penetration testing from a different world

Uncovert logo

Uncovert

Physical penetration testing for businesses and homes

Brno · Czechia · Slovakia · Europe

Why physical security?

Physical security in businesses and homes gets little attention. Getting into a building is not just how an attacker reaches your valuables. It can also be how they reach your sensitive data!

There are many ways it can be abused:

Dropbox device connected to network infrastructure

Connecting to your infrastructure

A so-called “dropbox” can be plugged into your infrastructure in a hidden place. The attacker can then use it for further activity.

Backdoor installation on server

Installing a backdoor

Physical access makes it dramatically easier to install a backdoor directly on a server, a workstation, or any other device.

Hidden camera and listening device installation

Hidden cameras and listening devices

Technical surveillance devices (hidden cameras and bugs) can give an attacker 2FA straight from a phone screen, an access code to the next secured area, or valuable information from conversations.

Compromised keyboard and docking station

Rigged keyboards & docks

Having everything in the cloud isn't enough. The most important information lives in the heads of your employees. They can share it with an attacker through a rigged keyboard or docking station.

Sensitive documents in desk drawer

What's on paper...

An attacker may be interested in more than zeros and ones. Storage rooms, archives, desks and drawers often hide important and sensitive information you don't want to lose.

Physical sabotage of equipment

Sabotage

Once physical access is gained, cutting the power or damaging equipment and documents is easy. An ordinary thief can cause the same damage accidentally.

More field stories on our blog

Videos from the work

Three short clips of what we do. The first is from a job; the other two are from our own tests.

Triggering an indoor REX sensor from outside
Unlocking a car from a captured signal
Defeating a panic lock with a magnet

How it works

Intro call

Free and non-binding. We'll find out together whether a test even makes sense — and if it doesn't, we'll tell you.

Scope agreement

Goals, boundaries and time windows. All in writing, including the owner's consent for the premises. Without it, we don't go anywhere — not even to the basement.

The test or inspection

From a few hours to several months, as agreed.

Report & debrief

Findings, evidence and priorities. Clear for management, actionable for technicians. A retest after remediation can be arranged.

Our physical security services

Security inspection

For businesses and homes that want to know where they stand. We walk your premises with an attacker's eyes — a few hours to two days, depending on size and the level of assurance you need.Deliverable: findings with photos and prioritized recommendations.

Consulting

If you want to secure your home or a small space and even an inspection feels like too much, we'll advise you remotely — on systems, devices and mechanical elements.Deliverable: budget-based recommendations, independent of any vendor.

Supplier — B2B

You work in CyberSec and a client of yours requires physical penetration testing, but you lack the capacity or the experience? We'll help — we're open to collaboration.Deliverable: white-label physical pentesting under your brand.

Black teaming

We'll assemble a team that, within the agreed scope, attempts to find and exploit as many vulnerabilities as possible — from a week to several months. The most convincing way to show management where your physical security stands.Deliverable: report with operation timeline, evidence and a management debrief.

Awareness

Want your colleagues or students to learn more about physical security and its vulnerabilities? We'll organize a workshop or a lecture — practical and hands-on.Deliverable: a workshop or lecture tailored to the audience.

Keys, locks & safes

Locked or jammed doors, safes, key cutting, lock installation? We'll connect you with partners vetted through long-term collaboration. If we're nearby, we'll help you on the spot!Deliverable: an introduction to a vetted partner.

Surveillance detection

Got the feeling someone is tracking your car, or listening in on your office? We'll inspect the premises thoroughly, check the places we would plant devices ourselves, detect signals and identify their sources.Deliverable: findings report and protection recommendations.

Why Uncovert?

Most security firms treat the physical side as an add-on to IT — rarely ordered, and only in a limited scope. With us it's the other way around.

We act like attackers.

Everyone else sells an IT audit, staples on a checkbox list of security hardware, and walks into your office in broad daylight. We behave like actual attackers.

An IT infrastructure review is a given.

We love cables, risers and service tunnels — and we look for any way to tap in, or to sabotage.

Vendor-independent.

We don't sell anyone anything. We recommend only what would survive us.

We'll show you everything.

A report with evidence and priorities that both management and a technician will understand. When we open the server-room door for you, we won't say “turn around.”

Frequently asked questions

What is physical penetration testing?
Physical penetration testing is a controlled simulation of an attack on the physical security of a facility or area. Within an agreed scope, a team attempts to defeat locks, alarms, reception and other barriers to reach protected areas, assets or data. The goal is to uncover vulnerabilities before a real attacker exploits them.
What is the difference between full black teaming and a security inspection?
An inspection is a passive assessment of the premises, possibly with attempts to defeat some security elements in the customer’s presence — depending on the size of the facility it takes a few hours to two days. Black teaming is an active operation in which a team, within the agreed scope, genuinely attempts to defeat security and exploit the vulnerabilities it finds — from a week to several months. It includes reconnaissance, preparation, isolated sourcing and testing of the security elements the customer uses, and multiple prepared breach attempts with a rising level of risk of being detected.
How long does physical penetration testing take?
It depends on the scope and size of the facility. An inspection takes a few hours to two days; black teaming runs from one week to several months. Every space is different, so the exact scope and time windows are agreed in writing up front.
Who are your physical security services for?
Businesses and homes. We help companies protect sensitive data and assets, and individuals who want to know whether their home or car is truly secure. We operate in Brno, across Czechia and Slovakia, and within Europe.
Is a physical pentest legal?
Yes, when properly agreed. Every test runs on the basis of a written scope agreement including the property owner’s consent. Without that consent, we do not perform any test. We also require a so-called “get out of jail card” — a document signed by us, the customer, and possibly the property owner, which serves as proof that the test is authorized in case of trouble with a security service or the police.
How do I know if I’m being bugged or followed?
Nowadays even commercially available listening devices are fairly sophisticated, and analog radio bugs are largely a thing of the past. Much of the advice you’ve heard is now just legend. If you don’t have detection tools, you need to watch for new objects and check easily accessible but inconspicuous places such as nooks in furniture, suspended ceilings, false floors, ventilation openings, light switches, sockets and the like. The most reliable approach is a professional sweep — we check the places we would plant devices ourselves, detect signals and identify their sources. A category of its own is the tracking of mobile phones by state actors. Due to the sensitivity of this topic, we won’t go into details here.

Partners

P&K Service

Key cutting and installation of mechanical security systems — booth in UniHobby, Brno.

zembered teaming

A seasoned red team we love working with.

FVEY equipment

Cameras, sensors and other equipment for production, broadcast, automotive, aviation and security.

Want to secure your business or home?

Get in touch!

We're happy to answer all your questions and agree the next steps.

Initial consultation is free — we usually reply within 24 hours.

[email protected] | +420 534 534 147

© Uncovert s.r.o. Nové sady 988/2, 602 00 Brno | IČO 21981230 | All rights reserved

Uncovert s.r.o. is a Brno-based company specializing in physical penetration testing, black teaming, surveillance detection and building security inspections. We serve businesses and homes in the Czech Republic, Slovakia and across Europe.