Physical and human testing
Test the doors and people around your systems. Safety limits and stop conditions are agreed before anyone arrives on site.
What it answers.
- Could someone without authorization get into our buildings or restricted areas?
- How do staff respond to a convincing request from a stranger?
- Do our visitor, badge and reception procedures work as written?
What is in scope.
On-site physical security and social-engineering assessments under explicit written authorization. The exact boundary is written into the authorization before work starts.
- Entry controls at the sites and areas you name
- Reception, visitor and badge procedures
- Phishing and phone-based pretexting campaigns aimed at agreed groups
- Clear-desk and unattended-device checks inside authorized areas
How it runs.
-
Authorize
We agree sites, scenarios, safety limits and stop conditions in writing, and carry the signed letter on site.
-
Survey
We observe the sites and procedures from public vantage points before any attempt.
-
Attempt
We carry out the agreed scenarios and record each step.
-
Debrief
We explain what happened to facilities and security leads, without naming or blaming individual staff.
What you receive.
- A record of each scenario, what was attempted and what happened
- Photographic or written evidence where agreed
- Recommendations for facilities, procedures and awareness training
What we need from you.
- A signed authorization letter from someone with authority over each site
- A named contact available by phone throughout the testing window
- Any local legal or safety constraints we must observe
Choose physical and human testing when the controls around your systems, such as buildings, reception and staff, matter as much as the systems themselves.
List the sites that concern you.
Write from your organization's email address. Tell us what is in scope, your deadline and who can authorize testing. Leave sensitive details out of the first message.