Physical penetration testing is often reduced to lockpicks, cloned badges, and dramatic stories of breaking into buildings. The reality is far less glamorous and far more interesting. A successful physical penetration test begins long before anyone approaches a target facility. It starts with reconnaissance, understanding human behaviour, identifying operational weaknesses, navigating legal boundaries, and developing believable pretexts that exploit human trust rather than technology.