Test the physical and technical protections around your people and information

Physical security, stolen laptop and electronic countermeasure assessments for risks that start outside the network.

Trusted by companies of all shapes and sizes

What are physical security and electronic countermeasure assessments?

Not every attack comes over the internet. A physical security assessment tests whether someone could enter your premises, reach sensitive areas or connect to your network. A stolen laptop assessment tests what an attacker could recover from a lost or stolen device, such as data, credentials and access to your systems.

Electronic countermeasure assessments look for covert listening and surveillance devices and for weaknesses in the protection of sensitive meetings and spaces. All work is agreed with you in advance and carried out within clear authorisation. Results are reported in the Rootshell Platform.

The benefits of physical security and electronic countermeasure assessments for your business

Test the protections that sit around your network, not just on it.

Identify vulnerabilities
Identify potential weaknesses

Find gaps in access control, device encryption, secure areas and the handling of sensitive spaces.

Prepare for a real-world attack
Proactive defence

See how far an intruder or a thief could get, and close the gaps before it happens for real.

CREST-certified pen testing
Prepare for loss and intrusion

Understand what is exposed if a laptop is stolen or a building is breached, and plan your response.

Insight
Better visibility and control

Record physical and technical findings in the same platform as the rest of your results.

Comply_with_security_standards (1)
Stay compliant

Provide evidence for standards that expect physical and device security to be tested.

Stay ahead of threats with our physical security and electronic countermeasure assessments

Get Started

On-demand physical security results at the click of a button

The Rootshell Platform is a neutral, centralised hub for managing vulnerabilities and protecting against threats, providing you with a single source of cyber security truth.

Recognised industry leader in penetration testing as a service (PTaaS)

Comprehensive physical security and electronic countermeasure assessments tailored to your needs

Elevate your security with a customisable, all-in-one solution tailored to your unique objectives, risk appetite, and budget.

Rootshell PTaaS package

12-month contract
Build your package:

Plus receive your results an data through The Rootshell Platform

Ready to get started?

Discover your needs

Share your security requirements with us, and Rootshell will follow up to ensure we’re the perfect fit for your organisation.

Dive into a personalised demo

Experience a tailored demonstration of our vulnerability management platform, showcasing how it can enhance your security posture.

Seamless onboarding

Start using the Rootshell platform, input previous vulnerability data, and get solutions tailored to your team’s goals, risk appetite, and budget.

Reasons to work with us

For physical security and electronic countermeasure assessments, Rootshell combines accredited testers with the Rootshell Platform, so every finding is easy to track and fix.

Powered by our platform
All your results in one place

Findings, retests and fixes sit in the Rootshell Platform alongside your other testing and scanner results, so progress is easy to track.

CREST-certified pen testing
Accredited, experienced testers

Delivered by experienced testers. Rootshell is CREST registered, Cyber Scheme accredited, ISO 27001 certified, an IASME Cyber Essentials Plus certification body, and NCSC CHECK scheme accredited.

Quality assured
Recognised standards

Every activity is authorised in writing and agreed in advance within clear rules of engagement.

Expert advice and support
Clear reports, clear next steps

Clear, prioritised findings with practical fix advice, and retesting to confirm that fixes have worked.

Remote penetration testing
How we deliver it

Visits and any on-site activity are scheduled and agreed with you in advance, with named contacts.

Talk to our team about physical security and electronic countermeasure assessments

Book a demo

Don’t just take our word for it, hear what our customers think

Physical security testing compared with digital-only testing

Physical security testingDigital-only testing
What it testsBuildings, access controls and what is left unattendedSystems and networks
ExamplesEntry to offices, stolen laptop scenariosWeb, cloud and network tests
Why it mattersPhysical access can bypass digital controlsShows weaknesses in systems
Used togetherCloses the gap between building and networkCovers the technology side

Common questions about physical security and electronic countermeasures

What is physical security testing?

It checks whether someone could get into your premises or reach sensitive equipment, and what they could do once inside.

What is a stolen laptop assessment?

It tests what an attacker could access from a lost or stolen company laptop, for example whether the disk and saved access are properly protected.

What are electronic countermeasures?

Checks for unauthorised listening or recording devices in meeting rooms and sensitive spaces.

Is it carried out with permission?

Yes. All physical testing is agreed with you in advance, with clear rules on what is in scope.

Last reviewed: 5 November 2026. Written and reviewed by the Rootshell R&D team. Rootshell was founded six years ago and is founder-led, drawing on more than 30 years of industry experience from previous successful businesses. We deliver thousands of testing days every year. CREST registered, Cyber Scheme accredited, ISO 27001 certified, an IASME Cyber Essentials Plus certification body, and NCSC CHECK scheme accredited.

Related testing services

Most clients combine more than one test. These pair well with physical security and electronic countermeasures.

Ready to take back control of your cyber security?

    Talk to us

    We use your details to reply to you. See our Privacy Policy