Slow Horses Season 3 Review: When MI5 Protects Itself

Official promotional artwork for Slow Horses Season 3. Apple TV+ promotional material, used for review and commentary.

The first season of Slow Horses distinguished between visible and protected failure. The second separated competence from control. Season three pushes both ideas towards a harsher conclusion: when the institution’s reputation is threatened, guilt matters less than who has enough power to redirect the blame.

Adapted from Real Tigers, the third of Mick Herron’s Slough House novels, Apple TV+’s six-episode third season begins with a compromised operation in Istanbul and a secret buried inside MI5. Years later, a member of Slough House is taken hostage, apparently as part of an elaborate attempt to test the Service’s defences. What begins as a private grievance gradually exposes a struggle over evidence, reputation and control.

The season also makes Jackson Lamb’s attachment to his team unmistakable. Lamb protects people the Service considers disposable. Senior figures at the Park protect the institution, even when doing so requires making people disposable.

That opposition gives Season 3 its strongest material. It also makes the action-heavy final stretch frustrating. The institutional conflict is sharp enough to carry the story, but the series increasingly translates it into a prolonged firefight. I found the result weaker than either of the first two seasons: more brutal and politically consequential, but less distinctive in the way it combines investigation, manoeuvring and physical danger.

London Rules: Blame Follows Vulnerability

London Rules, in the series’ blunt shorthand, mean one thing: cover your arse. Season 3 turns that cynical maxim into an institutional operating principle. Covering oneself may involve suppressing evidence, narrowing responsibility or ensuring that someone less protected is left carrying the consequences. The guilty party is not necessarily the person who suffers. Responsibility settles on whoever lacks the power to send it elsewhere.

The buried secret at the centre of the season threatens senior careers and MI5’s public reputation. Within the Service, those interests are allowed to blur into national security. Avoiding institutional embarrassment becomes preserving public confidence; preventing disclosure becomes protecting active operations. Once the language has shifted, personal survival can travel under the cover of professional duty.

MI5 does not act here as a single unified conspiracy. The Park contains rival factions, competing ambitions and people with sharply different ideas about how the crisis should be handled. The more disturbing point is that secrecy and hierarchy give powerful officials enough insulation to present their preferred outcome as institutional necessity.

An order passes down the chain of command stripped of much of the fear or ambition that produced it. A senior figure defines the objective, someone else turns that objective into an operation, and another person chooses who will carry it out. Hierarchy does not erase culpability; it gives each participant a smaller description of what they did. By the time violence begins, everyone can claim to have controlled only one part of the process.

Diana Taverner understands this environment better than almost anyone. The manoeuvring of the previous seasons now produces larger consequences. She recognises that an operational disaster is also a contest over who will emerge exposed, who will appear indispensable and who will control the version of events that survives.

Kristin Scott Thomas continues to make those calculations pleasurable to watch. Taverner rarely appears hurried, even when people are in immediate danger. Her composure suggests that she is thinking on two timelines at once: what must happen now, and how what happened will later be described.

She does not need every part of an operation to succeed. A failure may remain useful if it weakens a rival, creates leverage or leaves someone else carrying the institutional cost. The crisis is real, but so is the opportunity it creates.

Different people therefore want different parts of the truth exposed, suppressed or redirected. Disclosure is not automatically moral, and concealment is not driven by one unified interest. The decisive question is who gets to choose which version becomes official.

Lamb’s Loyalty Without Tenderness

Jackson Lamb has never treated the slow horses kindly. He insults them, humiliates them and appears to regard ordinary encouragement as a breach of professional discipline. Season 3 does not uncover a gentle paternal figure beneath the abuse. His loyalty is territorial, practical and occasionally vicious.

He may consider his staff reckless, damaged and exhausting, but they are his reckless, damaged and exhausting staff. He knows their limitations better than anyone and often seems personally offended by their ability to make exactly the mistakes he expected. None of that gives outsiders permission to dispose of them.

When one of the slow horses is threatened, Lamb responds without needing to explain what that person means to him. His concern appears through action: the speed with which he takes the danger seriously, the pressure he applies and the anger he reserves for people who treat Slough House as an acceptable source of casualties.

His loyalty does not retroactively turn his abuse into mentoring. The team would almost certainly function better under someone capable of communicating without contempt. Lamb protects his staff, but he does not nurture them, reassure them or spare them from painful truths. Protection, for him, means keeping people alive and refusing to let the Park erase them for administrative convenience.

He protects the team through the same tools he uses against everyone else: information, intimidation, misdirection and an exact knowledge of where institutional bodies are buried. Lamb understands that formal protection cannot be trusted when a person’s survival conflicts with the reputation of the Service.

This places a limit on his cynicism. He knows MI5 is ruthless, deceptive and frequently self-serving, but he has not concluded that every individual should therefore be treated as expendable. His loyalty is selective and abrasive rather than universal, yet it distinguishes him from officials whose allegiance points primarily towards the institution and their position within it.

Slough House does not offer a clean alternative morality. Lamb has participated in concealment and manipulation, while the slow horses lie to one another, act recklessly and cause real damage. What they increasingly possess is loyalty to particular people. That loyalty is imperfect, but it places a boundary around how disposable they are willing to let one another become.

River Cartwright and the Uses of Disobedience

River Cartwright once again acts on incomplete information, reaches a conclusion and moves before he has properly considered how the situation may have been arranged around him. The consequences are predictable to Lamb and, by now, to the audience.

River’s impulsiveness remains psychologically convincing. His deepest professional need is not simply to return to the Park. He wants his judgement vindicated. Waiting for permission leaves someone else in control of whether his conclusion matters, and his experience with MI5 has given him little reason to trust that the institution will reward patience.

The pattern is nevertheless becoming dramatically repetitive. In the first season, his recklessness complicated the idea that he had been unfairly exiled. In the second, it demonstrated that insight and reliability are separate qualities. By the third, his impulsiveness sometimes feels like a device the plot activates whenever it needs someone to enter danger without adequate preparation.

A recurring flaw does not need to disappear to remain interesting. People repeat mistakes, especially when those mistakes are connected to ambition and identity. The behaviour should, however, change meaning as the character accumulates experience.

Season 3 gives River’s distrust of authority a more ambiguous role. The same instinct that makes him easy to manipulate can become valuable when obedience would mean accepting the institution’s preferred account of its own wrongdoing. The hierarchy opposing him is no longer merely cautious or dismissive; parts of it are actively invested in making inconvenient information disappear.

River’s problem is therefore more complicated than learning to follow orders. He must distinguish between acting because authority cannot be trusted and acting because he cannot tolerate anyone else controlling the situation. From the outside, the two impulses may look identical.

Lamb anticipates the second problem. River remains consumed by the first.

When Bureaucratic Violence Becomes an Action Film

Season 3 is the most action-heavy instalment so far. That will probably make it the most immediately exciting season for some viewers. My objection is not that the series becomes faster or more violent, but that sustained action displaces the investigative and political friction that previously made its violence matter.

The first two seasons were particularly good at making investigation, political manoeuvring and action feel like different stages of one process. A clue altered the political situation. A political decision distorted an operation. Physical danger arrived as the accumulated result of choices made in offices, archives and private conversations.

The third begins in that mode but gradually shifts towards siege, pursuit and sustained gunfire. The stakes are clear and the action is competently staged. The series also preserves the sense that continuing characters are not guaranteed protection merely because viewers have grown attached to them.

The balance nevertheless changes. The slow horses spend less time interpreting a conspiracy and more time trying to survive its physical consequences. The institutional drama remains present, but it increasingly serves as the justification for an action climax rather than the principal source of tension.

This strains one of the series’ most valuable ideas. The slow horses are capable but damaged intelligence officers, not invulnerable action heroes. Their strengths are uneven and their coordination unreliable. When a small group can hold out for so long against heavily armed professionals, the distance between Slow Horses and the polished spy fantasies it normally resists begins to narrow.

Season 2’s violence was especially effective because it was sudden, messy and inseparable from individual misjudgements. Season 3’s violence is larger and more prolonged, but not necessarily more revealing. The possibility that senior officials may treat people as disposable, the struggle over who will carry the blame and Taverner’s conversion of crisis into leverage generate more tension than much of the shooting.

The previous seasons often found their sharpest forms of violence in humiliation, exile, betrayal and professional erasure. Season 3 turns that bureaucratic violence literal. People who threaten institutional reputation are no longer merely reassigned or discredited; they may be physically removed.

The development is coherent, but it also makes the moral division easier to see. Once a senior figure is prepared to authorise lethal force against inconvenient witnesses, the institutional argument becomes less ambiguous. The strongest passages are therefore those in which physical danger and bureaucratic calculation overlap. A person may be targeted for elimination, but the recognisably institutional act is deciding how the result will be explained and whose career it will protect.

Spy thrillers have never been surprised by the idea that intelligence officers kill people. The distinctive cynicism of Slow Horses lies in the possibility that the killing will be followed by a meeting about messaging, responsibility and succession.

Who Gets to Write the Failure?

Season 3 is weaker than the first two, but not because it lacks ambition. It brings earlier political manoeuvring towards fruition, expands the conflict inside the Park and makes the physical consequences of institutional self-protection impossible to ignore.

Its weakness lies in emphasis. The conspiracy and cover-up are compelling, but the later episodes spend more time on physical survival than on the mixture of investigation and internal politics that made the preceding seasons distinctive. River’s recklessness remains credible but increasingly familiar. The slow horses become more effective as action protagonists just as their limitations should matter most.

Against this, the season offers its clearest account yet of Lamb’s loyalty. He cares about his team, though he expresses that care in the only language he seems to trust: preparation, retaliation and refusal to surrender them to people with cleaner offices.

That personal loyalty stands against MI5’s institutional version. Lamb protects particular people even when they are foolish, compromised or professionally inconvenient. Senior figures at the Park repeatedly value individuals in proportion to their usefulness to the institution.

The contrast does not make Lamb good or the slow horses innocent. It establishes a boundary that the institution itself no longer reliably observes.

The first season showed that blame attaches itself to people unable to resist it. The second showed that being competent does not mean being in control. Season three brings the two ideas together: guilt does not determine punishment, and the truth does not defeat a cover-up merely by existing.

The shooting exposes MI5’s brutality. The meeting afterwards—where blame, messaging and succession are decided—reveals what the brutality was for.