We test whether strangers can get into your building – before real criminals do.
An access test shows you honestly how far someone gets who does not belong there. No damage, no one embarrassed, with clear recommendations.
No jargon
Easy-to-read report
Free initial call
83%
of all the sites we have tested show critical gaps: uncontrolled entrances, weak procedures, missing surveillance
How it works
Preparation
Beforehand we look at your building from the outside: entrances, delivery zones, the times when it gets busy.
The attempt
Our testers try to get inside: as a technician wearing a hi-vis vest, as a courier, or quite simply by following an employee through the door.
Inside
How far can someone get – to the photocopier, to the server room, into the archive? Everything is photographed and logged.
Evaluation
You receive photos, a timeline and a list of what you should change, sorted by importance.
What this looks like in your sector
Healthcare
A person in a white coat with a clipboard walks through the ward. Nobody asks questions. In the end they are standing in the records archive or in the drug store: both areas in which a stranger should never be left unobserved.
Energy & municipal utilities
A supposed maintenance technician signs in at reception for the switchgear. The ID is forged, the manner confident. We check whether the route to the control room really is blocked.
Industry & manufacturing
Halls running in shifts, gates left open for forklifts, delivery zones in constant use. We test whether someone can get to the machines or into the warehouse unnoticed.
Automotive
A visitor without an escort strolls into the development department. A single phone photo of the prototype is enough to cause damage running into millions. We check access control and camera blind spots.
Public administration
Public visitor traffic, lots of doors, old buildings. We test whether someone can make it from the waiting area into the archive or into the server room.
Common opening techniques we test
Unlocked latch
Many doors only engage the latch, not the bolt. With a sheet of film or a card it can often be pushed back from the outside.
Tilted window
The handle can be reached through the gap: an often overlooked way in, especially on ground-floor and basement windows.
Emergency exit without contact monitoring
Easy to open from outside without drawing attention if no door contact or alarm is connected.
Tailgating at the main entrance
Walking in behind someone with a parcel in your hand or while chatting to an employee is often enough.
Unguarded supplier entrance
Side entrances and supplier entrances rarely have the same level of control as the main entrance does.
Locking systems never replaced
Old master keys or construction-site keys often still open doors years after the locks were changed over.
Announced or unannounced?
Unannounced (standard)
Only one internal emergency contact knows. Shows the real reaction of staff and technology, and is the most meaningful.
Announced
Reception or security staff have been informed. This makes sense if you first only want to see the structural and technical weaknesses, without also testing your staff.
What we do not do
No smashing of windows or breaking open of locks by force
No deactivation of fire protection or security systems
No taking of real valuables, only photos as proof
No contact with the police or emergency services without a procedure agreed in advance
What you have in hand at the end
An easy-to-read report with photos and a timeline, no technical gobbledygook
Concrete, prioritised recommendations: immediately, soon, medium term
Often low-cost fixes: clearer reception rules, a door adjustment, a visitor process
Legally covered: letter of engagement, fixed contact persons, emergency contact
Frequently asked questions
Is this legal?
Yes. We work with a signed letter of engagement (test authorisation) that can be shown to any security guard or the police if needed.
What if we get caught?
We name the emergency contact and end the test immediately. Nobody is singled out in front of others: the aim is to test the system, not the person.
How long does a test take?
Usually one to two days on site, depending on the number of sites and the scope of the test. After that, evaluation and report take about one week.
What does a Physical Pentest cost?
That depends on the number and size of your sites. After a short initial call you receive a fixed-price offer from us.
Nobody is put on the spot. Whoever catches us has done everything right, and that is exactly what the report says.
Ready for an honest look at your building?
In 30 minutes we clarify which areas matter. Free of charge and without obligation.
