01
Observe.
Map the facility's physical attack surface against ISO 27001:2022 Annex A.7 controls. Entry points, escort policy, document handling, guard protocol.
Physical resilience, engineered
Test the decisions that stand between access and compromise.
Run practical physical intrusion scenarios mapped to MITRE ATT&CK and ISO 27001:2022 controls.
0
Attack scenarios modeled
0
ISO 27001:2022 controls assessed
0
MITRE ATT&CK techniques mapped
~0 min
To a scored facility posture
Global Physical Risk Score
50/100Moderate Risk
Evaluated Controls
3Scenarios Available
Methodology
No black box.
A clear, evidence-led process connects physical exposure to decisions your teams can act on.
02
Simulate.
Run controlled intrusion scenarios mapped to MITRE ATT&CK. Tailgating, vishing, rogue hardware. Every action is logged to the telemetry panel as evidence.
03
Harden.
Translate findings into a prioritized remediation plan and an executive summary, with behavioral training as the primary control, not signage.
Context
A Project Built Out of Passion & Curiosity.
Hi there! While preparing for this application, I kept thinking about how exciting it would be to bridge physical security and security awareness in a more hands-on, practical way. Traditional training often gets stuck in static slides, making it tough to influence real-world habits—like how an employee reacts when a stranger attempts to tailgate through the lobby.
Eager to learn and contribute to the team, I spent my Sunday building this Proof of Concept (PoC). The scenarios, control mapping, and practical approach were carefully put together based on my studies, using AI tools simply as a fast-prototyping assistant to bring the interface to life in record time.
I'd love to keep exploring ideas like this: designing dynamic campaigns, simulating real-life social engineering scenarios, and above all, finding approachable ways to help teams build a genuine security culture. I hope you find this exercise interesting!