Physical Penetration Test

Engagements typically range from 1-4 weeks, depending on number of physical locations.

You can expect to pay no less than $19,500 for a 1-week engagement.  This number will increase with the addition of physical locations or goals.

Many organizations choose to have this performed annually, at a minimum. Though it is also common to have this done when new security changes are implemented, or a new physical location is acquired.

It depends on the risk profile of the organization and what leadership is most concerned about. Here are a few examples:

• Gaining access to a sensitive location, such as an executive office, a data center or file drawer.
• Gaining access to sensitive information, whether a physical file, USB drive or files on the network.
• Gaining access to the internal corporate network, establishing a foothold or persistence on the domain. 

The photos and videos taken by the Penetration Testing Team during the engagement are saved to our secure internal storage and then purged from the devices which recorded the data. All evidence is turned over to the client via secure file transfers at the end of the engagement.   

• During the contracting and planning stage of the engagement, a letter will be drafted that provides details such as, who the testers are, that they have been contracted to perform an assessment and who two separate points of contact at the company are that can verify this. 
• Many times, it is recommended to change the call tree of an alarm system if one is used to an employee at the organization who has knowledge of the engagement to prevent police response. 

• Experience matters, Schellman’s team consists of seasoned professionals with over 10+ years of experience in leading and executing physical penetration tests.
• Schellman operates within the bounds of the law and is aware of and follows all legal and ethical guidelines when conducting physical penetration tests.