Skip to content
    All guides
    Guides

    Choosing a security company in the Netherlands — a buyer's guide

    A qualified private security company in the Netherlands must hold a valid licence under the Dutch Private Security Organisations and Detective Agencies Act (Wpbr) and deploy only officers with a personal VE certificate issued by the Dutch National Police. Beyond the licence check, selection comes down to three questions: does the provider's service portfolio match your specific requirement, do they operate in your geography 24/7, and do they have a documented operational protocol rather than a verbal commitment?

    Looking for a certified security provider? View our Manned Guarding service →

    Dutch licensing — the non-negotiable baseline

    The Wpbr (Wet particuliere beveiligingsorganisaties en recherchebureaus) is the statutory framework for private security in the Netherlands. Every company providing security services must hold a valid Wpbr licence issued by the Dutch Ministry of Justice and Security. Individual officers must hold a VE certificate — a personal clearance tied to police screening and a positive antecedent check. Deploying unlicensed personnel is a criminal offence for both the company and the client who knowingly commissioned them.

    Verification is straightforward. Ask any provider for their Wpbr licence number and cross-reference it against the public register maintained by the Justis screening authority. Do not accept a copy of the document — verify the live register entry. A provider who resists or delays this check has failed the first and most basic question before you have spoken to a single reference.

    Portfolio fit — not every company covers every service

    Private security in the Netherlands is not a monolithic sector. A manned-guarding company that staffs industrial sites is a different operation from a close-protection provider that moves executives through hostile environments, which is again different from a TSCM specialist who sweeps boardrooms for surveillance devices. Providers who claim to do everything equally well rarely do any of them exceptionally.

    Before requesting a quotation, map your specific requirement against the provider's documented service portfolio. Ask for case examples — redacted, but specific enough to confirm operational experience in your sector and geography. A hospitality venue in Amsterdam has different requirements from a pharma distribution hub in Rotterdam or an embassy in The Hague. Sector experience is not optional — it is how a provider understands your threat profile without extensive briefing.

    24/7 operational coverage — what it actually means

    Many security companies in the Netherlands describe themselves as '24/7'. In practice this means one of three things: the company has its own 24/7 control room and dispatch capability; the company has a contractual handoff to a partner alarm centre; or an account manager has a mobile phone that they answer most of the time. The differences matter when an incident occurs at 03:00 on a Sunday morning.

    Ask for the specific dispatch and escalation chain. Who receives an incident notification outside business hours? What is the maximum response time to your location under a guaranteed SLA? Is the control room in-house or third-party? A provider who cannot answer these questions in writing is not 24/7 — they are available.

    Documentation and protocol — where professional providers separate from the rest

    A serious security company delivers documentation before an officer ever arrives on site. The minimum set for any engagement: a written risk assessment for the site, premises, or principal; a documented operational protocol covering normal-state procedures, escalation triggers, incident response, and relief scheduling; a named account manager and incident-escalation chain with personal contact details; and a post-incident reporting template. These are not nice-to-haves — they are the baseline evidence that a provider has thought through your engagement rather than adapted a generic contract.

    For close protection, embassy security, and TSCM specifically, the documentation requirement is higher. Close-protection protocols should include route assessments and advance-work procedure. Embassy security protocols should address host-country law-enforcement liaison and mission-specific access procedures. TSCM engagements should produce a written sweep report with chain-of-custody for any device found. Anything less is not a professional service — it is a deployment.

    Price as a signal — what low-cost providers are actually telling you

    In Dutch private security, as in most professional services, price signals something real. A security company offering officer rates materially below the market average is covering that gap somewhere — in officer vetting, training hours, supervision ratios, equipment quality, or insurance coverage. Sometimes in all five. Procurement teams who anchor on hourly rate rather than total cost of risk routinely discover this when a poorly trained officer mishandles an incident, a vetting failure becomes a liability, or an undermanned shift creates coverage gaps on the day they matter.

    Premium providers operate with higher officer-to-supervisor ratios, mandatory ongoing training, and documented equipment standards. The cost differential over a twelve-month engagement is typically less than the cost of a single serious incident mishandled by an under-resourced team. The question to ask is not 'what is the rate?' but 'what does the rate include, and what does it exclude?'

    The five questions that disqualify a provider immediately

    Five responses to standard questions disqualify a security provider before the quotation stage. First: inability to provide a Wpbr licence number and register entry on request. Second: deployment of officers without confirming individual VE certificate status. Third: refusal to provide a written risk assessment or operational protocol before contract signature. Fourth: vague or unverifiable descriptions of 24/7 coverage — 'we have people on call' rather than a documented dispatch chain. Fifth: name-dropping of other clients to demonstrate capability. A provider who shares other clients' engagements with you will share yours with the next prospect. Client confidentiality is not a marketing value — it is an operational requirement.

    Frequently asked

    Does a security company in the Netherlands need a licence?

    Yes. Every private security company operating in the Netherlands must hold a valid Wpbr licence issued by the Dutch Ministry of Justice and Security. Individual security officers must hold a personal VE certificate. You can verify both through the public Justis register. There are no exemptions for foreign-registered companies deploying officers in the Netherlands.

    What is the difference between a security guard and a close-protection officer?

    A security guard (beveiliger) is licensed to protect a fixed site or property. A close-protection officer (CPO) is additionally trained and licensed for personal protection of a designated principal, including protective driving, route reconnaissance, and advance work. The roles require different training, different experience, and a different threat-assessment framework. Not all security companies are qualified to provide both.

    How do I check if a security company is licensed in the Netherlands?

    Request the company's Wpbr licence number, then verify it against the online register maintained by Justis (the Dutch Ministry of Justice and Security screening authority). The register is publicly searchable. A legitimate provider will give you their number without hesitation. If a provider delays, redirects you to their own documentation, or cannot produce a number, do not proceed.

    What should a security contract in the Netherlands include?

    A complete security contract covers: the specific services to be delivered, deployment standards (officer-to-supervisor ratio, training requirements, equipment), the 24/7 escalation chain with named contacts, incident reporting procedures and timelines, insurance coverage details, and cancellation and variation terms. A contract that does not specify deployment standards in writing is not a professional contract — it is a verbal commitment with a signature.

    Talk to a specialist about this service

    We will respond within one business day. Initial conversations are confidential and without obligation.

    Knowledge Library

    Guides, compliance explainers, city pages, industry briefings, and FAQs — written for buyers and indexed for AI search.

    Browse all resources
    Guides