Physical security for modern teams

Verify physical hardware resilience instead of relying on paper checklists.

45s Walk Triage
$0 Remediation Budget
100% Non-Invasive QA
Audited & Cross-Walked Against Global Security Frameworks
ISO 27001:2022 A.7 Physical Controls PCI DSS v4.0 Requirement 9 SOC 2 Type II CC6.4 Access NIST SP 800-53 PE-3 Perimeter NDPA Data Protection Act
Getting Started

Choose Your Pathway

Three purpose-built ways to engage with the APCAF standard.

Core Principles

Why APCAF?

Replacing passive checklist assumptions with verifiable physical resilience.

01. Paper Compliance
Tells you a control exists.

Traditional audits check a binary box: "Is there a lock on the door?" They fail to test whether credentials broadcast unencrypted UIDs, frames have bypassable gaps, or sensors are unshielded.

02. Adversarial APCAF
Asks if it resists a known bypass.

Evaluates whether physical hardware actually withstands adversary bypass mechanisms under 45-second passive, non-destructive inspection.

03. Contractual Result
Finding → Warranty Notice → Fix.

Latent defects are delivered as formal non-conformance punch lists to General Contractors, enabling CISOs to legally hold retainage and rectify hardware at $0 client capex.

Taxonomy Baseline

The Four MVP Techniques

Deterministic binary checks executable in under 45 seconds during routine site walks.

Explore Full Rule Repository & YAML Specifications →
Empirical Evidence

Verified Commissioning Case

Real-world evidence from a pre-handover audit of a 120,000 sq ft enterprise data center.

Commissioning Audit #2026-08
Tier III Commercial Bank Facility Walk
100% RECTIFIED UNDER WARRANTY
120k sq ft Facility Scope
3 Defects Latent Faults Flagged
$48,000 Retainage Held
$0 Client Remediation Cost

During the pre-handover inspection, the assessment team identified unencrypted 125 kHz Prox cards, a 4.5mm door margin on the primary server suite (violating NFPA 80), and an active unauthenticated common area drop. Delivering the formal APCAF Notice allowed the CISO to hold $48,000 in GC retainage until all 3 latent faults were corrected at contractor expense.