Intrusion & Alarm
How intrusion & alarm work is scoped and estimated: what drives the hours, what makes jobs harder than they look, and the effort patterns experienced estimators rely on.
How It Works & Technology Overview
An intrusion system is a supervised sensor network reporting to a control panel that signals a monitoring center. Detection layers: perimeter (door/window contacts — first line), interior (motion detectors, glass-break sensors — second line), and specialty/environmental (hold-up buttons, safe/vault sensors, temperature/flood/CO). Zones are hardwired home-runs, bus/addressable devices, or wireless (encrypted RF; range claims on datasheets assume open air and collapse against masonry, steel, and foil insulation — repeaters are the fix). Panels partition into independent areas with their own arming schedules and keypads. Communication to the central station is dual-path in modern practice (IP primary, cellular backup) with supervised polling. Monitoring grades matter contractually: UL-listed central-station service imposes documentation, runner/response, and certification requirements beyond ordinary monitoring; high-security environments (UL 681 extent-of-protection levels, UL 2050 for classified spaces, cannabis/banking rules) dictate device grade — e.g., high-security balanced magnetic switches — and conduit protection outright.
Common Deployment Scenarios
- Small commercial (retail/office): 8–32 hardwired or hybrid zones, one partition, cellular communicator, central-station monitoring, city alarm permit.
- Multi-tenant / partitioned facilities: separate arming areas per suite/department, shared perimeter, multiple keypads; panel architecture is driven by the client's real operating schedules, not the floor plan.
- High-security (cannabis, banking, defense): mandated hardware grade, conduit, dual-path with tight polling, video verification, strict log retention — the regulation is the spec.
- Takeover/modernization: new panel on inherited wiring — a forensic exercise; legacy field wiring is presumed defective until validated.
- Environmental-only packages: water/temp/power monitoring for server rooms and vacant properties, often ridealong zones on an existing panel.
Products, Vendors & Characteristics
- Panels: DMP (US commercial staple, strong in banking/government), Bosch (B/G series, high-security depth), Honeywell/Resideo (ProSeries and legacy Vista base), DSC/Johnson Controls (PowerSeries), Napco. Takeover compatibility (zone voltage, EOL resistor schemes, keypad buses) varies by family and constrains "reuse the wiring" plans.
- Sensors: Bosch, Honeywell, DSC, Optex (motion/outdoor), Inovonics (commercial wireless), glass-breaks with acoustic-pattern detection (typical coverage ~25-foot unobstructed acoustic path to protected glass; don't mount within a few feet of it), dual-tech motions for false-alarm-sensitive spaces.
- Communicators/monitoring: Alarm.com and AlarmNet cellular platforms; central stations resell monitoring with UL-listed options. Some monitoring companies require specific panel brands or protocols — confirm before hardware is spec'd. Panels still dialing out over a copper phone line (digital dialer) need a cellular or IP communicator: carriers are retiring copper, and the FCC eased the retirement rules in March 2026 — count the dialers on the walk and price the swap even if the line works today.
- Cloud-managed newcomers (e.g., Verkada alarm modules) trade panel depth for platform integration; check UL listing status against the client's insurance requirements.
What Makes It Hard (Gotchas & Failure Modes)
- False alarms are the product killer: motions facing HVAC vents, skylights, or windows; glass-breaks near rattling storefronts; unpartitioned cleaning crews. False-alarm fines and cancelled monitoring contracts trace back to placement decisions made on install day.
- Permits gate go-live: many jurisdictions require a city alarm permit before monitoring activates; the permit timeline can add weeks, and it isn't your calendar.
- Licensing splits: intrusion and fire alarm are different licenses in most states; locking anything on an egress door pulls the fire contractor and code into scope.
- Panel capacity cliffs: designs within ~15% of a panel's zone/power/bus limits should be forced to the next tier — the commissioning-week "one more sensor" otherwise triggers an infrastructure rebuild.
- Takeover liability: unsupported end-of-life panels "still working," unmapped wiring, unknown EOL resistor schemes; budget a wire-validation audit or exclude legacy defects by change order.
- Enterprise networks: static IPs, firewall exceptions, and polling heartbeats need client IT at the table early; discovered late, they stall cutover.
- Active 24-hour sites: parallel wiring and off-hours cutover labor; business operations tax every task.
Effort & Estimation Patterns
- Hardwired perimeter point (door/window contact): 45–60 minutes per point installed and terminated; double doors count as one location, two devices.
- Motion detector: 30–45 minutes; glass-break: ~30 minutes; both plus walk-test time.
- Panel install + programming (16–32 zones): 3–4 hours; add per-partition programming for multi-area systems.
- Wireless points: faster to mount (15–30 minutes) but add RF survey and possible repeaters in hard construction.
- Communicator + central-station account setup: 1–2 hours plus point-by-point signal verification — administrative programming (account data, zone descriptors, dispatch instructions) is its own labor block, separate from field time.
- UL-listed installations: add roughly a half-day administrative overhead (documentation, certificate, inspection scheduling).
- Takeovers: site survey and wire validation first, always — what's in the walls is rarely what's on the plan.
- Recurring: monitoring resale margin plus annual test-and-inspect visits (about 1 hour per panel plus per-device walk-test time); high-security accounts add scheduled certification renewals.
These figures are planning baselines drawn from common industry practice, not a quote. Real hours vary with site conditions, crew, and scope. DarkBird exists because that variance is measurable: it calibrates your estimates against your own completed-project actuals, so your numbers stop being someone else's averages.
More estimating knowledge
Access Control
Door hardware types, controller programming, credential types (card, mobile, biometric), locking mechanisms, and per-door labor norms.
AI, Automation & Smart Building Systems
AI readiness assessments, Microsoft Copilot deployment, workflow automation, IoT sensors, AI data governance, and ongoing managed AI services. (Building automation/BMS lives under Building Automation & Controls.)
AV & Conferencing
Display mounting, codec setup, conference room kits, control system programming, cable routing, and per-room labor by room size and complexity.
Building Automation & Controls
BAS/BMS platforms (Niagara, Distech, Honeywell), lighting and shade control (Lutron, Crestron), HVAC controls integration, per-point programming labor, and commissioning patterns.
Commercial Audio, Paging & Sound Masking
70V distributed audio, overhead paging, intercom, sound masking, background music systems, per-speaker/per-zone labor norms, and mass notification tie-ins.
Compliance, Standards & Certifications
NIST, CMMC, SOC 2, HIPAA, UL listings, low-voltage licensing by state, NSCA/AVIXA/BICSI standards, AHJ requirements, and how compliance scope affects labor.
Stop estimating from averages
DarkBird turns this kind of knowledge into Install Cards calibrated against your own completed projects. 45-day free trial, full Pro access, no credit card.