Someone researching how to start a security guard company in Virginia usually comes from a state where “get a guard license” is a fairly narrow, single-lane process, and expects the same here. Virginia’s licensing structure is broader than that. The state’s regulator groups categories together that many states license separately or don’t license as a distinct category at all — unarmed guard, armed guard, private investigator, armored car personnel, and canine handler services can all fall under related licensing tracks administered by the same agency, and the application asks a new company to be specific about exactly which of those categories it intends to operate in from day one.
How to start a security guard company in Virginia: know the regulator first
In Virginia, private security services businesses are licensed through the Department of Criminal Justice Services (DCJS), specifically its Division of Licensure and Regulatory Services. This is the agency you’ll be dealing with directly for the business license itself, and it’s a different regulatory body than the ones many owners are used to if they’ve licensed a security company in a state where a state police agency or a separate board handles it. Before doing anything else — before writing a business plan, before quoting a first client — the DCJS is where an owner needs to start, because the category structure and the paperwork requirements come from that office specifically, and requirements do change, so anything below should be verified directly with DCJS rather than assumed to still be current.
The category breadth is the detail that catches new owners off guard. A company that plans to offer only unarmed guard services still needs to be precise on its application about that scope, because armed services, investigative services, armored car services, and canine services are handled as related but distinct licensing categories, not automatic extensions of a general security license. An owner who assumes a broad “security company license” covers whatever the business decides to do later will find out otherwise when a client asks for armed coverage or K-9 screening and the company isn’t licensed for it.
The designated compliance agent requirement
One structural feature that distinguishes Virginia’s system from a lot of states is the requirement for a designated compliance agent — a specific individual associated with the licensed business who is responsible to DCJS for the company’s ongoing compliance with licensing requirements. This isn’t a formality that gets filed once and forgotten. It puts a named person at the center of the company’s regulatory relationship with the state, and that person needs to actually understand what DCJS expects on an ongoing basis, not just at the initial application.
For a new owner, this means the earliest structural decision in starting the company isn’t just “who’s on payroll” — it’s “who is going to be the compliance agent, and does that person have the standing and the bandwidth to own this relationship with the regulator.” Owners who treat the compliance agent designation as a rubber stamp, assigning it to whoever’s available rather than someone who will actually track renewal timing, employee registration requirements, and category-specific rules, tend to be the ones who get surprised by a compliance gap later.
Structuring the business before the first contract
Once the licensing category and compliance agent question are settled, the operational build-out looks like it does anywhere: written post orders for every site so expectations don’t live only in a supervisor’s head, a scheduling process that can actually cover a post without relying on one person’s memory, and a way to document what happened on shift that holds up if a client — or DCJS, in an audit — asks for it. None of that is Virginia-specific, but it matters more in a state with a broader licensing category structure, because a company that’s precise about its licensed categories should be equally precise about which post orders and which officers apply to which category of work, especially if the company holds licenses across more than one category.
New owners in Virginia also need to think about employee-level requirements separately from the company license. In most states with a structure like this, individual officers need their own registration or certification through the same regulator, on top of the business holding a company license — the business license alone does not automatically clear every officer working under it. Confirm directly with DCJS what applies to each role the company plans to staff, including any distinctions between armed and unarmed personnel, because getting the company license right and then missing an individual officer requirement is a common and avoidable gap.
Renewal is a recurring compliance task, not a one-time hurdle
Owners tend to treat licensing as something you get through once at the start and then mostly forget about. In a state with a category structure as detailed as Virginia’s, that assumption is riskier than usual, because a company holding licenses across more than one category — say, unarmed and armed guard services together — is tracking more than one renewal cycle, potentially with different requirements attached to each, plus whatever individual-level registration or training obligations apply to the officers working under each category. The designated compliance agent role exists precisely because this isn’t a “file it and forget it” system; it’s an ongoing relationship with DCJS that has to be actively managed, not passively maintained.
This is exactly the kind of compliance work that benefits from being tracked in one place rather than reconstructed from memory when a renewal notice arrives. A company that keeps a clear internal record of which license categories it holds, when each one is up for renewal, and which individual officers are registered under which category is in a far stronger position than one that discovers a lapse only when DCJS flags it — or worse, when a client asks a licensing question the company can’t answer with confidence.
What to actually verify before you launch
Confirm directly with DCJS’s Division of Licensure and Regulatory Services which specific license categories apply to the services you plan to offer, what the designated compliance agent role requires on an ongoing basis, and what individual officer-level requirements exist separately from the company license. Do not rely on guidance written for another state, and do not assume a general web search reflects the current version of Virginia’s requirements — regulations get updated, and a new company’s entire timeline can shift based on details that change.
This isn’t legal advice, and nothing here should be treated as a complete or current statement of Virginia’s licensing requirements — confirm everything directly with DCJS and, given the stakes of getting a new company’s license structure wrong, with an attorney familiar with Virginia private security licensing before you finalize your application. What you can control in the meantime is building the operational habits — clear post orders, real scheduling discipline, documented incidents — that make a licensed company actually defensible once it’s running.
If you’re building out those operational habits as you get a new Virginia security company off the ground, see how CGuardPro supports post orders, scheduling, and documentation from day one at CGuardPro or get in touch.