Virginia does not hand private security licensing to a consumer-affairs board. It gives it to the Department of Criminal Justice Services — the same agency that sets training standards for police officers — and that shows in how the rules read.
The result is a system unusually forgiving about who may run a guard company, and unusually strict about what every individual on your payroll must hold before standing a post.
Get the sequence right and Virginia launches fast. Get it wrong and you are paying guards who legally cannot work.
- Licensing agency
- Virginia DCJSDepartment of Criminal Justice Services, Division of Licensure and Regulatory Services
- Licence you need
- Private Security Services Business LicenseCategory: Security Officers / Couriers
- Compliance agent experience
- None required18+, fingerprints, and 80% on the DCJS regulatory compliance exam
- General liability minimum
- $1M aggregateGeneral aggregate, DCJS named as certificate holder
- Entity registered with
- VA State Corporation CommissionThe SCC ID number is a required field on the DCJS application
- Realistic time to operating
- 6–12 weeksDCJS quotes up to 30 days to issue once the file is complete
The whole path, in order
Two things gate everything else — a certified compliance agent and a liability certificate written the way DCJS wants it.
Compliance agent certified
3–6 weeksBlocks everything downstream — start it earlyApply in the LOTUS portal, pay the $50 fee, get fingerprinted through Fieldprint, then take DCJS course 12E and score at least 80%. There is no experience requirement, so this is knowledge and scheduling rather than a career hurdle — but no business licence issues until someone holds it.
Entity registered with the SCC
2–5 daysVirginia has no Secretary of State registry; articles of organization go to the State Corporation Commission for $100. Do this before touching the DCJS application, because the SCC identification number is a required field on it.
Liability certificate bound
1–2 weeksA comprehensive general liability policy at $1 million general aggregate, from a carrier authorized in Virginia, with the Department itself listed as a certificate holder. A standard certificate naming only your company comes straight back.
Business licence filed in LOTUS
Up to 30 daysBlocks everything downstream — start it earlyApplication, fees, principal fingerprints, insurance certificate, SCC number, a physical Virginia address for your records, and the service categories you want. DCJS says up to 30 days from the point everything is in — not from the day you submit.
Training arranged at a certified school
1–3 weeksCompulsory hours only count if a DCJS-certified school under 6VAC20-173 delivers them. Book capacity before you sign a contract, or certify your own school for $800 if you plan to hire in volume.
Officers registered and endorsed
2–6 weeks$25 per registration, $50 for prints, $10 more for a firearms endorsement. Unarmed officers can start under a 90-day authorization; armed officers cannot work at all until the registration is in hand.
Local tax accounts and first contracts
OngoingRegister for BPOL in every Virginia locality where you have a definite place of business, then start winning work. Fairfax County, Richmond and Virginia Beach each assess it separately.
Step 1: Certify Your Compliance Agent
Virginia Code § 9.1-139 is blunt — no business licence issues until a compliance agent is designated in writing. That person is answerable for the company's compliance with the whole article, and you name them on the application itself.
There is no experience requirement
This is the biggest structural difference between Virginia and its neighbours. California wants 2,000 documented hours from a Qualified Manager; New York wants two years from its qualifier. Virginia asks that you be 18, a citizen or legal resident alien, fingerprinted, and $50 lighter. That is the whole eligibility test — and it is deliberate: Chapter 214 of the 2018 Acts of Assembly told DCJS to strike the experience requirement, and the regulation was amended to do it on 28 November 2018.
What replaces it is an exam
DCJS gates on regulatory knowledge instead: entry-level regulatory compliance training, course 12E, $75, classroom or online, with a minimum 80% on the examination, completed within twelve months of your application being approved. Certification runs up to 24 months, renewed with course 12I and $25.
Sequence it in parallel
Application first, course second — file in LOTUS, pay, get printed, then train. But the business licence only requires an agent "certified or eligible for certification", so the company application need not wait for your certificate. Filing both together is the biggest schedule lever in this state.
Step 2: Form Your Legal Business Entity
Virginia registers businesses through the State Corporation Commission, not a Secretary of State. LLC articles of organization are $100, and the ongoing obligation is a $50 annual registration fee with no annual report to write.
LLC or corporation
Either satisfies DCJS. What matters is that the entity exists first: the SCC identification number is a required field on the licence application for everything except a sole proprietorship or general partnership. You also need a physical Virginia address where records are kept and service can be made — a mailbox will not do — and out-of-state owners file the Irrevocable Consent for Service form alongside it.
Step 3: Get the Liability Certificate DCJS Will Accept
Virginia states its minimum unusually: comprehensive general liability with "$1 million of general aggregate liability insurance" — an aggregate figure, with no per-occurrence number set at all. Two mechanical details cause returned applications. The certificate must reflect the Department as a certificate holder, and the carrier must be authorized to do business in Virginia. Both apply again at renewal. There is no surety bond option and no bond amount: a bond was accepted in place of the policy until 28 November 2018, when Chapter 214 of the 2018 Acts of Assembly removed it, and § 9.1-144 has read "Insurance required" ever since.
Step 4: Apply for Your Business License
Everything is filed through the LOTUS portal: application and fees, fingerprint registration for each principal, the insurance certificate, your SCC number, the Virginia address, and your service categories.
Key Tips for Your Application
- Pick categories deliberately. One is included; each extra is $50. Guard work is "Security Officers / Couriers" — if you also intend alarm response or armored car, adding it now beats amending later.
- File on paper and DCJS adds a $5 service fee. There is no upside.
- Renewals are due at least 30 days before expiry. Miss it and reinstatement costs 50% above the renewal fee.
What it actually costs
Virginia's fees sit in the Administrative Code rather than a departmental schedule, which is why the table cites the regulation — DCJS publishes no amounts on its public pages, and the one pointer its fees FAQ does give, 6VAC20-171-20, was repealed in 2015. The figures below have stood unamended since September 2015; a 2021 notice proposing to raise fees "unchanged since 2003" has sat at the proposed stage ever since. There is no application-fee-plus-issue-fee split — the licence is one payment.
| Line item | Cost | Cadence |
|---|---|---|
| Initial business licence, two-yearYou choose the term on the application. A one-year licence is $550, so the second year costs $250. Includes one service category. | $800 | One-time |
| Additional service categoryoptionalPer category beyond the first. Free to add or drop at renewal time. | $50 | One-time |
| Fingerprint processing, per principalEvery officer, director, partner or sole proprietor is printed. Paid in halves — $25 to DCJS with the Criminal History Processing Form, $25 to Fieldprint for the appointment. | $50 | One-time |
| Compliance agent certificationValid up to 24 months, then $25 to renew with the 12I in-service course. | $50 | One-time |
| Regulatory compliance entry-level trainingCourse 12E, classroom or online, with an 80% pass mark on the examination. | $75 | One-time |
| SCC articles of organizationVirginia State Corporation Commission. Corporations pay a charter fee based on authorised shares instead. | $100 | One-time |
| SCC annual registration feeAn LLC pays the fee but files no annual report. | $50 | Annually |
| Officer registrations, two unarmed guards$25 registration plus $50 fingerprint processing each. Renewal is $20 per officer. | $150 | One-time |
| Business licence renewaloptionalDue 30 days before expiry. Late reinstatement adds 50% of the renewal fee. | $500 | Every 2 years |
| Year-one filing cost, before insurance and training tuition | $1,275 |
Required line items only in the total; anything tagged optional is excluded. Figures are current published amounts and move — treat them as a planning range, not a quote. Statutory fees checked August 2026. Confirm against 6VAC20-172-20 and 6VAC20-174-20 before you write any cheques.
Step 5: Register and Train Every Officer
Virginia registers individuals, not just companies, category by category. Unarmed and armed security officer are separate registrations with separate standards, both running 24 months.
An unarmed officer needs 18 hours — course 01E, Security Officer Core Subjects: law, patrol and access control, documentation, emergency procedures, confrontation management, use of force. In-service is 4 hours once per 24-month cycle.
An armed officer needs 50: the same 18 core hours, plus 8 hours of Armed Security Officer Arrest Authority, plus 24 hours of handgun training, with another 3 for a shotgun. On top sits the firearms endorsement, $10, capped at twelve months against a 24-month registration — an annual retraining event of 4 hours, falling inside the 90 days before expiry, or the officer repeats all 24 hours.
The 90-day rule is what makes Virginia workable. Unarmed officers, alarm respondents, locksmiths and dispatchers may work while completing training if fingerprints went in by the hire date and they carry a written 90-day authorization with photo ID; employment cannot exceed 120 days without a registration. Armed officers, canine handlers, personal protection specialists and armored car personnel get nothing — trained and registered, or off the post.
One Virginia-only credential is worth knowing. A Special Conservator of the Peace is a private officer granted limited law-enforcement powers by a Circuit Court over a defined geography — DCJS registration, a court petition, drug and alcohol testing, a background investigation, $500,000 of cover. Neither Maryland nor North Carolina has an equivalent, and it opens property-management work ordinary registrations cannot.
Step 6: Go Live in Virginia's Three Markets
Virginia is three security markets with different buyers, and a generic launch treats them as one.
- Northern Virginia — Fairfax, Arlington, Alexandria, Loudoun, Prince William. Data centres, corporate campuses, federal-adjacent facilities. Highest rates, toughest insurance specs, and where operators wrongly assume a DC or Maryland credential carries over.
- Hampton Roads — Virginia Beach, Norfolk, Chesapeake, Newport News. Port, shipyard and hospitality work, with more armed demand than the rest of the state.
- Richmond — state government, healthcare, distribution. Also where DCJS sits, useful when a filing needs chasing.
Register for BPOL where you operate, get a Google Business Profile live, and answer the phone faster than the incumbent.
Step 7: Build Smart, Not Fast
The compliance load here is not the licence — it is the calendar. Registrations at 24 months, firearms endorsements at 12, in-service once per cycle, the licence and its insurance certificate every two years, and a twelve-month shelf life on training credit. Miss one and an officer is unbillable overnight.
Pay is the other half: guard companies get sued over wages far more often than over incidents. Our guide to labor law compliance for security guard companies is written around California rules, but the onboarding and overtime discipline transfers. On expansion, neither West Virginia nor Tennessee accepts a Virginia registration, and DCJS publishes no reciprocity agreement in either direction.
Your launch checklist
Tick these off as you go — progress saves in your browser.
Ticks are saved in this browser only — nothing is uploaded and no account is needed.
Bonus: Use Technology to Stay Compliant and Professional
Virginia's registration model puts compliance risk at the individual level — this officer's endorsement, that officer's in-service date, whether the guard on a Loudoun data centre post tonight is still inside their 90-day window. Spreadsheets lose that fast. Guard management software like Safetrac tracks patrols live, generates client-ready daily activity reports, and keeps credential expiry attached to the person rather than a filing cabinet — exactly the shape of the problem DCJS creates.
Final Thoughts
Virginia is relaxed about who may own a guard company — pass a course, score 80%, pay $50 — and particular about everyone standing a post, from the 18 core hours an unarmed officer needs to the 50 an armed one does.
Build in that order. Certify yourself as compliance agent, register the entity, buy insurance that satisfies clients rather than merely DCJS, and only then hire. The 90-day authorization lets an unarmed book grow quickly; armed contracts need lead time you plan for rather than discover.
Resources & Links:
- DCJS Private Security Services Business Licensing
- DCJS Compliance Agent Requirements
- 6VAC20-172 — Regulations Relating to Private Security Services Businesses
- 6VAC20-174 — Regulations Relating to Private Security Services Registered Personnel
- Virginia State Corporation Commission Clerk's Information System