WhatsExposed

Home / Services / Physical penetration testing

Walk in, plug in, walk out.

Physical penetration testing checks whether someone could get into your building and onto your network: past reception, through a door behind someone with a badge, and into a meeting room with a live network port.

How crews get past the front desk.

Following someone in

Walking through a secure door behind a member of staff is still the simplest way in.

A good story

A delivery, a contractor, a visitor with an appointment that doesn’t exist.

Open ports and empty rooms

A network port in a meeting room is a door into your systems.

How the job runs.

  1. Agree the rules

    A signed authorization letter, the sites in scope and who to call if we’re stopped.

  2. Case the joint

    We watch how people come and go before we try anything.

  3. Get in

    Following someone in, a story at reception or a door that doesn’t close, whichever works.

  4. Report

    What we reached and how, and the changes to doors, desks and habits.

When to call us.

  • When you move into new premises
  • When you keep sensitive data or equipment on site
  • As part of a red team
  • When an auditor asks about physical controls

On its own or all year?

Scoped as a job on its own, or added to a year-round plan. We agree it with you at the start.

Partners: A physical test opens access control, CCTV and staff training conversations with your client. Sell it under your brand.

Questions.

What happens if your tester is stopped?

They carry a signed authorization letter and the name of a contact at your business, both agreed before the test.

Do you take anything?

We prove access, for example by photographing a screen or leaving a marker, and agree in advance exactly what counts as reaching the goal.

Find out who gets past reception.

Tell us about the site and a technical account manager will plan the job with you.