Security systems audit
We walk the property and review the security devices, then document network exposure, account access and equipment someone can reach. You receive one report with supporting evidence, recommendations and unresolved questions for your vendor. You or your vendor carry out any changes.
See the findings
The FTC said its complaint alleged at least two Verkada security breaches between December 2020 and March 2021.
Source: Federal Trade Commission, August 30, 2024.
This is one vendor's history, not a measure of your property's risk.
Sample report. Fictional property.
Cameras share the office network
Source: 3P Security Group sample survey report, finding F8, issued September 27, 2026. Checked October 20, 2026.
Where security devices connect
Where security devices connect
A camera can cover the right door and still share the office network. A recorder can be out of sight on a network diagram and within reach of someone in the hallway.
On a flat network, security devices share a path with general traffic. With an isolated segment, we review the boundary and traffic rules between them. We document the arrangement we find and recommend changes for your vendor to review.
How it runs
The property walk and device review happen in the same visit and appear in the same report.
What the visit covers
- Agree the scope. We write down the equipment to review, the records needed and any permitted, non-invasive reachability checks before work starts. We test only what you authorize. We do not attempt a login or exploit a vulnerability.
- Walk the equipment. We document equipment locations, cabinet locks and physical reach. We follow the route to cameras and access control panels with the site representative.
- Review the network. We use network records and settings your administrator demonstrates to review isolation from general traffic. We review public internet reachability using only the checks agreed in the scope.
- Review access and firmware. You or your vendor supply records or demonstrate settings while retaining control. We review default and shared credentials, administrative access, account ownership and shared accounts. We compare camera, recorder and supporting switch firmware with manufacturer releases. We check whether an audit log exists and whether anyone reviews it. We do not collect passwords.
- Write the findings. Each finding states what we observed, its supporting evidence and the recommended next step. Anything the available records cannot establish is marked unverified. We review the report with you and the vendor responsible for changes.
What you receive
- A findings register covering network isolation, internet exposure, credentials, account ownership, firmware and audit logs, with priorities and supporting evidence.
- A record of equipment locations and physical exposure, with photographs where permitted.
- A connection diagram with unverified connections marked.
- Written recommendations and vendor questions naming who must confirm each unresolved item.
This is an advisory review. It excludes penetration testing, device management and remediation. We do not log into devices, take administrative control, reconfigure, patch or harden equipment. Operational security services remain with your providers.
Your current record-review cost
Enter your annual hours reconciling security system records, internal hourly time cost and separate annual vendor record-review charges.
Annual record-review cost = annual hours x hourly time cost + separate vendor charges.
This service starts at $1,500 per property. The scope and fee are agreed in conversation before work starts.