$ pentest --target=physical

Per-site covert-entry and overt-assessment pen test. Travel and legal-authorisation paperwork drive a lot of the headline cost.

$ answer --question="What does a physical pen test cost?"

A per-site physical pen test runs $8,000 to $35,000 per site in 2026 from specialist vendors. Covert-entry (attempt unauthorised access without site staff knowing) costs more than overt-assessment (walk-through with site staff).

Last verified June 2026

$ stat --slot=1

$8-35K

Per-site band

Covert + overt

$ stat --slot=2

5-15%

Multi-site discount

Typical

$ stat --slot=3

Required

Written authorisation

Get-out-of-jail letter

$ stat --slot=4

Travel

Billed at cost

Standard practice

$ drivers --price

Site count and travel
Multi-site engagements discount but travel dominates the marginal cost.
Covert vs overt
Covert engagements include surveillance, reconnaissance, pretext-construction.
Reconnaissance days
Pre-engagement open-source recon and on-site surveillance.
Legal authorisation
Get-out-of-jail letter, building-owner approvals, ID verification.
Goal-based scoping
Specific objective (e.g. reach the server room) vs general assessment.