What Is an Intrusion Detection System? Alarm Panels, Sensor Types, Door-Prop and Exit Alarms Explained

An intrusion system (more formally, an intrusion detection system or burglar alarm) is the set of sensors, a control panel, keypads and a communicator that together detect an unauthorized entry into a building and report it to someone who can respond. It is also the discipline buyers most often misunderstand, because the hardware is cheap and simple, while the design decisions (what to zone, what to delay, what to verify, how to communicate) are what decide whether the system catches a break-in or just generates false alarm fines.

This guide covers the panel and keypad, the main sensor types, the family of commercial door alarms (door-prop, exit-device and chime alarms) that get confused with intrusion detection, zones and partitions, and the wired-versus-wireless decision. Pricing lives in our commercial alarm system cost guide; this page is about understanding what you are buying.

How an intrusion detection system works

Every intrusion alarm, from a corner store to a distribution center, follows the same signal chain:

1. A sensor detects a condition. A door opens, a motion detector sees a heat signature, a glass-break sensor hears the frequency of breaking glass.
2. The control panel decides what the event means. It checks whether the system is armed, which zone the sensor belongs to, whether an entry delay applies, and whether the event is an alarm, a trouble condition or a supervisory signal.
3. The panel annunciates and transmits. Local sirens and strobes sound (or stay silent for a holdup signal), and a communicator sends the event over cellular, IP or both to a central monitoring station.
4. The monitoring station verifies and dispatches. Operators call the premises and the contact list, check video if it is available, and notify police when verification fails or a threat is confirmed.
5. The system is disarmed and logged. A user code or credential disarms the panel, and the event history records who did it and when.

The weak point is rarely step one. It is steps two through four, where poor zoning, sloppy delay programming and an internet-only communicator turn a perfectly good sensor into either a missed alarm or a false dispatch. Our commercial alarm systems service page describes intrusion detection as a zoning problem, not a gadget problem, for exactly that reason.

What is an alarm panel?

An alarm panel (control panel) is the computer at the center of an intrusion system. It is usually a circuit board in a locked metal enclosure, mounted in a closet or electrical room, with a transformer and a backup battery. Every sensor reports to it, every keypad talks to it, and it holds the programming that defines zones, delays, user codes, schedules and what to send to the monitoring station. The keypad on the wall by the door is not the panel; it is just a user interface, and a building can have several keypads on one panel.

A commercial alarm panel differs from the residential version in a few ways that matter at quote time:

• Zone capacity. Commercial panels expand through wired expander modules and wireless receivers, so a warehouse with 14 dock doors and 20 interior motions can give every device its own identity.
• Partitions. The panel can be divided into independently armed areas (more on this below), which is essential for a building with a 24-hour operation, multiple tenants or a shared loading dock.
• User management and audit trail. Commercial panels support many individual user codes with schedules and per-partition authority, and log every arm, disarm, bypass and alarm against a named user. That log is what you hand an insurer, an auditor or the police after an incident.
• Open/close reporting. The panel can report to the central station every time the building is armed or disarmed, and the station can flag a late-to-close or an early open outside schedule.
• Listings. Commercial-grade panels are listed to UL standards for burglar alarm equipment, and some insurers or regulators require the whole installation to carry a UL certificate under UL's commercial premises security certification, which covers the installed system rather than just the box.
• False-alarm features. Panels built to the ANSI/SIA CP-01 control panel standard (a Security Industry Association standard written specifically to reduce false dispatches) support exit-delay restarts, cancel/abort windows, cross-zoning and swinger shutdown (a zone that trips repeatedly stops reporting until reset) so that one faulty sensor cannot generate a night's worth of dispatches.

A practical note on ownership: many national providers install panels that are locked to their monitoring service or flashed with proprietary firmware. If you later want to switch monitoring companies, the panel has to be replaced or reprogrammed. We treat this as an equipment-ownership question when comparing alarm quotes, because a proprietary panel can quietly become a switching cost equal to what it took to install one. Our cost guide puts a commercial panel, installed and programmed, at roughly $300 to $1,500, and a keypad at $100 to $400.

What the keypad does

The keypad arms and disarms the system, shows zone status, lets authorized users bypass a zone (a stuck dock door at closing time, for example) and displays trouble conditions such as low battery, AC loss or a lost communicator. Commercial keypads often sit beside a card reader so staff can disarm with a credential rather than a shared code, and the better integrations arm the partition automatically when the last person badges out. Larger facilities supplement keypads with a mobile app and a web portal for remote arming and event review.

Sensor types in a commercial intrusion alarm system

Sensors come in two broad families: perimeter devices that detect an attempt to get in, and interior devices that detect someone who already has. A well-designed system layers both, so that a burglar who defeats the perimeter still trips something inside. The table summarizes the common devices; detail follows.

Contact, motion, glass-break and panel ranges are from our commercial alarm system cost guide and include labor; wireless versions typically cost more in hardware and need battery service.

Door and window contacts

A contact is a magnet on the door and a reed switch on the frame. When the door opens, the magnet moves away and the circuit changes state. It is the simplest sensor in the system, and it should be on every perimeter opening without exception, including roof hatches and the door to the dumpster enclosure nobody thinks about. Commercial variants include armored overhead-door contacts that mount on the floor track of a roll-up door and tolerate the gap and vibration a residential contact cannot, and recessed contacts hidden in the frame for aesthetics or tamper resistance. Contacts are also what tell the panel a door is open when it should be closed, which is the foundation of the door-prop alarms discussed below.

Motion detectors

A commercial motion sensor alarm is typically either a passive infrared (PIR) detector, which sees a heat source moving across its field of view, or a dual-technology detector that pairs PIR with microwave and requires both to trip before it alarms. Dual-tech costs more and is the right choice anywhere a plain PIR will be exposed to heaters, sunlight through glass, warehouse air movement or animals. Specialty variants include 360-degree ceiling-mount units for open floors, long-range curtain detectors that cover a wall of windows or a row of dock doors, and pet- or rodent-immune lenses. Motion detectors belong on interior zones that are only armed when the building is empty; putting one in a space where a cleaning crew or a night shift works guarantees false alarms.

Glass-break detectors

Acoustic glass-break detectors listen for the combination of low-frequency thump and high-frequency shatter that breaking glass produces, within the manufacturer's rated range. One unit can often cover a storefront or a conference room wall. They protect against the smash-and-grab that contacts miss (the door never opens) and that motion detectors only catch once the intruder is inside. They are armed on the perimeter zone, so they work in stay mode while staff are present after hours.

Shock and vibration sensors

Shock sensors detect the impact of an attack on a surface before the surface fails. They are standard on safes, ATMs and drug storage, and useful on steel roll-up doors, on walls shared with a vacant neighboring unit, and on roofs where thieves cut through rather than pick a lock. Our warehouse and industrial guide specifies contacts plus shock sensors on every dock and man door for this reason. DEA rules, for example, require non-practitioner storage of controlled substances to have an alarm transmitted to an approved response destination (practitioners are treated differently), as summarized in our healthcare facilities guide.

Panic, holdup and duress devices

These are technically part of the intrusion alarm system but behave differently: they are on a 24-hour zone, so they report whether the system is armed or not, and they are silent, so the station follows its holdup protocol rather than a normal call to the premises; confirm that protocol with your bidder. A duress code is a variant programmed into the keypad: enter it and the panel disarms normally but sends a silent holdup signal. Several state cannabis regulators require panic or holdup alarms and after-hours intrusion alarms as license conditions; our cannabis dispensary guide lists the state-by-state requirements we have compiled.

Commercial door alarms: door-prop, exit-device and chime alarms

A buyer asking for a commercial door alarm typically has one of three problems, and none of them is a break-in at 2 a.m. They are trying to stop employees from propping the back door, stop people from using a fire exit as a shortcut, or know when a customer walks into an unattended showroom. Each has a different device, and most of them live in the access control or standalone-hardware budget rather than the intrusion alarm.

Door-prop (door-held-open) alarms

A commercial door open alarm works from a door position switch, the same magnetic contact used for intrusion, plus a timer. If the door stays open longer than the programmed interval, the system raises a held-open event: a local sounder at the door, a notification to a manager's phone, an entry in the access control log, or all three. Pair it with a request-to-exit sensor and the system can also distinguish a forced door (opened with no credential and no exit request) from a held door (opened legitimately and not closed). Our access control cost guide prices request-to-exit and door position hardware at $10 to $500 per door and explains that without them the system cannot tell the two conditions apart.

The held-open alarm is the single most effective control for the propped back door, because it makes the behavior immediately annoying to the person doing it. For buildings where every exterior door needs it, such as schools, our schools guide recommends a door position switch and a forced-door or held-open alarm on every exterior opening. Multifamily operators use the same logic on common-area and back-of-house doors, where the classic failure is a door propped with a brick.

Exit-device (alarmed panic bar) alarms

Fire exits must open freely from inside; code does not let you lock them. What you can do is make using them loud. An alarmed exit device is a panic bar with a built-in battery-powered sounder that sounds when the bar is pushed and resets with a key. It is a standalone product that requires no wiring and no panel, which suits warehouse and retail emergency exits. The limitation is that it tells you nothing after the fact unless someone hears it; for a logged event, the door also needs a position switch reporting to the alarm or access control system.

Where the risk justifies it, a delayed egress lock goes further. Under the International Building Code, Chapter 10 (Section 1010.2.13 in the 2021 edition), applying force to the exit hardware for no more than 3 seconds starts an irreversible process that releases the lock in not more than 15 seconds (30 seconds where approved), an audible signal sounds in the vicinity of the door, a sign above the hardware reads "PUSH UNTIL ALARM SOUNDS. DOOR CAN BE OPENED IN 15 [30] SECONDS," the egress side has emergency lighting, and the delay deactivates immediately on sprinkler or fire detection activation or on loss of power. The same section limits delayed egress to listed occupancy groups (business, mercantile, storage, factory and others, plus small classrooms) in buildings protected throughout by sprinklers or an approved detection system, so it is a design conversation with your authority having jurisdiction, not a hardware purchase. NFPA 101 has parallel provisions. A common retail use is the fire exit beside the stockroom.

Door chimes and entry annunciators

A business door alarm chime is the opposite problem: you want to know someone came in, not stop them. The simplest version is a self-contained magnetic contact with a chime, or a photoelectric beam across the entry that rings when broken. The better version uses the same door contact that is already wired to the intrusion panel; every commercial panel can be programmed to chime at the keypad when a specific zone opens while disarmed, and most access control systems can push a notification. Retailers with one staff member on the floor and auto dealerships with a large showroom use this to cover the entrance while someone is in the back. Our retail and loss prevention guide covers how door detectors and entry buzzers fit into a store's broader loss-prevention design.

Which system should own the door?

The practical rule: if the door has a card reader, the access control system should own the position switch and the held-open and forced-door logic, and should hand a forced-door event to the intrusion panel and the camera system. If the door has no reader, the intrusion panel owns the contact and can still generate a chime or a held-open trouble while disarmed. Either way, insist that the same door contact is not installed twice by two contractors who did not talk to each other. Our scope captures alarm and access control in one building profile so bidders see both.

Zones and partitions

A zone is a sensor, or a small group of sensors, that the panel treats as one input. The more zones, the more precisely the panel and the monitoring station know what tripped. "Zone 14, northeast dock door contact" lets a central station operator tell the responding officer which door to check; "Zone 2, perimeter" does not. Wired systems historically grouped several contacts on one zone to save cable; modern panels and wireless sensors make a zone per device the default, and that is what you should ask for on every exterior opening.

Zone types define behavior:

• Entry/exit zones start an entry delay so a user can reach the keypad. Only the doors staff actually enter through should be this type; every other perimeter door should be instant.
• Perimeter zones alarm instantly whenever armed, in stay or away mode.
• Interior (follower) zones are motion detectors that are bypassed in stay mode and armed in away mode, and that tolerate motion during an entry delay so a user walking to the keypad does not alarm.
• 24-hour zones are always live: holdup buttons, tamper switches, panel enclosure, environmental sensors, and sometimes fire exits.
• Cross-zoned areas require two zones to trip within a window before an alarm is sent. It is a CP-01 tool for high-false-alarm environments; in our view it belongs on interior motion zones, not on perimeter contacts.

A partition (some manufacturers say "area") is a group of zones that arms and disarms independently, with its own users, schedule and account number at the monitoring station. A medical office building with four tenants and a shared lobby needs at least five partitions. A distribution center with a 24-hour dispatch office and a warehouse that closes at 10 p.m. needs two. A dispensary with a sales floor and a vault needs the vault on its own partition so it stays armed during business hours. Our office buildings guide covers tenant partitioning in more detail. If a proposal shows a single-partition panel for a multi-tenant building, the contractor has not thought about who arms what.

Wired vs wireless business alarm systems

Most commercial buildings are best served by a mix: a hardwired panel with a wireless receiver, hardwired devices where walls are open or cable runs are short, and wireless sensors in finished buildings and retrofits. Asking for an all-wired or all-wireless business security system usually produces a worse bid than describing the building and letting the contractor choose per device. The trade-offs:

A reasonable default for a wireless business alarm system is wired contacts on the main entry doors and dock doors (where the cable run is short and the door gets abused), wireless for interior motions and remote windows, and a hardwired keypad. For a temporary need, such as a construction site after the shell is enclosed, a fully wireless panel with entry-point contacts and motion in material storage is normal, as our construction site guide describes. Our alarm cost guide breaks down the wired-versus-wireless economics in more depth.

The communication path and monitoring

Wireless sensors or not, the panel still needs a path out of the building. The communicator is how the panel reaches the central station, and it is the part of the system most likely to be obsolete in a building that already has an alarm. Copper phone lines are being retired across the country; the FCC's technology transitions rules have steadily made it easier for carriers to discontinue legacy copper service, and the 3G cellular networks that an earlier generation of alarm radios depended on were shut down in 2022. Any panel still reporting over a phone line or an old radio should be treated as unmonitored until proven otherwise.

The current standard is a dual-path communicator: LTE cellular as the primary path with the building's internet as the second, or the reverse, with the panel and the station supervising both so that a lost path produces a trouble signal rather than silence. Internet-only reporting is cheaper and we do not recommend it for commercial premises, because cutting a cable in the demarc closet or unplugging a router defeats it. Our business alarm monitoring cost guide puts the cellular or dual-path premium at $5 to $20 a month over base monitoring.

On the monitoring side, two developments are worth asking a bidder about. Enhanced call verification, where the station tries to verify the alarm by voice, video or other means before requesting dispatch, should be the default on any commercial account. And the ANSI-approved TMA AVS-01 alarm validation scoring standard gives the station a way to tell the 911 center how much it actually knows: level 0 (no call for service) through level 4 (confirmed threat to life). Systems that give the station evidence (video clips, audio, multiple zones tripping in sequence) let it report a higher level. Video verification, where a camera clip accompanies the alarm, is the usual way to reach the higher levels; it is priced separately in our monitoring guide and is described on our business alarm monitoring page.

Finally, many cities require an alarm permit for a monitored commercial system and fine repeat false alarms; San Antonio, Houston and Chicago are examples covered in our guides. Our alarm cost guide gives San Antonio's schedule as an example: the first three permitted false burglar alarms are free, then $50, $75 and $100, while an unpermitted commercial false alarm runs $250. Permit fees and fine exposure belong in your operating budget alongside the monitoring fee.

What a commercial intrusion alarm costs

For intrusion detection alone (no cameras, access control or fire alarm), our cost guide's planning ranges are $1,500 to $4,000 installed for a small office or storefront under 2,500 square feet, $4,000 to $10,000 for a mid-size commercial space up to 10,000 square feet, and $10,000 to $30,000 or more for a large multi-zone facility. Monitoring runs from about $30 to $75 a month for basic intrusion to $150 to $500 for video-verified or multi-site accounts, and terms range from month-to-month for basic intrusion to 36 to 60 months for fire-reporting and multi-site accounts, usually with automatic renewal. The contract terms (cancellation notice, renewal length, rate escalation and who owns the panel, sensors and communicator at the end) move the total cost of ownership more than the device prices do.

How to scope an intrusion alarm quote

Contractors price what you describe, and most buyers describe a device count. A better scope describes the building and the operating pattern, and lets each bidder propose devices against it. Before you request pricing, write down:

1. Every perimeter opening, including overhead doors, roof hatches and windows that open, and which ones staff use to enter.
2. Occupancy schedule: who is in the building when, including cleaners, night shifts and tenants, since this drives partitions and zone types.
3. High-value areas that need interior or shock protection: cash rooms, server rooms, pharmacy, vault, tool crib.
4. Doors with behavior problems: propped exits, fire exits used as shortcuts, unattended entrances. Decide whether these belong to access control, the alarm, or standalone hardware.
5. Regulatory drivers: insurance requirements for a UL-certificated system, cannabis licensing, DEA storage, school safety mandates.
6. Existing equipment: the make and model of any current panel, its communicator, and whether you own it.
7. Communication and monitoring expectations: dual-path, enhanced call verification, open/close reporting, video verification.

Then ask every bidder for the same line items: device models and counts by zone, panel model and whether it is proprietary, communicator type, monthly monitoring with the term and renewal language, and equipment ownership at the end of the contract. Our guide to comparing commercial security proposals line by line has a full checklist. When you request alarm quotes through us, we capture this scope once, send it to a small number of contractors whose state alarm licenses and insurance we have verified and who have experience with your building type, and you receive comparable bids at no cost. Contractors pay us for the introduction; we do not install, monitor or sell equipment, so we have no stake in which panel or sensor you end up with.

Frequently asked questions

What is the difference between an intrusion alarm and a fire alarm?

They are separate systems under separate rules. An intrusion alarm detects unauthorized entry and is governed by insurer requirements, local alarm ordinances and UL burglar alarm standards. A commercial fire alarm detects smoke, heat and sprinkler flow, is required by building and fire codes, and its signaling and inspection are governed by NFPA 72. Some panels can do both, but the fire side must still meet fire code. See our commercial fire alarm page for that discipline.

Is a wireless business alarm system reliable enough for a commercial building?

Yes, with current encrypted wireless sensors and a panel that supervises them, for most offices, retail and light commercial. The exceptions are large metal or concrete buildings, cold storage and facilities with heavy steel racking, where signal attenuation makes hardwired or repeater-assisted designs more dependable. The communicator should be cellular or dual-path regardless of whether the sensors are wireless.

How many zones does a commercial intrusion alarm system need?

One per perimeter opening and one per interior detector is the right target, so a 20-door, 12-motion building needs at least 32 zones plus 24-hour zones for panic buttons, tampers and environmental sensors. Grouping several doors on one zone saves little money with modern panels and costs you the ability to tell the police which door was opened.

Does a door-prop alarm need to connect to the alarm panel?

No. A held-open alarm can be a standalone timer-and-sounder on the door, a function of the access control system, or a zone on the intrusion panel programmed to chime or report a trouble while disarmed. The access control system is the best home for it if the door has a reader, because it already knows whether the door was opened with a credential or forced.

Do I need an alarm permit for a monitored business system?

Many municipalities require one, and many fine false alarms on a rising scale and charge more for unpermitted systems. Check the ordinance where the building is located before the system goes live, and ask the monitoring company whether it registers permits on your behalf.