Choose the assessment type

Which attack vectors should we cover?

Remote covers attacks from a distance. Physical requires on-site presence at your company.

Popular

Remote Only

Remote attacks only: vishing (phone), pretexting, email. No physical presence on site.

Vishing (phone calls)
Pretexting & impersonation
Email social engineering
OSINT research

Click to select

Physical Only

Physical access testing: tailgating, on-site impersonation, badge cloning.

Tailgating / piggybacking
On-site impersonation
Badge cloning attempts
Physical security gaps

Click to select

Recommended

Full Red Team

Complete assessment: all remote vectors + physical access. Real attacker simulation.

Everything in Remote
Everything in Physical
Insider threat simulation
Full attack chain

Click to select

Define the testing scope

How many locations, departments and VIPs should we target?

The base price includes one site and 3 departments. Add extra scope as needed.

Physical Locations

Sites, offices, factories for physical testing

per location

Target Departments

Specific departments for vishing/pretexting

per department

Executives/VIPs

Specific targeting for C-level and management

per person

Select the attack vectors

Which techniques should we use?

Green vectors are included. Add extra vectors for a complete assessment.

Vishing (Voice Phishing)

Phone calls simulating IT support, HR, partners

Included

Pretexting

Convincing false scenarios to obtain information

Included

Shoulder Surfing

We observe PINs and passwords in public areas

Included

Tailgating / Piggybacking

Entering the building by following authorized employees

Optional add-on

Impersonation

Posing as vendors, IT technicians, auditors

Optional add-on

Physical Security Testing

Testing physical controls, reception, restricted areas

Optional add-on

Badge Cloning

Cloning RFID/NFC badges for unauthorized access

Optional add-on

Dumpster Diving

We check how sensitive documents are disposed of

Optional add-on

Insider Threat Simulation

We simulate the behavior of a malicious insider

Optional add-on

How we work

Our Red Team methodology

1. OSINT Research

We collect public information about the organization and employees

2. Pretext Development

We build credible, tailored attack scenarios

3. Execution

We run the attacks and document the results

4. Reporting

We report with evidence, risk and recommendations

What we cover

OSINT & reconnaissanceEmail & footprint discoveryPretext & phishing simulationRFID/NFC badge analysisAccess control testingCovert recording equipment

Choose the delivery timeline

How much time do we have for the assessment?

Standard

2-3 weeksRecommended

Enough time for OSINT, preparation and execution

Standard

Express

1 week

Accelerated assessment, focused on the main vectors

Priority

Extended

4-6 weeks

Extended assessment with multiple locations and scenarios

Priority

Select the deliverables

What do you want to receive at the end?

The executive report, technical report and evidence package are included.

Executive Report

Management summary with risk assessment and recommendations

Included

Detailed Technical Report

All attempts, successes and failures with a timeline

Included

Evidence Package

Photos, audio recordings and documentation

Included

OSINT Report

The public information found about the organization

Optional add-on

Awareness Training

A training session for employees (2h)

Optional add-on

Policy Recommendations

Suggestions for updating security policies

Optional add-on

Frequently Asked Questions

Ready to get started?

Your configuration has been saved. Send your request and we will contact you within 24 hours.

Your engagement

Base scopeIncluded

TotalCustom quote

Request a quote

Final price confirmed after a scoping consultation.

Social Engineering Assessment

Choose the assessment type

Remote Only

Physical Only

Full Red Team

Define the testing scope

Physical Locations

Target Departments

Executives/VIPs

Select the attack vectors

Vishing (Voice Phishing)

Pretexting

Shoulder Surfing

Tailgating / Piggybacking

Impersonation

Physical Security Testing

Badge Cloning

Dumpster Diving

Insider Threat Simulation

How we work

1. OSINT Research

2. Pretext Development

3. Execution

4. Reporting

Choose the delivery timeline

Standard

Express

Extended

Select the deliverables

Executive Report

Detailed Technical Report

Evidence Package

OSINT Report

Awareness Training

Policy Recommendations

Frequently Asked Questions

Ready to get started?

Your engagement