Physical Security
Cloned badges, held doors: what a physical intrusion test reveals
A physical intrusion test is not about catching your staff out. It shows whether your controls and reporting reflexes hold up against a motivated intruder.
Offensive security / Incident response / Physical security
Test. Respond. Protect.
CyberElo shows you what an attacker could actually reach in your environment, helps you take back control when an incident hits, and checks that your premises protect what matters.
Active incident? Contact us nowWhat we do
Three service lines,
combined à la carte
Each service line is broken down into streams you can combine. An engagement covering several streams shares a single planning phase and one consolidated report.
-
01
Offensive Security
Can an attacker get in, and how far can they go?
- External and internal penetration testing
- Active Directory and identity security
- Cloud security assessment
- Web, API and mobile application testing
- Vulnerability assessment
- Red team and purple teaming
- Social engineering, lost laptop, segmentation
-
02
Incident Response
When an incident hits, can you contain it, understand it and recover fast?
- Incident response and containment
- Forensic investigation (DFIR)
- Restoration and recovery support
- Dark web monitoring
- Compromise assessment and threat hunting
- IR plan, playbooks and crisis exercises
-
03
Physical Security
Can someone walk in and reach what matters?
- Physical security maturity assessment
- Site risk and vulnerability assessment
- Physical intrusion testing
- Physical security program design
- Implementation support
How we work
One method
for every engagement
-
Plan and scope
Scoping call, confirmed assets and exclusions, rules of engagement, testing windows, escalation and stop criteria, all formalized in a signed authorization letter.
-
Execute
Testing or response by our specialists, with your security controls (EDR, firewall, SOC) left active so you also measure detection and response. Critical findings are escalated immediately.
-
Report and assure
Findings register and evidence after each stream, consolidated executive summary and technical report, debrief workshop, then a retest of Critical and High findings.
- Bilingual
- Teams, workshops and deliverables in English or French.
- Worldwide
- Remote and on-site, for organizations of every size and sector.
- Modular
- À la carte streams, each scoped and priced independently.
- Recognized frameworks
- MITRE ATT&CK, OWASP, NIST SP 800-115 and SP 800-61.
Blog
Latest articles
Incident Response
Ransomware: the decisions of the first hours
The first hours of a ransomware attack shape how long the outage lasts and how good the investigation will be. The right reflexes, and the ones to avoid.
Offensive Security
Internal penetration testing: why we leave your EDR on
Switching off the EDR during a penetration test gives you a longer report, but a less accurate picture of your real exposure. Here is how we approach it.
Next step
Every engagement is priced
according to its scope.
Describe your context in a few lines. We will come back to you with an approach, a timeline and a fee estimate.
Request a quote