Corporate campus security after hours works best when cameras do the routine watching and people do the deciding. Hybrid work leaves buildings empty for long stretches, and fixed guard rounds miss what happens between loops. AI on your existing CCTV can flag after-hours activity, door and perimeter events, and vehicles in restricted areas, then give a GSOC operator a clip to verify before anyone is dispatched.
Key takeaways
- Office attendance has recovered unevenly. CBRE reports global average office use of 53% in 2025, which still means many buildings sit half empty by day and close to empty at night.
- Guard patrols are costly to staff around the clock and only see what is in front of them.
- In Pittsburgh, only 39 of nearly 9,100 burglar alarm calls in 2023 led to a police report. Police in some cities now prioritize verified alarms.
- Camera-assisted verification lets a GSOC operator check an event on video first, then dispatch a guard or police only when it is warranted.
- Correlating access-control events (door held open, door forced) with video turns noisy door alarms into reviewable incidents.
- Pilot on a few doors, a parking lot and one perimeter line, with an owner for every event type.
Why is corporate campus security harder after hours now?
After-hours building security is the set of people, processes and systems that protect a site when it is closed or lightly occupied. On a corporate campus, that window used to be nights and weekends. With hybrid work, it now includes quiet floors, half-empty parking lots and unused buildings on Mondays and Fridays too.
The data shows how uneven occupancy has become. CBRE research reported by Facilities Dive in July 2026 puts global average office use at 53% in 2025, up from 38% in 2024, with peak-day use at 80%. Buildings swing between busy and empty within the same week.
Regional patterns differ too. In CBRE's February 2025 analysis of global utilization, 2024 average utilization was 50% in Asia Pacific, 46% in EMEA and 33% in the Americas, and Fridays were notably quiet in EMEA. In the US, Kastle Systems' Back to Work Barometer reported a weekly average of 56.3% across its 10-city sample, its highest since early 2020, with a Tuesday peak of 66.0%.
For a head of corporate security, that means more hours when a building is technically open but few people are around to notice a propped door or an unfamiliar vehicle.
What are the main after-hours risks on a corporate campus?
After-hours threats on a business park or multi-building HQ are rarely dramatic. They are small, repeated events that get expensive when nobody notices in time.
- Unauthorized access. Someone enters through a service door, a loading bay or a side entrance that should be locked. A related risk is tailgating, where a person follows an authorized badge-holder through a controlled door.
- Doors held or propped open. A door held open alarm fires when an access-controlled door stays open longer than its configured time. Contractors, cleaners and smokers often prop doors, and each one is a gap in the perimeter.
- Theft and vandalism. Laptops, AV equipment, catering stock, copper and tools disappear from quiet floors, plant rooms and loading areas.
- Vehicles in parking lots and service roads. Unknown vehicles idle in visitor bays overnight, or service vehicles linger at loading docks long after deliveries end.
- Loitering. Loitering is a person staying in an area longer than normal activity explains, often near entrances, bike stores or the rear of buildings.
- Perimeter breaches. A perimeter breach is any crossing of a fence line, gate or boundary into the site outside permitted routes and times.
Most campuses already have cameras on these areas. Nobody is watching hundreds of feeds at 2 AM.
What do guard patrols cost, and where do they fall short?
Guard patrols remain essential for response, lock-ups and visible presence. The problem is relying on them to find incidents on a large, quiet campus.
Cost is the first constraint. The US Bureau of Labor Statistics Occupational Outlook Handbook lists a median annual wage of $38,020 for security guards as of May 2025, before benefits, overtime, contractor margin, supervision and training. A single post staffed 24/7 covers 168 hours a week, which is more than four full-time schedules before leave and relief.
Coverage is the second constraint. A guard on a 45-minute round sees each door, stairwell and parking lot row for a few seconds per loop. Anything that happens between loops, such as a door propped for 20 minutes or a vehicle parked for an hour, is only found later on footage, if at all.
The third constraint is consistency. The BLS notes that rotating shifts and night work are common in the role, and attention fades on the 40th uneventful round.
Why do false alarms matter for corporate security monitoring?
A false alarm is an alarm that triggers a response but where no real intrusion or emergency is found. On campuses they come from cleaners, late workers, door contacts and badge-holders who forget to disarm.
False alarms carry real costs for public services. CBS News Pittsburgh reported in April 2024 that the city's police received nearly 9,100 burglar alarm calls in 2023. Only 39 produced a police report, and the calls consumed roughly 4,200 police staff hours. Pittsburgh responded by no longer attending every burglar alarm and giving higher priority to alarms that are verified.
The monitoring industry has moved the same way. The Monitoring Association's TMA-AVS-01 Alarm Validation Standard, which received ANSI accreditation in January 2023, scores intrusion alarms from Level 0 (no call for service) to Level 4 (confirmed threat to life) so dispatch centers can prioritize. In the UK, the National Police Chiefs' Council updated its policy for police response to security systems in 2025, including revised false alarm definitions and administrative processes.
The direction is clear: verified alarms get priority. That makes fast video verification a core GSOC capability.
How does AI on existing CCTV support remote verification and virtual patrols?
Remote video verification is the practice of checking an alarm or event on live or recorded video before dispatching a person. A virtual patrol is a scheduled or event-driven review of camera views by an operator, replacing some physical walk-through rounds.
AI video analytics makes both practical at campus scale. Instead of an operator cycling through tiles, the system monitors connected feeds continuously and surfaces configured events with context: site, zone, camera, time and a short clip. Our explainer on moving from reactive to proactive video monitoring covers the shift in detail.
Kote for corporate campuses is built around four areas most campus teams already camera-cover:
- Entrances and access points. Entry activity, prolonged presence and events near restricted doors, shown with camera context.
- Lobbies and shared spaces. Queues and activity in reception areas, common spaces and building connections.
- Parking and service areas. Vehicle activity in parking lots, loading bays and designated restricted zones.
- Perimeters and restricted zones. Activity around campus boundaries and sensitive equipment areas.
Kote connects to existing IP cameras and RTSP-capable DVR/NVR streams, so the work starts with the camera estate you already have. Before a pilot, run through our NVR and AI compatibility checklist to confirm stream access, resolution and bandwidth.
The human stays in charge: the software surfaces an event, and an operator verifies it and chooses the response. Our post on AI agents in security operations explains how that division of labor works on a busy shift.
How do you catch doors held open and tailgating after hours?
Access control systems already know when a door is forced or held open. What they lack is context: is a cleaner moving a cart, or is someone propping a fire exit?
Access-control and video correlation pairs each door event with the matching camera clip, so the operator sees the event and the evidence together. Our guide to access control and video correlation walks through how that pairing works and which events to start with.
For tailgating specifically, where the stakes are higher, our sister post on tailgating detection in data centers covers the same pattern in a stricter environment. Good starting points are service doors, rear fire exits, and doors into plant or server rooms.
What can you ask your cameras in natural language?
Natural-language video search lets an operator type a plain question and get matching clips without scrubbing through hours of recordings.
Questions a campus team might ask include:
- "Show activity around the rear exit after closing."
- "Was anyone near the north gate overnight?"
- "Show the lobby between 1 AM and 2 AM."
Our post on natural-language video search covers how to phrase queries and where search fits in an investigation workflow.
How should a GSOC manage multiple buildings or campuses?
A global security operations center (GSOC) is a central team that monitors and coordinates security across many sites and time zones. The hard part of after-hours coverage is knowing which of 30 buildings needs attention right now.
Kote gives multi-site visibility from one layer, routes events to the right team, and helps campus teams understand what happened across buildings. A GSOC in one region can verify a parking lot event at a business park in another, then hand off to the local guard with the clip attached.
Useful rules for a multi-site after-hours setup:
- Define after-hours windows per building, not per company, because occupancy patterns differ by site.
- Route events by type: door and perimeter events to security, service-vehicle dwell to facilities, safety events to the site lead.
- Keep a single incident record with the clip, the decision taken and who took it, to support chain of custody.
If you are comparing platforms for this role, our Kotelab vs Rhombus comparison looks at how a retrofit-first layer differs from replacing cameras.
Guard patrols vs camera-assisted verification
The goal is not to remove guards. It is to send them where they are needed.
- Finding a propped door. Guard patrol only: Found on next round, if at all; Camera-assisted verification: Door event and clip reviewed when it happens.
- Verifying an intrusion alarm. Guard patrol only: Guard drives or walks to the zone; Camera-assisted verification: Operator checks video first, then dispatches.
- Parking and service road checks. Guard patrol only: Periodic drive-through; Camera-assisted verification: Vehicle activity surfaced by zone and time.
- Perimeter coverage. Guard patrol only: Spot checks along fence line; Camera-assisted verification: Continuous monitoring of covered sections.
- Morning investigation. Guard patrol only: Manual footage scrubbing; Camera-assisted verification: Natural-language search by place and time.
- Response and lock-up. Guard patrol only: Essential, on site; Camera-assisted verification: Still needs a person on site.
How do you balance after-hours monitoring with employee privacy?
After-hours monitoring still captures employees, contractors and visitors, so design privacy in from the start. Rules differ by country, but the principles are similar.
The UK Information Commissioner's Office guidance on data protection and monitoring workers is a useful reference even outside the UK. It expects employers to tell workers about monitoring, choose the least intrusive way to meet a clear purpose, avoid monitoring "just in case", and carry out a data protection impact assessment (DPIA) where monitoring is likely to be high risk. The ICO notes that the guidance is under review following the Data (Use and Access) Act, so check the current version.
Practical steps for a campus program:
- State the purpose in writing: after-hours security, safety and asset protection, not productivity tracking.
- Limit detections to doors, perimeters, parking lots, service areas and restricted zones. Never monitor toilets, changing rooms or similar private spaces.
- Set retention periods per site and stick to them.
- Restrict who can search footage and log every search.
- Brief employees, works councils or unions where relevant.
Ask any vendor whether facial recognition is involved and whether you can switch it off. Kotelab states ISO 27001, AES-256 encryption and customer-configurable retention, with SOC 2 Type 2 in progress, and does not sell or use customer video for advertising. Procurement and IT teams can review the details in the Kotelab Legal & Trust Center.
How do you run an after-hours security pilot?
Prove value on a small part of the campus before you scale. These steps follow Kotelab's onboarding approach.
- Define the operational need. Pick 3 to 5 event types, such as after-hours activity at rear exits, service doors held open, and vehicles in a restricted parking lot zone. Name an owner for each.
- Set after-hours windows. Agree closing times per building, plus any weekend or holiday schedules.
- Review the camera estate. Confirm which cameras cover those zones, check RTSP access through your NVR or VMS, and note any blind spots or poor night images.
- Connect access control where possible. Map door IDs to camera views so door events arrive with video.
- Configure and evaluate with operators. Run for two to four weeks. Have GSOC operators review every event and record whether it was useful, a nuisance or missed.
- Compare against patrol data. Look at what patrols found versus what the cameras surfaced, and where guard time could move to response.
- Decide on scale. Expand to more buildings, more event types or overnight virtual patrol schedules based on what operators found useful.
Frequently asked questions
What is corporate campus security?
Corporate campus security is the protection of people, buildings and assets across a multi-building site such as a headquarters or business park. It combines guards, access control, CCTV and alarm monitoring. After-hours coverage is often the weakest part.
Can AI video analytics replace security guards at night?
No. AI video analytics helps guards and operators by surfacing events and supplying clips for verification. People still verify, decide and respond on site. The practical gain is sending guards to verified events rather than relying only on fixed rounds.
What is a virtual guard patrol?
A virtual guard patrol is a remote operator's review of camera views, on a schedule or triggered by events, in place of some walk-through rounds. It suits routine checks of doors, parking lots and perimeters. Physical patrols remain important for lock-ups and response.
How does video verification reduce false alarm dispatches?
Video verification lets an operator check an alarm on camera before calling police or sending a guard. A clip showing a cleaner can be closed with a note. Standards such as TMA-AVS-01 and police policies in several cities give verified alarms higher priority.
Do we need new cameras for after-hours AI monitoring?
Usually not. Kote connects to existing IP cameras and RTSP-capable DVR/NVR streams. A camera estate review during the pilot identifies blind spots and cameras with poor night images.
Is after-hours video monitoring of employees legal?
In most countries, security monitoring is permitted when it has a clear purpose, is proportionate and is transparent to workers. Regulators such as the UK ICO expect employers to inform workers and assess high-risk monitoring first. Check local law with your legal team.
How long does an after-hours security pilot take?
A focused pilot usually runs a few weeks on a small set of doors, parking lot zones and perimeter sections. That is long enough for operators to judge which events are useful and where to scale next.
See after-hours activity on the cameras you already have
Start with the doors, parking lots and perimeters that worry you most. Explore the Kote platform, see how it supports corporate campus security, and talk to the Kotelab team about a pilot on your existing CCTV.