Physical security for AI and GPU facilities
A single rack of current GPUs can be worth more than everything else in a traditional data hall, and the model weights trained on them can be worth more still. Many AI facilities were built or leased in months, with the access control, contractor process and shipping procedures of a much less valuable building. We assess the physical layer around your compute and tell you what to fix first.
Who it is for
- GPU cloud providers and neoclouds operating their own halls or leased colocation space.
- AI labs and companies holding model weights or training clusters on premises or in colocation.
- Developers and investors who need an independent view of a site’s physical security before or after acquisition.
- Operators expanding fast, with constant contractor and delivery traffic through live halls.
What we assess
- Credentials and readers on the path to the compute: what they are, and whether they clone.
- Contractors and build-out crews in live space: who escorts them, and what the record shows afterwards.
- Shipping and receiving: GPU deliveries, RMA returns and hardware leaving the building, and how each is checked.
- Cage, cabinet and rack separation around the most valuable hardware.
- Drives and media that may hold model weights or customer data, from the rack to destruction.
- The security systems themselves: cameras, door controllers and their network exposure.
- Deprovisioning: whether access ends when an employee, contractor or vendor leaves.
What you receive
- Findings ranked by what an attacker could reach or remove, each with a price range.
- The technology or process to move to for each finding, not just the gap.
- Mapping to SOC 2 CC6.4 and ISO 27001 A.7 where they apply.
- A re-test of Critical and High findings within 90 days of the report.
Every engagement has a fixed fee agreed in writing before we start, and we take no referral fee or commission on any product we recommend. Typically two to three days on site per facility, with the report two to three weeks later. One site starts from $9,500; larger campuses are scoped on the call.
Common questions
We lease space from a colocation provider. Is this still useful?
Yes. Most of what decides who can reach your hardware, the access list, remote hands, deliveries and your own staff’s credentials, can be assessed from the tenant side. See the colocation cage access audit.
Do you assess the cybersecurity of the cluster?
We assess the physical layer and the security systems that protect it, including how door controllers and cameras connect to your network. Network and cloud penetration testing is a separate engagement; we can refer you to a specialist firm and coordinate the scope. See security systems testing.
Can you work under NDA before we share site details?
Yes. A mutual NDA comes before any detail about your sites, hardware or customers.
Book a scoping call
Tell us what is in scope and any deadline. You get a fixed-fee proposal in writing before any work starts, and a mutual NDA before you share anything sensitive.
AI & GPU facility security
We reply within one business day.
Nothing you send is shared outside Calibre.