How NOT to Perform Covert Entry Assessments
Shares hard-learned lessons and busted myths from physical penetration tests, covering site surveys, social engineering, and real-time contingency handling.
Summary
Realities of Covert Entry Operations
Covert physical entry assessments require meticulous planning, calm decision-making, and disciplined operational tradecraft. Relying on cinematic tropes or aggressive improvisations frequently leads to compromised engagements and safety hazards.
Physical Site Surveys and Reconnaissance
Effective assessments begin with discreet reconnaissance of physical security perimeters, camera coverage, guard rotations, and electronic badge readers. Rushing into an engagement without thorough surveillance increases the likelihood of premature detection.
Human-Layer Social Engineering and Pretexting
Face-to-face social engineering requires credible pretexting tailored to the target facility. Operators must manage interpersonal interactions smoothly, avoiding high-friction confrontations that trigger security escalations.
Troubleshooting When Operations Go Sideways
When unexpected challenges occur—such as encountering altered floor plans, malfunctioning bypass tools, or curious employees—operators must rely on established fallback protocols and de-escalation strategies to maintain safety and compliance.
Related talks
Creator Stage·57 min
Karen Ng · Matthew Cancilla
Explores non-destructive entry techniques that bypass doors and access control hardware without picking locks, alongside defensive hardening measures.
Creator Stage·56 min
Shawn
Walks through the full physical penetration testing lifecycle, from breach-focused reconnaissance to delivering actionable security upgrades for clients.
Creator Stage·37 min
Bobby Graydon · Ege Feyzioglu
Explains how elevator floor lockouts function and how improperly configured elevator controllers and hoistways can be bypassed to access restricted floors.


