// Physical security assessments

Physical Security Assessments

Find out how an intruder could actually get in. Expert-led walkthroughs, controls reviews and covert entry testing for your facilities, people and critical assets.

A small boutique, agile offensive security company. Expert hackers, from the CEO down.

// Overview

Your doors, locks and procedures are part of your attack surface.

Kaiju's Physical Security services evaluate the effectiveness of your physical access controls, protective measures and operational procedures. They show how physical weaknesses can be exploited on their own or combined with cyber and human attack vectors.

Physical assessments can be delivered as standalone engagements or integrated with services like Red Team Operations. Every engagement runs under strict safety, legal and operational constraints, so you get realistic results without introducing undue risk.

// Assessment types

Three ways to test your physical security.

Start with a full review of your controls, then validate them against a real covert entry attempt.

Whitelist Walkthrough

We schedule a meeting onsite and receive full access to comprehensively review your facility's controls. Subject matter experts with decades of experience examine every point of ingress, camera, RFID and alarm system, and audit all possible covert methods of entry. It is the ideal starting point for hardening, and the average client receives more than a dozen critical findings.

Implementation and Controls Review

We examine the design and deployment of your physical controls to find gaps between documented requirements and operational reality. We check whether controls, configurations, procedures and their physical integration actually support your intended security objectives across facilities and operating conditions.

Covert Entry

A covert entry team arrives at your facility and tries to reach the sensitive areas, networks, data or other flags you define, using social engineering and physical bypass techniques. This real-world scenario targets the human element together with physical exploitation, and can include deploying persistent leave-behinds.

// What you get

Findings you can fix, not a report that sits on a shelf.

Control deficiencies
Where locks, access control, cameras and alarms fall short in practice.
Surveillance coverage gaps
Blind spots and monitoring weaknesses an intruder could use.
Response insight
How your security team and staff respond when something is wrong.
Procedural weaknesses
Operational gaps that could enable unauthorized access to sensitive areas and assets.
Prioritized remediation
Actionable corrective steps with clear ownership and sequencing.
Leadership debrief
A structured readout for executives, security leadership and facilities teams.
// How it works

Authorized, controlled and safe.

01

Scope and authorize

We define sites, objectives and flags, plus safety, legal and operational constraints.

02

Assess

A whitelist walkthrough, a controls review or a covert entry attempt, matched to your goals.

03

Report

Findings tied to business impact, likelihood and clear remediation priorities.

04

Debrief and harden

We walk your team through what we found and how to close the gaps.

// Questions

Physical security FAQ.

What is the difference between a whitelist walkthrough and covert entry?

A whitelist walkthrough is a cooperative review: we are given full access to examine every control and entry point. Covert entry is an adversarial test: a team tries to gain unauthorized access the way a real intruder would.

Where should we start?

For most organizations the whitelist walkthrough is the ideal starting point for hardening. Covert entry then validates whether those controls and your people hold up in practice.

Is covert entry testing authorized and safe?

Yes. Engagements are authorized in advance and run under strict safety, legal and operational constraints defined with you before testing begins.

Can physical testing be combined with cyber testing?

Yes. Physical access often leads to network access, so we can combine physical assessments with Red Team Operations, social engineering or penetration testing.

// Get started

Ready to see how an intruder would get in?

Tell us about your facilities and we will recommend the right physical security assessment.