Prevent the Illusion of Security
Security only provides certainty when proven in practice
Too often, organizations rely on measures, procedures, and systems that are well-organized on paper. However, an illusion of security is created when no one has actually tested whether they work under pressure.
Cocoon aims to prevent this illusion of security and has been doing so for over 25 years.
- Founded in 2001, market leader in physical red team audits since 2010
- Independent Dutch consultancy, with no interest in third-party products or solutions
- From physical penetration testing to security awareness: the full process under one roof
Cocoon Security Validation
We believe that organizations should be able to rely on their security.
Not because it looks good on paper, but because it works in practice.
That is why we believe in a continuous cycle of:
Test → Improve → Secure
Until security is not just present, but demonstrably effective.
Our Vision
We make reality visible.
By acting as a real attacker, we test people, resources, procedures, and physical security in conjunction with one another.
We do not look for mistakes, but for vulnerabilities that a real attacker could exploit.
The outcome is not a theoretical judgment, but concrete insights that allow organizations to strengthen their resilience.
Our Unique Approach
Cocoon performs physical penetration tests, red teaming, and social engineering tests.
We test whether security actually works, help improve vulnerabilities, and support organizations in securing those improvements. We do this with colleagues who have backgrounds in the police and/or defense, as well as actors and other specialists. To ensure optimal learning, all auditors possess strong pedagogical skills so that a debriefing or training session based on the test results advances both the individual and the organization.
Test. Improve. Secure.
To us, this is not just a method.
It is our intrinsic motivation to prevent the illusion of security.
The Team
Cocoon works with a permanent core team and a network of specialists deployed per assignment, ranging from OSINT research to physical breach techniques.
Where an assignment requires it, additional specialists join the team: drone pilots, locksmiths, OT hackers, and divers.
Our Vision on Security
Security measures only work if they align with how people actually behave. A procedure on paper says nothing about what happens when someone is actually at the door. That is why Cocoon tests practice, not theory.
- A partner, not just a supplier: involved before, during, and after the assignment
- Demonstrable resilience, no assumptions on paper
- Practical advice, directly applicable to your organization
Our clients include established publicly traded companies and organisations across both the private and non-profit sectors. References are available upon request.