Home / Penetration Testing / Physical

Physical
Penetration Testing

On-site testing of your premises, access controls, and employee security awareness — access-control bypass, tailgating, and impersonation, delivered with ex-intelligence partners for advanced engagements.

Pricing Contact us Book a call
Overview

Digital security stops at the front door.

The strongest firewall means little if someone can walk into your office, plug into the network, or reach a server room. Physical penetration testing assesses whether an intruder could gain unauthorised access to your premises and assets.

We test access controls, surveillance, reception and visitor processes, and employee awareness through tailgating, impersonation, and badge-cloning scenarios. For advanced engagements we partner with ex-intelligence professionals — a capability almost no European firm offers.

Coverage

What we test.

Physical controls, processes, and human awareness across your sites.

Methodologies: PTES Physical OSSTMM Ex-intelligence partners Covert & overt scenarios
FAQ

Physical penetration testing FAQ

The questions we're asked most about scope, cost, and timing.

How much does physical penetration testing cost?
Physical penetration testing typically starts around €5,000 per site and depends on the number of locations, objectives, and whether it forms part of a wider red team. Contact us for a tailored figure.
What does a physical penetration test involve?
Reconnaissance of the site, then attempts to gain unauthorised entry through access-control bypass, tailgating, impersonation, and pretexting, aiming to reach defined targets such as a server room.
Is physical penetration testing safe and authorised?
Yes — fully authorised in writing, with named contacts, an authorisation letter carried by testers, and agreed rules of engagement to keep everyone safe.
Do you really use ex-intelligence professionals?
For advanced engagements, yes — we partner with experienced ex-intelligence practitioners for realistic, high-assurance operations.
How is this different from a red team exercise?
Physical testing focuses on premises and access. A red team combines physical, digital, and social vectors into one full-scope adversary simulation.
What do you need to authorise a physical test?
A signed authorisation ("get out of jail") letter, named emergency contacts, in-scope locations, and clear objectives and limits.
Will staff or guards be informed?
Usually only a small control group knows, so the response is realistic; safety and de-escalation rules are agreed in advance.
What are typical objectives?
Reaching a defined target — a server room, executive floor, or a planted network drop — to demonstrate impact.
Do you cover multiple sites?
Yes — multi-site engagements are scoped per location and often combined into a red team.
Is it safe?
Yes — engagements are fully authorised, carefully planned, and testers carry authorisation documents and follow strict safety rules.
Related services

Explore more.

Parent servicePenetration Testing→ RelatedRed Team Assessment→ RelatedSocial Engineering→ RelatedNetwork Penetration Testing→

Ready to test your premises?

A 30-minute scoping call costs nothing. A physical breach costs considerably more.

Book a meeting Send an email