the opposite is true: this is one of the richest hunting grounds in business services, a fragmented, cash-flowing, roll-up-friendly sector that private equity (PE), search funds, and independent operators actively acquire across all three segments.

2. What's inside — the three child industries and how they differ

NAICS 56161 contains three five-digit-plus child industries [3]:

• 561611 — Investigation and Personal Background Check Services: private detectives, surveillance, fraud/asset investigation, and the high-volume employment-background-screening business.
• 561612 — Security Guards and Patrol Services: contract firms that supply armed and unarmed guards, patrols, and event/executive protection.
• 561613 — Armored Car Services: cash-in-transit, ATM (automated teller machine) cash replenishment, cash processing/vaulting, and valuables logistics.

They are close cousins but not substitutes, and the contrast is the whole story:

How to read the table. Three contrasts do most of the work:

1. Guards dominate the headcount; they do not dominate the value the same way. Guarding is ~92% of the industry's jobs but ~79% of its revenue, because it is a low-revenue-per-head labor business (~$46k per employee). Investigation and armored car each generate roughly three times the revenue per worker (~$140–148k), because one sells automated data and the other sells a capital-heavy route network — not raw hours [1][2].
2. Concentration runs the full spectrum. Armored car is a near-textbook oligopoly (top four firms = ~90% of receipts); guarding is fragmented but consolidating (top four = ~39%); investigation is a barbell — a handful of national screening platforms sitting atop ~3,800 one-person detective shops (top four = just ~23%) [1]. A single "how concentrated is this industry?" answer would be wrong for all three.
3. The way to buy them is almost inverted. The most concentrated segment (armored car) offers the cleanest public vehicle (Brink's); the largest segment (guards) offers essentially no U.S.-listed pure-play. If you want public exposure, the segment sizes are a poor guide to what you can actually own.

A fourth, cross-cutting fact matters for anyone mapping the sector: the biggest names straddle the NAICS lines. Securitas owns both a huge U.S. guard arm and Pinkerton (investigations); GardaWorld runs both guarding and cash logistics; Allied Universal (guards) and Brink's (cash) both grew by carving up the former G4S empire. A layer of global "physical security and cash logistics" conglomerates sits on top of these three official boxes — so at the company level the segments blur even though the economics stay distinct [11][12][13].

3. How big it is (the rollup)

U.S. federal ground-truth figures for NAICS 56161 (the datasets use different years and definitions — do not treat them as one synchronized financial year):

"CRn" is the combined revenue share of the n largest firms; the HHI (a concentration gauge that squares and sums each firm's market share, running to 10,000) is withheld by the Census Bureau for this level and is not reproduced here [1]. The level's CR4 of 33.5% is itself a blended figure — it averages a 90%-concentrated armored-car segment with a fragmented guard-and-detective long tail, so it understates how concentrated the top of each segment really is (see Section 8).

Sanity check — the children add up. The three child industries sum almost exactly to the level: receipts $6.15B + $37.04B + $3.61B ≈ $46.8B; establishments 4,013 + 11,104 + 763 = 15,880; employees 41,686 + 799,400 + 25,736 = 866,822 [1][2]. That tight reconciliation is a good sign the pieces and the whole are consistent — but it also means the level inherits every one of the children's blind spots.

Undercount and scope caveats — read before quoting the number. The $46.8B / 866,822-employee figures are the outsourced, employer-firm slice of a much larger security-and-cash economy, and they understate it in several ways:

• In-house (proprietary) security is invisible here. The federal count captures only contract firms. The Bureau of Labor Statistics (BLS) counts roughly 1.26 million people in the security-guard occupation economy-wide — versus ~799,400 inside contract guard firms — because hospitals, casinos, universities, retailers, and manufacturers employ their own officers, counted under their industry, not 56161 [5]. Add in-house corporate investigators and the true security workforce is well above this industry's headcount.
• Solo operators (nonemployers) are excluded. County Business Patterns (CBP) counts only establishments with payroll. Private investigation in particular has a large fringe of one-person, no-payroll shops; the Census Bureau's separate Nonemployer Statistics would capture them, but our data set contains no 56161 nonemployer total, so none is estimated here [7]. Where small and individual ownership dominates — the detective segment especially — the real number of working firms is higher than 11,575.
• Adjacent revenue is booked elsewhere. Credit reports (Credit Bureaus, NAICS 561450), drug/health testing (medical labs), security-alarm monitoring (56162), and much of the fast-growing cash-management, ATM, and smart-safe revenue are classified outside these three codes even though the same companies sell them [3][4].
• These are U.S. figures only. The multinationals that dominate — Securitas, Allied Universal, GardaWorld, Brink's, Loomis, Prosegur — earn most of their revenue abroad. The federal figure is the domestic footprint, not company scale.
• The federal file provides no industry-wide profit, margin, pricing, or customer-concentration data for this level; none is asserted here.

4. The investable universe — where value concentrates across the children

Because the three segments are so different, "where the value is" depends on which one you mean — and public availability is almost inversely related to size.

Public companies (thin and uneven).

Two once-listed screeners left the public market in 2024 — Sterling Check was acquired by First Advantage and HireRight was taken private — so public screening exposure actually shrank [6][7]. OTC is the U.S. over-the-counter market; BME is the Spanish exchange operator.

Major private platforms and owners (where most of the industry actually lives).

• Allied Universal — the U.S. #1 in guarding (~$20B global revenue, ~800,000 employees), PE-backed (Warburg Pincus, CDPQ, Partners Group, J. Safra), built by merging AlliedBarton + Universal and buying G4S for $5.3B (2021); management has publicly floated a possible 2026 IPO (initial public offering) [10].
• GardaWorld — private, Canada-based; the world's largest privately owned security company, spanning both guarding and cash logistics; recapitalized in 2024–25 at roughly C$13.5–14B, with founder Stephan Crétier and management holding ~70% alongside HPS Investment Partners [11][12].
• Checkr — venture-capital-backed (VC) gig-economy screening leader; 120,000+ customers, gross revenue above $800M, peak valuation ~$5B [9].
• Accurate Background, HireRight, Cisive, DISA, Kroll — PE-owned screening and investigations platforms (Apax, General Atlantic/Stone Point, Audax, and others) [6][7].
• Inter-Con, Constellis, Titan/Marksman, and thousands of regional guard and detective firms — the fragmented long tail that trades in private deals, not on exchanges [10].

Bottom line for value concentration: in armored car, value is concentrated in a handful of global carriers and one of them (Brink's) is publicly buyable; in screening, value has concentrated into ~5 platforms but only First Advantage is a listed pure-play; in guarding — by far the biggest segment by revenue and jobs — value sits overwhelmingly in private hands, so the segment that matters most to the labor economy is the hardest to own on a public exchange.

5. How the money works

There is no single business model here — there are three, and telling them apart is the core analytical task.

• Investigation/screening (561611) — a per-transaction data business. Revenue ≈ number of screens run × price per screen or bundle. The cost that matters is fulfillment: a check that clears instantly against a database is cheap and high-margin; one that needs a person to pull a paper court record is slow and costly. So automation is the whole game, operating leverage is high, and the valuable asset is compliant matching, speed, and trust — not raw data access. Growth comes from retention (mid-to-high-90s%), upsell (identity verification, drug testing, continuous monitoring), and new logos. The small detective side runs on a different model entirely — billable hours and flat report fees, classic small-business economics [6][8].
• Guards (561612) — labor arbitrage, cost-plus. Revenue ≈ billable guard-hours × bill rate. From each billed hour the firm pays the guard's wage plus "burden" (payroll taxes, workers' comp, liability insurance, uniforms, training) plus overhead; labor consumes ~55–65% of revenue and net margins are commonly mid-single digits [17]. The levers are the bill-rate/pay-rate spread, wage-inflation pass-through, and — decisively — retention, because industry turnover routinely exceeds 50% and every departure means re-recruiting, re-screening, and overtime [16]. Growth in dollars comes as much from rising wages (passed through to bill rates) as from more posts.
• Armored car (561613) — route-and-network logistics. Revenue is recurring service contracts priced per stop/route, and route density is the master variable: the more stops per route-hour and customers per vault, the lower the cost per stop. On top of transport sit higher-margin cash processing, ATM managed services, and technology-priced "smart safes" that provisionally credit a retailer's deposits for a monthly fee — the segment's margin and growth story, since legacy transport is maturing [13][14]. It is capital- and acquisition-heavy, and customer cash in transit is not the operator's money (it sits as restricted cash with an offsetting obligation) [13].

The common thread: all three are recurring-revenue service businesses with real switching friction, which is why all three consolidate. But they reward completely different things — automation and compliance (screening), staffing reliability and spread discipline (guards), and route density and technology mix (armored car). Metrics an investor watches therefore differ by segment: screen volume/attachment/retention for 561611; fill rate, turnover, and bill-vs-pay spread for 561612; stops per route, managed-services mix, and net leverage for 561613.

6. What drives demand

Demand across the level is broadly resilient — fear of crime, compliance mandates, and insurance requirements do not take a year off — but each segment answers to a different meter:

• Investigation/screening tracks hiring volume and labor-market churn above all (more hires = more checks), amplified by the gig economy, compliance mandates (health care, finance, trucking, childcare, government), negligent-hiring liability, and a fast-rising fraud/identity driver as AI-generated résumés and synthetic identities push employers toward stronger verification and continuous monitoring [6][8].
• Guards track crime and the perception of crime, commercial real estate and the AI-driven data-center build-out, critical-infrastructure access control, events, institutions (hospitals, campuses), government outsourcing, and the multi-decade shift from in-house to contract guarding [5][8].
• Armored car tracks a paradox: cash in circulation keeps rising (~$2.3 trillion) even as cash's share of payments falls (~16% of consumer payments), so the pool of cash to move and safeguard stays large; it is further driven by retail cash volumes, ATM outsourcing, and bank-branch rationalization [13].

The shared long-run driver is outsourcing — organizations handing security and cash handling to specialists — and the shared swing factor is the economy: hiring cycles move screening volumes immediately, construction/retail cycles move guard-hours, and consumer spending moves cash volumes. Employment projections are muted: BLS sees the guard occupation essentially flat through 2034 and private-detective employment up ~6% (2024–34) — occupational indicators, not revenue forecasts for this level [5].

7. Regulation

Each segment carries its own regulatory backbone, and there is no single federal licensor for the level:

• Investigation/screening lives under the Fair Credit Reporting Act (FCRA): screeners are legally consumer reporting agencies, so covered reports require applicant consent, a permissible purpose, maximum-possible accuracy, a dispute process, and a two-step adverse-action procedure — enforced by the Federal Trade Commission (FTC) and Consumer Financial Protection Bureau (CFPB), with statutory-damages class actions as a live financial risk [18]. Equal Employment Opportunity Commission (EEOC)/Title VII guidance and "ban-the-box" laws limit blanket use of criminal records, and private-investigator licensing is a state-by-state patchwork [18].
• Guards are licensed state by state (often both the company and the individual officer), with fingerprint checks and mandated training that varies widely; federal-government guard contracts add the McNamara-O'Hara Service Contract Act (prevailing wages/benefits), and the Fair Labor Standards Act sets the wage floor. The Private Security Officer Employment Authorization Act (2004) allows FBI criminal-history checks on applicants [3].
• Armored car is among the most heavily licensed: state licensing of carriers and armed crews, the Armored Car Industry Reciprocity Act of 1993 (so armed crews can cross state lines), heavy insurance requirements, and Department of Transportation/FMCSA vehicle rules. It also carries a live anti-money-laundering (AML) exposure — in 2025 the Treasury's FinCEN assessed a $37 million penalty against Brink's Global Services USA in what it called its first enforcement action against an armored-car company [13].

Investor implication: compliance is simultaneously a moat (it keeps out sub-scale entrants) and an uncapped liability (FCRA class actions, AML penalties, use-of-force claims). A firm's licensing, insurance, audit history, and dispute/data-security controls deserve as much diligence as its revenue growth.

8. Competitive dynamics and consolidation

All three segments are consolidating, but from very different starting points — which is why the level's blended CR4 of 33.5% is misleading:

• Armored car is already a near-oligopoly (top four ≈ 90% of receipts, HHI 2,721) — Brink's rolled up Dunbar (2018) and most of G4S's cash operations (2020); GardaWorld built an end-to-end platform; Loomis and Prosegur run steady tuck-ins [1][13].
• Guarding is fragmented but roll-up-driven: Allied Universal (AlliedBarton + Universal, then the $5.3B G4S deal) is the archetype, with Titan/Marksman and others consolidating one tier down [10]. Barriers are low locally but high nationally (insurance buying, scheduling, compliance, multi-site coverage).
• Screening consolidated fast into ~5 platforms — First Advantage (absorbing Sterling), HireRight, Checkr, Accurate (which bought Orange Tree), Cisive — atop a fragmented tail of ~3,800 detective agencies (top four ≈ 23%) [6][7].

The distinctive rollup dynamic is that consolidation happens within and across these codes at once. The former G4S empire was split between Allied Universal (guards) and Brink's (cash). GardaWorld and Securitas/Pinkerton each straddle two of the three segments. So the competitive map is not three separate contests but a set of global platforms assembling security-and-cash portfolios that cut across the NAICS boundaries — while below them, thousands of local guard firms, detective agencies, and regional carriers remain classic acquisition fodder.

9. Risks

Level-wide, then segment-specific:

• Labor is the shared operational risk — turnover above 50% in guarding, wage inflation across all three, and thin margins that a mispriced contract or lagging wage pass-through can erase (worst in guards) [16][17].
• Cyclicality — screening volumes fall immediately when hiring cools; guard-hours and cash volumes soften in recessions [8].
• Compliance and litigation — FCRA statutory-damages class actions (screening), AML/FinCEN and firearms exposure (armored car), and negligent-hiring/use-of-force claims (guards); regulation is both moat and uncapped liability [13][18].
• Technology as a double-edged sword — AI video analytics, remote monitoring, and robots can cap guard headcount growth, while API-first entrants commoditize routine background searches — even as AI-era fraud makes identity verification more valuable [8].
• Secular headwind in armored car — cash's declining payment share erodes legacy transport, a transition (to managed services) rather than a guarantee [13].
• Leverage and opacity — the private, PE-owned leaders across all three carry meaningful acquisition debt and disclose little, making downside harder to underwrite; growth also consumes working capital (guards pay staff before clients pay invoices; armored car is capital-heavy) [10][13].
• Data and physical security — screeners hold highly sensitive personal data (breach = existential); armored carriers face robbery, insider collusion, and vault loss.

10. How to invest and outlook

Public-market routes (segment-picked, not level-wide). There is no fund or ticker that cleanly buys "NAICS 56161." The practical menu:

• Armored car — the cleanest public exposure. Brink's (NYSE: BCO) is the one genuine U.S.-listed large-cap; Loomis (Stockholm) and Prosegur Cash (Madrid) are foreign-listed alternatives [13][14][15].
• Screening — one pure-play. First Advantage (Nasdaq: FA); Equifax (EFX) and TransUnion (TRU) offer indirect, diversified exposure but are fundamentally credit bureaus [6].
• Guards — no U.S. pure-play. Securitas (Stockholm/OTC) is the closest listed guard exposure; the marquee catalyst is a possible Allied Universal IPO (management has floated 2026) that would finally give U.S. investors a scaled listed guard vehicle [10][11].

For any listed name, judge U.S.-segment growth, retention, wage/route/technology mix, cash generation, leverage, litigation/insurance reserves, and — since most are diversified or foreign — do not compare valuation multiples mechanically across the three very different models. Tickers, yields, and multiples should be checked at the time of investment.

Private-market routes (where most of the industry lives). All three segments are fragmented, recurring-revenue, and roll-up-friendly, which is why PE, search funds, and independent sponsors are active buyers: regional guard firms and detective agencies at modest EBITDA (earnings before interest, taxes, depreciation, and amortization) multiples; underutilized armored-car routes with density upside; and private credit secured by contracts, fleets, and receivables. Because private disclosure is limited, diligence has to go deeper — contract assignability and customer concentration, licensing and compliance history (FCRA/AML/wage-and-hour), turnover and fill rates, insurance reserves, accuracy/loss records, working capital, and owner succession.

Outlook (analytical judgment). Expect the level to keep growing in dollar terms at a modest pace, driven more by wage inflation, higher-value services, and outsourcing than by rising headcount, which federal projections show as roughly flat [5]. The three segments diverge on trajectory: screening becomes a continuous, identity-and-fraud-driven service (the strongest structural grower); guarding shifts from commodity "warm-body" staffing toward "guarding + technology" as its main margin lever; and armored car races to convert "moving cash" into recurring, technology-priced "managing cash" before legacy transport thins out. Consolidation should continue across and within all three, with a layer of global platforms (Allied Universal, Securitas, GardaWorld, Brink's, Loomis, Prosegur) extending their reach. The swing factors to watch are labor costs and minimum-wage policy (all three), U.S. hiring volume (screening), the data-center/critical-infrastructure build-out (guards), the slope of cash's decline versus its store-of-value resilience (armored car), and whether Allied Universal comes public and reprices the sector's visibility. Our federal data set provides no market-growth rate or total-addressable-market estimate for this level, so none is stated here.

---

Sources

1. U.S. Census Bureau, 2022 Economic Census — Concentration of Largest Firms (EC2200SIZECONCEN), NAICS 56161 and children 561611 / 561612 / 561613 (receipts, firm counts, CR4/CR8/CR20/CR50, HHI). https://data.census.gov/table/ECNSIZE2022
2. U.S. Census Bureau, County Business Patterns 2023 — NAICS 56161 and children (establishments, employment, annual and first-quarter payroll). https://www.census.gov/programs-surveys/cbp.html
3. U.S. Census Bureau, 2022 NAICS Manual — 56161 Investigation, Guard, and Armored Car Services and definitions for 561611, 561612, 561613 (scope and exclusions). https://www.census.gov/naics/
4. U.S. Small Business Administration, Table of Small Business Size Standards (561611 $25M; 561612 $29M; 561613 $43M in average annual receipts), 2023. https://www.sba.gov/document/support-table-size-standards
5. U.S. Bureau of Labor Statistics, Occupational Outlook Handbook / Occupational Employment and Wage Statistics — Security Guards (33-9032) and Private Detectives and Investigators, 2024–2025. https://www.bls.gov/ooh/protective-service/
6. First Advantage Corporation, Acquisition of Sterling Check ($2.2B, 2024) and Q4/FY2025 results; IBISWorld / Mordor Intelligence, Background Screening Market, 2025–2026. https://investors.fadv.com/ · https://www.ibisworld.com/united-states/industry/background-check-services/6058/
7. HireRight / SEC, Completion of Acquisition by General Atlantic and Stone Point Capital (~$1.7B take-private, 2024). https://www.sec.gov/Archives/edgar/data/1859285/000114036124031658/ny20031827x3_ex99-1.htm
8. Reveal / First Advantage, AI, deepfakes, and continuous monitoring in background screening, 2026; U.S. BLS occupational projections 2024–2034. https://www.revealbackground.com/
9. Forbes, Background-Check Startup Checkr Is Cashing In, 2026; Checkr, Year in Review 2025 and 2021 funding round (~$4.6B valuation). https://www.forbes.com/sites/iainmartin/2026/01/13/ · https://checkr.com/resources/articles/checkr-year-in-review-2025
10. Allied Universal Newsroom, Allied Universal Pursues M&A Ahead of Possible 2026 IPO Consideration; Security Info Watch, Allied Universal Acquisition of G4S ($5.3B, 2021); Titan Security Group, Titan–Marksman Merger (Quad-C), 2024. https://ausnewsroom.aus.com/
11. Securitas AB, Annual and Sustainability Report 2024 (~$16B revenue; ~322,000 employees; Pinkerton; 87% North American client retention). https://www.securitas.com/
12. GardaWorld, Recapitalization led by founder Stephan Crétier and HPS Investment Partners (~C$13.5–14B; management ~70%), 2024–2025. https://www.gardaworld.com/news/
13. The Brink's Company, Form 10-K FY2024 and Q4/FY2024–2025 results (~$5B revenue; AMS/DRS vs. CVM mix; restricted cash); FinCEN, $37M civil penalty against Brink's Global Services USA (first armored-car AML action), 2025; Armored Car Industry Reciprocity Act of 1993 (15 U.S.C. ch. 85). https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0000078890 · https://www.fincen.gov/news/news-releases/fincen-announces-37000000-civil-money-penalty-against-brinks-global-services-usa
14. Loomis AB, Annual and Sustainability Report 2024 (group and U.S. revenue; SafePoint smart safes). https://www.loomis.com/
15. Prosegur / Prosegur Cash, S.A., Company and share information (BME Madrid: PSG / CASH). https://www.prosegur.com/en/investors-shareholders
16. ASIS International, Guard-Force Turnover (turnover >50%; top operator challenge), 2025; Center for American Progress, security-officer wages ~$17/hour, 2025. https://www.asisonline.org/
17. Citywide Security, Security Company Financial Insights (labor 55–65% of revenue; net margins mid-single digits), 2025; Belfry Software, security-industry statistics, 2025. https://citywidesecuritycompany.com/private-security-services-and-profitability/
18. U.S. Federal Trade Commission and Equal Employment Opportunity Commission, Background Checks / FCRA guidance for employment screening; CFPB, Circular 2024-06 (background dossiers and algorithmic scores), 2014–2024. https://www.ftc.gov/business-guidance/resources/background-checks-what-employers-need-know · https://www.consumerfinance.gov/compliance/circulars/consumer-financial-protection-circular-2024-06-background-dossiers-and-algorithmic-scores-for-hiring-promotion-and-other-employment-decisions/
19. U.S. Census Bureau, Nonemployer Statistics (solo, no-payroll firms excluded from employer-based counts). https://www.census.gov/programs-surveys/nonemployer-statistics.html