Physical Penetration Testing for Your Business
Physical penetration testing services check whether a stranger could walk into your building and plug something in. Omeiro assesses RFID badge cloning, tailgating, lock picking, server room entry resistance and rogue hardware implants such as a LAN Turtle.
What physical penetration testing looks at
The main areas we check, by hand with tools as support. The exact scope depends on your package and is agreed in writing before work starts.
Alerts and logs
- Which logs are kept
- Alert rules
- Who gets alerted
What happened
- Timeline of events
- Affected systems
- Entry point
Clean-up
- Removing access
- Resetting secrets
- Restoring from backup
Next time
- Written response steps
- Contacts list
- Lessons learned
Checklist Based on common risks and good practice. The exact scope depends on your package and is agreed in writing before work starts.
What you get with physical penetration testing
Hands-on physical penetration testing assessing RFID badge cloning, tailgating into corporate offices, lock picking, server room entry resistance, and rogue hardware implants (LAN Turtle).
Basic Package
1 office: physical access review (by appointment); report. 5-day delivery, 2 revisions.
Standard Package
Up to 2 sites; badge / visitor process review. 8-day delivery, 2 revisions.
Premium Package
Up to 4 sites incl. data room; remediation plan. 12-day delivery, 2 revisions.
Clear brief first
We confirm what you need before work starts, so the scope is clear on both sides.
Revisions listed
Each package shows its revision rounds. A round is one list of changes sent together.
Yours once paid
Copyright of the final work passes to you once the order is paid in full.
Work starts only after the scope is agreed in writing and you confirm you own or control the systems involved.
How our physical penetration testing works
Authorise
You sign off on scope and who is informed.
Recon
We observe entrances, badges and visitor handling.
Attempt entry
Tailgating, badge cloning and lock tests are tried within agreed limits.
Report
You receive findings and a fix plan.
Physical penetration testing: from the street to the server room
Physical penetration testing checks whether a stranger can get from the street to something valuable. We look at entrances, reception and visitor handling, badge readers, locks, comms rooms and unattended workstations. Tell us the site layout, what you most want protected and the hours when staff are present. Sensitive areas such as data rooms are included only when you name them, so the test stays inside the boundaries you set.
Findings are usually about habits as much as hardware: doors propped open, visitors not escorted, badges that can be copied, or live network ports in meeting rooms. Good physical penetration testing pairs each finding with a note or photo where allowed and a fix such as door closers, badge technology upgrades or reception procedures. It combines well with wireless testing and an internal network test, since a plugged-in device is the next step.
In short
- Delivery in 5 to 12 days, by package.
- Fixed price, shown before you order.
- Offices where staff hold doors for visitors.
- Copyright yours after full payment.
Physical Penetration Testing: common questions
How much does physical penetration testing cost?
Prices are fixed and shown by package on our Physical Penetration Testing pricing page, so you see the full price before you order. You can also ask for a custom quote.
How long does physical security assessment take?
Delivery depends on the package: Basic 5-day delivery; Standard 8-day delivery; Premium 12-day delivery.
What is included in the Basic Package?
The Basic Package includes: 1 office: physical access review (by appointment); report. Higher packages add more scope, revisions and support.
Can I get a custom rfid badge cloning test package?
Yes. If none of the packages fits, use the custom package form on our pricing page to describe what you need, and our team sends you a fixed price.
Is it safe for staff?
We agree rules beforehand, and a contact can stop the test at any time.
Do you need written permission?
Yes, signed authorisation protects everyone involved.
Can you test a datacenter physical pentest?
Premium covers sites including a data room.
Do you report staff by name?
We report on controls and not on individuals.
What is tailgating in physical security?
Tailgating is following an authorised person through a secured door without using a badge yourself. It works because people feel awkward challenging others, so staff awareness is part of the fix.
Who owns the final work?
Copyright of the final work passes to you once the order is paid in full. Paid fonts, stock files or licences, if used, are licensed in your name.
Ready to start your physical penetration testing?
Compare the packages and pick the one that fits. Not sure which? Write to us and we will help you choose.