Buying Guide · Intrusion
Commercial alarm hardware guide.
A reference walkthrough for specifying a commercial intrusion system — panels, keypads, sensors, communicators, expansion modules, and the integration patterns that decide whether the install survives the first central-station verification call.
01 / Panel Selection
The panel is the contract. Get the zone count right.
The control panel is the heart of the system — every sensor, keypad, communicator, and expansion module connects back to it. Pick by zone count, user count, partition count, and head-end platform compatibility:
────────────────────── ──────────── ─────────── ───────────────────────────
Small commercial 8–32 wired 1–4 Single office, retail unit
Mid commercial 32–128 4–8 Multi-tenant, school wings
Large commercial 128–256+ 8–32 Campus, large retail
Enterprise / UL listed 256–8000+ 32+ Banks, gov, critical infra
Two stocked references span most commercial deployments:
- Mid-tier workhorse — DSC PowerSeries Neo HS2128. 8 wired zones expandable to 128, 8 partitions, broad keypad and communicator support, UL/ULC commercial-listed.
- Large commercial / institutional — Bosch B9512G. 599 zones, 32 partitions, advanced UL listings, deep integration with Bosch access and video for institutional sites.
Get zone count right at spec time. Adding zones after the panel is in service usually means an expansion module and a re-program — manageable, but the labor cost adds up. Plan for 30–50% headroom over current zone count.
02 / Keypads
The user interface is the only thing tenants see.
A perfectly specified panel with a confusing keypad gets bypassed within a month. Tenants prop doors, share user codes, and stop arming the system. Keypad selection is a UX decision masquerading as a hardware decision:
- LCD with text zone labels — required for any system with more than 8 zones. Numeric zone IDs (“Zone 14 trouble”) are useless to a tenant; “Server Room Door trouble” is actionable. Example: DSC HS2LCDPRO — backlit LCD with full alphanumeric zone labeling and integrated prox reader for credential-based arm/disarm.
- Prox reader integrated — credential-based arm/disarm eliminates the shared-code problem. Users present a card; the panel logs who armed/disarmed and when.
- Multiple partitions visible — for multi-tenant or partitioned sites, the keypad must show partition status for the user’s authorized partitions. Single-partition keypads don’t scale beyond small office.
- Keypad placement — interior keypads only. Outdoor keypads are vandal targets and freeze in winter. For exterior entry, use a credential reader at the door wired through the access control system, with arm/disarm logic in the head-end software.
03 / Sensors
Motion, glassbreak, contact — and the false-alarm tax.
Sensor selection determines false-alarm rate. False alarms are the single largest tenant complaint about commercial alarm systems and they cost money — most municipalities fine after the third false alarm in a 12-month window. Defaults that survive the first quarter:
- Dual-tech motion (PIR + microwave) — both technologies must trip before the sensor reports. Eliminates HVAC drafts, heat plumes, single-tech false trips. Example: Bosch ISC-PDL1-W18G TriTech — adds anti-mask and creep-zone detection for high-value spaces.
- Acoustic glassbreak — covers an entire room from one mount point. Pick a model with confirmed shatter + flex detection (not just acoustic) to avoid storm and HVAC false trips. Example: Bosch DS1108i.
- Wireless PIR for hard-to-wire areas — for retrofits, drop ceilings without conduit, or temporary partition walls, encrypted wireless is faster than running cable. Example: DSC PG9914 PowerG — AES-128 encrypted, frequency-hopping, multi-year battery life.
- Door / window contacts — recessed for finished retail, surface-mount for industrial. Magnetic contacts are reliable; reed switch failures are usually installation, not hardware.
- Wireless repeater for large sites — long buildings and multi-floor wireless deployments need signal extension. Example: DSC PG9920 PowerG Repeater.
04 / Communicators
Two paths. Always.
The panel reports to the central station over one or more communication paths. UL commercial listings require dual-path (LTE + IP or LTE + POTS) so the system survives a cut phone line or a downed internet circuit. Defaults:
- Dual-path LTE/IP — primary path is IP through the customer LAN, backup path is LTE on a separate cellular carrier. Example: DSC TL880LE — single device handles both paths with automatic failover, UL/ULC commercial listings.
- LTE-only for sites without reliable IP — remote sites, retrofits without LAN drop in the panel closet. Example: Honeywell LTEM-PA — LTE-M / Cat-M on AT&T, optimized for low-bandwidth alarm signaling.
- Fire / IP DACT bridge — for fire panels (and combined fire + intrusion installs) where AHJ requires a DACT (digital alarm communicator transmitter) but the site is IP-only, use an IP-to-DACT adapter. Example: Fire-Lite IPDACT-2UD.
- Carrier diversity matters — if the customer site uses Verizon for primary internet, do not put the cellular backup on Verizon. A cell tower outage takes both paths.
Communicator firmware and signal testing should happen at commissioning, not after the central station reports a path failure six months in. Send a test signal on each path and confirm receipt with the central station before the install closes.
05 / Expansion Modules
Zones, outputs, integrations.
A small commercial panel becomes a large one through expansion modules. Plan the BOM with the right expansion at install rather than re-cabling after the first complaint:
- Hardwire zone expanders — add 8, 16, or more zones to a panel that’s at its on-board limit. Example: DSC HSM2108 adds 8 hardwire zones to PowerSeries Neo.
- Output / relay expanders — for integration with HVAC, lighting, door release, or video triggers. Example: DSC HSM3408 — 4 programmable form-C relay outputs.
- Wireless transceiver — required to add encrypted wireless devices to a hardwire panel. PowerG-class transceivers are the modern default for commercial.
- Keypad bus extenders — for sites where keypad-to-panel distance exceeds the bus limit (typically 1500 ft on Cat5e), bus extenders re-power the keypad line.
For sizing the per-zone power, output relay current, and overall panel current budget, see the access control power supply sizing guide — the same math applies to alarm zone power.
06 / Integration
Alarm, access, video — one event log.
For institutional and large commercial deployments, the alarm panel rarely lives alone. The value is in the unified event log — alarm trip triggers camera bookmark, access denial triggers alarm notification, after-hours access trips no alarm because the head-end knows the user is authorized:
- Alarm + access integration — credential-based arm/disarm; access events suppress alarm zones during authorized open hours. Requires panel + access head-end on a supported integration (Bosch B9512G + Bosch AMC, DSC Neo + select third-party).
- Alarm + video integration — alarm zone trip pushes a video bookmark to the VMS. Operator gets a 10-second pre/post clip alongside the alarm event. Reduces verification time and false-alarm penalty.
- Central station verification — modern central stations verify alarms with live or recorded video before dispatching. UL-compliant verification reduces false-dispatch fines and improves response time on real events.
- Common head-end constraint — full integration usually requires picking platforms that work together. Mixed-brand integration is possible but adds integration scope to the project; budget for it explicitly.
For real-world examples that walk through panel + access + camera integration, see the small commercial 8-door + 16-camera architecture and the multi-tenant commercial retrofit.
07 / NDAA & Listings
Listings that matter for commercial spec.
Commercial alarm hardware specs typically reference listings rather than features. The listings that drive purchase orders:
- UL 1610 / UL 1635 / ULC-S304 — commercial burglar alarm panel and communicator listings. Required for most insurance-linked commercial coverage in North America.
- UL 864 / ULC-S527 — fire alarm panel listings. Separate from intrusion; combined fire + burglar panels must hold both listings.
- NDAA Section 889 — for federal, healthcare, education, critical-infrastructure sites, the panel and communicator must clear NDAA. DSC, Bosch, Honeywell, and Fire-Lite all hold NDAA-acceptable status; some communicators rebadge cellular modules from blocked OEMs, so always verify per the NDAA Section 889 compliance checklist.
- AHJ acceptance — the local fire marshal and police-dispatch authority have to accept the panel and central-station path. Pre-clear non-standard installs before committing the panel choice.
08 / Commissioning Checklist
Before the system goes live.
Items that have to be confirmed before the central station hands the contract to the tenant:
- Every zone labeled in plain English on the keypad — no “Zone 14” placeholders.
- Every user code issued with a real user name in the panel log — no “USER05” shared accounts.
- Both communicator paths tested with the central station; both signals confirmed received.
- Battery backup runtime tested — disconnect AC, time how long the panel stays armed.
- Every motion / glassbreak / contact walk-tested at the zone and confirmed in the panel log.
- Exit and entry delays set to the tenant’s actual workflow, not the panel default.
- Auto-arm / auto-disarm schedules set if the tenant uses them — and tested over a full day cycle.
- Tenant-facing instructions printed and laminated at the keypad — what each alarm means, who to call.
An install that closes without these eight items will generate a tenant complaint within the first month. An install that closes WITH these items rarely calls back.
Alarm Spec Review
Spec’ing a commercial alarm install?
Send the building zone count, partition needs, central station, integration requirements, and any AHJ or insurance constraint. We come back with a panel, keypad, sensor, and communicator BOM that survives commissioning and the first central-station verification call.