The firm that gets hired to get in.
Obsidian Risk Group is a physical security consulting and intrusion testing firm headquartered in Norwalk, Connecticut and Tampa, Florida. We are hired by organizations that want their security tested the way it will actually be attacked: in person, on site, under controlled and authorized conditions.
Compliance is the floor. We test everything above it.
Frameworks and audits matter; they establish a minimum. But a passed audit has never stopped a person from following an employee through a held door.
We respect compliance for what it is and refuse to treat it as what it isn't: proof that your security works. Where frameworks apply to your organization, our findings map to them. Where they end, our work is just beginning.
Who conducts your engagement.
Nick Capece - Founding Principal
Background spanning domestic and international security environments, with field experience across covert and overt entry testing, social engineering, red team operations, and security program consulting for organizations across the northeastern United States and Florida.
Specific prior engagements and employers are not disclosed publicly without authorization and signed documentation. Photo redacted to avoid personnel from identifying our testing team during engagements.
The boring answers your legal team needs.
Nothing runs without paper.
No test begins without written authorization from an executive empowered to grant it. Operators carry engagement documentation at all times during testing.
Covered, and provable.
Engagements are conducted under active liability coverage. Certificates of insurance are provided during scoping, before anyone touches a door.
Findings go to named contacts only.
NDAs are standard. Report handling, transmission, and retention are agreed in advance and followed exactly.
If a control stops us, that's a finding.
No damage to property, no coercion of staff, no testing outside agreed scope. Positive performance by your people gets reported too.
Northeast and Florida, by design.
Offices in Norwalk, CT and Tampa, FL put us within driving distance of the Northeast corridor and Florida's commercial centers. Local presence matters in this work: reconnaissance, repeat visits, and post-engagement support don't work well from an airport.
Nationwide engagements are supported case by case.
Find out before someone else does.
Tell us what you're protecting. We'll tell you how we'd test it. Confidential, and answered within one business day.
Request an Assessment