Physical security
Physical security assessments
Your firewall does not stop someone who follows a member of staff through the front door. We test whether an intruder could get into your building, reach your network and leave without being challenged.
Who it is for
- Offices with sensitive data, comms rooms or on-site servers
- Data centres, warehouses and sites holding valuable stock
- Shared buildings where you rely on the landlord for security
- Organisations that want to know if staff challenge strangers
What we cover
Reconnaissance
Surveying entrances, staff routines, badge designs and deliveries, from the street and online.
Access control
Doors, locks, card readers and badges, including whether access cards can be copied, where agreed.
Tailgating & pretexting
Following staff through secure doors, or posing as a visitor, contractor or delivery driver.
Inside the building
Whether we can reach comms rooms, unlocked computers, printers and sensitive documents.
Network access
Whether a small device plugged into an open network port could give a remote attacker a way in.
Out of hours
Alarm response, security guards and how the building is secured when nobody is there.
How it works
Authorise
We agree sites, rules and emergency contacts. Our tester carries a signed authorisation letter at all times.
Recon
We survey each site and plan the approaches most likely to work.
Attempt
We try to get in and reach agreed targets, photographing evidence as we go.
Report
A timeline of what worked and what did not, with practical fixes for each site.
What you get
- Report for each site, with a timeline and photographic evidence
- Findings covering physical, procedural and technical controls
- Prioritised recommendations, from quick wins to longer-term changes
- Debrief call with facilities, security and IT
Frequently asked questions
Can't find your answer? Ask in the form below and we will get back to you as soon as we can.
What happens if your tester is caught?
That counts as a good result for you. The tester stops, shows the authorisation letter and asks staff to call your nominated contact. We never resist or try to evade security staff or the police once challenged.
Will you damage anything?
No. We only use non-destructive techniques that you have agreed to in advance. We will not force doors, break locks or damage property.
Our building is shared. Can you still test it?
Yes, but we need permission from the landlord or building management for any shared areas, such as the main entrance or reception. We can help you ask for it.
Should our staff be told?
Not in advance. The test only shows how staff really behave if they do not know it is happening. Afterwards, the results make excellent material for awareness training.
Get a fixed quote
A few quick questions so we can scope it properly. No obligation, no hard sell.
Thanks, we have your enquiry.
We will reply as soon as we can. If it is urgent, email hello@redstackd.com.