Physical pen testing tests physical security controls — tailgating, lock picking, social engineering security guards, cloning access badges, dumpster diving, USB drops.
Physical security is often the weakest link in technically-strong organizations. Requires explicit written authorization including specific locations and time windows. Often combined with social engineering.