Physical intrusion
Secure your premises and the access they give to your network.
What is a physical intrusion test?
Physical intrusion tests identify the weaknesses in the security of your premises that could let an attacker reach your internal network.
These tests surface those vulnerabilities and propose improvements to reduce the risk of physical intrusion.
Objectives
Our audits highlight realistic risk scenarios, including:
Illegitimate access to the corporate network
Bypass of access controls
Theft of sensitive data
Backdoor installation
The HELX approach
We analyze the ways your premises can be physically accessed, as well as the information and IT access an attacker could obtain once inside.
Our recommendations let you fix the weaknesses we detect and improve the security of your physical sites. Protect the access to your internal network and make your offices more resilient against threats.
Methodology
Our physical intrusion tests follow a methodology that covers the full exposure of your premises, from unprotected entrances to the bypass of the controls in place.
- 01
Information gathering
Information gathering means observing the physical entrances and the security systems. The goal is to spot weak points, such as doors left open or weak access controls. Social media and interactions with staff can also reveal schedules or potential gaps in security.
- 02
Intrusion attempts
Exploiting the weaknesses we spotted lets us test the intrusion itself. This includes techniques such as tailgating, where we discreetly follow an employee, or the use of forged badges. The attacker may also pose as a contractor to reach sensitive areas.
- 03
Hunting for IT access
Once inside, the attacker tries to connect to the internal network by exploiting reachable network jacks or unattended equipment. Malicious devices, such as USB drives or implants, can be used to create remote access.
- 04
Risk assessment
The weaknesses identified are ranked by severity and impact. A report is written, recommending security measures to limit the risks, such as securing physical entrances and raising employee awareness of social engineering attacks.
A bit of technical detail
Our methodology, built on our experience running Red Team exercises, lets us identify the vulnerabilities that could affect the security of your physical infrastructure:
- Unprotected entrances
- Intrusion through social engineering
- Broken access controls
- Deficient surveillance systems
- Unprotected network access
- Theft or exposure of sensitive documents
- Installation of malicious hardware
- Insufficient physical protection of servers
- Poor employee practices
Our other penetration tests
Frequently asked questions
How much does a physical intrusion test cost?
€3,400 excl. VAT per site for daytime work; night work adds 50% to that amount. Small businesses, SMBs and non-profits get a 15% discount.
Is this legal? How are you covered?
Everything is contractual: a written mandate signed by your management, a validated scope and scenarios, and an authorization letter our consultants carry on them. Without that framework, we do not intervene.
What exactly do you test?
Visitor reception procedures, the vigilance of staff and security guards, tailgating, badge cloning, access to sensitive areas (server rooms, executive offices) and whether a network implant can be planted there.
What if your consultants get caught?
That is an excellent result for you! The exercise measures precisely your ability to detect. In every case: no damage, no data taken away, and a full debrief with the teams involved.
Tell us about your project.
Let us talk through your needs and expectations and build the right service for you.