Covert entry testing.
Unannounced, authorized covert entry against your facility. Staff don't know we're coming, which is exactly the point: you learn how security performs on an ordinary Tuesday, not on inspection day.
The honest answer about your security.
Covert entry testing is an authorized attempt to gain access to your facility without staff knowledge, using the methods a real adversary would use: pretexts, tailgating, credential weaknesses, and observed gaps in routine.
It runs under written executive authorization and agreed rules of engagement, with a small trusted circle aware of the engagement and an immediate-notification protocol live for the entire window. If a control stops us, that's a finding too, and it goes in the report.
What we test.
- /01OSINT and physical reconnaissance of the target facility
- /02Entry during business hours under pretext
- /03After-hours covert entry where scoped
- /04Access escalation once inside
- /05Marked-asset objectives: server room, executive floor, defined targets
- /06Photographic evidence with timestamps throughout
- /07Immediate-notification protocol for your designated contact
How it runs.
Scope and authorize
Rules of engagement, off-limits methods, notification circle, written authorization.
Reconnaissance
We study the facility before we test it. Recon alone usually produces findings.
Covert execution
Entry attempts under agreed conditions, evidence collected throughout.
Findings and retest
Ranked findings, remediation roadmap, retest to verify closure.
What you receive.
Engagement report
Every finding with evidence, root cause, exploitability ranking, and specific remediation.
Executive brief
The findings translated for leadership and budget decisions, presented in person.
Remediation roadmap
Prioritized fixes with realistic cost bands, not a wish list.
Retest option
Verification that what was fixed stays fixed.
Asked on every scoping call.
Yes, when authorized, and we don't operate without authorization. Engagements run under a signed agreement from an executive empowered to grant facility access, with documented scope and rules of engagement. Operators carry this documentation during testing.
The operator presents engagement documentation and the immediate-notification protocol activates: your designated contact is called on the spot to confirm the test. Being stopped is a positive finding, and it's reported as one. Staff who perform well are named in the report for the right reasons.
A small trusted circle, agreed during scoping: typically the authorizing executive, a designated point of contact reachable for the entire window, and counsel if you want them included. Everyone else finding out is the test.
Find out before someone else does.
Bring this page to your legal team. Then bring us your facility. Confidential, and answered within one business day.
Scope This Engagement