Tailgating
Tailgating is a security breach method in which an unauthorized person gains access to a protected area by exploiting the politeness or inattention of authorized users. The attacker typically pretends to be an employee or guest and enters the secured zone immediately behind someone who has just used their access card or code.
What is Tailgating?
Tailgating is a social engineering technique in which an unauthorized person enters a secured area right behind an employee who has just opened a door or gate with their own badge or code. The attack bypasses physical access control without any tools, and once inside, the intruder can reach server rooms, documents and workstations.
The name comes from driving too close behind the vehicle in front, and it captures the essence of the attack: the intruder does not break any safeguard, they simply rely on someone holding the door. In cybersecurity it is a reminder that physical access control belongs to the same chain as logical access control — a server room opened out of courtesy is simply an open server room.
Tailgating Definition
Tailgating is a security breach method in which an unauthorized person gains access to a protected area by exploiting the politeness or inattention of authorized users. The attacker typically pretends to be an employee or guest and enters the secured zone immediately behind someone who has just used their access card or code. Tailgating poses a serious threat to organizational physical security because it bypasses traditional access control systems.
How Does Tailgating Work?
The tailgating process typically proceeds as follows: the attacker observes the entrance to the protected area, waiting for the right moment. When an authorized employee opens the door, the intruder follows right behind them, often pretending to search for something in their bag or talking on the phone. By exploiting people’s natural tendencies toward politeness, the attacker may ask to hold the door or simply slip in behind the legitimate user. After entering the protected zone, the intruder can freely move around the facility, gaining access to confidential information or sensitive areas.
Types of Tailgating Attacks
Tailgating can take various forms, depending on the attack target and environment. Classic tailgating involves following an authorized person through doors secured by an access card. Elevator tailgating involves entering an elevator with an authorized employee to access secured floors. Tailgating with props involves using boxes, briefcases, or other items to appear as an employee delivering a package. Social tailgating involves striking up a conversation with an employee to build trust and facilitate entry.
Consequences of Tailgating Attacks
The consequences of a successful tailgating attack can be very serious. Theft of confidential data or intellectual property, sabotage of systems or infrastructure, installation of malicious software on internal computers, violation of employee or customer privacy, loss of company reputation and customer trust, and potential financial losses resulting from theft or downtime are just some of the possible consequences.
How to Recognize a Tailgating Attack?
Recognizing a potential tailgating attack requires vigilance and awareness. Key warning signs include unfamiliar people trying to enter the building right behind employees, people asking to hold doors or help with entry, people lingering near entrances observing employee movement, unknown “employees” without visible identification, and people carrying large boxes or bags that may serve as a pretext for entry.
Protection Methods Against Tailgating
To effectively protect against tailgating, organizations should implement comprehensive security measures. Employee training in security awareness is crucial. Implementing a “one person, one entry” policy at access control can significantly reduce risk. Installation of security vestibules or turnstiles, use of CCTV cameras and monitoring systems, regular security audits and penetration tests, and introduction of a guest system with mandatory registration and escort are additional steps that can help protect against tailgating.
The NIST SP 800-53 guidelines treat tailgating as both a technical and a human problem. Among physical safeguards they list verifying authorizations before granting access to a facility, escorting visitors, keeping entry logs and vestibules with interlocking doors, and for training — recognizing and reporting social engineering attempts, including tailgating. Whether these safeguards work in practice is what a physical security assessment checks: a controlled attempt to follow an employee inside shows whether gates, visitor procedures and staff reactions actually stop an intruder.
Tailgating Attack Examples
Examples of tailgating attacks include situations where an intruder follows an employee to the office pretending to have forgotten their access card, a person with a box asks to hold the door claiming to be delivering a package, an attacker joins a group of employees entering the building after lunch break, and an intruder pretends to be a new employee and asks for help entering the office.
Tailgating vs. Piggybacking - Key Differences
Although the terms tailgating and piggybacking are often used interchangeably, there are subtle differences between them. Tailgating typically occurs without the authorized person’s knowledge, while piggybacking may involve conscious consent to let someone in. In tailgating, the attacker often exploits the element of surprise or inattention, while piggybacking may rely on social manipulation. Tailgating is always unauthorized, while piggybacking may sometimes result from employees’ misguided politeness. In its insider threat mitigation guide, the US agency CISA gives letting someone piggyback through a secure entrance as an example of employee negligence, that is, an unintentional insider threat.
Best Practices for Tailgating Prevention
Effective protection against tailgating attacks requires a comprehensive approach combining education, technology, and appropriate procedures. Employee education, regular training, and threat awareness are crucial. Promoting a security culture where employees are encouraged to question the presence of unfamiliar persons can significantly reduce risk. Using advanced access control systems, clear rules regarding guests and access to protected areas, continuous observation and analysis of traffic at critical points, and regularly conducting simulated tailgating attacks are additional steps that can help protect against this threat. Creating spaces that make unnoticed entry difficult can also significantly improve organizational physical security.
In summary, tailgating poses a serious threat to organizational physical security. Effective protection requires combining education, technology, and appropriate procedures. Threat awareness and active engagement of all employees are crucial in minimizing the risk of such attacks.
Explore our services
Frequently asked questions
+ What is the difference between tailgating and piggybacking?
In tailgating, the attacker enters a protected area without the knowledge of an authorized person — exploiting the moment when a door remains open. In piggybacking, an authorized person knowingly lets the intruder in, e.g. holding the door out of courtesy. The difference comes down to whether the authorized employee is an unaware (tailgating) or aware (piggybacking) participant in the event.
+ How can a company protect itself against tailgating?
Effective measures combine technology and procedures: mantraps, gates and turnstiles that admit one person at a time, access control with entry logging, CCTV monitoring and a policy prohibiting letting in people without an ID badge. Training that builds the habit of reacting to unknown individuals in protected zones is also crucial.
+ Why is tailgating dangerous despite involving no technology?
Tailgating bypasses even advanced digital safeguards because it attacks the physical and human layer. Once inside the building, the attacker can gain access to workstations, documents, the server room or the internal network, which can be the starting point for a further attack. It is a reminder that physical security is an integral part of cybersecurity.
+ What are typical examples of tailgating?
The most common scenarios are entering right behind an employee through an access-controlled door, impersonating a courier, technician or supplier, and pretending to be someone with their hands full of boxes so that another person holds the door open. Attackers often exploit the courtesy and routine of employees in large, busy offices.
+ What does tailgating mean?
Literally, tailgating means driving too close behind the vehicle in front. In information security, the term describes an unauthorized person entering a secured area right behind someone who has access to it. The related term piggybacking describes a situation in which an authorized person knowingly lets the intruder in.
+ What is anti-tailgating access control?
It covers safeguards that let only one person through per authentication: gates, turnstiles and vestibules with interlocking doors. NIST describes a vestibule as an area enclosed by two interlocking sets of doors, designed to prevent an unauthorized person from following an authorized one inside. Door control can be fully automated or supported by guards who manage the number of people entering.