Who, after the job
Folio Security Advisors
How and who for the hotel job—verified when attested.
Post-job
16 reviews
Not certifiedA catalog listing is not evidence. Harbor by Signalry has not checked this provider. Evidence tiers
Leave a record
The next hotel starts from what you leave
Harbor by Signalry stays hotels only. A description, a claim, and a reported result each leave a stable id behind. Nothing here is a price, a customer, or a verification.
Buyer
Describe your job
No account. Harbor by Signalry opens the closest catalog brief, when not to buy, and a shortlist. A weak sentence stays on the catalog.
Open a briefSupplier
Claim this listing
Company, jobs served, regions, and a hotel reference. The packet is queued as unverified pending. The form cannot mark it verified.
Claim this listingHotel
Record a result
A metric, before and after, and the dates. It is shown as reported until a person checks the evidence. Verified Outcome is not insurance.
Record a result
HQ
Austin, TX
Coverage
US
Typical fee
$18–40k audit + remediation plan
PMS shape (demo)
opera, mews
Keys
under-80, 80-200, 200-plus
Flag
independent, soft-brand, branded
About
Folio is a hotel-only security practice. They map card flows through PMS, POS, and the booking path, then write a remediation the GM can fund. They do not sell a SIEM. They will say when a franchise-mandated scanner is theater.
AdviceA flag change, a PMS change, or a real card incident.
ClaimedPine Court closed a flag-change PCI gap in 11 weeks without replacing the PMS.
Best for
A flag change, a PMS change, or a real card incident.
Not for
Enterprises that already have a hotel-fluent CISO bench.
Score breakdown
Outcome · 50%
8.6
Integrity · 30%
9.0
Fit · 20%
8.6
Trust & methodology — post-job, no paid rank.
Evidence
- · Pine Court closed a flag-change PCI gap in 11 weeks without replacing the PMS.
- · Scope diagram is written for the owner, not just IT.
Tradeoffs they name
- · They will not rubber-stamp a stack they have not traced.
- · Not a 24/7 SOC.
Jobs they appear on
Replace a brittle PMS without a six-month outage
When the PMS is holding the desk hostage, I want a cutover I can roll back so we change systems without freezing groups for a season.
8–14 weeks including parallel run · 4 who · 1 case
How & who brief
VerifiedAudit PCI after a franchise flag change
When the flag, the PMS, or the booking path just changed, I want a scope I can fund so card data is actually in a smaller box — not a scanner PDF in a drawer.
6–12 weeks to a funded plan · 4 who · 1 case
How & who brief
VerifiedKeep card data out of inboxes and spreadsheets
When a reservationist still pastes a PAN into email, I want a card flow I can draw so the number never lives in a mailbox or a night-audit workbook.
6–12 weeks · 5 who · 2 cases
How & who brief
VerifiedLet an agent act without a master key
When someone wants to ‘just connect the agent to the PMS,’ I want a scope I can draw so it can draft a date change without posting a folio or seeing every card.
2–6 weeks · 5 who · 2 cases
How & who brief
VerifiedPeer cases
A 36-hour freeze, not a 36-day one
The Annex · 164 keys · Chicago, IL
- Claim.
- A 36-hour freeze, not a 36-day one.
- Evidence.
- Parallel-run log, rollback drill, folio balance, exception rate by night four.
- Caveat.
- Demo-shaped PMS. Use the method, not the logo.
Read the case
VerifiedA flag change, a smaller card box
Pine Court · 88 keys · Flagstaff, AZ
- Claim.
- PCI gap closed without replacing the PMS or buying a SIEM.
- Evidence.
- Owner-signed card-flow diagram; watch live 20 days after the flag flip.
- Caveat.
- The franchise scanner was still submitted. It was not the audit.
Read the case
VerifiedThe PAN left the shared drive
The Millwright · 64 keys · Providence, RI
- Claim.
- Card flow the GM can draw.
- Evidence.
- Mailbox sample, shared-drive search, signed diagram.
- Caveat.
- A new terminal nobody uses is theater. Training was the expensive part.
Read the case
Verified