Warning Devices

Cyber threats are evolving at a pace that bewilder even seasoned security analysts. Attackers used to be easy to detect; with their reliance on phishing emails riddled with spelling mistakes or predictable malware signatures. Today’s threat actors are harnessing artificial intelligence to automate reconnaissance, generate convincing social engineering campaigns, evade detection, and adapt their attacks in real time. Against this backdrop, many traditional Security Operations Centre, or SOC, are struggling to keep up. Legacy SOC models were designed for a very different threat landscape. They were built around manual investigations, siloed tools, and reactive workflows. While these models once provided a strong defensive foundation, they now resemble medieval castle walls facing a swarm of autonomous drones. Endpoint protection systems In this article, readers will learn how traditional SOCs are structured, why they fall short against AI-driven threats, and how AI-powered SOCs are reshaping modern cyber defense. We will also explore why high-quality data is essential for effective AI security operations and outline best practices for building the kind of data environment that allows AI-driven SOCs to thrive. Traditional SOC is typically built around a layered operational model designed to monitor, detect, investigate, and respond to security incidents. Analysts are often divided into tiers based on skill level and responsibilities. Tier 1 analysts monitor alerts generated by security tools such as SIEM platforms, firewalls, endpoint protection systems, and intrusion detection systems. Their role is to triage alerts, dismiss false positives, and escalate suspicious activity. Tier 2 analysts conduct deeper investigations into escalated incidents, while Tier 3 analysts handle threat hunting, advanced investigations, and incident response. AI-powered cyber threats At first glance, this structure appears logical and organized. However, it has several structural weaknesses that become obvious when facing AI-powered cyber threats. One of the biggest limitations of legacy SOCs is their dependence on manual processes. Human analysts are expected to sift through thousands, sometimes millions, of alerts each day. This creates a dangerous environment where alert fatigue becomes inevitable. Imagine a smoke alarm that goes off every few minutes, but for a non-critical fire. Eventually, people stop reacting with urgency. The same phenomenon occurs in SOC environments. Analysts become overwhelmed by false positives, causing genuine threats to slip through unnoticed. AI-generated phishing campaigns AI-driven attackers exploit this weakness masterfully. Modern malware can generate behavior that blends into normal activity, avoiding traditional detection methods that rely on static rules or known indicators of compromise. AI-generated phishing campaigns can create highly personalized messages that mimic writing styles, business terminology, and communication patterns with uncanny accuracy. Traditional SOCs also struggle with response speed. Many legacy environments still depend on analysts manually correlating events across multiple disconnected systems. By the time an investigation begins, the attacker may already have escalated privileges, exfiltrated sensitive data, or moved laterally across the network. Probing cloud infrastructure The problem becomes even more severe when attackers use AI to automate their operations. AI-powered threats can rapidly test defences, adapt their behavior, and exploit vulnerabilities faster than human-led teams can respond. Consider this hypothetical scenario: what happens when an AI-driven attack can rewrite its own malware behavior every few minutes while simultaneously launching personalized phishing campaigns against employees and probing cloud infrastructure for weaknesses? A traditional SOC would likely spend more time chasing alerts than stopping the actual intrusion. Legacy SOCs also lack contextual awareness. Most conventional detection systems focus on isolated events rather than broader behavioral patterns. An employee logging in from a new location may trigger an alert, but the system may fail to connect that event with unusual data access patterns, suspicious endpoint activity, and abnormal cloud API requests occurring simultaneously. Without context, security teams are left trying to assemble a jigsaw puzzle while pieces keep changing shape. Suspicious activity patterns To defend against AI-driven threats, organizations need to match an attacker’s arsenal and turn to AI. Modern AI-native SOC do not simply bolt machine learning onto existing workflows. They fundamentally transform security operations. AI-powered SOC ingest enormous volumes of telemetry data from endpoints, networks, cloud environments, identity systems, applications, and threat intelligence feeds. Instead of relying solely on predefined rules, they use machine learning models and behavioral analytics to identify anomalies and suspicious activity patterns. These systems continuously learn from the environment, improving their ability to distinguish normal behavior from malicious activity. This dramatically reduces false positives and allows analysts to focus on genuine threats rather than drowning in alert noise. Threat hunting capabilities Automation also plays a major role. AI-driven SOC can automatically investigate alerts, enrich incidents with contextual data, prioritise risks, and even initiate containment actions without waiting for human intervention. For example, if an endpoint begins exhibiting ransomware-like behavior, an AI-powered SOC can isolate the device, block malicious processes, revoke compromised credentials, and alert analysts within seconds. Traditional SOC workflows might require multiple manual approvals before taking action. AI-powered SOC also improve threat hunting capabilities. Large Language Models and advanced analytics tools can analyze vast datasets to identify subtle attack patterns that human analysts might overlook. These systems can detect low-and-slow attacks, insider threats, and novel attack techniques that do not match known signatures. Importantly, AI-powered SOC still require skilled analysts. AI is not replacing security professionals. Instead, it acts like an extraordinarily caffeinated research assistant that never sleeps, never blinks, and can process millions of events simultaneously. Abnormal behavior patterns Modern AI-powered SOC combine several technologies to deliver stronger protection against advanced attackers. SIEM platforms remain important, but they are increasingly enhanced with AI-driven analytics and orchestration capabilities. Security Orchestration, Automation, and Response, or SOAR, platforms automate repetitive tasks and coordinate responses across security tools. Extended Detection and Response, or XDR, platforms unify telemetry from endpoints, networks, email systems, cloud environments, and identity providers to provide broader visibility into threats. Threat intelligence platforms feed AI systems with up-to-date indicators, adversary tactics, and contextual threat information. User and Entity Behavior Analytics, or UEBA, tools help detect abnormal behavior patterns that may indicate compromised accounts or insider threats. Generating investigation recommendations Large Language Models are also becoming valuable SOC assistants. They can summarise incidents, generate investigation recommendations, correlate threat intelligence, and assist analysts with faster decision-making. However, even the most advanced AI security tools are only as effective as the data they receive. Data is the oxygen of AI-powered security operations. Poor-quality data leads to inaccurate detections, ineffective models, and dangerous blind spots. AI systems depend on clean, complete, and well-structured telemetry to identify threats accurately. If logs are inconsistent, incomplete, duplicated, or missing key contextual information, the AI models may struggle to distinguish malicious activity from legitimate behavior. For example, if endpoint telemetry is missing process execution details or cloud logs lack identity context, the SOC may fail to identify lateral movement or credential abuse. Disconnected business systems High-quality data also improves model training. AI systems learn from historical patterns, meaning that inaccurate or poorly labelled data can create biased or unreliable detections. In many organizations, data fragmentation is a major challenge. Security data is often scattered across legacy infrastructure, cloud services, third-party tools, and disconnected business systems. This fragmentation creates visibility gaps that attackers can exploit. Building a strong data foundation requires careful planning and governance. Organizations should begin by centralizing telemetry from across the environment into unified data platforms wherever possible. Standardising log formats and ensuring consistent timestamp synchronization helps improve correlation accuracy. Normalised data allows AI systems to analyze events more effectively across multiple systems. Data enrichment is equally important. Adding contextual information such as asset criticality, user roles, geolocation data, and threat intelligence helps AI models make more informed decisions. Relatively predictable techniques Organizations should also continuously validate data quality. Missing logs, duplicate entries, and ingestion failures can quietly undermine detection capabilities if left unchecked. Retention policies matter as well. AI-powered threat hunting often relies on historical behavioral analysis, meaning organizations need sufficient long-term data storage to identify patterns over time. Finally, collaboration between security, IT, cloud, and data teams is essential. Building an effective AI-driven SOC is not simply a technology upgrade. It is an operational transformation that requires alignment across the organization. Traditional SOC models were built for an era when cyber threats moved more slowly and attackers relied on relatively predictable techniques. Today’s AI-driven threat landscape is vastly different. Attackers can automate reconnaissance, personalize phishing campaigns, evade traditional detection methods, and adapt attacks in real time. Reducing operational risk Legacy SOC struggle under the weight of manual investigations, alert fatigue, fragmented visibility, and slow response times. In contrast, AI-powered SOC use automation, behavioral analytics, machine learning, and contextual intelligence to detect and respond to threats at machine speed. Yet technology alone is not enough. The effectiveness of an AI-driven SOC depends heavily on the quality of the underlying data. Clean, enriched, and well-governed telemetry enables AI systems to deliver meaningful security insights and reduce operational risk. As cyber threats continue evolving, organizations must rethink how their SOC operate. The future of cyber defense belongs to security operations that can learn, adapt, and respond as quickly as the threats they face. To discover how Rewterz experts can help modernise the SOC capabilities, strengthen the data foundations, and prepare the organization for AI-driven cyber threats, explore our advanced security operations solutions today.

InnoTrans, taking place at Messe Berlin from the 22nd–25th of September, is the world's pioneer trade fair for transport technology, bringing together the key players shaping railway technology, infrastructure, public transport, and tunnel construction. At this year’s show, Zenitel will showcase its latest Unified Critical Communication solutions for increasingly connected transport networks. 2026 is particularly significant for Zenitel, marking 125 years since the company's founding in 1901. Over more than a century, Zenitel has evolved into a trusted provider of wayside and rolling stock audio solutions, with its wide range of intercoms and its flexible PAVA systems supporting thousands of stations and billions of passengers worldwide. InnoTrans provides a fitting platform to celebrate that milestone alongside its partners and customers, while looking ahead to the future of transportation communication. Critical communication systems “Transport networks are becoming increasingly connected, and that brings both opportunities and new responsibilities for those designing and operating critical communication systems,” says Henry Rawlins, Vice President Product Management at Zenitel. “At InnoTrans, we’re looking forward to showing how our latest solutions combine reliable communication with the flexibility, scalability and cybersecurity needed for modern transportation infrastructure.” Cybersecurity is becoming a vital consideration for systems responsible for safety-critical communication. Zenitel's team will deep dive into the evolving challenges around cybersecurity and how its audio and voice alarm systems are engineered to withstand modern cyber threats, while simplifying deployment and helping operators protect essential infrastructure as networks become more interconnected. Visitors can explore how security can be incorporated into the design of communication systems rather than treated as an afterthought. Future of critical communications At the heart of the Zenitel stand will be VAIA, the all-in-one Public Address and Voice Alarm amplifier built specifically for the demands of the transportation industry. Drawing on years of engineering expertise and feedback from integrators and operators worldwide, VAIA brings compact, cost-effective PAVA audio, without compromising the reliability and quality, transport networks depend on. Attendees can expect live demonstrations, technical deep-dives, and the opportunity to speak directly with Zenitel’s specialists about the topics presented, general best practices, and the challenges they face. Just as importantly, visitors are invited to share their own experiences, challenges and perspectives, creating an open discussion around the future of critical communications. On the stand: Koen Claerbout (Chief Executive Officer & President), Matt Maher (Executive Vice President), Henry Rawlins (Vice President Product Management), Hanne Eriksen (Senior Vice President), Paul Langridge (Business Development Manager), and Nik Manson (Technical Account Manager).

Attackers are using automation, artificial intelligence, and increasingly sophisticated techniques to evade traditional security controls, turning malicious actors into a moving target for security teams. In this environment, organizations can no longer rely solely on reactive security measures that respond to threats after they have already caused damage. Instead, they need proactive security operations that actively search for hidden threats before they escalate into major incidents. This is where AI-powered threat hunting is transforming modern Security Operations Centre (SOC). By combining the speed and scale of artificial intelligence with the expertise of human analysts, organizations can uncover advanced threats that might otherwise remain undetected for weeks or even months. Proactive security operations In this article, you will learn what a SOC does, how modern SOC differ from those of the past, how AI is enhancing threat hunting capabilities, and why proactive security operations have become essential for defending against today's cyber adversaries. A Security Operations Centre serves as the central hub for monitoring, detecting, investigating, and responding to cybersecurity threats across an organization's environment. It brings together people, processes, and technology to provide continuous visibility into security events and potential risks. The primary function of a SOC is to identify malicious activity as quickly as possible and minimize its impact on the organization. To achieve this, SOC teams continuously monitor networks, endpoints, cloud environments, applications, and user activity for signs of compromise. Traditional security controls SOC analysts investigate alerts generated by security tools, assess their severity, determine whether they represent genuine threats, and coordinate appropriate response actions. They also perform threat intelligence analysis, incident response, digital forensics, vulnerability management, and compliance reporting. Beyond responding to alerts, modern SOCs play an increasingly strategic role in strengthening organizational resilience. They help identify security weaknesses, improve detection capabilities, and provide leadership teams with insights into emerging threats and risks. Investigating genuine threats Traditional SOC were primarily reactive in nature. Their focus was largely centred on monitoring alerts generated by security tools and responding when suspicious activity was detected. While this approach provided value, it often created significant challenges. Analysts were overwhelmed by thousands of alerts every day, many of which turned out to be false positives. Valuable time was spent manually reviewing events rather than investigating genuine threats. At the same time, cybercriminals became more sophisticated. Advanced Persistent Threats (APTs), insider threats, ransomware groups, and state-sponsored attackers learned how to operate quietly within environments for extended periods. Many attacks could bypass conventional detection mechanisms altogether. As a result, organizations began shifting towards a more proactive security model. Attack surface monitoring Modern SOCs focus not only on alert response but also on continuous threat hunting, behavioral analytics, attack surface monitoring, and predictive threat detection. Rather than waiting for security tools to raise an alarm, analysts actively search for indicators of compromise and suspicious patterns that may indicate hidden adversary activity. Artificial intelligence has become one of the key technologies enabling this transformation. Threat hunting is the proactive process of searching for cyber threats that have evaded existing security controls and detection systems. Unlike traditional detection methods, threat hunting does not depend solely on predefined rules or alerts. Instead, security teams use hypotheses, threat intelligence, behavioral analysis, and investigative techniques to identify hidden threats within their environments. Suspicious privilege escalations A threat hunter might investigate unusual user behavior, unexpected network communications, suspicious privilege escalations, or anomalies in system activity that could indicate malicious activity. The goal is to discover threats before they trigger an incident or cause significant harm. Consider this hypothetical question: What if a sophisticated attacker gained access to your network today but deliberately avoided triggering every alert configured in your security tools? Without proactive threat hunting, that attacker could potentially remain undetected for months while gathering sensitive information or establishing persistence. This is precisely why modern organizations are investing heavily in advanced threat hunting capabilities. Accessing sensitive systems Threat hunting generates enormous amounts of data. Analysts must examine logs, network traffic, endpoint telemetry, user activity, cloud events, and threat intelligence feeds across complex environments. Artificial intelligence helps make sense of this vast volume of information. AI-powered systems can analyze billions of events in real time, identify subtle behavioral patterns, and surface anomalies that would be nearly impossible for humans to detect manually. Machine learning models can establish baselines for normal activity and identify deviations that may indicate malicious behavior. These systems continuously learn and adapt as environments evolve. For example, AI may identify an employee account accessing sensitive systems at unusual times, transferring abnormal volumes of data, or exhibiting behaviours inconsistent with historical patterns. While each activity may appear harmless in isolation, AI can correlate them into a meaningful threat narrative. This enables analysts to focus on high-priority investigations rather than manually sorting through countless low-value alerts. Enriched investigation findings AI is not replacing security analysts. Instead, it is acting as a force multiplier that enhances their effectiveness. When suspicious activity is detected, AI can automatically gather contextual information from multiple sources, correlate related events, and present analysts with enriched investigation findings. This significantly reduces investigation time and accelerates decision-making. For instance, AI can automatically identify affected assets, map attack paths, retrieve threat intelligence, assess potential business impact, and recommend response actions. Rather than spending hours collecting information from various tools, analysts can begin investigating immediately with a comprehensive understanding of the incident. The result is faster threat detection, quicker containment, and reduced operational workload. AI-powered threat hunting One of the greatest advantages of AI-powered threat hunting is improved detection accuracy. Advanced analytics can uncover subtle indicators of compromise that traditional tools may overlook. AI also improves operational efficiency by automating repetitive tasks, reducing alert fatigue, and helping analysts prioritise investigations more effectively. Another significant benefit is scalability. As organizations adopt cloud services, remote work models, and connected devices, security data volumes continue to grow exponentially. AI enables SOC teams to manage this complexity without proportionally increasing staffing requirements. Perhaps most importantly, AI helps organizations move from a reactive security posture to a proactive one. Instead of responding after an attack occurs, security teams can identify and disrupt threats earlier in the attack lifecycle. Providing contextual understanding Security analysts provide contextual understanding, critical thinking, business awareness, and strategic decision-making that machines cannot replicate. They validate findings, investigate complex attack scenarios, interpret nuanced situations, and determine appropriate response actions. The most effective SOCs combine AI-driven analytics with experienced human analysts who can apply judgement and expertise to security investigations. This collaborative model delivers the best of both worlds: machine speed and human insight. Overall security posture The cybersecurity landscape continues to grow more complex, and organizations face increasingly sophisticated adversaries. Traditional reactive security models are no longer sufficient to address modern threats. AI-powered threat hunting allows modern SOCs to proactively identify hidden threats, uncover advanced attack techniques, and accelerate investigations before significant damage occurs. By combining artificial intelligence with skilled analysts, organizations can improve visibility, reduce response times, and strengthen their overall security posture. The future of security operations is not about replacing people with machines. It is about enabling people and technology to work together more effectively than ever before.

Observation Without Limits (O.W.L.), a U.S.-based manufacturer of 2D and 3D radars for ground and low-altitude airspace surveillance applications, is proud to announce its upgraded GroundAware® GA1360LH 2D 360-degree digital multi-beamforming radar system. Now available, the customisable GA1360LH target classification distinguishes among humans, animals, and ground and water vehicles for alarming on targets of concern within and around critical sites. “Our original GA1360 radar was designed to function as the wide-area perimeter intrusion detection sensor that helped meet NERC CIP-014 requirements for transmission substations,” said Adam Robinett, O.W.L. CEO. “The GA1360 quickly became our workhorse ground surveillance radar that serves as the foundation for event-based layered security at all kinds of critical infrastructure sites. Now, our GA1360LH provides longer detection ranges and improved target tracking for automated detection, tracking, deterrence, and response to intrusions within a 1 km radius of critical sites.” Physical security requirements Added Robinett, “That’s coverage for up to 750 acres or 300 hectares by a single radar, meaning more coverage with fewer sensors and less costly infrastructure than required by other sensors. This means attractive total cost of ownership at a time when constrained budgets are dealing with ever-growing physical security requirements.” Designed for ground and water surface applications, the GA1360LH is a powerful solution for protecting a range of critical sites, including electrical transmission substations, power plants, natural gas compression stations, dams, water reservoirs, water treatment facilities, midstream oil and gas facilities, airports, seaports, rail facilities, mines, large-scale manufacturing plants, data centres, storage facilities (such as large automobile distribution centers), and campuses of other critical sites with open perimeters and areas of concern.  Automatic response triggers Additional GA1360LH features and specifications include: Digital beamforming radar technology for highly reliable all-weather detection and tracking of all target types 1 km+ detection ranges on ground and water vehicles, 600 m range on humans Seamless integration with ONVIF cameras, video management systems (Genetec, Milestone, Avigilon, and many others), access control systems, physical security information management systems, audible alarms, security lights, drones, and more Customisable alarm zones with automatic response triggers Solid state system with no moving parts Full hardware warranty and software maintenance/support coverage Processing Type: Pulsed Doppler Frequency Band: S (3.0 GHz – 3.3 GHz) Azimuth FOV: 360 degree Elevation FOV: 40 degree Operating Temperature: –20 degree C to +60 degree C (–4 degree F to +140 degree F)

Comelit-PAC has launched a new range of linear beam smoke detectors designed to simplify the protection of large, open spaces, combining easier commissioning with compatibility across both addressable and conventional fire alarm systems. Developed for applications such as warehouses, atriums, industrial facilities, sports halls and other high-ceiling environments, the new detectors use reflective infrared beam technology to monitor for the presence of smoke over distances of up to 120 metres. Conventional fire systems The range comprises four models, with addressable and conventional variants covering applications from 5 to 60 metres and from 50 to 120 metres and is compatible with Comelit-PAC's Logifire addressable panels alongside conventional fire systems. Says Mandy Bowden, Fire Systems Business Manager UK & ROI at Comelit-PAC: "As warehouses become larger, industrial facilities more complex and public spaces increasingly multi-purpose, there's growing demand for technologies to deliver reliable coverage without adding unnecessary complexity. Our new beam detectors are giving customers access to a broader range of solutions from a single trusted partner, making it easier to specify and support the right system for every application.” Supporting straightforward installation Certified to EN54-12, with the addressable models also incorporating EN54-17 certified short-circuit isolation, the detectors have been designed to support straightforward installation and reliable performance. Smart alignment technology automatically optimizes the signal during commissioning, reducing the need for fine calibration, while an integrated laser pointer assists with setup. The detectors automatically compensate for environmental changes that could affect performance over time, including dust build-up, minor structural movement and temperature fluctuations. This helps maintain stable sensitivity and reduce the risk of unwanted alarms, with maintenance alerts generated when cleaning or servicing is required. Maintaining consistent performance Addressable versions offer additional functionality through the control panel, including programming, real-time alignment display and dual sensitivity settings for day and night operation. They can be powered directly from the loop or via an external power supply and are designed with low current consumption. Mandy concluded: “Every site varies considerably in scale and complexity, which means fire detection technologies need to respond to very different operational demands. The focus of this launch is to present solutions to maintain consistent performance despite changing environmental conditions over time. Long-term reliability and suitability for the environment are now just as important as meeting the initial design requirements.” Across the range, the detectors are IP65 rated and suitable for operating temperatures from -20°C to +60°C. Remote indicator connections are provided, while the conventional models can also be integrated with third-party systems.

BuzzFeed, Inc. is one of the most recognizable names in digital media, with 500+ employees, a newsroom and operations across Los Angeles and New York, and a brand built on being fast, scrappy, and ahead of the curve. Their physical security program was trying to keep pace. BuzzFeed was spending more on physical security, not technology, to manage security. In-person guards. Long shifts. Weekend coverage. Manual paper reports. The model was expensive. It wasn’t scalable. And it was overdue for a rethink. Heightened public scrutiny The challenge - When Chandler Bondan, BuzzFeed’s Chief People Officer, started evaluating options, the criteria were clear: reduce costs without reducing protection. She needed a partner who could handle 24/7 monitoring remotely, design and build out a camera system that actually covered their footprint, and communicate with BuzzFeed in the way her team actually works, in Slack. At the time, BuzzFeed’s camera coverage was limited and inconsistent: a patchwork of built-for-consumer cameras with significant blind spots across critical buildings, entrances, exits, and parking lots. For a media company operating in an era of heightened public scrutiny, that wasn’t just an inconvenience. It was a duty-of-care issue. People needed to feel safe. Entrances needed to be covered. And the privacy of employees moving through the building had to be respected, not just assumed. Physically verifying identities On the operations side, BuzzFeed ran an in-house GSOC staffed by guards — 5 to 7 on at any given time in LA alone — that functioned more like a dispatch center than a true strategic security operation. Guards calling guards. Human patrols covering the floor. On-site personnel physically verifying identities and manually letting people into the building. And through all of it, every alarm, every incident, every access event was being documented by hand. Most of those alarms were false. But they all got a report anyway. There was no way to identify patterns, flag problem devices, or actually improve the program over time. Just an endless cycle of alerts, paperwork, and noise — and a security team spending its time reacting instead of strategy planning. Flag problem devices “Security used to be a line item. Now it’s a lens. The data HiveWatch gives us about people, how they move through our buildings, which spaces are actually being used… has become part of how we think about our footprint, our real estate decisions, our expansion plans. It’s not just keeping people safe. It’s helping us run a smarter business,” Chandler Bondan, Chief People Officer, BuzzFeed. The complexity was real. BuzzFeed’s LA headquarters spans multiple buildings they occupy entirely, along with a variety of parking lots that needed coverage. Their New York office sits on a couple of floors of a shared building. After-hours access, by team members and contractors alike, happens regularly but unpredictably based on production schedules, talent on site and equipment pickup and dropoff. All of it managed by boots on the ground, around the clock. Filtering false positives The solution - HiveWatch started where BuzzFeed needed it most: the infrastructure. Working with BuzzFeed’s LA and NY office managers, the HiveWatch team designed and built out a full camera system from the ground up, replacing the ad hoc camera setup with deliberate, professional coverage. Every entrance, every exit, every parking lot. Blind spots were eliminated, and for the first time BuzzFeed had a camera system that was designed for duty of care. Then HiveWatch took over 24/7 virtual monitoring across all locations. The in-house GSOC — guards calling guards, reacting to noise — was replaced by the HiveWatch® GSOC Operating System, powered by AI, that handles the work no human should have to: triaging alarms, filtering false positives, and reviewing camera footage before an operator ever gets involved. When something real surfaces, a GSOC operator is there to make the call. The result is a security operation that runs autonomously and, in large part, remotely. It handles incidents in real time, verifying identities via technology, and communicates exactly where BuzzFeed’s team already is: Slack. Compliance-ready documentation Two dedicated channels were set up from day one: one for daily incident reporting, one for after-hours access requests. The after-hours process got a complete overhaul. Instead of a guard physically verifying someone at the door, access requests are now handled proactively through Slack — submitted before the person even leaves for the building, reviewed against approved SOPs, and resolved before they arrive. No waiting at the door required. But the shift went beyond operations. Because Chandler’s role sits at the intersection of people and security, the data HiveWatch surfaces matters as much as the monitoring itself. The platform gives BuzzFeed a full audit trail and compliance-ready documentation as a baseline. Beyond that, the people insights — how employees move through buildings, which entrances see the most traffic, how office utilization shifts over time — have become a real input into decisions about space, expansion, and how BuzzFeed thinks about its physical footprint going forward. Security went from cost center to business intelligence. Daily incident report “HiveWatch doesn’t just monitor for us, they work with us. Having that expertise in our corner, especially for a team our size, has been invaluable,” said Maritza Bocks, Director of People Operations & Compliance, BuzzFeed. Every morning, BuzzFeed’s team wakes up to a daily incident report in Slack. Virtual patrols conducted. Calls made. Access granted, access denied. Door events flagged, validated, and cleared — all through the HiveWatch Operating System. Critical infrastructure room But it’s not just routine monitoring. HiveWatch has flagged things like usual activity near BuzzFeed’s property and a water leak developing in a critical infrastructure room. All during overnight virtual patrols, HiveWatch alerted staff to security and property concerns. All before BuzzFeed’s team started their day. In each case, the same playbook: captured in real time, the right people notified according to SOPs, and the situation monitored and documented until it was fully resolved. No scramble. No discovery after the fact. Vulnerabilities and incidents are caught early, handled according to protocol, and handed off with a full record attached. After-hours access runs asynchronously as well. An employee heading in late for a production shoot sends a Slack message before they leave. HiveWatch reviews it, approves or denies against SOPs, and the answer is waiting for them before they reach the door. No one needs to be there in person 24/7. No one waits outside. It’s been a game changer for BuzzFeed’s team. As Ryan Schonfeld, HiveWatch Co-Founder & CEO, recounts: BuzzFeed’s security leader told him unprompted how much her team enjoys the Slack reporting and how well HiveWatch is performing. The quote from BuzzFeed’s HQ manager on a recent check-in said it all: “Nothing to go over. We figured it out, guys,” said HQ Facilities Manager, BuzzFeed.

Security is a top priority for any organization responsible for safeguarding critical infrastructure. However, recent events have highlighted the fragility of the global energy supply chain and the need for change. When tankers cannot safely navigate the Strait of Hormuz, fuel prices rise and public anxiety grows. This often results in long lines at the fuel pump and fears of shortages quickly becoming a self-fulfilling prophecy. The reality is that critical infrastructure will always be a target because those seeking to disrupt, cause harm or force change — militarily, economically, politically or socially — understand both its physical and psychological impact. Regulating for resilience While headlines focus on political debates over who should keep shipping lanes open, critical infrastructure organizations and governments are moving forward with new physical and cyber safeguards to protect sites closer to home. Before recent Middle East events, CISA’s 2025 review outlined efforts to strengthen U.S. securityWeeks before recent events in the Middle East, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released its 2025 review outlining major actions taken to strengthen national cyber and physical defences. Meanwhile, in Europe, the Critical Entities Resilience (CER) Directive will take effect across the EU in July, with member states such as Germany advancing early through its KRITIS framework to establish a model for CER compliance. These initiatives extend to energy supplies, from power stations (gas, electricity and nuclear), refineries and pipelines, substations, water treatment facilities, data centers and food production. And while increased investment in renewable energy may reduce reliance on overseas supply, wind and solar farms remain potential targets as well. Fortunately, the likelihood of missile strikes on critical infrastructure is low in many regions. But the risks of trespassing, espionage, sabotage, terrorism and protest activity are far higher. Protection and detection Security levels vary widely across critical infrastructure.  A large power station may employ live-monitored CCTV, video analytics, alarms, sensors, access control, fencing and other heightened defences. In contrast, a rural electrical substation may rely on a single unmonitored camera, a perimeter fence and a basic alarm. Despite significant annual investment, organizations often lack the ability to connect these systems. Without integrated systems, real-time situational awareness — understanding what happened, how it began, what is occurring now and how to respond — is nearly impossible. Operators typically manage large portfolios of sites spread over vast and often challenging geographies. Only by integrating siloed systems and linking multiple sites into a centralized operation can true enterprise-wide visibility be achieved. Video management system A centralized insight layer (PSIM) ensures incidents are detected using all available resources For example, a perimeter breach at a substation might initially appear to be an isolated incident. But combined with a similar incident at another site, it could indicate the start of a coordinated attack. A centralized insight layer (often referred to as a PSIM — Physical Security Information Management system) ensures incidents are detected using all available resources. A perimeter alarm — triggered by a steel fence sensor or a 3D LiDAR system — initiates an alert and the video management system automatically displays the relevant live camera feed and recent footage. Operators can follow predefined workflows to lock down areas, dispatch first responders or initiate evacuations. Automated actions, such as playing recorded announcements over public address systems, can also occur. Rapid, effective response is essential for safety, security and ensuring uninterrupted service to customers. Resilient supply chains require security measures that function from the source to the point of service. Recent geopolitical and environmental events, such as severe flooding, have shown how quickly disruption to one link can trigger widespread consequences. However, critical infrastructure operators can strengthen resilience by leveraging the robust systems they already have, improving their ability to detect and respond to threats.

A security camera installed today has more AI processing power than the systems that guided early autonomous vehicle prototypes. And yet the operator who mounts that camera on a wall will, in all likelihood, never use most of that capability.  Industry surveys bear this out: a wide gap persists between the number of security professionals who believe AI can improve outcomes and the much smaller share who have adopted it operationally. The reason has nothing to do with the silicon and everything to do with how the industry has asked people to configure these systems. The problem is not that the industry lacks algorithms. The problem is that physical security has never found a scalable way to personalize systems for each site. The personalisation dilemma hiding in plain sight The problem is that physical security has never found a scalable way to personalize systems for each site A surveillance deployment at an airport, a retail chain, a school campus, and a logistics yard can look strikingly similar in hardware terms. Each installation uses image sensors, edge processors, network connectivity, and a management layer. What changes is what the operator cares about. At a school entrance, the priority might be perimeter approach after hours and controlled access during the day. At a loading dock, the concern is tailgating, vehicle dwell time, and safety incidents near forklifts. At an airport, the operator may need queue-flow analytics one moment, unattended-item detection the next, and then a search for a specific person of interest carrying a particular bag. At a retail store, loss prevention teams want to correlate customer flow patterns with point-of-sale data and identify suspicious behavior near high-value merchandise. This range of needs forces a reality that the industry has acknowledged in principle but never resolved in practice: the application pool across the market is vast, yet each individual site typically requires only a narrow set of outcomes. Each deployment needs personalisation once, at commissioning, and then again whenever the environment or the risk profile shifts. The app store that never became a market For the better part of a decade, the industry’s most visible answer to the personalisation problem was the “app store” model. The logic was straightforward: curate a marketplace of trained neural network algorithms, let integrators browse a catalog, and download the right analytic for each job. Queue counting for a passport control hall. License plate recognition for a parking structure. Occupancy monitoring for a conference room. The concept borrowed directly from the consumer smartphone approach. In practice, it never matched physical security’s purchasing and operating rhythm. A phone owner discovers and downloads new apps continuously. A physical security deployment selects one or two analytics functions at installation and rarely revisits them. Another maintenance burden A queue-counting algorithm trained on airport data is excellent at queue counting The economic incentive to maintain, curate, and update a broad catalog across a fragmented ecosystem of camera OEMs, VMS platforms, and system integrators never materialised when the average buyer drew from only a thin slice of it. And the question of who would operate such a marketplace across that fragmented landscape was never satisfactorily answered. The deeper issue is that distribution was not the hard part. Personalisation was. A queue-counting algorithm trained on airport data is excellent at queue counting. It does not naturally become a general-purpose security tool for whatever the operator needs next. Once a model is trained for a narrow task, adaptation requires another project, another integration cycle, and another maintenance burden. AI-enabled cameras The examples that do exist are instructive. Schiphol Airport in the Netherlands has used trained camera systems for over a decade to measure queue length at passport control and alert staff when additional counters should open. Rome trailed AI-enabled cameras to track pedestrian wait times at crosswalks, measure bus queue length, and monitor parking occupancy to support active transport and reduce vehicle emissions. These are effective, well-regarded deployments. They also illustrate the limitation: each required its own trained model, its own integration effort, and its own maintenance cycle. The queue-counting camera at Schiphol cannot be redeployed to detect an abandoned bag. That is a separate algorithm, a separate procurement, and a separate project. What changes with agentic AI Applied to physical security, this translates into a simpler commissioning experience Agentic AI points to a fundamentally different approach. An agentic system can receive goals expressed in natural language, determine the appropriate actions to fulfill those goals, execute those actions using available tools, and verify the results. Applied to physical security, this translates into a simpler commissioning experience: the operator expresses intent in plain language, and the system configures itself to achieve that intent. Consider the practical implications. An installer commissioning cameras at a retail location could type or speak a set of instructions: “Alert the manager if more than five people are waiting at checkout for longer than two minutes.” A facilities director could ask the system to “Track vehicles that enter the east parking lot after 9 p.m. and flag any that remain for more than 30 minutes.” A school security coordinator might specify: “Notify campus police if anyone approaches the perimeter fence between midnight and 5 a.m.” Appropriate perception capabilities None of these instructions require the operator to select a specific analytic from a catalog, configure a detection model, or define pixel-level zones in a complex VMS interface. The system interprets the intent, selects the appropriate perception capabilities, configures thresholds and context, and validates behavior over time. When the operator’s needs change, a new instruction replaces the old one. The camera hardware stays the same. The AI adapts. This is the core of the shift: minimal user input, maximum flexibility, and a security system that personalises itself without requiring the operator to navigate the traditional customize-certify-deploy cycle. Vision language models make it practical A conventional neural network trained for people counting can count people The enabling technology is the vision language model, or VLM. A VLM combines visual encoders with language reasoning, allowing it to interpret images or video in the context of natural language prompts. This is a qualitative leap beyond traditional convolutional neural networks, which classify or detect predefined objects and have no mechanism for open-ended interpretation. A conventional neural network trained for people counting can count people. It cannot distinguish between a crowd of commuters exiting a train station and a crowd assembling in protest. A VLM, by integrating contextual reasoning with visual analysis, can draw inferences that a task-specific model cannot. It can assess behavioral patterns, interpret spatial relationships, and respond to queries about scenes it has never been explicitly trained to analyze. Where a neural network might register two people carrying objects, a VLM could infer whether the scene suggests travellers with luggage or workers transporting equipment, provided the visual context supports that inference. Supporting multimodal input This matters in physical security because operational questions are rarely phrased as taxonomy labels. Operators want to express outcomes. They want to say “show me anything unusual near the loading bay after hours,” and the system should be able to reason about what “unusual” means given the site context. VLMs also support multimodal input. Audio cues such as a raised voice, a scream, an alarm, or breaking glass can contribute to scene interpretation when paired with video. In security applications, where events routinely unfold across both visual and auditory channels, this capability adds a meaningful layer of situational awareness. The edge constraint that forces discipline Large language models in the cloud use hundreds of billions of parameters and consume hundreds of watts None of this works if the architecture assumes data center conditions. Most surveillance cameras operate under strict power and thermal limits. Power over Ethernet (PoE), the standard delivery mechanism, typically provides between 15 and 30 watts depending on the PoE class, and only a fraction of that budget is available for AI processing after the sensor, ISP, video encoder, and network stack have taken their share. In many installations, the AI workload must fit within a few watts. Large language models in the cloud use hundreds of billions of parameters and consume hundreds of watts. That scale does not translate to a camera mounted on a pole or embedded in a ceiling tile. For agentic AI to work at the edge of a physical security network, the models must be compact, efficient, and designed for the purpose. Neural network acceleration This is where smaller, domain-specific VLMs become essential. Models trained on industry-relevant image and text datasets, combined with techniques such as pruning, quantisation, and parameter-efficient fine-tuning, can deliver meaningful visual reasoning within the compute and memory constraints of an edge processor. The result is a VLM that fits inside a camera’s power budget and still responds to natural language instructions with useful accuracy. Ambarella’s CVflow AI architecture, now in its third generation, was designed for this class of workload. The architecture integrates advanced neural network acceleration with high-resolution image signal processing and video encoding on a single system-on-chip, allowing cameras to run complex AI inference alongside their core imaging functions without exceeding the thermal and power boundaries that define edge deployments. The company's latest addition to its portfolio, the 4-nanometer CV7, runs CNNs and vision language models concurrently across multiple video streams while consuming 20 percent less power than its predecessor. For infrastructure and robotic applications requiring heavier models, the 5-nanometer N1 family supports multimodal LLMs in multi-camera configurations. Distributing intelligence across far edge, near edge, and cloud This tier must respond in milliseconds and operate within a fixed power envelope A workable agentic architecture for physical security distributes intelligence across three tiers, each matched to the processing demands and latency requirements of its role. At the far edge, inside the camera itself, the processor handles real-time perception: object detection, tracking, zone logic, and initial event classification. This tier must respond in milliseconds and operate within a fixed power envelope. At the near edge, on a local gateway or network video recorder, a more capable processor orchestrates across multiple cameras, maintains state, correlates events, retrieves site-specific policies and procedures, and classifies incidents requiring more context than any single camera provides. At the cloud/server tier, available when connectivity permits, the system accesses heavier models for forensic analysis, fleet-wide analytics, model updates, and long-horizon reporting. Periodic cloud access This tiered approach keeps the most time-sensitive decisions local, where latency is lowest and data privacy is strongest. It also means agentic capabilities can scale incrementally. A small installation might run entirely at the far edge with periodic cloud access. A large campus might employ all three tiers, with near-edge orchestration coordinating PTZ patrol patterns across dozens of cameras while the cloud generates shift summaries and updates models based on fleet-wide telemetry. In practice, a security workflow built on this pattern often combines real-time detection at the far edge, behavior-tree orchestration at the near edge for multi-camera coordination, local retrieval over site playbooks, and conservative safe-mode escalation when system confidence is low. The discipline of deterministic guardrails and structured verification loops is essential in security operations, where unpredictable system behavior is not acceptable. A hybrid future, with VLMs orchestrating specialist models The transition to agentic AI does not eliminate specialized neural networks The transition to agentic AI does not eliminate specialized neural networks. Purpose-trained models will continue to deliver superior accuracy for well-defined, high-frequency tasks such as license plate recognition, face matching, and fire and smoke detection. In a mature agentic system, the VLM acts as an orchestrator. It handles open-ended perception and natural language interaction while routing to specialized models when a task demands their precision. A PTZ camera at a transportation hub might receive the instruction “monitor the west concourse for unattended items.” The VLM interprets the request, manages the interface, and reasons over broader scene context. Real-time video processing When it identifies a candidate object, it routes to a dedicated abandoned-item classifier optimized for that specific validation step. The VLM orchestrates. The specialist model validates. The operator receives a refined, actionable alert. That hybrid pattern places specific demands on the silicon. The processor must support both traditional CNN inference and generative AI workloads simultaneously while maintaining real-time video processing within the same power envelope. The value of a tightly integrated SoC, one that combines an advanced ISP, a deep learning accelerator, and a video encoder on a single die, is that it eliminates the multi-chip complexity and power overhead that would otherwise make this approach impractical at the edge. Making agentic AI deployable for the ecosystem Ambarella’s Developer Zone, launched at CES 2026, provides a centralized portal of tools Physical security is built on a broad ecosystem of camera OEMs, VMS providers, independent software vendors, module builders, and system integrators. For agentic AI to reach the market at scale, these participants need model-ready tooling, reference workflows, and a practical path from prototype to production. This is where developer ecosystems become part of the story. Ambarella’s Developer Zone, launched at CES 2026, provides a centralized portal of tools, optimized AI models, agentic blueprints, low-code templates, and documentation aimed at accelerating edge AI application development on Ambarella’s SoCs. Common software stack ISVs and integrators can evaluate models, prototype applications, and deploy using a common software stack that spans the company’s CV7 and N1 SoC families through the Cooper development platform. That consistency across the product range reduces per-project engineering cost and accelerates time-to-market for partners building perception and analytics solutions. The point is broader than any single portal: agentic systems require components that have already been tested and optimized for edge deployment, so that integrators can focus on solving their customers' problems rather than rebuilding the AI pipeline from scratch. The ecosystem participants who lead the transition to agentic AI in physical security will be the ones with access to tooling that fits into their existing development and deployment processes. What comes next Physical security has searched for years for a scalable answer to personalisation Physical security has searched for years for a scalable answer to personalisation. The app store model did not provide it. Manual configuration, while functional on a per-site basis, scales poorly across large portfolios of cameras and changing operational requirements. Agentic AI offers a credible path forward because it aligns with how operators actually think. They express outcomes, not model specifications. They want systems that adapt to new requirements without repeated engineering cycles. Traditional neural networks With VLMs as the interface layer, smaller domain-specific models at the far edge, orchestration at the near edge, and disciplined verification loops throughout, personalisation can become a standard part of deployment rather than a custom project. The building blocks are now in place. Power-efficient edge AI processors can run VLMs and traditional neural networks simultaneously. Developer ecosystems are maturing to support rapid prototyping and deployment. Reference architectures for distributing intelligence across far-edge, near-edge, and cloud tiers are solidifying. For an industry that already installs vast numbers of AI-capable cameras each year, the opportunity is to make the intelligence already embedded in those endpoints genuinely usable for the people who rely on them every day.

Acquisitions are often billed as moments of bold opportunity. For senior executives and boards, these deals are about accelerating growth, unlocking synergies, and strengthening competitive advantage. But for the teams responsible for making operations run safely and smoothly — including physical security — acquisitions can feel like controlled chaos. Decisions happen without warning, details are opaque, and the ripple effects of choices made in the boardroom cascade down through every layer of the organization. Too often, physical security isn’t even in the room where those decisions happen. Beyond access control When security is treated as an afterthought — a cost center to be rationalised, rather than a strategic enabler — companies expose themselves to risks that go well beyond access control or surveillance coverage. Overlooked integration challenges can compromise the safety of people and property, slow down facility transitions, inflate budgets, and undermine everyone’s confidence in the acquisition deal itself. For seasoned physical security leaders, the imperative is clear: make your program visible, credible, and indispensable before and during acquisition conversations. That means ensuring your voice is represented. Why security visibility matters At first glance, it’s not obvious to some why physical security should rank alongside finance, IT, and legal in the M&A playbook. But consider what’s really at stake:͏ Budget accuracy: If no one accounts for system migrations, access credential re-issuance, or security subject matter expert (SME) travel during due diligence, financial forecasts will be miscalculated. Underestimating these costs by even a small percentage can throw off larger integration budgets. ͏ Technology fit: Acquirers frequently inherit access control, video, and monitoring platforms that don’t align with their standards. Without early planning, companies risk unsupported infrastructure, avoidable downtime, and duplicating expensive features. ͏ People and roles: Security staff redundancies and mismatched responsibilities are often decided hastily, surfacing operational gaps and challenges with morale. ͏ Cultural harmony: Employees at acquired companies can perceive new security measures as heavy-handed or intrusive, jeopardising adoption and compliance. Each of these factors is manageable — but only if you consider them early on in the acquisition and communicate clearly at the decision-making level. Securing a seat at the table Physical security leaders don’t need to wait passively for a seat at the M&A table — they can and should advocate for it. Take practical steps: Identify the M&A committee. This group may go by different names — corporate development team, integration steering group, or even a subcommittee of the board. Pinpoint who leads it and which executives have influence. Make the case for inclusion. Position security not as a compliance hurdle but as a value multiplier. Remind leadership that visibility into risks, costs, and integration timelines reduces surprises, accelerates business continuity, and protects reputation. Bring data, not anecdotes. Prepare a concise playbook: current-state inventories of systems and personnel, cost models for typical integration activities, and sample timelines for cutovers. When executives see that security has done its homework, they’re more likely to view the function as essential. Leverage allies. Partner with your security consultant, along with your facilities, IT, HR and risk management teams who share overlapping interests in safe, seamless operations. Unified advocacy is harder to dismiss than a single voice. By getting on the M&A committee, you ensure your concerns aren’t filtered secondhand or raised too late to influence outcomes. Leading with credibility during acquisitions Visibility is only the first step. Once in the room, security leaders must contribute with authority and clarity. Three practices stand out:͏ Translate security into business impact. Executives don’t respond to jargon about card readers or VMS licenses—they respond to risk, cost, and continuity. Frame every input in terms of: Financial implications, such as “Consolidating platforms will save $X annually, but requires $Y in upfront integration.” Operational implications, such as “Delays in credentialing will stall employee onboarding at three newly merged sites.” Cultural implications, such as “Without a clear change management plan, acquired employees may resist compliance, leading to increased insider risk.”͏ Provide scenarios, not surprises. Acquisitions move fast, but that doesn’t mean you can’t plan. Present modeled scenarios — small target vs. large target, regional vs. global integration — and their associated timelines and costs. This proactive approach demonstrates foresight and earns trust. ͏ Advocate for people, not just systems. In the scramble to integrate technology, companies often forget the human element. Use your platform to ensure that acquired security personnel are evaluated fairly, retrained where possible, and integrated into the new culture. Advocating for people strengthens morale and preserves institutional knowledge. Visibility beyond a single deal For some companies, acquisitions are rare, high-stakes events. For others, they’re a routine growth engine. In either case, physical security leaders should treat M&A as a recurring test of their strategic value. To do this, work with your security consultant to:͏ Document lessons learned from each acquisition, then institutionalise these lessons in playbooks and checklists. ͏ Develop clear security messaging that explains your team’s mission and impact, so executives understand why your presence is non-negotiable. ͏ Commit to realistic timelines for integration work, ensuring leadership sees the discipline and predictability of your function. The goal isn’t just to be consulted during one deal — it’s to become permanently visible in the company’s growth strategy. Don’t be an afterthought In the popular imagination, the “room where it happens” is a place where power dynamics shift and futures are decided. For physical security leaders, being absent from that room during an acquisition means watching others dictate the future of your program, your people, and your company’s security posture. But by proactively seeking visibility — by insisting on a voice in acquisition planning, by bringing data and credibility to the table, and by consistently framing security as a business enabler — you can transform physical security from an afterthought into a recognized pillar of successful acquisitions.

The security landscape is undergoing a profound transformation, as evidenced by the innovations showcased at the ISC West Expo 2026. From dismantling of silos between physical and digital security to the ongoing transition to cloud and hybrid platforms, much of the discussion on the show floor was familiar, if somehow more urgent than ever. Clearly the industry is moving toward unified, cloud-native, and highly automated ecosystems. In a series of deep-dive meetings and demonstrations at the recent show, I got a first-hand glimpse of the future of the physical security marketplace. Spoiler alert: The future is now! HID Global: Tearing down the silos HID Global is addressing the long-requested convergence of physical and digital security. Recognizing that the industry has historically operated in silos, HID is now leading with a combined implementation team to leverage the power of both sides. HID is supporting the transition by combining its logical and physical security teams to help end users design secure, end-to-end journeys for their employees. By leveraging its massive existing footprint in physical access, HID is uniquely positioned to help organizations upgrade their cybersecurity posture without a total "rip and replace" of their hardware. HID is seeing a surge in demand for converged credentials that unite building access with digital identity. On the digital front, HID has implemented FIDO (Fast Identity Online) and passkeys to replace traditional passwords with more secure, biometric-backed authentication methods. Acre Security: Bridging the gap to the cloud Acre Security previewed a cloud-native video solution, reinforcing its cloud-first security strategyAcre Security is currently consolidating brands, bringing established names like Feenics and AccessIt under a single corporate umbrella. A primary theme for the company at ISC West is the migration of legacy systems to modern infrastructure. To facilitate the transition, they are launching "The Bridge," a technology designed to help on-premise customers transition to the cloud at a pace that suits their operational needs. The company is also expanding its portfolio into video. Attendees at the show received a preview of a new cloud-native video solution slated for release later this year, signaling Acre’s commitment to a holistic, cloud-first security suite. Acoem: Real-time acoustic threat detection With a 35-year foundation in vibration and acoustics—including military sniper detection—Acoem is providing gunshot detection through edge processing. Unlike systems that rely on the cloud and may suffer from latency, Acoem’s technology processes data at the sensor level for instant alerts. Their sensors are engineered for massive outdoor spaces, covering a 500-foot radius (roughly 11 football fields) and can detect high-powered rifle shots from up to half a mile away. The system provides critical intelligence by distinguishing between muzzle blasts and "mach noise" from bullet travel, delivering an audio file to the end-user that maps the location and direction of the threat. They use AI to filter out environmental false positives, such as skateboards hitting metal rails. Alarm.com: The all-in-one dealer ecosystem Beyond hardware, Alarm.com is leveraging AI to streamline the sales process Alarm.com is doubling down on "giving tools to dealers to help them be successful," with a focus on unified commercial solutions. A highlight at ISC West is their new fire communicator, which integrates fire monitoring into their single app, completing what they call the "fourth leg of the stool." The product allows fire systems to benefit from the same real-time customer engagement and push notifications that have long been available for intrusion and video. The key products, such as commercial-grade hardware, are now available for immediate purchase. Beyond hardware, Alarm.com is leveraging AI to streamline the sales process. Their new AI Proposal Builder uses customer meeting notes to automatically generate customized, value-driven sales proposals for dealers. Allegion: A global shift in credentialing Following the acquisition of ELATEC, Allegion is adopting a more global market approach and expanding its OEM business. The company is involved in the development of Aliro, the newly unveiled mobile credentialing standard. Allegion’s strategy is built on versatility: While Aliro serves the burgeoning mobile market, they also offer PKOC for plastic cards, allowing them to provide solutions regardless of the user's preferred credential type. The ELATEC acquisition has effectively filled previous gaps in their use-case portfolio, positioning them as a comprehensive provider for both physical and digital access needs. AtlasIED: Engineering for life safety Transitioning from audio to a fully automated threat detection company, AtlasIED showcased its new IPX line at ISC West. This modular platform uses a single PoE++ port to power various "plug-and-play" modules, allowing for easy system upgrades. Their gun detection technology achieves a 99% confidence rating by "stacking" AI models; it cross-references audio data with infrared signatures to detect muzzle flashes and air quality sensors for particulates. With systems already running in 80% of U.S. international airports, the company maintains 24/7 domestic engineering support to manage these "life-safety adjacent" environments. Axis Communications: Unifying connectivity Axis Communications is advancing network video with 4G/5G surveillance, reducing cabling needs Axis Communications continues to lead in network video, with a new focus on offering surveillance through 4G and 5G networks to eliminate the need for extensive cabling in long-range applications. Axis also introduced several specialized hardware pieces, including the P1486-LE global shutter camera for high-speed traffic monitoring and the Q2802-TE, which integrates thermal and visual monitoring into a single unit.  To assist technicians, they launched a new installer app that uses Bluetooth for easier camera pairing and management directly from a mobile device. Axon: De-escalation through enterprise wearables Focusing on frontline safety, Axon is expanding from law enforcement into the enterprise sector with its retail and healthcare-focused body camera. Weighing only 0.25 lb, these cameras are designed to be less intimidating, using colorful designs and acting as a primary de-escalator for aggressive behavior. A clear front display signals when recording is active, striking a balance between safety and a non-intimidating appearance. These devices feature live-streaming and panic alarms that connect workers to a Global Security Operations Center (GSOC). To ensure the footage is legally viable, Axon maintains a rigorous audit trail that authenticates every action recorded. Genetec: The value of the unified platform Genetec is advocating for unified platforms that reduce the time between incident detection and resolution. They argue that AI is becoming a commodity and that the true value lies in unified platforms that reduce the time from incident to resolution. Their approach emphasises the "outcomes" customers need, such as allowing security teams to coalesce around an investigation quickly. Genetec remains a strong supporter of open systems for enterprise customers, ensuring they have the choice to integrate diverse technologies rather than being locked into a manufacturer’s “walled garden.” This flexibility is critical for high-end security environments that require tailored, responsive systems. Johnson Controls: Large-scale enterprise solutions Johnson Controls has made a significant push into the enterprise video market with C-Cure IQ, a standalone VMS designed for major hubs like airports and large campuses. Through a partnership with Scylla, they have integrated 11 advanced analytics—including facial recognition and weapons detection—directly into their cameras. They also showcased new multi-sensor panoramic cameras capable of "stitching" multiple images into a single 360-degree view. While innovating in video, Johnson Controls also confirmed modern upgrades to their intrusion line, including their legacy DSC Neo line. The new DSC PowerSeries Neo 5, a high-end residential and commercial platform, features an all-new user interface and built-in PowerG+. They have also begun shipping the IQ5 family lineup, which is powered by a Qualcomm DragonWing processor.  ONVIF: Standardising the future of AI and cloud ONVIF continues to lead the charge in establishing common languages for the security industry. A major focus is their new "Cloud Profile," which enables cameras to connect directly to the cloud through a standardized protocol. They are also expanding into audio standards to ensure IP-based speakers can seamlessly connect to Video Management Systems (VMS). To combat the rise of sophisticated digital manipulation, ONVIF is developing "video signing" standards. ONVIF is actively seeking more diverse enterprise participation to help shape these emerging AI standardsThis feature protects the integrity of video for evidentiary purposes by embedding a digital signature and timestamp directly into the footage at the camera level. Additionally, the organization has formed an AI Working Group to develop common communication methods for "AI agents" within physical security systems. ONVIF is actively seeking more diverse enterprise participation to help shape these emerging AI standards. Roberto Licari is the new ONVIF Ambassador, seeking to attract new companies (even outside the security sector) to ONVIF as they look to expand their offerings. SwiftConnect: Bridging digital and physical identity SwiftConnect is redefining access control by shifting the focus from physical cards to digital identity. As a cloud-based "connected access network," the platform bridges the gap between IT identity providers (like Okta or Azure AD) and legacy physical access control systems. At the show's Security Experience Center demonstrations, SwiftConnect showcased its ability to integrate mobile credentials within Apple and Google Wallets across multiple technology platforms. By aligning physical security with Zero Trust principles, they ensure that access is governed by the same rigorous standards as digital networks. Their software-centric approach allows for a more seamless employee experience while simplifying the management of complex, multi-site building security. This emphasises a future where the mobile device becomes the primary tool for navigating the physical workspace. Wasabi Technologies: Redefining cloud storage economics With cloud technology becoming a baseline requirement at every booth, Wasabi Technologies highlighted its "hot cloud storage" as a cost-effective alternative to major hyperscalers. Their model claims to be 80% less expensive than competitors, notably removing hidden fees. Wasabi is increasingly bundled at the "back end" of security solutions through partnerships with integrators and end users. A key feature for law enforcement and high-security sectors is their "Object Lock" capability, which ensures that video evidence remains untampered with and immutable during defined retention periods. By providing high-performance storage without the unpredictable costs typically associated with the cloud, Wasabi is positioning itself as the foundational layer for data-heavy video surveillance applications that require long-term, secure retention. Wasabi is positioning itself as the foundational layer for data-heavy video surveillance applications ZKTeco USA: Versatile and integrated access ZKTeco USA showcased a range of integrated solutions, including turnstiles, visitor management, and access control. Their Atlas access control series offers versatility, supporting everything from traditional readers and keypads to QR codes and fingerprint scanning, with the flexibility to operate on-premise or in the cloud. For tight environments, they introduced the Mars 100 turnstile, which features a compact 2x3-foot footprint. They also highlighted the Omni series, an all-in-one standalone reader-controller that manages access, intercom, and visitor functions in a single device. Innovation in portability was evident in their new walk-through metal detectors, which consist of two poles with an 8-hour battery life—ideal for schools and temporary events. While they offer their own Armatura readers, ZKTeco emphasized that their solutions can integrate with other industry leaders to fit diverse customer needs.

2025 was another impactful year for mergers and acquisitions (M&As) in the security industry, which is undergoing an enormous transformation as global pioneers prioritise specialized technology to drive future growth.  The year 2025 has been defined by massive corporate reorganisations, most notably Honeywell and Resideo spinning off core divisions to unlock shareholder value. Simultaneously, an aggressive wave of mergers and acquisitions is reshaping the landscape, with giants like ASSA ABLOY and Motorola Solutions absorbing innovators in AI-driven surveillance, cloud-native access control, and identity management. From residential security shifts to critical infrastructure enhancements, this article will summarise how these strategic moves signal a decisive industry pivot toward integrated and intelligent security ecosystems. Resideo to spin off ADI business Resideo Technologies, Inc. announced its intention to separate its ADI Global Distribution business from its Products & Solutions (P&S) business via a tax-free spin-off to shareholders. The separation is expected to be completed in the second half of 2026. P&S will continue as Resideo, a building products manufacturer of residential controls The goal is to unlock value, enhance operational performance, and improve strategic flexibility for both entities. After the separation, P&S will continue as Resideo, a building products manufacturer of residential controls and sensing solutions. ADI will become an independent public company and remain a global wholesale distributor of low-voltage products, including security and audio-visual solutions. Honeywell separates into three companies There are big changes pending at Honeywell, another global security industry company. Honeywell announced plans to separate its Automation and Aerospace businesses into two independent, publicly traded companies following a comprehensive portfolio evaluation. Combined with the previously announced spin-off of Advanced Materials, this strategy will create three distinct industry pioneers. The Automation and Aerospace separation is targeted for completion in the second half of 2026 as a tax-free transaction for shareholders. The largest portion of Honeywell’s traditional security business (cameras, access control, and fire safety) sits within the Building Automation segment of the new Honeywell Automation company. This unit includes products from recent major acquisitions, such as LenelS2. SimpliSafe’s new chapter SimpliSafe has agreed to be acquired by private equity firm GTCR from Hellman & Friedman SimpliSafe has agreed to be acquired by private equity firm GTCR from Hellman & Friedman, another private equity firm. As the third largest U.S. residential security provider, SimpliSafe will continue under the leadership of the current CEO, while its founders remain significant investors.  GTCR, an experienced security industry investor, intends to support the company’s expansion and continued innovation in AI-powered, DIY home protection. This marks a new chapter in SimpliSafe’s mission to provide professional monitoring without long-term contracts. SimpliSafe is GTCR’s fifth investment in the security alarm industry, including prior investments in residential-focused security companies SecurityLink and Protection1, along with commercial-focused security companies HSM and Everon. Motorola grows technology portfolio Motorola Solutions grew its portfolio through acquisitions in 2025. The industry giant strategically expanded its safety and security ecosystem through the acquisition of four specialized technology firms. The company acquired Blue Eye to integrate AI-driven remote video monitoring and 24/7 security operations into its threat detection workflows. To support frontline workers, Motorola added Theatro’s voice-powered communication platform, which complements existing mobile and video technologies. Motorola further bolster its public safety capabilities with the acquisition of RapidDeploy, a cloud-native Next Generation 911 provider that offers real-time caller mapping and data analytics to accelerate emergency responses. Motorola also agreed to acquire InVisit to enhance its Avigilon Alta suite with cloud-based visitor management, streamlining guest registration and blocklist screening for enterprise security. These acquisitions aim to unify detection, communication, and response across various sectors, including retail, healthcare, and critical infrastructure. Allied sells majority stake in AMAG Allied Universal sold a majority stake in AMAG Technology to Shore Rock Partners In December, Allied Universal sold a majority stake in AMAG Technology to Shore Rock Partners. Shore Rock is a growth investor focused on critical infrastructure, with strategic backing from BellTower Partners. Allied Universal will retain a significant minority share. The sale is intended to allow 54-year-old AMAG, which provides integrated access control, identity, guest, and video management solutions, to operate independently from Allied Universal's services-based model for long-term growth. Shore Rock's plan is to invest in advancing AMAG's product line and customer relationships. With this transaction, David Sullivan, AMAG's President, will become CEO. Everon acquires ADT multifamily segment Commercial security provider Everon announced in September that it had entered into a definitive agreement to acquire the business-to-business (B2B) multifamily segment from ADT. This acquisition is a strategic extension that expands Everon's reach in the valuable multifamily market. It will allow the company to offer a more comprehensive portfolio of tailored solutions, including access control, video surveillance, and self-guided tour capabilities. Everon's CEO states that the deal enables them to help property owners and managers increase net operating income and improve operational efficiency. Dormakaba acquires TANlock and Avant-Garde Dormakaba, a global provider of access solutions, acquired TANlock GmbH in July Dormakaba, a global provider of access solutions, acquired TANlock GmbH in July. TANlock is a German firm specializing in innovative high-security access solutions for data centers and other critical infrastructure. The acquisition strengthens Dormakaba’s presence in the data center market.  TANlock's intelligent system provides enhanced server cabinet security using electromechanical rack locks and various authentication modules. This solution is scalable, future-proof, and can be integrated into existing IT infrastructures for both retrofits and new installations. Dormakaba also agreed to acquire Indiana-based Avant-Garde Systems Inc. to strengthen its North American entrance control portfolio. This move bolsters Dormakaba’s presence in high-growth sectors like airports and data centers. Acre acquires REKS for AI Recent M&A activity also reflects the growing importance of artificial intelligence. For example, Acre Security acquired REKS, a purpose-built generative AI solution designed to transform access control, allowing professionals to use natural language queries for instant data insights. Integrated into Acre’s cloud-native ecosystem, this AI-powered platform prioritises data privacy while streamlining operations. Led by a new AI Development Team, Acre plans to expand these capabilities into intrusion detection and visitor management. Two acquisitions for Allegion Global security provider Allegion, through one of its subsidiaries, completed the acquisition of ELATEC Global security provider Allegion, through one of its subsidiaries, completed the acquisition of ELATEC, a manufacturer of security and access technology, specializing in RFID credentials and readers solutions designed in Germany and sold globally.  ELATEC’s portfolio of readers leverages their internally developed software stack and ensures compatibility with nearly 100 credential types, making the company a pioneer in interoperability, which aligns well with Allegion’s partner-of-choice strategy. Allegion, also through one of its subsidiaries, acquired Brisant Secure Limited, a security hardware provider in the United Kingdom. Senstar acquires Blickfeld for LiDAR sensors Senstar Technologies Corporation has agreed to acquire Blickfeld, a specialist in 3D LiDAR sensors and software. Expected to close in Q1 2026, the acquisition integrates Blickfeld’s hardware into Senstar’s advanced security ecosystem. This strategic move expands Senstar’s addressable market into volume monitoring and traffic applications while enhancing its AI-powered situational awareness capabilities. Following the transaction, Blickfeld will operate largely independently as a subsidiary. ASSA ABLOY continues acquisition spree Global giant ASSA ABLOY was probably the most active company in the M&A market in 2025 Global giant ASSA ABLOY was probably the most active company in the M&A market in 2025, demonstrating aggressive market growth, strategically reinforcing its core business, and expanding its technological footprint across the global security marketplace. The acquisitions delivered on the company's strategy to strengthen its position in mature markets by integrating complementary products and solutions. A major theme for ASSA ABLOY was the enhancement of the door and perimeter security portfolio, particularly in the Americas. This effort included acquiring US-based Metal Products Inc. (MPI) for custom-made hollow metal doors and frames and International Door Products (IDP) for fire-rated steel door frames, both in the fall. Earlier in the year, ASSA ABLOY gained a stronger presence in Central Canada with the addition of Wallace & Wallace and Wallace Perimeter Security, a manufacturer, distributor, and installer of perimeter fencing, door, and gate solutions. The Entrance Systems Division also saw expansion with the acquisition of Belgium’s Kingspan Door Components, a manufacturer of sectional door panels. Furthermore, Door System, a Danish manufacturer of high-quality fire-rated doors, was signed for acquisition in the spring. Cloud-based platform ASSA ABLOY also made significant moves in electronic and access control solutions. Early 2025 saw two key acquisitions: Uhlmann & Zacher, a German supplier of access control handles and knobs, and InVue, a US-based provider of connected asset protection and access control solutions. Reinforcing this segment, SiteOwl, a pioneering cloud-based platform for physical security lifecycle management, was acquired in the summer. The spring acquisition of Pedestal PRO, a US manufacturer of access control pedestals and mounting solutions, further strengthens the electromechanical offerings in the Americas. ASSA ABLOY bolstered its capabilities in remote care technology with Germany’s TeleAlarm Group in late spring. HID Global expands in 2025 HID Global, a subsidiary of ASSA ABLOY, was also active on the M&A front in 2025 HID Global, a subsidiary of ASSA ABLOY, was also active on the M&A front in 2025, aggressively driving the convergence of physical and digital identity solutions and signaling a clear roadmap for security professionals. HID's move to purchase Vancouver-based IDmelon, announced in the autumn of 2025, targets the critical need for robust logical access control. IDmelon’s proprietary software platform transforms everyday identifiers, including existing physical credentials, smartphones, or biometrics, directly into enterprise-level FIDO (Fast IDentity Online) security keys. This approach streamlines an organization’s transition to phishing-resistant, passwordless multi-factor authentication (MFA) and minimizes the need for disruptive changes by integrating physical and digital access into a single, cohesive solution. Safer patient experience Separate from its focus on digital access, HID also bolstered its Identification Technologies Business Area by acquiring the Calmell Group. Calmell is a long-established manufacturer specializing in smart cards, smart paper, and magnetic tickets for the public transportation sector. This addition is expected to expand HID’s footprint and relevance in global public transportation ecosystems, allowing the Barcelona-headquartered firm to leverage HID’s core expertise in digital credentials to drive future-proof solutions for seamless mobility. Also, HID acquired Intelligent Observation to expand its Healthcare Real-Time Location Systems (RTLS) portfolio. Intelligent Observation provides a platform to reduce hospital-acquired infections (HAIs) by tracking hand hygiene compliance. The system uses wearable Near-Field Magnetic Induction (NFMI) devices and a cloud-based SaaS dashboard. This technology records and reports if healthcare workers sanitize appropriately, providing granular compliance data to administrators to enable a safer patient experience.

Anyone who has been in a proverbial cave for the last couple of years faced a language barrier at this year’s ISC West 2025 trade show. The industry’s latest wave of innovation has brought with it a new bounty of jargon and buzzwords, some of which I heard at ISC West for the first time. As a public service, we are happy to provide the following partial glossary to promote better understanding of the newer terms. (Some are new to the security industry but have been around in the IT world for years.) Obviously, if we can’t understand the meaning of the industry’s lexicon (and agree on the meaning of terms!), we will struggle to embrace the full benefits of the latest industry innovation. Not to mention we will struggle to communicate. Generative AI Generative AI can identify an object in an image based on its understanding of previous objects This was perhaps the most common new(ish) term I heard bouncing around at ISC West. While the term artificial intelligence (AI) now rolls off everyone’s tongue, the generative “version” of the term is catching up. Generative AI uses what it has learned to create something new. The name comes from the core function of this type of artificial intelligence: it can generate (or create) new content. It doesn’t just copy and paste; it understands the underlying patterns and creates something original based on that understanding. In the case of video, for example, generative AI can identify an object in an image based on its understanding of previous objects it has seen. Video and security Generative AI can tell you something digitally about what is happening in an environment. There is no longer a need to write “rules;” the system can take in data, contextualize it, and understand it, even if it does not exactly match something it has seen before. In the case of video and security, generative AI offers more flexibility and better understanding. From 2014 to 2024, the emphasis was on detecting and classifying things; today AI is expanding to allow new ways to handle data, not so prescriptive and no more rules engines. Agentic AI Agentic AI refers to artificial intelligence systems that can operate autonomously to achieve specific goals Agentic AI refers to artificial intelligence systems that can operate autonomously to achieve specific goals, with minimal to no direct human intervention. In addition to the capabilities of generative AI, agentic AI can take action based on what it detects and understands. Use of agentic AI typically revolves around an if/then scenario. That is, if action A occurs, then the system should proceed with action B. For example, if an AI system “sees” a fire, then it will shut down that part of the building automatically without a human having to initiate the shutdown. There is a lot of discussion in the industry about the need to keep humans involved in the decision-making loop, so use of truly autonomous systems will likely be limited in the foreseeable future. However, the ability of agentic AI to act on critical information in a timely manner, in effect to serve as an “agent” in place of a human decision-maker, will find its place in physical security as we move forward. Inference Inference is another common term related to AI. It refers to the process by which an AI model uses the knowledge it gained during its training phase to make predictions, classifications, or generate outputs on new, unseen data. The direct relationship of this term to physical security and video is obvious. In the simplest terms, an AI system is “trained” by learning patterns, relationships, and features from a large dataset. During inference, the trained model is presented with new questions (data it hasn't seen before), and it applies what it learned during training to provide answers or make decisions. Simply put, inference is what makes AI systems intelligent. Containerization Dividing a massive security management system into several separate containers enables management of the various parts In IT, containerization is a form of operating system-level virtualization that allows you to package an application and all its dependencies (libraries, binaries, configuration files) into a single, portable image called a container. This container can then be run consistently across any infrastructure that supports containerization, such as a developer's laptop, a testing environment, or a server in the cloud. In the physical security industry, you hear “containerization” used in the context of separating out the various components of a larger system. Dividing a massive security management system into several independent containers enables the various parts to be managed, updated, and enhanced without impacting the larger whole. Genetec’s SecurityCenter cloud platform Think of it like shipping containers in the real world. Each container holds everything an application needs to run, isolated from other applications and from the underlying system. This ensures that the application will work the same way regardless of the environment it is deployed in.   “It took us five years to containerize Genetec’s SecurityCenter cloud platform, but containerization now simplifies delivering updates to products whenever we want,” says Andrew Elvish, Genetec’s VP Marketing. Among other benefits, containerization enables Genetec to provide more frequent updates--every 12 days. Headless appliance Headless appliance is a device that is managed and controlled remotely through a network or web interface A headless appliance is a device that is managed and controlled remotely through a network or web interface. The device is like a “body without a head” in the traditional sense of computer interaction: It performs its intended function, but without any visual output or input device for local interaction. In physical security, such devices are increasingly part of cloud-based systems in which the centralized software manages and operates all the disparate “headless” devices. A headless appliance does not have a Windows management system. “The whole thing is managed through the as-a-service cloud system,” says Elvish. With a headless device, you just plug it into the network, and it is managed by your system. You manage the Linux-based device remotely, so configuring and deploying it is easy. Democratizing AI You hear the term democratizing AI used by camera manufacturers who are looking to expand AI capabilities throughout their camera lines, including value-priced models. For example, even i-PRO’s value-priced cameras (U series) now have AI – fulfilling their promise to democratize AI. Another approach is to connect non-AI-equipped cameras to the network by way of an AI-equipped camera, a process known as “AI-relay.” For instance, i-PRO can incorporate non-AI cameras into a system by routing/connecting them through an X-series camera to provide AI functionality. Bosch is also embracing AI throughout its video camera line and enabling customers to choose application-specific analytics for each use case, in effect, tailoring each camera to the application, and providing AI to everyone. Context Cloud system also enables users to ask open-ended queries that involve context, in addition to detection Context refers to an AI system that can understand the “why” of a situation. For example, if someone stops in an area and triggers a video “loitering” analytic, the event might trigger an alarm involving an operator. However, if an AI system can provide “context” (e.g., he stopped to tie his shoe), then the event can be easily dismissed by the automated system without involving an operator. Bosch’s IVA-Pro Context product is a service-based model that adds context to edge detection. The cloud system also enables users to ask open-ended questions that involve context in addition to detection. For example, rather than asking "do you see a gas can?" you can ask "do you see any safety hazards in this scene?" The pre-trained model understands most common objects, and understands correlations, such as "a gas can could be a safety hazard.” A scaled-down on-premise version of the IVA Context product will be available in 2026. Bosch showed a prototype at ISC West. Most video data is never viewed by an operator. Context allows a system to look at all the video with "almost human eyes." Cameras are essentially watching themselves, and understanding why something happened and what we can do. All that previously unwatched video is now being watched by the system itself, boosted by the ability to add “context” to the system. Any meaningful information based on context can trigger a response by an operator. Data lake A data lake is a centralized repository that allows one to store vast amounts of structured, semi-structured, and unstructured data in its native format. In the case of the physical security marketplace, a data lake includes data generated by systems outside the physical security infrastructure, from inventory and logistics systems, for example. A data lake is where an enterprise can accumulate all their data, from the weather to Point-of-Sale information to logistics, to whatever they can gather. Putting the data in one place (a “data lake”) enables them to mine that data and parse it in different ways using AI to provide information and insights into their business. Notably, a data lake contains all a company’s data, not just security or video data, which opens up new opportunities to leverage the value of data beyond security and safety applications. Crunching the various information in a data lake, therefore, security technology can be used to maximize business operations.

After a major refurbishment, Benghazi Children's Hospital in Libya is preparing to deliver a safer, more connected, and more efficient healthcare experience. By adopting Hikvision's AIoT (AI-powered Internet of Things) technologies, the hospital is enhancing patient care, strengthening communication, supporting medical education, and improving operational efficiency throughout the facility. For more than four decades, Benghazi Children's Hospital has served local communities and families. Covering approximately 11,300 m², the hospital supports a wide range of inpatient and outpatient services. Its recent refurbishment—the first in over 40 years—was more than a maintenance project. The hospital set ambitious goals to modernise the environment, aiming for an 80% improvement in patient satisfaction, response times, and interdepartmental communication. Smart healthcare solution To support these objectives, the hospital has been working with the national distributor Al Motaheda to deploy an integrated Hikvision smart healthcare solution spanning patient communication, medical education, and fire protection. When a patient needs help, every second matters. To help caregivers respond quickly and efficiently, Benghazi Children's Hospital has deployed Hikvision's Nurse Call System across its two inpatient departments: the Observation Department and the Gastroenteritis Department. At 11 ward entrances, Doorway Terminals and LED indicators have been installed. Now, when a patient calls, room number and bed information will immediately appear in the corridor, helping nursing staff identify where assistance is needed. Delivering routine announcements A Nurse Station has been located between the two departments. From a single point, staff will be able to receive, prioritise, and respond to requests from all 11 wards, helping improve efficiency while ensuring patients receive timely attention. Beyond the nurse call system, the hospital also wants to strengthen communication between departments. 40 SIP Phones have been installed across examination rooms, operating rooms, labs, and offices, to keep every department connected for day-to-day coordination. 37 Ceiling Speakers will deliver routine announcements, visitor guidance, and emergency notifications. 26 Ceiling Access Points will provide hospital-wide wireless connectivity, supporting staff communications, connected devices, and future digital healthcare applications. Improving patient satisfaction Together, these systems have are creating a more connected healthcare environment where information reaches the right people at the right time. Hospital management expects the solution to play a key role in improving patient satisfaction while significantly reducing response times once the facility becomes fully operational. As a teaching hospital, Benghazi Children's Hospital also places strong emphasis on clinical education. However, limited space inside operating rooms can make it difficult for large groups of students to observe procedures firsthand. To address this challenge, the hospital has deployed a Live Surgery Broadcasting System built around the Hikvision Video Cart. Dedicated training hall This is a mobile unit that can be moved between all four operating rooms as needed. With appropriate patient consent and in accordance with hospital policies, it captures high-quality video and audio that can be transmitted live to a dedicated training hall. This will allow more medical students to observe operations without disrupting clinical activities or overcrowding operating rooms. In addition to live viewing, surgical procedures can – again, with consent – be recorded and stored for future training purposes. This will enable educators to build a growing library of teaching materials while giving more students access to practical clinical learning experiences. Centralized emergency management Fire safety has also been addressed by installing a comprehensive Hikvision fire protection solution. The system enables early fire detection, rapid alert distribution, and centralized emergency management. 203 Smoke Detectors cover every area of the building, from operating rooms to waiting areas to staff rooms. 24 Audible and Visual Alarms, and Manual Call Points have been placed at the ends of corridors and near all exits, where people moving toward evacuation routes will find them. A Fire Alarm Control Panel at the main reception provides centralized monitoring and control. A microphone at the same location will allow staff to broadcast live evacuation instructions to the entire hospital should it be needed. Effective medical education Together, these capabilities help ensure faster response during emergencies while supporting a safer environment for patients, visitors, and staff. Although the hospital has not yet officially opened following its refurbishment, feedback from hospital management and medical staff has been highly positive. As Taha Grgom, Project Manager at the Hospital put it: "The nurse call system will help us respond to patients more quickly, while the live surgery broadcasting system will open new possibilities for medical education. Together, these technologies are helping us build a more connected and efficient hospital." As Benghazi Children's Hospital prepares to welcome its first patients, it stands as a powerful example of how AIoT technologies can support better care, stronger collaboration, safer operations, and more effective medical education. More importantly, it shows what Tech for Good can mean in practice—using technology to make a meaningful difference where it matters most and help every child receive the care they deserve.

In a move to modernise campus operations and create a smoother experience for students and staff, Peru’s National Agrarian University has deployed a comprehensive Hikvision smart campus solution. From streamlined access to safer transportation, the university is building a safer, connected and efficient campus environment. Universidad Nacional Agraria La Molina (National Agrarian University) is one of Peru's most respected academic institutions. Its 102-hectare campus operates more like a small city than a traditional university, serving eight faculties, around 8,000 students, and about 600 teachers every day. Campus bus operations As campus activity continued to grow, the university wanted a more modern and efficient way to manage daily operations. Previously, visitor and vehicle access relied heavily on manual checks and handwritten records. The university also wanted better visibility over campus bus operations and more effective support for security teams patrolling the large campus area. Their goals included: Streamlining pedestrian and vehicle access Equipping patrol teams with mobile tools to enable them to respond to incidents faster Enhancing safety and visibility across campus bus operations Centralizing management through a single unified platform To achieve these, the university worked with system integrator Consorcio Valtar Security y Serinfortel to deploy a unified Hikvision smart campus solution. Anti-tailgating functions To improve pedestrian access, the university installed 18 Hikvision Pro Swing Barriers (DS-K3B530X) and 28 Face Recognition Terminals (DS-K5671-ZV) at the main and side entrances. The solution helps students and staff move through gates quickly while improving entry management. The facial recognition terminals support recognition speeds of less than 0.2 seconds per user and accuracy rates above 99%. Anti-tailgating functions, which prevent people slipping in behind others, helps ensure only authorized individuals can enter. LED indicators, meanwhile, provide visual indicators guide people through the turnstiles in order to avoid bottlenecks. To further streamline visitor handling, the university deployed a Visitor Terminal (DS-K5032-D) together with an Enrolments Station (DS-K1F600U-D6E-F) at the main entrance. The dual-screen visitor terminal supports paperless registration, helping security staff process guests more efficiently while reducing manual paperwork. At the same time, the enrollment station simplifies face enrollment and user management through an easy-to-use touch-screen interface. Anti-hitting protection mechanisms For vehicle access, Hikvision deployed 6 ANPR Cameras (DS-TCG406-E(S)) together with 6 Barrier Gates (DS-TMG520-H/B) at two campus entrances. The system automatically recognises license plates and manages vehicle access in real time, helping reduce waiting times and improve traffic flow. Staff vehicles can be pre-registered through the university’s app, allowing smoother entry during peak hours. Adjustable barrier speeds and multiple anti-hitting protection mechanisms also help improve operational safety. To further improve the driver experience, LED Screens (DS-TVL224-4-5Y) display welcome messages and vehicle information in real time. Because of the campus’s large size, motorcycle patrol teams play an important role in maintaining daily operations and responding quickly across different areas. To support these teams, the university has deployed 10 Hikvision Ultra Series Body Cameras (DS-MH2311) together with 2 Dock Stations (DS-MDS001). Several features make this solution particularly suitable for mobile patrol work: Clear 2 MP video recording with a wide 129° horizontal field of view Up to 8 hours of recording with a removable 3,300 mAh battery Wireless connectivity for improved communication Real-time positioning support through GPS Centralized charging, storage, and evidence upload through dock stations Professional campus operations The cameras are mainly used during routine motorcycle patrols and when responding to incidents on campus. Recorded footage helps clearly document security procedures and provides reliable records of how situations were handled, supporting transparent and professional campus operations. The university has also upgraded safety across its fleet of 11 campus buses with Hikvision onboard solutions. Each bus is equipped with: Mobile Dome Cameras (DS-2XM6726G1-IM/ND) and Mobile Network Cameras (DS-2XM6522G1-ID): These provide real-time HD video coverage inside and outside the buses, helping operators monitor passenger boarding, alighting, and road conditions clearly. DSM Camera (AE-VC1B1I-ISF(RJ45)): This improves driving safety by detecting critical safety indicators such as fatigue, distractions, and smoking. When potential risks are identified, alerts are immediately issued to the driver, helping encourage safer driving practices during daily routes. Touch Monitor (AE-MW1203): Drivers can view live camera feeds through the monitor. The display automatically switches to relevant views when doors open or when reversing, helping drivers monitor passenger movement and blind spots more effectively. Alarm Button (DS-1530HMI(AE)(O-NEU)): It allows drivers to immediately notify the control center for rapid assistance in emergency situations. Mobile NVR (AE-MN5043(1T/SSD)(RJ45)(O-STD)): This records and stores video while also supporting GPS positioning, geofencing, and route monitoring through Google Maps integration. Campus bus management Every solution, from access control and patrol operations to campus bus management, is centrally managed through HikCentral Professional. From this single platform, the university can: Monitor access events in real time Manage user permissions and visitor records Track campus buses through GIS-based maps Receive centralized alarms and event notifications Coordinate faster responses across campus According to the university, the solution has significantly improved operational visibility and coordination across the campus. “With Hikvision’s smart campus solution, we now have a much more efficient and connected way to manage daily campus operations,” says Joseph Jimy Ordóñez Blanco, General Coordinator of the University’s Security Unit. “From access management to transportation safety, the platform gives our teams better visibility, faster response capabilities, and greater confidence in maintaining a safe environment for students and staff.”

PPLD serves El Paso County across multiple branches — from busy urban libraries to new rural buildings. Its security program, built on systems dating back to the late 1980s, had to keep pace with a fast-growing footprint. “I don’t know that we would have been able to get to the point where we had everything we wanted deployed if we didn’t have tech like this,” said Michael Brantner, Chief Facilities & Security Officer, Pikes Peak Library District. Pikes Peak Library District (PPLD) is one of Colorado Springs’ most-used public institutions, serving the El Paso County community across multiple branches with 780 cameras and more than 150 doors under active monitoring. Their physical security program had been trying to keep pace. Legacy systems dating back to the late 1980s. Cameras and access control systems that didn’t talk to each other. A small team buried under too many alarms. The model was reactive, and it was overdue for a rethink. Legacy security technology The challenge - PPLD’s footprint was growing in a few ways, through new construction and the addition of more rural buildings under its umbrella – and Chief Facilities & Security Officer Michael Brantner needed more visibility across all of the buildings. Combining the systems in place to protect these locations, plus the new ones, required a new approach: bring decades of legacy security technology into a unified, modern operation that could scale alongside the district’s growth. PPLD wanted to centralize the management of the district’s security function, which led Michael to explore the creation of a new security operations center (SOC). “We had a lot of technology that didn’t talk to each other,” Michael said. “We wanted to be able to consolidate it into one place where we can manage what’s happening across our sites.” Consolidate disconnected systems When he started building PPLD’s SOC, the mandate was clear: bring decades of legacy security technology into a unified, modern operation that could scale alongside the district’s growth. But he also needed to consolidate disconnected systems, prove ROI to the C-suite, and staff and train a team that could actually move the program forward. At the time, PPLD’s setup was a patchwork: Cloud-based cameras and access control sitting next to legacy equipment, with no shared view across them Operators who were refreshing screens to see new alarms Panic alerts, door alarms, and intercom calls each requiring a different screen, a different workflow, and a different response Notifications were inconsistent Response times couldn’t be measured No centralized SOC to manage alarms cohesively Residents experiencing homelessness Most incoming alarms generated by PPLD’s ACS were false: held-open doors, cleaning crews, and after-hours trip alarms. But every single alarm still demanded a response from someone on the team, even if there was no safety issue. The complexity was real. PPLD’s branches serve a diverse community that includes families, students, and residents experiencing homelessness across locations with very different security profiles. Some deal with routine access events. Others face behavioral incidents, policy enforcement issues, and higher alarm volumes. Across all of them, public spaces had to stay public, and private staff areas had to stay private. Those boundaries need to be enforced, all day, every day. Access control systems The solution - As Michael stood up PPLD’s new SOC, HiveWatch stood out as a way to centralize the security program and allowed the growing team a single, active view of every incident across every system. The platform connected directly to PPLD’s existing cameras and access control systems. This meant operators were able to view door alarms, access events, video clips, panic alerts, and environmental sensors (including vape and smoke detection) in one single incident list in a web-based browser. Instead of refreshing screens and guessing at what they might have missed, operators could see every active incident and incoming alarm the moment it surfaced and respond from the same place. Killing redundant alerts Alarm deduplication cut volume on day one, killing redundant alerts before they hit an operator. Noisy doors became easy to spot and fix. When specific issues surfaced, like a flood of DHO alarms, for instance, the system helped the SOC adjust alarm timing. That adaptability, tuned to actual door and user behavior without loosening security, kept the program compliant and cut the alarm load the SOC had to manage. Operators, along with field officers, made use of the mobile app, too. The team’s ability to acknowledge, investigate, and resolve incidents from anywhere in the building was a huge benefit. Security triage stopped being tied to a desk. Response became coordinated, in real time, across every location. Standard operating procedure But the shift went beyond operations. For the first time, PPLD’s leadership had detailed data on its security program: response times, alarm volumes, and incident trends. Michael could walk into a leadership meeting with numbers that proved the program’s value. He could spot which operators were hitting targets, which branches were generating outliers, and where more operator or officer training was needed. “We aren’t just operators staring at cameras anymore. HiveWatch lets us cut through the noise, focus on what matters, and actually expand what our team can do,” said Joe Vickous, SOC Supervisor, Pikes Peak Library District. Single active queue Every shift, PPLD’s operators manage a single active queue. Door forced at a branch. Vape detection in a restroom. Held-open back door after a cleaning crew shift change. An intercom call from a side entrance. All surfaced in one view without screen-refreshing or system-hopping. When an access control alert comes in, the response is immediate. The operator sees the alert with the connected camera feed in the same view, follows the built-in standard operating procedure (SOP), and, if warranted, dispatches the field officer with full context from within the platform. Audible alerts mean the SOC can run HiveWatch in a single tab without sacrificing a full monitor, freeing operators to handle more important work like footage pulls, door testing, and badge creation between incidents. Badge creation between incidents “HiveWatch makes the operators more flexible and makes them more versatile, as well,” Michael said. “They’re able to focus on something else and it will prompt them and say, hey, pay attention. We have to interact. They can check it out, dispatch somebody, and then go back to what they’re doing.” And when something crosses the public-private line, such as a patron drifting into a staff-only corridor, the platform surfaces it in real time. The operator sees it, the field officer responds, and the boundary holds. Public stays public. Private stays private. No guessing. No discovery after the fact. Incidents are caught early, handled according to protocol, and documented with a full record attached. “The biggest benefit for us is having the tool that sorts through the noise and focuses the operators on the notifications that are actually coming in that need attention,” Branter said. Standard operating procedure The results: Median time to acknowledge incidents of 21 seconds and median time to resolve of 28 seconds using HiveWatch. Scaled the SOC from 2 operators to 6 plus a manager, with the platform absorbing the workload increase. Extended the SOC beyond the control room with mobile triage and response for field officers and operators. Equipped leadership with real-time data on acknowledgement and response times, and alarm trends, turning a reactive program into a proactive, measurable one. Positioned the program to absorb 800 additional cameras and access points without proportional headcount growth.

Hochiki Europe, working with Italian installer ELE.CO SRL, has completed the installation of a combined fire detection and emergency lighting system at a KOKO Emporio store in the Turin area. KOKO Emporio is a well-established value and family retailer with several stores across Torino and Moncalieri, offering home, clothing and lifestyle products to shoppers across the region. The store in question spans 800 square metres across a ground floor and basement. As with any busy retail floor, aisles and stock displays can make it harder for customers to find the nearest exit in an emergency, particularly those unfamiliar with the layout. The store needed a fire detection system that met current compliance requirements alongside emergency lighting capable of guiding staff and customers to safety during a fire or power failure. ESP intelligent fire detection ELE.CO SRL specified Hochiki's FIREscape+, which combines ESP intelligent fire detection with emergency lighting on a single four loop control panel. ALN-EN smoke sensors with adjustable sensitivity were installed throughout to reduce false alarms, and EN 54-23 compliant visual alarm devices were added to make alarm activation clearly visible to every occupant, working alongside ESP sounders to give full audible coverage. The basement presented a particular challenge. It houses separate retail and warehouse areas with long aisles, stock boxes and stairways, so the emergency lighting needed to keep the space illuminated and evacuation routes clear during a power outage. High power luminaries connected to the FIREscape+ panel now cover this area, guiding staff and customers to the nearest exit if the power fails or an evacuation is needed. Multi-site retail environment Ervin Peza, owner of ELE.CO SRL, said: "Hochiki's FIREscape+ system reduced installation costs significantly compared to installing two separate systems, making it the right choice for this application. Combining fire and emergency lighting on a single panel and loop reduces cabling, which simplifies both installation and maintenance." He added: "KOKO's new integrated fire and emergency lighting system means the store can run smoothly, day to day, with customers confident that any fire will be picked up quickly and that they can find their way to safety. Hochiki's addressable technology means the system can pinpoint the exact location of an incident and guide people along the safest route out, even if the power goes down." The installation shows how a combined, addressable fire and emergency lighting system can meet the practical demands of a busy, multi-site retail environment, giving store owners one system to manage rather than two.

Carrefour Brazil is one of the largest retail groups in Brazil and Latin America, operating more than 1,000 stores and serving a high volume of customers every day. Its Pamplona store in São Paulo, for example, located in one of the city’s busiest areas, greatly reflects the operational complexity faced by modern retailers: maintaining safety, reducing losses, improving efficiency, and delivering a better shopping experience at scale. Limited real-time visibility Challenges - Carrefour needed to address several key pain points. Manual processes and disconnected systems created risks of inaccurate alarms and inconsistent service. High customer traffic increased exposure to theft, fraud, and checkout losses, while traditional investigation methods made incident tracing slow and inefficient. At the same time, limited real-time visibility into customer flow, queues, inventory, and in-store behavior made it difficult to optimize staffing, replenishment, store layout, and checkout efficiency. Unified retail ecosystem Solutions - To meet these needs, Dahua provided an integrated smart retail solution combining video surveillance, AI analytics, alarm linkage, customer flow analysis, and digital in-store technologies. The solution was built around Dahua’s DSS PRO platform, Retail Loss Prevention IVD/IVSS, Retail NVR, AcuPick intelligent search, people-counting cameras, Electronic Article Surveillance (EAS) integration, alarm host, access control, electronic shelf labels, and digital signage. These systems work together to connect security, operations, and customer engagement within a unified retail ecosystem. Integration of video surveillance For loss prevention, Dahua’s video analytics can detect suspicious behaviors such as item concealment and issue real-time alerts to security staff. Integration with EAS and intrusion alarms provides immediate contextual information for each alarm, helping teams respond faster and more accurately. High-value merchandise is further protected with anti-theft tags, while restricted storage areas are secured through access control. In the event of an incident, AcuPick and intelligent video analysis can be used to track the movement paths of customers or employees, significantly reducing investigation time. The solution is also projected to checkout and self-checkout security. Cart analysis can help to identify unscanned items, while intelligent barriers at self-checkout stations prevent customers from exiting before completing payment. Looking ahead, the integration of video surveillance with transaction data can further support automated sales auditing, discrepancy detection, and faster resolution of operational variances. Data-driven store operations Beyond security, Dahua’s smart retail technologies support data-driven store operations. People-counting cameras, customer flow analysis, queue monitoring, and heatmap analysis provide Carrefour with insights into occupancy, peak hours, movement patterns, high-traffic areas, and dwell time. This can help to optimize staff scheduling, product placement, promotional planning, and checkout lane management. Shelf replenishment monitoring enable detection of low stock or abnormal product removal and triggers real-time alerts, helping prevent lost sales and improving product availability. Dahua also enhanced the in-store customer experience through electronic shelf labels and digital signage. Electronic shelf labels enable automatic price updates, reduce manual errors, and support promotional communication. Digital signage and point-of-sale displays provide product information, strengthen brand presence, and create a more interactive shopping environment. Interactive shopping environment Results - As a result, Carrefour Brazil now operates in a safer, more efficient, and more connected retail environment. The project improves operational visibility, strengthens loss prevention, accelerates incident analysis, supports better staffing and merchandising decisions, and enhances the customer journey from entrance to checkout. Through this collaboration, Dahua helped Carrefour transform traditional store management into an intelligent retail model powered by integrated security, analytics, and digital engagement.

Comelit-PAC has partnered with Optic Fire & Security Solutions to deliver an upgrade to the fire alarm system at Rampworx Skatepark, the UK’s largest indoor extreme sports center. Established in 1997, Rampworx is one of the UK’s longest-running skateparks and a major community facility in Merseyside. As a registered charity, it supports more than 1,000 young people every week and reinvests all income back into maintaining and developing its skatepark, programmes and retail operations. Multiple interconnected areas With a large and constantly active indoor environment, Rampworx required a fire alarm system capable of delivering consistent coverage across multiple interconnected areas. These included skate zones, spectator spaces, retail units and staff facilities while allowing daily activity to continue without disruption. Says Rachael Robinson at Rampworx Skatepark: “As a busy charity facility with thousands of weekly visitors, it was important for us to work with a company we could trust to guide us through the entire upgrade process for our fire alarm. Optic Fire Safety & Security Solutions understood the requirements and recommended a Comelit-PAC solution. The new system provides confidence and peace of mind, knowing it has been designed around us and the way we operate.” Live operational environment Optic Fire Safety & Security Solutions worked closely with Rampworx to design and install a tailored system using Comelit-PAC fire safety systems, ensuring the solution reflected both the operational demands and the unique layout of the building site. The installation was delivered within a live operational environment, requiring careful planning and coordination to ensure the skatepark remained open throughout much of the works. Optic Fire Safety & Security Solutions phased the installation to minimize disruption to visitors, staff and ongoing activities. Sase Boardman, Director at Optic Fire Safety & Security Solutions added: “Every area of Rampworx presented different considerations from a fire safety perspective. By working closely with the team and technical specialists at Comelit-PAC, we were able to carefully deliver a fire safety system known for its adaptability, reliability, and scalability to provide consistent protection across a complex, multi-use environment.” Fire detection coverage The completed system provides enhanced fire detection coverage across the entire facility, improving response capability and strengthening life safety provision for users, staff and volunteers. Mandy Bowden, Fire Systems Business Manager UK & ROI: “This project was delivered through close collaboration with Optic Fire Safety & Security Solutions and Responsible Persons on site, taking time to understand the specific requirements of the Rampworx environment. By combining this insight, we were able to specify a bespoke fire safety system, enabling a unified detection and control approach across areas with very different occupancy and risk profiles.”

Artificial intelligence (AI) transforms physical security from a passive, reactive function into an autonomous, proactive one. Rather than just alerting human guards after an event, new systems driven by intelligent agents analyze, decide, and act in real time—handling routine deterrence, investigating anomalies, and reducing alarm fatigue. We asked our Expert Panel Roundtable: What is agentive (or agentic) AI and how is it changing physical security?

There is safety in numbers, or so the expression goes. Generally speaking, several employees working together tend to be safer than a single employee working alone. Even so, some environments require that workers complete their jobs alone, thus presenting a unique combination of security vulnerabilities. The U.S. Occupational Safety and Health Administration (OSHA) defines a lone worker as “an employee working alone, such as in a confined space or isolated location.” We asked this week’s Expert Panel Roundtable: How can security technologies help to protect "lone workers?" 

As physical security technologies become more complex, it is incumbent on the dealer/integrator to have the skills and expertise needed to ensure that a system operates smoothly. The value of integrators increasingly rests on the skill sets they bring to bear when installing a system. If the skills are missing, there is a problem. We asked this week’s Expert Panel Roundtable: What missing skills among security integrators can cause problems for customers?