Your firewall is fine. But what about your front door?
I test the parts of your security that live outside the network: doors, badges, receptions, phone lines and the people who answer them. Authorised, documented, and focused on what you can actually fix.
Where attackers actually get in
Most breaches don't need a zero-day. They need a confident person, a plausible story and an unlocked door. I simulate exactly that, under contract and within agreed rules of engagement.
Physical Penetration Testing
Can someone walk into your building, reach sensitive areas and leave unnoticed? I test access control, tailgating, locks, badges and staff response on site.
Social Engineering
Realistic pretexts against reception, facility management and staff, from the "maintenance technician" to the "new colleague". Measures awareness, not just policy.
Vishing Assessments
Phone-based attacks on help desks and employees: password resets, information gathering and authority pretexts. The channel most awareness training ignores.
Controlled, legal, useful
Every engagement runs on a signed authorisation and clear rules of engagement. The goal isn't to embarrass anyone. It's to give you evidence and a fix list.
Scoping
We define targets, boundaries, timing and who knows what. Written authorisation before anything happens.
Reconnaissance
OSINT and on-site observation, the same homework a real attacker would do.
Execution
The agreed scenarios are carried out and documented with photos, recordings and timelines.
Report & debrief
Clear findings, prioritised recommendations, and a debrief your team can act on. No blame, just gaps.
Independent, hands-on
I'm Raphael, the person behind Human Factor: an independent security consultant based near Linz. My background is in sales, which turns out to be excellent training for social engineering: understanding how people make decisions, build trust and say yes.
Today I put that to work for organisations that want to know how their people and premises hold up against a real-world attacker. You work directly with me, from scoping to final report.
- Based inLinz area, Austria
- Working inAustria & DACH
- LanguagesGerman, English
- FocusPhysical · Human
- EngagementsAuthorised only
Let's find your weak spots first
Tell me briefly about your organisation and what you'd like tested. I'll get back to you within two working days.
office@human-factor.atPrefer to talk in German? Gerne auch auf Deutsch.