After-Hours Intrusion Alerts That People Keep Switched On

The failure pattern is always the same. Alerts go on, fire constantly for a fortnight, somebody mutes the notification, and a year later nobody knows whether they still work. Getting it right is mostly restraint: alert on few things, to few people, with a clear action attached.

Start with the hours, not the cameras

For most businesses the valuable question is narrow: is there a person on site when there should not be? Applied properly, that single rule catches what matters and generates almost no noise. So define the hours first:

• Normal closed hours. Say 6pm to 6am on weekdays. Be honest about the edges — if a manager routinely finishes at 7.30pm, a window starting at 6pm buys you a nightly email.
• Closed days. Weekends, public holidays, the Christmas shutdown. A site dead for ten days in January deserves its own schedule.
• Shoulder periods. The half hour either side of opening is where legitimate activity and real problems overlap. Exclude it, or accept the odd alert about your own staff.
• Shift sites. If people work nights, alerting on any person is useless. Alert on zones instead — the dock after the last run, the office corridor, the yard.

Our own sweep works this way: it checks the cameras at an interval you set, and when a person appears outside the hours you nominate it emails the people on the list with the frame attached.

Then choose the zones

Not every camera deserves to alert. Pick the places where presence is unambiguous. Good zones tend to be:

• The yard or compound inside the fence line.
• The dock apron and roller door approach.
• Internal aisles nobody crosses after close.
• A stock cage, cash office or tool store door.

Poor zones are the ones with legitimate traffic or a view past your boundary: the street, the shared car park next door, the footpath. Those cameras can still record and appear on the timeline without emailing anyone.

Where a camera unavoidably sees beyond your property, mask the region rather than accepting alerts about passers-by. Masking matters for other reasons too, set out in our overview of CCTV rules — general information, not legal advice.

Lines and doors. Where a zone is too broad, a tripwire across an entry or a door rule is more precise. A line crossed in one direction is a sharper signal than "somebody was in this area".

Decide who gets alerted, and what they do

Two or three recipients is usually right. Ten means nobody is responsible, which is worse than one. For each, write down the action — not the intention, the action.

• Who checks the live view, on what device, and is the app installed and logged in right now?
• Who decides to call police, and on what basis?
• Who holds keys and would attend, and when?
• Who is the backup when that person is away or asleep?

The honest version of this list usually reveals one person who will actually respond. Better to know.

Safety first. Attending a site where someone may still be present is not routine. Call police rather than confront anyone, take another person if you go at all, and stay in the vehicle until you can see what you are walking into.

Escalation and cooldowns

Cooldowns stop one event becoming twenty emails. A cooldown suppresses repeat alerts for the same camera or event for a set period; a few minutes is a common starting point. Without one, a person wandering a yard for ten minutes fills an inbox and trains the recipient to ignore it. Our system applies a cooldown per event for that reason.

Escalation covers what happens when nobody responds:

1. First alert to the primary recipient, with the frame attached.
2. If nothing is acknowledged within a set period, a second recipient is notified.
3. A repeat detection in the same area is more serious than a single frame, and worth a phone call rather than another email.

Many businesses also keep a monitored alarm response. Alerts tell you what is happening; the alarm contract is what gets someone to site.

Tune it for a fortnight, then leave it alone

Expect the first two weeks to need adjustment. Sort every alert into three piles: real, nuisance, and ours.

• Nuisance means the zone, hours or threshold need work. Object detection removes most weather and animal triggers, as our comparison with motion detection explains, but reflections and odd lighting still produce occasional false positives.
• Ours — alerts about your own staff — means the schedule does not match how the business operates.
• Real alerts deserve review: did it arrive quickly, did the frame show enough, did the responder know what to do?

After a fortnight a well-tuned closed site should be quiet most weeks. If it is not, keep tuning rather than muting.

Test it deliberately

Alerting that has never been tested is a belief, not a system. A reasonable routine:

• At handover, walk each zone after hours and confirm every recipient gets the email, on their phone, with a usable frame.
• Monthly, have someone walk one zone outside hours. Five minutes, and it catches the usual failures: a full mailbox, a changed address, an app signed out, a camera knocked out of alignment, a lens full of cobwebs.
• Quarterly, check recording is continuous across the retention window, drives are healthy and the clock is right. A wrong timestamp undermines footage when it matters.
• After any change to staff, hours, internet or network gear, re-test. Changing the internet service is a common way for alerting to quietly stop.

Alerts themselves use very little of your connection — a frame on an email, not a video feed — as the network guide explains.

When an alert arrives

Write a sequence short enough to follow at 2am:

1. Open the frame. Is it a person, and where exactly?
2. Open the live view and check the other cameras. Anyone still there, how many, any vehicles?
3. Decide. Police, attend, or note and review in the morning. Record the decision.
4. Do not confront. If someone is on site, that is a call to police.
5. Afterwards, export the footage before it overwrites and note the time, cameras and what was taken for insurance.
6. Review the alert. If it was late or the frame unusable, fix the cause.

None of this prevents an intrusion. It shortens the gap between something happening and somebody knowing, and leaves you footage worth something afterwards. People still make the decisions.

To have this configured for your own hours, zones and recipients, ask for a quote — we run the same setup on our own warehouse cameras. The camera count tool helps work out which positions can support alerting, and more is on our FAQ page.