Discreet, targeted, and confrontational. Discover just how vulnerable your physical security really is

Mystery Guest

Unmonitored visitors. Access to server rooms. Employees who share too much information. Physical security is lacking in many organizations.

With a Mystery Guest from OneXillium, you can discreetly find out what’s really going on. Without anyone noticing, we identify risks—from access security to employee behavior—so you can take corrective action before things go wrong.

Request a Mystery Guest Survey

Benefits for Your Organization

Hidden vulnerabilities come to light

A Mystery Guest reveals exactly where your physical security and/or protocols are falling short—from open doors to inattentive employees. This allows you to take targeted measures.

Increases awareness and improves behavior within teams

Our approach makes employees confront their own role in security. This raises awareness and encourages safer behavior—without pointing fingers.

Supports compliance and audits

The results help you demonstrate compliance with standards such as ISO 27001 and NEN 7510. They include specific areas for improvement and proof of compliance.

How does the mystery guest go about their work?

Observation

We begin with an online and in-person assessment of your organization. This allows us to identify potential weaknesses.

Scenarios

Based on the investigation, we develop realistic scenarios. We use these to try to gain access to the building without being seen.

Attempt Two

If the first attempt is unsuccessful, we'll carry out a second targeted action based on a new scenario.

Enter the building

The Mystery Guest physically enters the premises and observes behavior, processes, and security vulnerabilities.

Gathering Evidence

We try to gain access to critical areas. There, we gather evidence of physical vulnerabilities and information security issues.

Reporting

All findings are carefully documented in a written report, including a risk analysis and recommendations.

Delivery

Afterward, you will receive a detailed report. If desired, this can include footage from hidden cameras—always in consultation with you.

Request a Mystery Guest

Frequently Asked Questions About Mystery Guest

Our specialists have compiled a list of frequently asked questions for you. If your question isn't listed here, please contact us.

A mystery guest campaign is completely legal as long as it is conducted with the explicit consent of the organization being evaluated. That is why it is important for the mystery guest to receive a release form. In this form, the client provides written consent to use the described approach.

Yes. Social engineering is an essential part of the Mystery Guest approach. Our experts deliberately use human interaction and behavioral influence to test physical security measures. This includes approaching employees, assuming a credible role, or capitalizing on routine behavior. Everything is done discreetly, professionally, and within pre-agreed parameters. This gives you insight into how your organization handles unexpected situations and unfamiliar individuals.

No. The Mystery Guest works discreetly, professionally, and without disrupting business operations. Everything is done in consultation and within pre-agreed parameters.

Among other things, the Mystery Guest test evaluates: physical access security, employee behavior, the presence of confidential information, and access to critical areas such as server rooms.

Many organizations focus on digital security but overlook physical risks. A Mystery Guest demonstrates how easily sensitive information or systems can be accessed—and how to prevent that from happening.

Let's identify the risks

Your physical security plays a major role in determining how secure your organization really is. A Mystery Guest campaign helps you identify where risks lie and how to prevent them.

Would you like to learn more about Managed Services?

Let our specialists help you

Does this sound familiar in your situation? Would you like to learn more about how to optimize, make more sustainable, and secure your business processes related to printing and scanning? Get in touch and let our specialists help you set up these processes to be future-proof.

Cybersecurity Services » Mystery Guest