Mystery Guest
Unmonitored visitors. Access to server rooms. Employees who share too much information. In many organizations, physical security is lacking.
With a Mystery Guest from OneXillium, you can discreetly find out how things really are. Without anyone noticing, we identify risks—from access security to employee behavior—so you can take corrective action before things go wrong.
Benefits for Your Organization
How does the mystery guest go about their work?
Frequently Asked Questions About Mystery Guest
Our specialists have compiled a list of frequently asked questions for you. If your question isn't listed here, please contact us.
A mystery guest campaign is completely legal as long as it is conducted with the explicit consent of the organization being evaluated. That is why it is important for the mystery guest to receive a release form. In this form, the client provides written consent to use the described approach.
Yes. Social engineering is an essential part of the Mystery Guest approach. Our experts deliberately use human interaction and behavioral influence to test physical security measures. This includes approaching employees, assuming a credible role, or capitalizing on routine behavior. Everything is done discreetly, professionally, and within pre-agreed parameters. This gives you insight into how your organization handles unexpected situations and unfamiliar individuals.
No. The Mystery Guest operates discreetly, professionally, and without disrupting business processes. Everything is done in consultation and within pre-agreed parameters.
Among other things, the Mystery Guest assessment tests: physical access security, employee behavior, the presence of confidential information, and access to critical areas such as server rooms.
Many organizations focus on digital security but overlook physical risks. A Mystery Guest demonstrates how easily sensitive information or systems can be accessed—and how to prevent that from happening.
Let's identify the risks
Your physical security plays a major role in determining how secure your organization really is. A Mystery Guest campaign will help you identify where the risks lie and how to prevent them.
