Perform standardised non-invasive physical security evaluations, log empirical telemetry, and compile instant YAML case records and CISO warranty punch lists.
Step 1: What are you inspecting?
Filter cards by physical asset:
Assessment Mode: New Field Assessment (Clean Slate)
BADGEPHY-T1001Unencrypted RFID Harvesting
5s Check • Pocket RFID Reader
Step 2: What are you checking? Contactless passive carrier frequency. Does this credential rely on an exposed static UID without cryptographic mutual authentication?
Remediation Action: Replace credential stock with AES-128 crypto smartcards (DESFire EV3 / Seos) and activate SAM keys on readers.
Step 2: What are you checking? Latch bolt exposure and clearance margin. Does the strike margin exceed 3.2mm (1/8 in.) with direct line-of-sight to the latch bolt and no overlapping steel astragal guard?
Remediation Action: Install full-height continuous stainless steel security astragal plate on outward door assembly.
SENSORPHY-T1003REX Sensor Blind Activation
15s Check • Visual Line-of-Sight
Step 2: What are you checking? Request-to-Exit (REX) PIR sensor coverage. Is the interior REX motion sensor optical field visible through transom or threshold gaps without a directional deflector hood?
Remediation Action: Mount UL-listed directional deflector hood over interior PIR motion sensor.
PORTPHY-T1004Exposed Active Physical Network Interface
10s Check • Passive LED Link Tester
Step 2: What are you checking? Common area Ethernet drop state. Does an accessible wall jack in an unrestricted area broadcast an active physical Layer 1 carrier without port shutdown or 802.1X quarantine?
Remediation Action: Administratively shut down unmonitored switch ports at patch panel or configure 802.1X quarantine.
Generated Output
Select an inspection object above, choose your assessment classification, and enter observation telemetry to compile output.
Engagement Addendum
Audit Scope & Consent Clause
Single-Sentence Fast-Path Clause
"Client explicitly authorizes the assessment team to perform non-invasive, passive radio frequency (RF) credential reads and non-intrusive passive physical network port link detection during the inspection to verify vendor hardware installation specifications."
Scope & Life-Safety Protection Guarantees
• Zero Operational Impact: Strictly non-intrusive reads only. No packet injection or sniffing.
• Life-Safety Non-Interference: Zero manipulation of fire alarm, emergency egress, or crash bar hardware.
• Contractual Purpose: Generates a quality assurance scorecard to assist client in validating contractor warranty deliverables.