Institute security

Traditional security tools generate enormous volumes of alerts, making it increasingly difficult for Security Operations Centre (SOC) teams to distinguish genuine threats from harmless activity. As organizations face growing attack surfaces and increasingly complex IT environments, effective threat detection has become one of the most important capabilities in modern cyber security. Detection engineering has emerged as a critical discipline that enables organizations to identify malicious activity accurately and efficiently. Combined with artificial intelligence (AI), detection engineering is helping SOCs reduce false positives, uncover advanced threats, and respond to incidents with greater speed and confidence. Complex IT environments In this article, users will learn what detection engineering is, why it has become an essential component of modern security operations, how AI is transforming the way detections are created and maintained, and why organizations are increasingly investing in AI-powered detection engineering to strengthen their cyber resilience. Detection engineering is the process of designing, developing, testing, and continuously improving security detection rules that identify malicious or suspicious behavior within an organization's environment. Rather than relying solely on default alerts supplied by security vendors, detection engineers create customized detection logic tailored to an organization's specific risks, infrastructure, and threat landscape. Security detection rules The primary objective is simple. Detect attacks as early as possible while minimizing unnecessary alerts that waste valuable analyst time. Detection engineering combines several disciplines, including threat intelligence, attack simulation, log analysis, behavioral analytics, adversary emulation, and continuous testing. Detection engineers analyze how attackers operate, identify observable behaviours, and convert those observations into detection rules that security platforms can monitor automatically. Instead of asking whether malware exists on a device, detection engineering asks broader questions such as whether an employee account is behaving unusually, whether privileged access is being abused, or whether multiple seemingly harmless activities together indicate an active attack. Identity monitoring solutions Many organizations deploy powerful security technologies such as Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Network Detection and Response (NDR), cloud security platforms, and identity monitoring solutions. However, these technologies are only as effective as the detection logic behind them. Out-of-the-box detection rules are designed to work across thousands of organizations, meaning they often lack the context needed for a specific business environment. This can result in excessive false positives, missed attacks, or alerts that provide little actionable information. Evolving detection program Detection engineering addresses these shortcomings by ensuring detections are continuously refined as new threats emerge. Instead of treating security as a static configuration, organizations create an evolving detection program that adapts alongside attackers. Effective detection engineering is an ongoing process rather than a one-time activity. It typically begins with understanding current threat intelligence. Detection engineers study adversary tactics, techniques, and procedures, often using frameworks such as MITRE ATT&CK to understand how attackers operate throughout the attack lifecycle. Identify suspicious behaviours Next, engineers determine what telemetry is available from endpoints, networks, cloud environments, applications, identity systems, and security tools. Without high-quality data, even the best detection logic cannot perform effectively. Detection rules are then developed to identify suspicious behaviours rather than relying solely on indicators of compromise. These rules are thoroughly tested using attack simulations and red team exercises before being deployed into production. Once deployed, detections are continuously monitored. False positives are reduced, detection gaps are identified, and new intelligence is incorporated to ensure rules remain effective against evolving threats. Signature-based detections Artificial intelligence is fundamentally changing how detection engineering is performed. Rather than replacing human expertise, AI significantly enhances the speed, scale, and accuracy of detection development. AI can analyze vast quantities of security telemetry that would be impossible for humans to review manually. It identifies hidden relationships between events, discovers behavioral anomalies, and recommends new detection opportunities based on emerging attack patterns. Machine learning models continuously learn from historical incidents, allowing them to identify deviations from normal behavior that traditional signature-based detections may overlook. Experienced security engineers For example, instead of simply detecting repeated failed login attempts, AI may identify a subtle combination of unusual login times, unfamiliar devices, abnormal data access patterns, and unexpected privilege escalation. Individually these events may appear harmless, but together they could indicate a compromised account. This behavioral approach enables organizations to detect sophisticated attacks much earlier in the attack lifecycle. Developing high-quality detection rules has traditionally required experienced security engineers who spend considerable time analyzing logs and researching attacker behavior. AI accelerates this process by suggesting detection logic based on threat intelligence, previous incidents, and behavioral analysis. Engineers can review and refine these recommendations rather than creating every detection manually. Relevant detection logic This allows security teams to respond much faster when new attack techniques emerge. Imagine discovering a new ransomware campaign targeting the industry. Instead of spending days researching indicators and building detection rules manually, AI can recommend relevant detection logic within minutes, allowing analysts to validate and deploy protections rapidly. Security analysts often spend much of their day investigating alerts that ultimately prove harmless. This reduces productivity and increases the likelihood that genuine threats will be overlooked. AI improves detection accuracy by enriching alerts with additional context before they reach analysts. It correlates information from multiple security platforms, asset inventories, user identities, threat intelligence feeds, and historical behavior. Monitoring detection performance Rather than presenting an isolated alert, AI provides a richer picture of what is happening across the environment. As a result, analysts spend less time gathering information and more time investigating incidents that genuinely require attention. Attack techniques evolve constantly. Detection rules that worked effectively six months ago may no longer identify today's threats. AI enables continuous optimization by monitoring detection performance over time. It identifies rules generating excessive false positives, highlights gaps where attacks were missed, and recommends adjustments based on new intelligence. Emerging attacker techniques This creates a living detection program that evolves alongside both the organization and the threat landscape. Threat intelligence identifies emerging attacker techniques, while detection engineering converts that intelligence into actionable detection rules. AI strengthens this relationship by automatically analyzing global threat intelligence, identifying tactics relevant to the organization, and suggesting detection improvements accordingly. This dramatically reduces the time between learning about a new threat and deploying effective monitoring capabilities. As organizations continue adopting cloud services, hybrid infrastructure, Internet of Things devices, and AI-enabled applications, the volume of security data will continue to grow. Future detection engineering will become increasingly automated, predictive, and intelligence-driven. AI will not only identify threats faster but will also recommend new detections, validate existing rules, simulate attacker behavior, and help security teams continuously improve their defensive posture. Organizations that combine skilled detection engineers with AI-powered security operations will be far better positioned to identify sophisticated threats before they develop into major incidents.

Cyber threats are becoming faster, more sophisticated, and increasingly difficult to detect using traditional security operations alone. As organizations adopt AI-powered Security Operations Centre (AI SOC), measuring success requires more than simply counting alerts or incidents. The real value of an AI SOC lies in how effectively it improves detection, accelerates response, enhances analyst productivity, and strengthens business resilience. In this article, you will learn which AI SOC metrics matter most, why they are important to both security teams and business leaders, and how artificial intelligence helps improve performance across every stage of the security operations lifecycle. You will also discover how organizations can use these metrics to continuously optimize their security posture while demonstrating measurable business value. Traditional security operations Security teams generate enormous amounts of operational data every day. Without meaningful performance measurements, it becomes difficult to determine whether security investments are delivering real improvements or simply producing more alerts. Effective AI SOC metrics provide visibility into the speed, quality, and efficiency of security operations. They allow organizations to identify operational bottlenecks, justify technology investments, improve workflows, and reduce overall cyber risk. Unlike traditional SOC, AI-powered SOC continuously learn from historical incidents, enrich alerts with contextual intelligence, automate repetitive tasks, and help analysts focus on genuine threats. Measuring these improvements requires looking beyond simple incident counts and focusing on operational outcomes. Hidden attack patterns One of the most important cybersecurity metrics is Mean Time to Detect (MTTD). This measures the average amount of time required to identify a security incident after it begins. The shorter the MTTD, the less opportunity attackers have to move laterally through networks, escalate privileges, or access sensitive information. Every minute saved during detection can significantly reduce the overall impact of a cyber attack. AI dramatically improves MTTD by analyzing millions of events in real time. Machine learning models recognize subtle behavioral anomalies that would likely be missed by manual monitoring or rule-based detection systems. AI also correlates seemingly unrelated events across endpoints, cloud environments, user identities, and network traffic to reveal hidden attack patterns much earlier. Instead of analysts manually reviewing thousands of alerts, AI prioritises suspicious activity almost instantly, allowing investigations to begin sooner. Reducing reputational damage Detection alone is not enough. Once a threat has been identified, security teams must respond quickly to contain and remediate the incident. This is measured through Mean Time to Respond (MTTR). MTTR reflects the average time required to investigate, contain, eliminate, and recover from a security incident. Faster response limits operational disruption, minimizes financial losses, and reduces reputational damage. AI-powered SOC significantly reduce MTTR by automating many response activities. Security orchestration workflows can isolate compromised devices, disable suspicious user accounts, block malicious IP addresses, gather forensic evidence, and notify appropriate teams without waiting for manual intervention. AI also assists analysts by automatically summarising incidents, recommending next steps, identifying affected assets, and highlighting similar historical attacks. Rather than spending valuable time collecting information, analysts can focus on making informed decisions. Performing routine investigations Security talent remains one of the industry's most valuable and limited resources. Measuring analyst productivity helps organizations understand whether their security teams are spending time on high-value investigative work or becoming overwhelmed by repetitive tasks. Traditional SOC analysts often spend large portions of their day reviewing false positives, manually correlating alerts, searching multiple data sources, and performing routine investigations. AI changes this workflow considerably. Automated alert enrichment provides analysts with relevant threat intelligence, asset context, user information, vulnerability data, and attack history before an investigation even begins. Intelligent prioritisation ensures analysts work on incidents that represent the greatest organizational risk. Reducing operational costs As a result, analysts can investigate more incidents, resolve them faster, and spend more time on proactive activities such as threat hunting, security improvement, and strategic planning. Higher analyst productivity also contributes to reduced burnout, improved job satisfaction, and better staff retention, all of which are critical challenges facing modern SOCs. Another valuable operational metric is alert quality. Large numbers of false positives create alert fatigue, causing analysts to waste time investigating benign activity while genuine threats compete for attention. AI improves alert quality by combining behavioral analytics, threat intelligence, contextual enrichment, and historical patterns to determine the likelihood that an alert represents a real attack. Rather than simply increasing the number of detected events, AI helps ensure that security teams receive fewer but more meaningful alerts. This improves investigation efficiency while reducing operational costs. Predefined response actions An increasingly important AI SOC metric is automation rate. This measures the percentage of security tasks completed automatically without requiring analyst intervention. Examples include automated alert enrichment, phishing analysis, malware classification, log correlation, incident ticket creation, evidence collection, and predefined response actions. Higher automation rates allow security teams to manage larger environments without proportionally increasing staffing levels. Analysts remain responsible for strategic judgement and complex investigations while AI handles repetitive operational tasks. Technical metrics alone do not fully demonstrate the value of an AI SOC. Senior executives increasingly want to understand how cybersecurity investments contribute to broader business objectives. Managing cyber risk Business-focused metrics may include reduced operational downtime, lower incident recovery costs, improved regulatory compliance, faster audit preparation, increased customer trust, and reduced financial risk. An effective AI SOC should align security performance with organizational goals. Demonstrating improvements in operational resilience and business continuity often provides stronger justification for continued cybersecurity investment than technical statistics alone. Imagine if the organization reduced its average detection time from six hours to six minutes. How would that change the financial impact of a ransomware attack, customer confidence, and the executive team's ability to manage cyber risk? Questions like these help organizations view cybersecurity as a business enabler rather than simply a technical necessity. Continuous operational improvement Metrics should never be viewed as static reports produced once each month. Instead, they should support continuous operational improvement. AI SOC platforms provide real time dashboards that monitor performance trends, identify recurring bottlenecks, and highlight opportunities for optimization. Security leaders can compare historical performance, evaluate new technologies, measure process improvements, and refine response playbooks using objective data. As AI models continue learning from new incidents, security operations become progressively faster, more accurate, and increasingly efficient. Broader business outcomes Organizations that regularly review and act upon these metrics are better positioned to adapt to evolving cyber threats while maintaining operational excellence. AI-powered Security Operations Centres are transforming how organizations detect, investigate, and respond to cyber threats. Measuring success requires focusing on meaningful operational metrics such as Mean Time to Detect, Mean Time to Respond, analyst productivity, automation rates, alert quality, and broader business outcomes. Together, these metrics provide a comprehensive picture of security performance while helping organizations continuously strengthen their cyber resilience. Rather than replacing security professionals, AI empowers them with faster insights, richer context, and intelligent automation that enables more effective decision making.

Matrix Comsec, a technology company delivering enterprise-grade solutions in security and telecommunications, has been recognized among Gujarat's Top 50 SMEs and named a winner in the Best Manufacturing SMEs category at the inaugural Top 50 SME Awards - Gujarat, an initiative of Axis Bank and India SME Forum. For Matrix, the recognition is not the culmination of a single initiative. It acknowledges an operating philosophy built over time: create original technology, retain ownership across the product journey and turn engineering intent into dependable products through disciplined manufacturing. Purpose-built solutions At the centre of this approach is an integrated product-development ecosystem. Hardware, software, firmware, mechanical engineering, certification and manufacturing operate as connected capabilities. This alignment gives Matrix control over how an idea is designed, validated, produced and supported, while helping it address real customer requirements with purpose-built solutions. Matrix builds quality into every stage—from selecting materials and manufacturing products to testing, delivery and product performance. Clear processes, regular reviews and smart automation help teams identify issues early, maintain consistency and work more efficiently. This enables Matrix to grow without compromising speed, reliability or quality. The same approach continues beyond the factory. Matrix brings together its research, manufacturing, sales and business partners to understand customer needs, deliver projects smoothly and support long-term success. This connected way of working creates lasting value for customers, partners and the industry as a whole. Multi-stage evaluation “At Matrix, world-class products are built through original engineering, disciplined manufacturing, measurable quality and shared accountability. Our strength comes from the systems we have established, the principles we consistently follow and the people who bring them to life every day. Being recognized among Gujarat’s Top 50 SMEs is a valued acknowledgement of this collective effort and an important milestone in our continuing journey to innovate, improve and set higher standards,” said Ganesh Jivani, CEO & MD, Matrix Comsec. Matrix earned its place among Gujarat’s Top 50 SMEs through a rigorous, multi-stage evaluation conducted by an independent jury of distinguished business leaders and industry experts. This recognition marks another significant milestone in Matrix’s journey of creating globally relevant technology from India—driven by original thinking, consistent execution and an enduring commitment to Expect More.

inforcer, a provider of Microsoft 365 multi-tenant management software for Managed Service Providers (MSPs), has announces the general availability of its Threat Detection and Response solution, inforcer TDR. Built specifically for MSPs, inforcer TDR goes beyond traditional identity detection to reduce noise, rapidly identify threats, automate breach containment, and continually strengthen protection across every Microsoft 365 tenant. Providing consistent feedback Chief Product Officer at inforcer, Matthé Smit, stated: “We opened TDR to more than 700 MSPs, where it was tested against real tenants and real attacks before it was fully ready to be released.” “Following this, users provided consistent feedback in three areas: First, TDR is surfacing threats in customer estates that partners did not know were there, which is sobering to hear and exactly why we built it. Second, it is quiet, so it earns a technician's attention instead of draining it. And third, the reporting matters as much as the detection, because it enables our partners to show their customers what happened, in what order, and what was done about it.” Uncover active compromises “We’re pleased that this feedback confirms that inforcer TDR meets the needs of our customers and further reinforces our reputation in the industry.” Having announced early access to inforcer TDR in June 2026, 500,000 users were onboarded in the first four weeks alone. To date, inforcer TDR has processed 20 billion logs – the equivalent of 3,000 years’ worth of logs. inforcer TDR has unparalleled depth of Microsoft telemetry. Detecting from across Entra ID, Exchange, SharePoint, Teams, Defender and Purview, it enables MSPs to understand the full context of an attack beyond identity alone. It can also analyze up to six months of historical Microsoft 365 logs to provide further context and uncover active compromises that may have gone unnoticed. inforcer TDR compiles this complex data into a clear dashboard that allows MSPs to see active incidents, trends, and preventions for every customer from one screen. Users can export jargon-free, customer-ready reports that clearly show every threat detected, every action taken, and the value of MSPs’ security services. Excessive alert volumes Ruben Ven, Modern Workplace Consultant at Yellow Arrow stated: “The timeline is chronological and the contain, remediate, and advise options are really clear. I also loved the export report function – it looks great visually. For a lot of MSPs, this would be a perfect product.” Often, the challenge for security teams is not a lack of data, but identifying the genuine threats hidden within it. Omdia research found that 57% of organizations cite alert fatigue as a major challenge, with excessive alert volumes increasing the risk that legitimate threats are missed. Disabling compromised accounts TDR is already helping alleviate this burden. In just six weeks, the platform has detected thousands of real threats within minutes and reduced average containment time to less than 60 seconds. Human analysts operating within a Security Operations Centre (SOC) simply can’t respond quickly enough or consistently around the clock, making it difficult to protect against AI-powered attacks that move through an environment in minutes. inforcer TDR does things differently than traditional Identity Threat Detection and Response solutions, using AI to fight AI. inforcer TDR has a behavioral engine that individually profiles every user, Entra application, tenant, and MSP, analyzing every signal, spotting patterns, and anomalies, and intelligently reducing noise.  inforcer TDR can then act against threats immediately: automatically revoking active sessions, locking or disabling compromised accounts, and containing the breach in as little as just a few seconds. Providing additional threat verification Feedback from customers has included the following: Chad Williams, Senior Systems Engineer at Stability Networks stated that he was seeing threat responses ‘within minutes’ compared to 30 minutes with his current solution. Tom Lovell, CTO at Infinity Group stated: “It is plugging a real gap between unmonitored alerts and our expensive 24/7 service. The value-add of after-hours isolation and containment without a full 24/7 service fee is huge.” The platform is not just using AI. It is also backed by oversight from a human SOC team that can advise on threats and provide additional threat verification where necessary, to reduce false positives, and streamline the alerting system.

RecFaces, a global developer of enterprise-grade facial biometric software, will participate in FIRE & SECURITY INDIA EXPO 2026 (FSIE 2026), taking place September 3–5 at Jio World Convention Centre in Mumbai, India. Visitors will be able to meet the RecFaces team and explore three of the company’s flagship products — Id-Time, Id-Guard and Id-Gate — at the stand of its partner, Startologic Technologies (A9). At FSIE 2026, RecFaces will demonstrate how facial biometrics can address practical business and security tasks across large and complex enterprise environments. The company will focus on applications relevant to enterprises in construction, retail, education and smart offices, where organizations need reliable tools to manage workforce attendance, control access to facilities and strengthen the capabilities of existing video surveillance infrastructure. Video surveillance infrastructure Visitors to the stand will be able to explore three different applications of facial biometrics. Id-Time is designed for biometric workforce time and attendance management, helping organizations gain more accurate visibility into employee presence and working time. Id-Gate brings facial recognition into access control scenarios, while Id-Guard enhances video surveillance with facial biometric capabilities. Together, the three products demonstrate how RecFaces approaches facial recognition not as a standalone technology, but as a tool for addressing specific enterprise tasks within existing business and security infrastructure. The RecFaces team attending FSIE 2026 will include Tamara Morozova, CEO at RecFaces; Farida Baichora, Product Owner at RecFaces; and Oleg Kurochkin, the company’s strategic partner. During the exhibition, they will meet with enterprise representatives and industry professionals to discuss practical facial biometric use cases and explore how the technology can support their operational needs. Rapidly developing industries “India brings together rapidly developing industries and enterprises managing increasingly complex facilities and operations. For RecFaces, FSIE is valuable because it gives us the opportunity to speak directly with the people responsible for these environments and understand the business tasks behind their technology decisions,” said Tamara Morozova, CEO at RecFaces. “Our goal is not simply to demonstrate facial recognition, but to show how it can become a practical part of everyday enterprise processes — from managing access and security to gaining better visibility into workforce attendance. These live conversations also help us understand where the market is heading and ensure that our products continue to address real business needs.” For organizations in construction, facial biometrics can be relevant across environments ranging from infrastructure and residential projects to shopping malls and corporate facilities. Large retail businesses, meanwhile, often operate networks of stores with significant employee and visitor flows. Education and smart office environments bring their own requirements for access, security and workforce management. Lengthy development project “From a product perspective, the value of facial biometrics becomes clear when it is connected to a specific process,” said Farida Baichora, Product Owner at RecFaces. “With Id-Time, Id-Gate and Id-Guard, we address three distinct scenarios: workforce time and attendance management, access control and facial recognition within video surveillance. At FSIE, visitors can discuss with us which product fits their particular task, what role facial biometrics plays within the existing infrastructure, and how organizations can introduce the technology without turning biometric deployment into a lengthy development project.” FIRE & SECURITY INDIA EXPO brings together professionals and companies working across fire protection, life safety, security, building automation, loss prevention and risk management. For RecFaces, participation in the exhibition provides an opportunity to engage with India’s security community and enterprise decision-makers, demonstrate facial biometric software in practice, and exchange expertise on its application in modern business environments. RecFaces invites enterprises, security professionals, technology partners and industry representatives attending FIRE & SECURITY INDIA EXPO 2026 to visit Startologic Technologies’ Stand A9 on September 3–5 at Jio World Convention Centre in Mumbai to meet the RecFaces team and explore Id-Time, Id-Guard and Id-Gate in action.

Iris ID, announces its successful completion of its SOC 2 examination as of October 24, 2025. The SOC 2 audit was conducted by A-LIGN, the provider in cybersecurity compliance trusted by more than 4,000 global organizations to help mitigate cybersecurity risks. Mitigating cybersecurity risks Established by the American Institute of Certified Public Accountants (AICPA), the SOC 2 examination is designed for organizations of any size, regardless of industry and scope, to ensure the personal assets of their potential and existing customers are protected. SOC 2 reports are recognized globally and affirm that a company’s infrastructure, software, people, data, policies, procedures and operations have been formally reviewed. “Congratulations to Iris ID Systems for completing their SOC 2 audit, a widely recognized signal of trust and security,” said Steve Simmons, COO of A-LIGN. “It’s great to work with organizations like Iris ID Systems, who understand the value of expertise in driving an efficient audit and the importance of a high-quality final report.” This certification demonstrates Iris ID System’s continued commitment to compliance and ensures customers with the confidence that required safeguards are in place to protect their data.

Across many sectors, AI is transitioning from an experimental process to a trusted tool, but how will construction - and architectural ironmongery specifically - balance this technological opportunity with traditional practice? Artificial intelligence was once considered the trend of tomorrow, but it’s now here, and already it’s impacting the design, specification and management of the built environment. Following a period of refined development, the technology is emerging as a valuable tool for architectural professionals, with its growing role signifying far more than a passing industry trend. Passing industry trend According to the Royal Institute of British Architects’ (RIBA) Artificial Intelligence Report 2025, 59% of architectural practices now use AI on at least some projects, an increase from 41% in 2024. Furthermore, a global survey led by the Royal Institution of Chartered Surveyors in 2025 found that 56% of investors planned to increase AI investment, suggesting that the rate of adoption will continue to accelerate over the coming years. However, whilst innovation typically creates opportunity, there are challenges to address These findings represent a cultural shift, one where AI is firmly embedding itself into workflows and influencing the decision making process. However, whilst innovation typically creates opportunity, there are challenges to address. As more professionals equip themselves with an arsenal of AI-driven tools, are we in danger of becoming overly reliant on technology? Or are those reluctant to adapt likely to be left behind? Daniel May, Director at Consort Architectural Hardware, shares insight: Repetitive administration tasks “The development of the built environment has always relied on technical precision. Specifications naturally contain large volumes of product information and technical data, with professionals managing document-heavy tasks in the form of specification writing, door scheduling and BIM coordination in order to meet project requirements and compliance obligations. All of this data must be analyzed and processed accurately - often in line with demanding timescales - and it is here where AI can offer the greatest value.” “Where time was once consumed by repetitive administration tasks and information processing, professionals are now embracing AI as a means of working more efficiently. For architectural ironmongery specifically, where specification accuracy is critical, AI has the potential to support architects and specification professionals as they navigate the product selection process. As a tool, AI can streamline documentation by rapidly processing performance data and certification requirements, whilst also identifying inconsistencies and absent compliance information within schedules.” Complex project requirements “AI systems are helping professionals navigate increasingly complex project requirements quickly, accurately and consistently. As machine learning and autonomous models continue to advance, these tools may further reduce the administrative burden associated with architectural work models whilst improving accuracy and minimizing the risk of human error in the process. With that said, the effectiveness of AI software is very much reliant on the quality of the information it receives.” “With the sector so deeply tied to fire safety, accessibility, security and regulatory standards, the caution around adopting AI as common practice is of course justified. Historically, much of the construction industry has been measured in its adoption of new technology, partly due to the critical nature of compliance and the significant consequences of error. Though, AI feels somewhat different because of its pace and potential, and as such, organizations must be measured in their approach to it, ensuring that professional knowledge remains central to delivering safe, efficient and compliant building projects.” The human element As industry standards and the legislation surrounding the built environment continues to evolve, so too will the methods used to achieve high level design and compliance. Seemingly, AI looks set to have an increasingly prominent role, but it should be viewed as a collaborative partner capable of enhancing professional expertise as opposed to a system that can, or should, do it all. Daniel continues: “At this stage, AI alone simply can’t understand the nuances of individual projects and that has implications for both design and compliance. This is particularly relevant in the post-Grenfell regulatory landscape, where accountability, traceability and evidence-based decision-making have become fundamental to product specification and delivery.” Building greater trust “Although AI can assist with information processing, the technology is not ultimately responsible for the decisions being made. Accountability has rightly become a major focus point in construction, and as AI continues to disrupt practices, the industry must ensure that responsibility remains clearly defined. AI-driven errors could lead to serious penalties in relation to compliance, safety and project delivery, proving human expertise remains critical.” “Moving forward, greater transparency within AI systems will be key. If professionals are able to understand how or why AI recommendations have been generated, they can assess them with confidence, building greater trust in the technology.” Architectural design solutions “When it comes to architectural design, the emotional intelligence, contextual understanding and creative balance offered by a team of professionals far outweighs the speed that AI can offer. Already, AI is being used to support visualization and concept development for multi-layered projects in hospitality, healthcare and commercial environments to name a few, helping teams to explore ideas and communicate concepts at a quicker rate.” “However, can AI effectively develop architectural design solutions based on the bespoke requirements of a project, the operational needs of its users or even the general character of the building? Most would argue that it’s not conceivable, because AI lacks the lived experience and contextual understanding that comes from being present in the project itself.” Architectural ironmongery products “For architectural ironmongery products, professionals must regularly assess how products will function in real environments. Human intuition is impossible to replace and those informed design decisions, made by human professionals, will always be essential. Whilst some question whether AI could one day plan and deliver a project from concept to completion, perhaps the more important question should be whether future generations of professionals could lose the critical design and specification skills that are needed, should the industry become too dependent on AI.” “There is a growing sense of inevitability surrounding AI’s influence on architectural ironmongery and the wider built environment. As the industry continues to embrace this new wave of technological development, it is important to remember that innovation must complement the knowledge, judgement and accountability of the professionals who create safe and functional buildings, not replace it.”

A security camera installed today has more AI processing power than the systems that guided early autonomous vehicle prototypes. And yet the operator who mounts that camera on a wall will, in all likelihood, never use most of that capability.  Industry surveys bear this out: a wide gap persists between the number of security professionals who believe AI can improve outcomes and the much smaller share who have adopted it operationally. The reason has nothing to do with the silicon and everything to do with how the industry has asked people to configure these systems. The problem is not that the industry lacks algorithms. The problem is that physical security has never found a scalable way to personalize systems for each site. The personalisation dilemma hiding in plain sight The problem is that physical security has never found a scalable way to personalize systems for each site A surveillance deployment at an airport, a retail chain, a school campus, and a logistics yard can look strikingly similar in hardware terms. Each installation uses image sensors, edge processors, network connectivity, and a management layer. What changes is what the operator cares about. At a school entrance, the priority might be perimeter approach after hours and controlled access during the day. At a loading dock, the concern is tailgating, vehicle dwell time, and safety incidents near forklifts. At an airport, the operator may need queue-flow analytics one moment, unattended-item detection the next, and then a search for a specific person of interest carrying a particular bag. At a retail store, loss prevention teams want to correlate customer flow patterns with point-of-sale data and identify suspicious behavior near high-value merchandise. This range of needs forces a reality that the industry has acknowledged in principle but never resolved in practice: the application pool across the market is vast, yet each individual site typically requires only a narrow set of outcomes. Each deployment needs personalisation once, at commissioning, and then again whenever the environment or the risk profile shifts. The app store that never became a market For the better part of a decade, the industry’s most visible answer to the personalisation problem was the “app store” model. The logic was straightforward: curate a marketplace of trained neural network algorithms, let integrators browse a catalog, and download the right analytic for each job. Queue counting for a passport control hall. License plate recognition for a parking structure. Occupancy monitoring for a conference room. The concept borrowed directly from the consumer smartphone approach. In practice, it never matched physical security’s purchasing and operating rhythm. A phone owner discovers and downloads new apps continuously. A physical security deployment selects one or two analytics functions at installation and rarely revisits them. Another maintenance burden A queue-counting algorithm trained on airport data is excellent at queue counting The economic incentive to maintain, curate, and update a broad catalog across a fragmented ecosystem of camera OEMs, VMS platforms, and system integrators never materialised when the average buyer drew from only a thin slice of it. And the question of who would operate such a marketplace across that fragmented landscape was never satisfactorily answered. The deeper issue is that distribution was not the hard part. Personalisation was. A queue-counting algorithm trained on airport data is excellent at queue counting. It does not naturally become a general-purpose security tool for whatever the operator needs next. Once a model is trained for a narrow task, adaptation requires another project, another integration cycle, and another maintenance burden. AI-enabled cameras The examples that do exist are instructive. Schiphol Airport in the Netherlands has used trained camera systems for over a decade to measure queue length at passport control and alert staff when additional counters should open. Rome trailed AI-enabled cameras to track pedestrian wait times at crosswalks, measure bus queue length, and monitor parking occupancy to support active transport and reduce vehicle emissions. These are effective, well-regarded deployments. They also illustrate the limitation: each required its own trained model, its own integration effort, and its own maintenance cycle. The queue-counting camera at Schiphol cannot be redeployed to detect an abandoned bag. That is a separate algorithm, a separate procurement, and a separate project. What changes with agentic AI Applied to physical security, this translates into a simpler commissioning experience Agentic AI points to a fundamentally different approach. An agentic system can receive goals expressed in natural language, determine the appropriate actions to fulfill those goals, execute those actions using available tools, and verify the results. Applied to physical security, this translates into a simpler commissioning experience: the operator expresses intent in plain language, and the system configures itself to achieve that intent. Consider the practical implications. An installer commissioning cameras at a retail location could type or speak a set of instructions: “Alert the manager if more than five people are waiting at checkout for longer than two minutes.” A facilities director could ask the system to “Track vehicles that enter the east parking lot after 9 p.m. and flag any that remain for more than 30 minutes.” A school security coordinator might specify: “Notify campus police if anyone approaches the perimeter fence between midnight and 5 a.m.” Appropriate perception capabilities None of these instructions require the operator to select a specific analytic from a catalog, configure a detection model, or define pixel-level zones in a complex VMS interface. The system interprets the intent, selects the appropriate perception capabilities, configures thresholds and context, and validates behavior over time. When the operator’s needs change, a new instruction replaces the old one. The camera hardware stays the same. The AI adapts. This is the core of the shift: minimal user input, maximum flexibility, and a security system that personalises itself without requiring the operator to navigate the traditional customize-certify-deploy cycle. Vision language models make it practical A conventional neural network trained for people counting can count people The enabling technology is the vision language model, or VLM. A VLM combines visual encoders with language reasoning, allowing it to interpret images or video in the context of natural language prompts. This is a qualitative leap beyond traditional convolutional neural networks, which classify or detect predefined objects and have no mechanism for open-ended interpretation. A conventional neural network trained for people counting can count people. It cannot distinguish between a crowd of commuters exiting a train station and a crowd assembling in protest. A VLM, by integrating contextual reasoning with visual analysis, can draw inferences that a task-specific model cannot. It can assess behavioral patterns, interpret spatial relationships, and respond to queries about scenes it has never been explicitly trained to analyze. Where a neural network might register two people carrying objects, a VLM could infer whether the scene suggests travellers with luggage or workers transporting equipment, provided the visual context supports that inference. Supporting multimodal input This matters in physical security because operational questions are rarely phrased as taxonomy labels. Operators want to express outcomes. They want to say “show me anything unusual near the loading bay after hours,” and the system should be able to reason about what “unusual” means given the site context. VLMs also support multimodal input. Audio cues such as a raised voice, a scream, an alarm, or breaking glass can contribute to scene interpretation when paired with video. In security applications, where events routinely unfold across both visual and auditory channels, this capability adds a meaningful layer of situational awareness. The edge constraint that forces discipline Large language models in the cloud use hundreds of billions of parameters and consume hundreds of watts None of this works if the architecture assumes data center conditions. Most surveillance cameras operate under strict power and thermal limits. Power over Ethernet (PoE), the standard delivery mechanism, typically provides between 15 and 30 watts depending on the PoE class, and only a fraction of that budget is available for AI processing after the sensor, ISP, video encoder, and network stack have taken their share. In many installations, the AI workload must fit within a few watts. Large language models in the cloud use hundreds of billions of parameters and consume hundreds of watts. That scale does not translate to a camera mounted on a pole or embedded in a ceiling tile. For agentic AI to work at the edge of a physical security network, the models must be compact, efficient, and designed for the purpose. Neural network acceleration This is where smaller, domain-specific VLMs become essential. Models trained on industry-relevant image and text datasets, combined with techniques such as pruning, quantisation, and parameter-efficient fine-tuning, can deliver meaningful visual reasoning within the compute and memory constraints of an edge processor. The result is a VLM that fits inside a camera’s power budget and still responds to natural language instructions with useful accuracy. Ambarella’s CVflow AI architecture, now in its third generation, was designed for this class of workload. The architecture integrates advanced neural network acceleration with high-resolution image signal processing and video encoding on a single system-on-chip, allowing cameras to run complex AI inference alongside their core imaging functions without exceeding the thermal and power boundaries that define edge deployments. The company's latest addition to its portfolio, the 4-nanometer CV7, runs CNNs and vision language models concurrently across multiple video streams while consuming 20 percent less power than its predecessor. For infrastructure and robotic applications requiring heavier models, the 5-nanometer N1 family supports multimodal LLMs in multi-camera configurations. Distributing intelligence across far edge, near edge, and cloud This tier must respond in milliseconds and operate within a fixed power envelope A workable agentic architecture for physical security distributes intelligence across three tiers, each matched to the processing demands and latency requirements of its role. At the far edge, inside the camera itself, the processor handles real-time perception: object detection, tracking, zone logic, and initial event classification. This tier must respond in milliseconds and operate within a fixed power envelope. At the near edge, on a local gateway or network video recorder, a more capable processor orchestrates across multiple cameras, maintains state, correlates events, retrieves site-specific policies and procedures, and classifies incidents requiring more context than any single camera provides. At the cloud/server tier, available when connectivity permits, the system accesses heavier models for forensic analysis, fleet-wide analytics, model updates, and long-horizon reporting. Periodic cloud access This tiered approach keeps the most time-sensitive decisions local, where latency is lowest and data privacy is strongest. It also means agentic capabilities can scale incrementally. A small installation might run entirely at the far edge with periodic cloud access. A large campus might employ all three tiers, with near-edge orchestration coordinating PTZ patrol patterns across dozens of cameras while the cloud generates shift summaries and updates models based on fleet-wide telemetry. In practice, a security workflow built on this pattern often combines real-time detection at the far edge, behavior-tree orchestration at the near edge for multi-camera coordination, local retrieval over site playbooks, and conservative safe-mode escalation when system confidence is low. The discipline of deterministic guardrails and structured verification loops is essential in security operations, where unpredictable system behavior is not acceptable. A hybrid future, with VLMs orchestrating specialist models The transition to agentic AI does not eliminate specialized neural networks The transition to agentic AI does not eliminate specialized neural networks. Purpose-trained models will continue to deliver superior accuracy for well-defined, high-frequency tasks such as license plate recognition, face matching, and fire and smoke detection. In a mature agentic system, the VLM acts as an orchestrator. It handles open-ended perception and natural language interaction while routing to specialized models when a task demands their precision. A PTZ camera at a transportation hub might receive the instruction “monitor the west concourse for unattended items.” The VLM interprets the request, manages the interface, and reasons over broader scene context. Real-time video processing When it identifies a candidate object, it routes to a dedicated abandoned-item classifier optimized for that specific validation step. The VLM orchestrates. The specialist model validates. The operator receives a refined, actionable alert. That hybrid pattern places specific demands on the silicon. The processor must support both traditional CNN inference and generative AI workloads simultaneously while maintaining real-time video processing within the same power envelope. The value of a tightly integrated SoC, one that combines an advanced ISP, a deep learning accelerator, and a video encoder on a single die, is that it eliminates the multi-chip complexity and power overhead that would otherwise make this approach impractical at the edge. Making agentic AI deployable for the ecosystem Ambarella’s Developer Zone, launched at CES 2026, provides a centralized portal of tools Physical security is built on a broad ecosystem of camera OEMs, VMS providers, independent software vendors, module builders, and system integrators. For agentic AI to reach the market at scale, these participants need model-ready tooling, reference workflows, and a practical path from prototype to production. This is where developer ecosystems become part of the story. Ambarella’s Developer Zone, launched at CES 2026, provides a centralized portal of tools, optimized AI models, agentic blueprints, low-code templates, and documentation aimed at accelerating edge AI application development on Ambarella’s SoCs. Common software stack ISVs and integrators can evaluate models, prototype applications, and deploy using a common software stack that spans the company’s CV7 and N1 SoC families through the Cooper development platform. That consistency across the product range reduces per-project engineering cost and accelerates time-to-market for partners building perception and analytics solutions. The point is broader than any single portal: agentic systems require components that have already been tested and optimized for edge deployment, so that integrators can focus on solving their customers' problems rather than rebuilding the AI pipeline from scratch. The ecosystem participants who lead the transition to agentic AI in physical security will be the ones with access to tooling that fits into their existing development and deployment processes. What comes next Physical security has searched for years for a scalable answer to personalisation Physical security has searched for years for a scalable answer to personalisation. The app store model did not provide it. Manual configuration, while functional on a per-site basis, scales poorly across large portfolios of cameras and changing operational requirements. Agentic AI offers a credible path forward because it aligns with how operators actually think. They express outcomes, not model specifications. They want systems that adapt to new requirements without repeated engineering cycles. Traditional neural networks With VLMs as the interface layer, smaller domain-specific models at the far edge, orchestration at the near edge, and disciplined verification loops throughout, personalisation can become a standard part of deployment rather than a custom project. The building blocks are now in place. Power-efficient edge AI processors can run VLMs and traditional neural networks simultaneously. Developer ecosystems are maturing to support rapid prototyping and deployment. Reference architectures for distributing intelligence across far-edge, near-edge, and cloud tiers are solidifying. For an industry that already installs vast numbers of AI-capable cameras each year, the opportunity is to make the intelligence already embedded in those endpoints genuinely usable for the people who rely on them every day.

Acquisitions are often billed as moments of bold opportunity. For senior executives and boards, these deals are about accelerating growth, unlocking synergies, and strengthening competitive advantage. But for the teams responsible for making operations run safely and smoothly — including physical security — acquisitions can feel like controlled chaos. Decisions happen without warning, details are opaque, and the ripple effects of choices made in the boardroom cascade down through every layer of the organization. Too often, physical security isn’t even in the room where those decisions happen. Beyond access control When security is treated as an afterthought — a cost center to be rationalised, rather than a strategic enabler — companies expose themselves to risks that go well beyond access control or surveillance coverage. Overlooked integration challenges can compromise the safety of people and property, slow down facility transitions, inflate budgets, and undermine everyone’s confidence in the acquisition deal itself. For seasoned physical security leaders, the imperative is clear: make your program visible, credible, and indispensable before and during acquisition conversations. That means ensuring your voice is represented. Why security visibility matters At first glance, it’s not obvious to some why physical security should rank alongside finance, IT, and legal in the M&A playbook. But consider what’s really at stake:͏ Budget accuracy: If no one accounts for system migrations, access credential re-issuance, or security subject matter expert (SME) travel during due diligence, financial forecasts will be miscalculated. Underestimating these costs by even a small percentage can throw off larger integration budgets. ͏ Technology fit: Acquirers frequently inherit access control, video, and monitoring platforms that don’t align with their standards. Without early planning, companies risk unsupported infrastructure, avoidable downtime, and duplicating expensive features. ͏ People and roles: Security staff redundancies and mismatched responsibilities are often decided hastily, surfacing operational gaps and challenges with morale. ͏ Cultural harmony: Employees at acquired companies can perceive new security measures as heavy-handed or intrusive, jeopardising adoption and compliance. Each of these factors is manageable — but only if you consider them early on in the acquisition and communicate clearly at the decision-making level. Securing a seat at the table Physical security leaders don’t need to wait passively for a seat at the M&A table — they can and should advocate for it. Take practical steps: Identify the M&A committee. This group may go by different names — corporate development team, integration steering group, or even a subcommittee of the board. Pinpoint who leads it and which executives have influence. Make the case for inclusion. Position security not as a compliance hurdle but as a value multiplier. Remind leadership that visibility into risks, costs, and integration timelines reduces surprises, accelerates business continuity, and protects reputation. Bring data, not anecdotes. Prepare a concise playbook: current-state inventories of systems and personnel, cost models for typical integration activities, and sample timelines for cutovers. When executives see that security has done its homework, they’re more likely to view the function as essential. Leverage allies. Partner with your security consultant, along with your facilities, IT, HR and risk management teams who share overlapping interests in safe, seamless operations. Unified advocacy is harder to dismiss than a single voice. By getting on the M&A committee, you ensure your concerns aren’t filtered secondhand or raised too late to influence outcomes. Leading with credibility during acquisitions Visibility is only the first step. Once in the room, security leaders must contribute with authority and clarity. Three practices stand out:͏ Translate security into business impact. Executives don’t respond to jargon about card readers or VMS licenses—they respond to risk, cost, and continuity. Frame every input in terms of: Financial implications, such as “Consolidating platforms will save $X annually, but requires $Y in upfront integration.” Operational implications, such as “Delays in credentialing will stall employee onboarding at three newly merged sites.” Cultural implications, such as “Without a clear change management plan, acquired employees may resist compliance, leading to increased insider risk.”͏ Provide scenarios, not surprises. Acquisitions move fast, but that doesn’t mean you can’t plan. Present modeled scenarios — small target vs. large target, regional vs. global integration — and their associated timelines and costs. This proactive approach demonstrates foresight and earns trust. ͏ Advocate for people, not just systems. In the scramble to integrate technology, companies often forget the human element. Use your platform to ensure that acquired security personnel are evaluated fairly, retrained where possible, and integrated into the new culture. Advocating for people strengthens morale and preserves institutional knowledge. Visibility beyond a single deal For some companies, acquisitions are rare, high-stakes events. For others, they’re a routine growth engine. In either case, physical security leaders should treat M&A as a recurring test of their strategic value. To do this, work with your security consultant to:͏ Document lessons learned from each acquisition, then institutionalise these lessons in playbooks and checklists. ͏ Develop clear security messaging that explains your team’s mission and impact, so executives understand why your presence is non-negotiable. ͏ Commit to realistic timelines for integration work, ensuring leadership sees the discipline and predictability of your function. The goal isn’t just to be consulted during one deal — it’s to become permanently visible in the company’s growth strategy. Don’t be an afterthought In the popular imagination, the “room where it happens” is a place where power dynamics shift and futures are decided. For physical security leaders, being absent from that room during an acquisition means watching others dictate the future of your program, your people, and your company’s security posture. But by proactively seeking visibility — by insisting on a voice in acquisition planning, by bringing data and credibility to the table, and by consistently framing security as a business enabler — you can transform physical security from an afterthought into a recognized pillar of successful acquisitions.

The practice of executive protection changed forever on Dec. 4, 2024, when UnitedHealthcare CEO Brian Thompson was shot outside a Manhattan, New York, hotel. The shocking event raised awareness in board rooms around the world about the need for, and challenges of, executive protection. Questions followed immediately, including why was the high-level executive not protected? Combination of risk and reward  UnitedHealthcare’s stock price has gone down more than 20% since the shooting The event also highlighted what is at stake for companies, extending beyond the safety of executives and impacting many factors, even including a company’s stock price. UnitedHealthcare’s stock price has gone down more than 20% since the shooting, equating to tens of billions of dollars. “Companies are considering the combination of risk and reward like never before when it comes to executive protection,” says Glen Kucera, President of Allied Universal Enhanced Protection Services. “What are the chances this could happen? Before Dec. 4 many thought it was zero. And what are the financial implications for a company if it happens? Executive protection is a small investment to protect against a worst-case scenario.” Evaluation of an executive protection  Before the UnitedHealthcare shooting raised awareness, fewer than 50% of executives had protection. But concerns that previously fell on deaf ears now have the full attention of companies, says Kucera. “Boards of directors are having to figure this out,” he adds. “They may not have executive protection, but now they have to do it.” A threat assessment, conducted by a company such as Allied Universal, provides an independent evaluation of a company’s executive protection needs. The assessment evaluates factors such as an executive’s travel habits, the safety of their home, etc. Does the executive need protection 24/7, or just when they travel into more dangerous areas? Risks increase related to corporate earnings Sometimes, cases increase the need for executive protection, such as an internal threat In assessing threats, security professionals also look beyond the individual to consider the safety of a corporate facility, for example. “Is there a visual deterrent, controlling who comes and goes?” asks Kucera. “If there is good security, it all ties together. We do home assessment, facility assessment, route assessment, and travel assessment as needed.” Sometimes, circumstances increase the need for executive protection, such as an internal threat. Timing is a factor, and risks increase related to corporate earnings releases, new product announcements, and corporate layoffs or consolidation. Monitoring social media tracks shifting threats that impact the need for executive protection. UnitedHealthcare shooting  “He didn’t have it and probably didn’t think he needed it,” comments Kucera about the UnitedHealthcare executive who was gunned down in the streets of New York City. “He was staying at the hotel across the street and was used to walking down the street every day.” “Sometimes executives want to preserve their privacy and be able to walk down the street,” says Kucera. “Getting protection can be seen as a sign of weakness. Some CEOs in the past have said they just didn’t want it.” However, the UnitedHealthcare shooting raised the stakes of the need for more vigilance. “The bottom line is you have to yet beyond objections and make the investment to protect against a worst-case scenario,” says Kucera. Anti-capitalist sentiment in the general population An internal police bulletin warned of an online hit list naming eight executives and their salaries Threats to executives sometimes arise from anti-capitalist sentiment in the general population about perceived inequalities in wealth and power. Executives provide symbolic targets for anyone who fights the system, and social media has amplified the voices of those who oppose capitalism.  For example, a "Most Wanted CEO” card deck seeks to shine a spotlight on "titans of greed." Also, in the aftermath of the UnitedHealthcare shooting, CEO "wanted" posters appeared across New York City, threatening various executives of large companies. An internal police bulletin warned of an online hit list naming eight executives and their salaries. Careful monitoring of social media posts Careful monitoring of social media posts and other sources enables executive protection professionals to analyze data and separate the dangerous threats from the merely negative ones. Sadly, positive support of the UnitedHealthcare shooting was expressed by the 300,000 or so followers of the shooter, who became a celebrity of sorts. A huge outcry of negative sentiment toward the insurance industry led to fear that copycat incidents might occur. “There has been an unprecedented amount of positive support for committing murder,” commented Kucera. Executive protection requests HR executives can be at risk, especially at a time of layoffs or consolidation “Let’s face it, there has been a lot of controversy, from COVID to the Middle East crisis, to the political campaign, and there is negativity on both sides,” says Kucera. “People have opportunities to pick sides, and there is a lot of sentiment going both ways, and there is a small percentage of people who will act aggressively.” Executive protection requests now extend beyond the CEO to include others in the management ranks of companies. Basically, any public-facing executive is at risk, including anyone who makes statements to the press. Human resource (HR) executives can be at risk, especially at a time of layoffs or consolidation.   Private information on the Internet Typically, an executive is assigned a single armed operative for protection. The firearm serves primarily as a visual deterrent that hopefully makes a potential perpetrator think twice. “When they plan an event like this, their expectation is that it will be a soft target,” says Kucera. “If there is an officer, it gives them pause.” Controversial or high-profile CEOs are typically protected 24/7, including when they travel with their family. Adding risks is the fact that private information is now posted on the Internet, including where an executive lives and where their children go to school. Internet monitoring  Internet monitoring also includes the “dark web,” which includes sometimes dangerous information “We offer social media monitoring, and we advise them to be more careful with what they post,” says Kucera. “We monitor reactions to posts including any that might be threatening. We watch social media carefully if a company announces earnings or a change in their service or product offering.” Internet monitoring also includes the “dark web,” which includes sometimes dangerous information that is intentionally hidden and requires specific software, configurations, or authorization to access.   Own layer of protection Public and government officials can also come under fire in a variety of scenarios. FEMA officials faced threats after the recent floods in the Southeast, for example, among other situations where perceived unfair treatment promotes thoughts of retribution.  Although government agencies have their own layer of protection, there are instances when they call on companies such as Allied Universal for additional help.  Ad hoc protection for various executives In the aftermath of the UnitedHealthcare shooting, calls to Allied Universal’s Command Center increased by 600%, reflecting requests for ad hoc protection for various executives.  These requests are in addition to the company’s business providing “embedded” operatives that travel with executives all or some of the time. On that side of the business, requests for services are up probably 300%, says Kucera.

GSX 2023 has its share of new product announcements, although many of the new products are enhancements to technologies shown at last spring’s ISC West show in Las Vegas. Booth traffic on the first day seemed busy at the Kay Bailey Hutchison Convention Center in Dallas, although one exhibitor complained that it takes some time for the traffic to make its way to the farthest areas of the show floor. Apparent throughout the GSX show is an expanding idea of what constitutes security. Increasingly, ‘security’ technologies offer benefits throughout other parts of a company or institution. Security is also being broadened to encompass ‘safety,’ including emergency response and wider issues of keeping a company safe. Managing multiple systems People look at the systems they have, and they are looking for more information" Manufacturers at GSX are talking about more than new products. Rather, they are offering new approaches to turn products into ‘solutions’ for customers. Among the benefits of new systems is the availability of more data.  “People look at the systems they have, and they are looking for more information and data and insights from their systems,” says Kyle Hurt, Genetec’s Area Vice-President of Sales for the US and Canada. “In the past, if I’m managing multiple systems and spending time and resources, I am making sure systems are operational. Today, it’s more like: How do I make my enterprise more efficient? I spend less time on making sure systems are working together but more time on how we can use the information.” Manufacturers at GSX are talking about more than new products Security control room Genetec is enhancing its Security Center 5.11 version with a newly redesigned web client that provides new capabilities related to system audio, including the ability to trigger a public address from a mobile device in an emergency, two-way audio to and from the security operations center, and the ability to record an incident. The new web client offers new levels of “Security on the go,” says Hurt. A mobile device becomes an extension of the security control room. “Customers want to have more remote capabilities and have their security personnel out and about, not tied to a desk,” says Hurt. The new web client works to unify the four pillars of the Security Center— video, access control, license plate recognition, and now audio.  Single source manufacturer Audio can now be used to broadcast a message, respond to an incident, and notify people" “Audio has taken time to develop legs in our ecosystem,” says Hurt. “We have been developing partnerships and use cases beyond an intercom at the door. Audio can now be used to broadcast a message, respond to an incident, and notify people en mass of what’s going on.” Manufacturers are also fine-tuning how they work to meet customers’ needs. “Customers want one point of contact, a single source manufacturer, and a solution that reflects the manufacturer is listening to the voice of the customer,” says Jerry Burhans, Managing Director of ASSA ABLOY Global Solutions - Critical Infrastructure, which seeks to be a global partner to critical infrastructure industries. The Critical Infrastructure business works across the various product groups of the notoriously siloed company to bring together solutions aimed at meeting each customer’s need. Manufacturers are also fine-tuning how they work to meet customers’ needs Best-in-class technology “We try to have best-in-class technology and collaborate within ourselves to make sure we have what customers need,” says Burhans. Critical infrastructure industries such as water, power and energy, oil and gas are developing standards to help support preparedness of the nation’s infrastructure, and ASSA ABLOY Global Solutions is helping operators secure access and provide audit trails on locking hardware and keys within their security perimeters. Managing customer assets Johnson Controls’ new OpenBlue Service for the security device market seeks to proactively manage customer assets (equipment) as a service. The company’s software platform of connected solutions monitors and manages security devices across vendors and provides remote support services including skilled engineers who can work to ensure that a company’s assets, including cameras and access control readers, operate dependably. Working remotely, OpenBlue analyzes the performance of each system component  Johnson Controls estimates that, unfortunately, up to 25% of a company’s security assets may not be working as intended, whether they lack the latest firmware update or are not connected. Working remotely, OpenBlue analyzes the performance of each system component and responds to ensure equipment operates as intended. “We believe we can close that gap with our solutions,” says Greg Parker, Vice President, Innovation & Portfolio Management for Johnson Controls.  Physical security equipment A big advantage of OpenBlue for security customers is the ability to manage cybersecurity and threats at the edge, which may not currently be addressed by the IT department. The OpenBlue offering includes an embedded ‘air wall,’ which is a zero-trust architecture for physical security equipment. OpenBlue also helps customers manage the ever-changing lifecycles of various assets. Another concept prompting discussion at GSX 2023 is the gap between what a customer expects from a product and what the product can realistically deliver. With endless promotion in the last several years centering on concepts such as artificial intelligence (AI), is it any wonder that customers may sometimes have unrealistic expectations about what a technology can accomplish? The good news at GSX is that, as progress marches on, newer technologies are getting closer and closer to delivering on customers’ most ambitious expectations. The forward momentum of technology development is evident throughout the GSX 2023 show floor, reflecting the promise of even greater product capabilities in months and years to come.

A pioneer in the access control sector since 1971, AMAG Technology is looking to the future and the next generation of products that will expand its services to customers. “In our vision, we have advanced approaches that will not only provide our partners with advanced technologies but also ones that are easier to install with tools to expand their services,” says David Sullivan, who was appointed President of the venerable access control company in September 2022. New challenges at AMAG Sullivan brings a new outlook to the AMAG business, a part of Allied Universal, and a new vision to lead the company into the future. We caught up with David Sullivan to discuss his new challenges at AMAG and the journey ahead as the company looks to the future. Q: How does your background inform your approach to leading AMAG? I believe that it helps me to define a vision for AMAG that will be unique and on the leading edge of our industry David Sullivan: With the exception of only a few short years, my career has been in access control. I have experience with several systems and have had the privilege to manage several successful access control companies. As a result, I bring a great deal of experience into my role at AMAG. I believe that it helps me to define a vision for AMAG that will be unique and on the leading edge of our industry. Q: How would you describe AMAG’s journey over the last several years and how do you see the future? Sullivan: Prior presidents of AMAG always shared their leadership vision and direction with senior leaders located in the United Kingdom. This had an impact on the full direction of the business, sometimes limiting its ultimate success. Before I became a part of AMAG, these senior leaders that were located in the UK retired, placing for the first time the full management responsibilities of the president. This has allowed me to integrate the business into a single team, with single objectives, and a single vision. We expect to begin to reveal this new vision in the coming weeks. We are excited about the future of AMAG and believe we will surprise the industry with our new products and approach in the coming months and years. Q: How important is it that a manufacturer provides both hardware and software solutions? How does AMAG’s approach (in general) differentiate it in the market? We can design the complete solution, providing functionality that others may find more difficult to accomplish Sullivan: Regardless of the manufacturer, we all provide hardware and software. An access control solution is not complete without both. Some of us choose to make our panels, and others do not. Those who are dependent on third-party suppliers are restricted to the developments and direction of that company, and while it might be perceived to be an open technology, it still is proprietary to the hardware manufacturer. AMAG has controlled its manufacturing of panels from day one. The result means that we can design the complete solution, providing functionality that others may find more difficult to accomplish. Q: How does the breadth of AMAG’s product suite provide advantages to customers and/or integrators? Sullivan: AMAG’s product portfolio is unique and provides the end user with an end-to-end identity management solution from one company. Our Control Room PSIM, Symmetry CONNECT Identity Management Solution, Symmetry Access Control, and Symmetry GUEST solutions all integrate to provide the user with a broad set of features and capabilities from a single provider. There is no finger-pointing when we come to support your system. We hold full responsibility for making it work and can quickly provide a resolution to any application difficulties the user may be experiencing. Q: How does AMAG address the divide between on-prem and cloud systems? How do you help customers make the transition and/or plan for the future? We are in the early stages of developing our next generation of access control in which we intend to provide on-prem Sullivan: In our current product portfolio, we have three products that are cloud-based. Our mobile credential platform (Symmetry Mobile), our visitor management solution (Symmetry GUEST), and our physical identity and access management solution (Symmetry CONNECT) are all offerings that operate in the cloud. We are in the early stages of developing our next generation of access control in which we intend to provide on-prem, web client, and cloud-based offerings. One of the primary objectives is to ensure that the large installed base of systems that are out there today will be able to migrate not only to our next generation but as well to the cloud if the client so desires. Q: What is AMAG’s approach to mobile credentialing? Sullivan: As an access control provider, adding Symmetry Mobile credentialing to our portfolio just made sense. We want our customers to have a forward-thinking solution with the opportunity to save money not only on the physical badges but the cost of printing and distributing badges. Mobile credentials can be easily issued and revoked remotely, reducing administrative overhead, and eliminating the need for physical inventory management. Organizations can centrally configure what devices are used and the read range for each type of device and operating system, thus providing flexibility. Symmetry Mobile offers a customized questionnaire that controls access and reduces liabilities. Q: What has surprised you the most in your first year or so leading AMAG? Not many companies are blessed with such a broad portfolio that is supported by a resource-rich company Sullivan: I wouldn’t say I was surprised by this as much as happy to see, but I would say that the quality of our people was a pleasant surprise. As well, the AMAG product offering is broad and has some unique elements. When coupled with the depth of the resources that we have in AMAG, I know that we are second to none. Not many companies are blessed with such a broad portfolio that is supported by a resource-rich company that has so many talented people. Q: Please describe your dealer channel, and how you are seeking to expand it. Sullivan: The AMAG products are sophisticated and typically are installed for higher-end applications. With this sophistication comes a need to be well able to install such a solution. We have a strong group of certified and loyal partners who help us to deliver these enterprise solutions. We desire to provide our existing partners with updated and competitive systems to offer to their end users. Q: What is the security industry’s (and/or AMAG’s) biggest challenge in the next five years? We need to find ways to provide both our channel partners and the customers with solutions that are easily integrated Sullivan: I believe that the advancements that we are seeing in technology provide our industry with the opportunity to truly change how security is provided to our collective customers. As we advance these solutions, we will need to do so responsibly and in a way that helps the channel’s abilities. We need to find ways to train our partners to both install and support these more complex solutions. At the same time, we need to find ways to provide both our channel partners and the customers with solutions that are easily integrated, moving away from proprietary closed systems to open and cohesive solutions. This will ensure that the users get the best, and most complete solutions. Q: What does the industry as a whole misunderstand about AMAG -- time to set the record straight! Sullivan: Well, I am not ready to openly share where we are heading. We are in the process of putting together some advanced approaches to how we will do business with our partners. We are focused on providing tools that will enhance their services to their customers, and with products that are leading edge. I can only state that all should keep their eyes on AMAG, because over the next few years, we are going to surprise some people, and more importantly make our loyal partners quite powerful.

Bournemouth and Poole College, the largest provider of further education and apprenticeships in the Dorset area, has installed Hochiki's ESP addressable fire detection range across its four-storey site, protecting a diverse mix of teaching environments including IT suites, kitchens, workshops and engineering bays. The installation was specified and delivered by SFA Fire and Security, working closely with the college to design a system capable of handling the varied fire risks found across further education provision. Subjects such as catering, automotive maintenance, construction and engineering carry a higher risk of nuisance alarms from dust and fumes, while IT and digital media spaces rely heavily on electrical equipment. A tailored approach was needed to protect the site without interrupting learning. Protecting valuable teaching time ESP's common mounting base allowed SFA's installers to work through the site using a single standard base across most devices, reducing the range of parts held on site and helping installation stay on schedule despite the complexity of the building. In kitchens and workshops, LPCB and VdS approved heat sensors were used to distinguish genuine fire risk from cooking activity and dust, reducing false alarms and protecting valuable teaching time. ESP's textual identifier gives staff the exact location of an activated device, supporting fast and accurate evacuation decisions in a large site with high footfall. Wall-mounted VADs, certified to EN 54-23, added audio and visual alerts throughout the college, ensuring alarms reach staff and students regardless of location or impairment. Where cabling access was limited by drop beams, wireless technology was integrated onto the ESP loop, avoiding extensive drilling and preserving the building's original structure. Successful projects together Naomi Fell, Projects Director at SFA Fire and Security, said: "This project presented numerous challenges due to the complexity of each room and storey within the college. Our extensive experience with Hochiki's products, combined with the consistently positive feedback from our end-users, made Hochiki the clear choice for this project. We met the college's stringent deadlines with minimal disruption to teaching and learning." Ryan Baulcomb, Regional Sales Manager at Hochiki, added: "Hochiki and SFA have a strong, long-term partnership, built on years of successful projects together. This installation shows what that partnership can deliver on a genuinely complex site. We're proud that our products continue to give installers and end-users the reliability and support they expect." Bournemouth and Poole College now benefit from a fire detection system tailored to the specific demands of each corridor, room and storey across the site, with the flexibility to adapt as the college continues to grow.

ZeroEyes, creators of the multi-analytics weapons detection and threat intelligence platform, announces that its proactive AI gun detection and intelligent situational awareness software has been renewed by Central Valley School District in Beaver County, Pennsylvania after a successful first year of deployment. Serving four schools across Beaver County, Pennsylvania, including a primary center, elementary school, middle school, and high school, the district supports approximately 2,200 students and 200 faculty and staff. ZeroEyes has been integrated across all facilities as part of the district’s commitment to maintaining a safe, secure, and welcoming learning environment. Welcoming learning environment “The safety of our students and staff will always be our top priority,” said Brian Dolph, Safety & Security Director for the Central Valley School District. “By implementing ZeroEyes technology, Central Valley School District is taking a proactive step to enhance campus security and provide real-time detection of potential firearm threats, helping ensure that our schools remain safe places for teaching, learning, and growth. ZeroEyes has been a valued partner, delivering continuous monitoring and an added level of assurance in our campus security efforts.” Central Valley School District’s deployment is part of a broader, layered approach to safety that includes closed-circuit cameras, a visitor management system, ALICE-trained staff, regular district-wide safety drills, and school resource officers in all buildings. The district also conducts coordinated active shooter drills each summer in partnership with Beaver County Emergency Services and works closely with local communities, including Monaca Borough and Central Township, to support campus safety efforts. Situational awareness software ZeroEyes’ AI gun detection and intelligent situational awareness software layers onto existing digital security cameras. If a gun is identified, images are instantly shared with the ZeroEyes Operations Center (ZOC), the industry’s only U.S.-based, fully in-house operations centre staffed 24/7/365 by specially trained U.S. military and law enforcement veterans. If the threat is determined to be valid, alerts and actionable intelligence — including visual description, gun type, and last known location — are dispatched to law enforcement and school officials, often in a matter of seconds from the moment a gun is detected. “Central Valley School District has taken a thoughtful and proactive approach to campus safety,” said Mike Lahiff, CEO and co-founder of ZeroEyes. “By continuing to invest in real-time intelligence and working closely with trusted partners, the district is strengthening its ability to respond quickly to potential threats while maintaining a safe and supportive learning environment.”

Verkada, a pioneer in physical security and operations, announces that the Miami Dolphins and Hard Rock Stadium adopted its platform to enhance fan safety and security. Hard Rock Stadium's new Verkada deployment unifies video security, access control, guest management, intercoms and alarms into a single, cloud-based platform that enables its team to streamline security operations at the scale and speed that the 65,585-seat venue demands. "As a world-class venue hosting global events year-round, we prioritise solutions that align with the scale and pace of our operations," said Sameer Istafa, Chief Technology Officer for the Miami Dolphins and Hard Rock Stadium. "Verkada's unified platform provides a seamless, connected operating environment that supports our focus on delivering a consistent, elevated experience for our fans at every event." Resource-intensive maintenance costs Verkada's unified platform gives Hard Rock Stadium's team: Faster response during high-pressure moments. Activity-based detection and intelligent alerts provide teams with greater visibility into activity across Hard Rock Stadium, enabling faster, more informed responses when needed. Proactive perimeter coverage. Advanced detection tools enable Hard Rock Stadium to take a proactive approach to monitoring the stadium's exterior and surrounding areas, flagging unusual activity before it escalates. Streamlined access across a large campus. Verkada's cloud-managed access credentials replace physical keys and disconnected badge systems. With all door events logged, Verkada's platform can flag anomalies. Flexibility across a wide range of events. In addition to the Miami Dolphins, Hard Rock Stadium hosts college football games, concerts, and other global events – and each event has a different footprint and different security needs. Verkada enables the Hard Rock Stadium team to tailor protocols event-by-event without new infrastructure. Lower infrastructure costs. Moving onto Verkada's cloud-based platform is expected to save Hard Rock Stadium on time- and resource-intensive maintenance costs, with new features delivered automatically through software updates. Insight into operational efficiency. Visual intelligence from Verkada's platform provides insight into occupancy trends that can enable operations teams to reduce bottlenecks and adjust staffing in real-time. World-class experience "Hard Rock Stadium can swing from hundreds of employees and vendors on a weekday to more than 65,000 fans in a matter of hours," said Filip Kaliszan, co-founder and CEO of Verkada. "Verkada is built to handle this kind of complexity, with one unified platform that keeps pace with an operation that never stays still. We're proud to provide solutions that help keep fans, athletes and entertainers who visit Hard Rock Stadium safe – and to give the team behind these legendary events the tools they need to keep delivering a world-class experience." Video security infrastructure Hard Rock Stadium worked with Castaway Technology and Security (CTS) to support its Verkada deployment and implementation across the campus. CTS used Verkada's Command Connector to bring Hard Rock Stadium's existing video security infrastructure into the new platform during the migration period, ensuring a smooth transition and letting security teams work from Verkada's platform from day one. "Hard Rock Stadium is a marquee venue that demands a security infrastructure to match. Our goal was to help them transition to a more agile and integrated ecosystem. With Verkada, we were able to deliver a truly end-to-end solution that eliminates technical friction, allowing the security team to focus entirely on maintaining a safe, premier experience for every fan," said Craig Bruce, co-founder at CTS.

Evolv Technologies Holdings, Inc., a security technology company pioneering AI-based solutions designed to create safer experiences, announces that Evolv Express®, the company’s people-screening system, has been selected as a security partner in Northwestern University’s new Ryan Field following a rigorous evaluation process. As Ryan Sports Development prepares to open the first NFL-type stadium in college sports, they evaluated available screening solutions before selecting Evolv Express to help deliver an elevated fan security experience. Evolv Express uses advanced sensor technology and AI to detect concealed threats and identify the location of the potential threat while allowing people to move through checkpoints at their natural walking pace. Advanced sensor technology The New Ryan Field, in the final stages of construction, will have a capacity of 35,000 fans when it opens on October 2nd with a nationally televised game. In addition to Northwestern football games, New Ryan Field will also host other athletic and community events throughout the year. The project is designed to set a new standard for the college football experience and boasts several features and innovations fitting its ambitious vision, including the Evolv Express security systems. The multi-year agreement between Evolv and Ryan Sports Development includes a variety of marketing elements and designates Evolv as Northwestern University’s “Official Fan Screening Provider.” Exceptional arrival experience “Our goal for the New Ryan Field is simple: build the best place to watch football in America,” said Pat Ryan Jr., CEO of Ryan Sports Development. “That ambition covers not only the event itself, but also the entire time that a fan is on site. We built a stadium designed to represent the future of college athletics, and so much more, and we rigorously evaluated available screening technologies and selected Evolv Express because it aligned with our goals of delivering a secure, convenient, and exceptional arrival experience.” “When an institution invests in creating what it believes will be the premier college football venue in the country, every decision matters, including the first impression fans receive when they arrive,” said John Kedzierski, President and CEO of Evolv Technology. Ambitious stadium projects “Northwestern had the opportunity to evaluate the industry’s leading screening solutions as part of this landmark project, and we are honored that Evolv Express was selected to help deliver the elevated fan experience Ryan Field is designed to provide. It’s a testament to the strength of our technology that one of the most ambitious stadium projects in college sports chose Evolv to help welcome fans through its gates.” The New Ryan Field at Northwestern is another signature deployment on Evolv’s growing roster of higher education customers, as well as numerous stadiums, arenas, theme parks, schools, hospitals and other public spaces around the world.

ZeroEyes, creators of the multi-analytics weapons detection and threat intelligence platform, announces that its AI gun detection and intelligent situational awareness platform has been deployed by Kansas’ Bonner Springs–Edwardsville USD 204 to protect students and faculty against gun-related violence. USD 204 serves more than 2,400 PreK–12 students with 455 staff members across a network of schools in the suburban communities of Kansas City, Bonner Springs, and Edwardsville, including one high school, one middle school, three elementary schools, and two pre-K buildings. ZeroEyes complements the district’s multilayered security plan, which also includes school resource officers (SROs), secured entrances, and close, ongoing collaboration with local law enforcement agencies across all three communities.  Situational awareness platform The district secured funding through the Kansas Safe and Secure Firearm Detection Grant Program, administered by the Office of the Kansas Attorney General, to purchase and implement ZeroEyes. “Ensuring the safety of our students and staff is at the core of everything we do,” said Lisa Terrell, Director of Education Foundation & Counseling Services. “The deployment of ZeroEyes is a natural extension of our district’s proactive, layered approach to security, enhancing the strong foundation we’ve built through trusted partnerships with local law enforcement, secure facilities, and dedicated personnel.” Digital security cameras ZeroEyes' AI gun detection and intelligent situational awareness software layers onto existing digital security cameras. If a gun is identified, images are instantly shared with the ZeroEyes Operations Center (ZOC), the industry's only U.S.-based, fully in-house operation centre, which is staffed 24/7/365 by specially trained U.S. military and law enforcement veterans. If these experts determine the threat is valid, they dispatch alerts and actionable intelligence — including visual description, gun type, and last known location — to law enforcement and local security teams, often in a matter of seconds from the moment a gun is detected. “Thanks to the Office of the Kansas Attorney General, we can provide an added level of confidence for USD 204’s families and community with ZeroEyes,” said Mike Lahiff, CEO and co-founder of ZeroEyes. “It's great to see the district reinforce its commitment to creating a safe, supportive environment where every student can thrive.”

Gunnebo Entrance Control has completed a major entrance control project for ByteDance’s new corporate offices in Dubai Media City and Business Centre, delivering secure and efficient access for one of the world’s pioneer technology companies. ByteDance, the global organization behind TikTok, Lark and Lemon8, selected Dubai as the base for its Corporate Services head office. The facility supports business functions including security, procurement, EHS and R&D and reflects the company’s long-term investment in the Middle East. Maintaining robust protection With a rapidly growing workforce and constant visitor traffic, ByteDance needed to maintain a secure workplace while ensuring smooth, welcoming operations. Managing access for hundreds of employees and contractors daily, alongside the onboarding of new staff, was critical to preventing unauthorized entry to sensitive areas and systems while maintaining a seamless day-to-day experience across the offices. Gunnebo Entrance Control worked closely with ByteDance’s internal teams to align with both security and operational requirements, ensuring employees and visitors could move efficiently throughout the building without disruption while maintaining robust protection across key areas. High-traffic corporate environments In total, twenty-four SpeedStile FLs MAX gates were installed across the two sites: seven in Media City and seventeen in the Business Centre. The SpeedStile FLs MAX is a premium speed gate designed for high-traffic corporate environments, combining advanced security functions with a sleek, professional appearance. Compact in footprint and highly adaptable, the solution integrates smoothly with third-party access control systems. Intelligent detection technology reduces the risk of tailgating and piggybacking, ensuring only authorized personnel gain entry while preserving a smooth flow for everyday movement. Entrance control solutions Delivering the project required close collaboration with ByteDance’s IT teams and civil contractors to align the solution with building design and operational requirements. The installation was completed in line with the timeline for the launch of ByteDance’s new headquarters and has become a central part of the company’s entrance control strategy in the region. Jacob Touma concluded: “ByteDance is a global brand with demanding requirements for workplace security and employee experience. Their new Dubai offices mark an important hub for the company’s Middle East future, and the SpeedStile FLs MAX delivers the right balance of safety, efficiency and aesthetics, ensuring smooth movement while maintaining robust protection. This project underlines our commitment to supporting world-leading businesses with reliable, effective entrance control solutions.”

At mid-year 2026, the broader economy tells a story of resilience under pressure. Conflict in the Middle East has triggered a shock to the energy supply, driving oil prices up and reigniting global inflation. However, a total downturn has been averted. Exceptional, historic levels of business investment and data center construction are providing a firm floor for growth, offsetting cooler consumer spending and keeping labor markets fundamentally stable. But how are changing economics impacting the physical security market? We asked our Expert Panel Roundtable: How do changes in the broader economic climate impact physical security?

College campuses are meant to be places of learning, growth, and community. Fostering such an environment requires the deployment of policies and technologies that ensure safety and security. Considering the growing role of security technology in the higher education market, we asked this week’s Expert Panel Roundtable: What are the new applications for security technology in the college and university markets?

There is safety in numbers, or so the expression goes. Generally speaking, several employees working together tend to be safer than a single employee working alone. Even so, some environments require that workers complete their jobs alone, thus presenting a unique combination of security vulnerabilities. The U.S. Occupational Safety and Health Administration (OSHA) defines a lone worker as “an employee working alone, such as in a confined space or isolated location.” We asked this week’s Expert Panel Roundtable: How can security technologies help to protect "lone workers?"