Sanctuary Framework · Family office engagement

The report your family keeps.

One day onsite. A board-ready Family Threat Model Report — maturity, priority findings, and a 30 / 90 / 180-day roadmap — generated the same day, reviewed with you, and left on USB you own.

  • Principal-led assessment — walked the way an adversary would
  • 156 controls scored against NIST CSF 2.0, Govern through Recover
  • Same-day report + living Sanctuary Model on private USB you keep
  • We bring a dedicated tablet — your computers stay yours; the tablet retains none of your data
View sample report Book · $10,000 Remediation paths
The crown jewel

Inside the report

The Family Threat Model Report is what principals share with counsel and family leadership — executive brief, maturity by function, People · Institutions · Lifestyle, priority findings, and roadmap. See a full illustrative sample (fictional household, abbreviated findings).

  • Cover & classification — confidential, client-held
  • Executive brief — maturity, gaps, top risks in plain language
  • Priority findings mapped to optional Sanctuary remediation paths
  • 30 / 90 / 180-day roadmap + residual-risk acceptance
Open sample report →
Family Threat Model Report cover — illustrative sample

Illustrative report cover — the artifact counsel and family leadership can open the same day.

How we differ

Digital executive protection — on site, not only online.

National digital executive protection platforms (BlackCloak, 360 Privacy, and peers) excel at remote monitoring and cloud dashboards. TargetProof is the principal-led, Atlanta-based alternative: we come to the residence, assess in person, and leave the record on media you own.

National DEP platforms

Remote · subscription · console

Continuous dark-web and reputation monitoring, device agents, and multi-family-office partnerships at national scale. The right fit when the household wants a named platform and a dashboard more than a day in the house.

TargetProof Family Threat Model

On site · USB you keep · Atlanta principal

One day walked the way an adversary would. Board-ready report the same day. Living Sanctuary Model on private USB — the tablet retains none of your assessment data. No cloud assessment account. $10,000 for the engagement day.

How delivery works

We bring the tools. You keep the record.

No awkward ask to borrow a household computer. No cloud portal. No lingering copy on our gear.

01 · On site

Dedicated tablet

We arrive with a tablet we control and a private USB key prepared for your household. The Sanctuary Model runs on that tablet — your laptops and desktops stay yours.

02 · Capture & report

Writes only to your USB

Intake, scores, and the Family Threat Model Report are written to the USB you will keep. Working session state does not leave with us as a retained client file.

03 · Before we leave

Review & handoff

We walk the findings with you the same day — what matters, what can wait, and the first actions if any. You keep the USB. The tablet retains none of your assessment data.

Custody in plain language: assessment data lives on the USB in your possession. TargetProof does not take a retained copy home, and does not host your model in a cloud account.

The living system

Sanctuary Model on USB

The report is the board artifact you open that afternoon. The Sanctuary Model on the same USB is the living system — scores, threat spectrum, and roadmap stay with the household for future review.

  • Encrypted vault on media you hold — not a TargetProof cloud login
  • Threat Spectrum mapped to your household context
  • Guided assistant from your scored model — no cloud AI in Standard Edition
  • Tablet wiped of working session; you retain the only copy unless you later share one for support
Investment

$10,000

One day onsite. Same-day report and living model on USB you keep. We confirm fit, timing, and scope in a confidential briefing before the engagement day.

Arrange a private briefing
How the model works

The Sanctuary Loop

Four questions. One integrated picture — from household context through scored controls to a plan you can actually execute.

01
What are we protecting?

Structured intake: properties, participants, advisors, travel, incidents, and goals. Business context before controls — scoped to your household, not a generic checklist.

02
What can go wrong?

156 controls scored across Govern → Recover (NIST CSF 2.0), plus a Threat Spectrum of documented targeting patterns and regulator-aligned fraud warnings.

03
What will we do about it?

Gaps tallied and prioritized. Auto-generated summary and 30 / 90 / 180-day roadmap. Every gap links to a Sanctuary remediation service when you are ready to act.

04
Did we do enough?

Built-in review: effectiveness, explicit residual-risk acceptance, and what to improve next cycle. The framework sharpens over time — without the deliverable growing heavier.

How the assessment works

What it is

A principal-led, one-day onsite engagement. Together you walk your residence and family office context the way an adversary would — physical, digital, and human. Every control is scored. Gaps are tallied. Recommendations tie directly to remediation you can execute on your timeline.

We capture the assessment on a dedicated tablet we bring and write the Family Threat Model Report and Sanctuary Model to a private USB you keep. Before we leave, we review findings with you so next steps are clear. The tablet retains none of your assessment data. What remains is clarity: where you are exposed, what matters most, and exactly how to close it.

Ideal for: Family offices, multi-property estates, and principals who need an integrated picture — not another vendor checklist or enterprise software diagram.

What's Included
  • 156-control Sanctuary Framework (NIST CSF 2.0: Govern → Recover)
  • Structured intake across People · Institutions · Lifestyle
  • Threat Spectrum — documented targeting patterns and FTC-aligned fraud warnings
  • Onsite probes across primary residence and agreed scope
  • Family Threat Model Report — board-ready findings & roadmap, same day
  • Private USB Sanctuary Model — vault, scores, living updates you keep
  • On-site findings review before handoff
  • 30 / 90 / 180 day remediation roadmap
  • Annual Review loop with explicit residual-risk acceptance
Standard Edition
Guided assistant. No AI. No cloud.

Every engagement produces the same private USB deliverable: 156 controls, threat spectrum, maturity dashboard, gap-linked remediation, and a rule-based assistant that reads your scored model — no language model, no external AI, no data connectors. Built for family offices that want maximum discretion and a record they control.

Open source

The Sanctuary Model, published.

The Standard Edition is available on GitHub for practitioners, family offices, and researchers who want the framework without vendor lock-in. Same on-device architecture — encrypted local vault, 156 controls, threat spectrum, maturity dashboard, and guided assistant.

Released under the MIT License: free for personal and commercial use, with no royalties or compensation required. Modify it, embed it in your practice, or hand it to a client household — keep the license notice with any redistribution.

View on GitHub Read disclaimer
What you should know
  • Software is provided as-is — no warranty, no guarantee of security outcomes
  • Not legal, tax, insurance, or professional cybersecurity advice
  • You are responsible for how assessment data is stored and used once it is on media you control
  • A principal-led onsite Family Threat Model engagement remains the white-glove path — tablet capture, USB packaging, same-day report review, probes, and Sanctuary remediation are separate from the open repository
Beyond generic cyber

Full-spectrum threat context

The threats wealthy households actually face — mapped to controls, not buried in a PDF appendix.

NIST CSF 2.0
Household-applied outcomes

Govern, Identify, Protect, Detect, Respond, Recover — translated for estates and family offices, not enterprise software alone.

Regulator-aligned warnings
FTC fraud themes

Impersonation, business email compromise, wire diversion, SIM swap, deepfake voice calls, data-broker exposure, and real-estate closing fraud.

Documented targeting patterns
What adversaries actually do

Home-invasion coercion for crypto assets, family-office wire fraud, integrator backdoor access, OSINT-enabled targeting, staff social engineering, and travel-route surveillance.

Patterns highlight automatically from your intake. You mark what is relevant. Your summary and assistant read from the same context.

Three Dimensions

Not just cyber. Not just physical.
Integrated protection.

Every control is tagged across these dimensions — because adversaries do not respect silos.

People
Family, staff, advisors

Access, behavior, training, and trust boundaries across everyone who touches your world.

Institutions
Family office & entities

Trusts, banks, counsel, insurers — governance and coordination across your professional ecosystem.

Lifestyle
How you actually live

Travel, residences, philanthropy, public profile — the patterns that make you predictable to an adversary.

For advisors

A protection layer alongside the plan

Referring attorneys, wealth managers, and family offices can offer clients two formats: Standard (no AI components) for maximum discretion, or AI for households that want conversational follow-up — still entirely on-device. The assessment complements wealth, succession, and governance work with integrated security most families have never had in one place.

Partner with TargetProof to bring Sanctuary-grade assessment to your clients.

For Advisors →

Peace of mind,
measured and maintained.

A private diagnostic. A living model you own. A clear sequence when you are ready. Discretion is not a feature — it is the foundation.

Arrange a Private Briefing