Physical security audit
A review of premises, access, cameras, rules and visitor procedures without covert infiltration.
An ideal first step[ Tailored physical security testing ]
Can someone get in who has no business being there?
We test whether a stranger can get past reception, bypass an access control system or reach your technology and information. Safely, under agreed rules and with a concrete remediation plan.
[ Anatomy of an intrusion ]
The firewall may work perfectly. Someone still holds the door open.
An attacker often needs neither force nor sophisticated equipment. They exploit information, a credible cover story and routine operational habits.
- 01
Reconnaissance
Entrances, routines, suppliers and publicly available information.
- 02
Cover story
A role that fits naturally into the environment without attracting attention.
- 03
Entry
Reception, side doors, deliveries or entering alongside another person.
- 04
Movement
Moving around unescorted and checking how employees respond.
- 05
Objective
Access to information, technology or sensitive operations.
[ You choose the scope ]
You do not have to start with a major infiltration.
We design the scenario around your organisation's risks, operations and readiness. From a controlled audit to combined physical red teaming.
Simulated infiltration
An entry attempt using a pre-approved cover story, such as posing as a technician, supplier or visitor.
Tests processes and peoplePhysical red teaming
Reconnaissance, social engineering, access technologies and multiple routes to a clearly defined objective.
A realistic resilience test[ What we can test ]
From the fence to the server room. Always within the agreed scope.
Perimeter and entrances
Fences, gates, side entrances, deliveries and the area around the building.
Reception and security staff
Visitor procedures, identity checks, escorts and responses to unusual situations.
Access control systems
RFID and NFC cards, readers, permissions, forgotten tags and routes back in.
Cameras and monitoring
Blind spots, live monitoring, recording retention and response times.
Sensitive areas
Server rooms, warehouses, archives, production areas and locations with critical technology.
People and traps
Unescorted movement, tailgating, USB drop tests and employee responses.
[ A safe test ]
We test security. We do not create new operational risks.
We set the rules before testing begins. We protect people, operations, sensitive data and the confidentiality of the entire exercise.
- 01Approved scope and objectives
We know exactly where we can go and where the test ends.
- 02Contact and escalation personnel
A clear safety communication channel is in place for unexpected situations.
- 03Prohibited activities
We agree on boundaries in advance, taking health, operations and technology into account.
- 04Immediate stop
The test can be stopped safely at any time without unnecessary consequences.
[ What you receive ]
More than a list of weaknesses. A foundation for real improvements.
Events and timeline
What succeeded, which route was taken and under what circumstances.
Evidence and severity
Evidence handled securely and prioritised by real-world impact.
Remediation plan
Quick fixes and systemic changes for facilities, security and management teams.
Results workshop
We explain the context and work with you to agree on practical next steps.
[ Testing tailored to your operations ]
A factory needs a different scenario from an office or a hospital.
Perimeter, suppliers, deliveries, sensitive technology and USB drop tests.
Reception, visitors, access cards, tailgating and unescorted movement.
People's movements, sensitive departments, technical facilities and operational continuity.
Visitor procedures, documents, restricted areas and service entrances.
[ How we work together ]
The goal is not to catch someone out. It is to uncover weaknesses in the system.
- 01
Consultation
Operations, risks, sensitive areas and the expected outcome.
- 02
Scenario
We choose a realistic route and a clearly defined objective.
- 03
Rules
Scope, exceptions, escalation and stop conditions.
- 04
Execution
Discreet delivery and secure recording of relevant findings.
- 05
Remediation
A report, workshop and clear priorities for the next steps.
[ Frequently asked questions ]
What you need to know before testing.
01Do employees need to know about the test?
Not always. We agree on who will be informed so the test is both realistic and safe. There are always designated contacts who can verify or stop the exercise.
02Can the test disrupt operations?
We design the scenario to protect people, technology and operational continuity. Risky activities and critical areas are excluded in advance or covered by specific safeguards.
03Can we start with a review of our current setup?
Yes. A physical security audit is a good first step and often reveals that some existing measures simply need to be configured correctly or applied consistently.
04Do you also recommend specific security measures?
We recommend technical, procedural and organisational measures without unnecessary commitment to any particular brand. The goal is a solution that works in day-to-day operations.