Updated October 2026: a plain definition of a perimeter intrusion detection system and its five sensor families (including the 2026 LiDAR sensors), how the UK NPSA tests and grades PIDS, Seattle’s evidence-before-dispatch rule, IEC 62676-4:2025, the AI Act’s new December 2027 date for biometric systems, and an FAQ.
This is engineering guidance, not legal advice. Confirm specifics with qualified counsel.
What is a perimeter intrusion detection system (PIDS)?
A perimeter intrusion detection system (PIDS) is the set of sensors, analytics and alarm handling that detects someone approaching, crossing or attacking a site’s boundary and raises an alarm early enough for a response to arrive. UK and government documents call it a perimeter intruder detection system, and “perimeter detection” is the everyday short form. A PIDS is judged on two numbers together — how reliably it catches a real intrusion (probability of detection) and how rarely it raises nuisance alarms — never on a single accuracy figure.
Perimeter detection sensors fall into five families, which are also the categories the UK’s National Protective Security Authority uses to test them: barrier-mounted sensors on the fence itself (fibre-optic, coaxial or accelerometer cable that feels climbing and cutting); ground-based buried cable that detects someone crossing a line in the soil; free-standing microwave links and active-infrared beam columns that form an invisible wall across a sterile zone; wide-area sensors — radar and, increasingly, solid-state LiDAR — that track targets across open ground; and video, meaning visual and thermal cameras running AI classification, which also give the operator a picture to verify. The rest of this article is about combining them so the alarm comes early, is confirmed, and is trusted.
Why this matters
If you secure a site, build a video management platform, or integrate cameras for industrial, logistics, utility, or campus clients, perimeter protection is the request with the highest stakes and the highest failure rate. The failure is almost never "the camera didn't see anything" — it is the opposite: the system saw everything, alarmed on all of it, and within a month the guards had muted it, so the one real intrusion at 3 a.m. scrolled past unwatched. This article gives you the vendor-neutral reference design for perimeter and intrusion detection — the detect-delay-respond logic the whole thing rests on, the two accuracy numbers that decide whether it works, why deep-learning classification changed the game, how the sensor layers fit together, and the false-alarm tuning that turns a noisy install into a system people trust — so you can scope a build, read a vendor claim critically, and avoid the mistakes that quietly make a six-figure fence line useless.
The job is to buy time: detect, delay, respond
Start with the single idea that organizes everything else. A perimeter system does not stop an intruder. A fence, a wall, and a locked gate slow them down; cameras and sensors only notice them. The point of noticing is to start the clock on a response — a guard, a remote operator, or the police — while there is still time to intervene. Security engineers call this detect, delay, respond, and it is the framework behind every serious perimeter design, formalized decades ago in the physical-protection-system work at Sandia National Laboratories.
Here is the logic in one line. An intrusion is interrupted only if the time left on the delay (how long the barriers slow the intruder down after the moment of detection) is longer than the time the response force needs to arrive. Detection that comes too late — after the intruder is already past the barriers — buys no time at all, no matter how accurate it is. This is why early detection at the outer edge is worth more than perfect detection at the inner wall: the earlier you catch the approach, the more delay is still in front of the intruder when the clock starts.
Figure 1. A perimeter system buys time, it does not stop anyone. Detection only helps if it happens early enough that the response arrives before the intruder defeats the remaining barriers. Earlier detection at the outer layer is worth more than later detection at the wall.
That reframes what you are buying. You are not buying "a camera that sees the fence." You are buying the earliest reliable, actionable alarm you can afford — early enough to leave delay in front of the intruder, reliable enough to trust, and connected to a response that can actually arrive. Hold that test in mind for the rest of this article; every design choice below is in service of it.
The two numbers that decide everything: detection vs false alarms
Every perimeter sensor lives on a tradeoff between two metrics, and you cannot maximize both at once.
The first is the probability of detection (often written Pd) — of the intrusions that really happen, what fraction does the system catch? The second is the nuisance-alarm rate (NAR), sometimes lumped together with false-alarm rate — how often does the system raise an alarm when nothing of concern is there? A nuisance alarm is technically a real detection of a harmless cause (a fox, a windblown bag, a swaying branch); a false alarm is a sensor error (a glitch, a reflection). For the buyer the effect is identical: the operator is interrupted for nothing.
Turn a sensor's sensitivity up and you catch more real intrusions — and more rabbits, shadows, and raindrops. Turn it down and the nuisance alarms fall — along with your odds of catching a careful intruder crawling along the base of the fence. The entire engineering craft of perimeter detection is finding the setting, per zone and per condition, where detection stays high while nuisance alarms drop to a level operators will tolerate.
What level will they tolerate? Less than most people guess. A high-security site might engineer for a probability of detection in the high-90s percent under defined conditions, but the binding constraint is almost always the nuisance side: a widely used operational target is fewer than one nuisance alarm per sensor zone per day, or roughly one per day per kilometre of well-designed fence line. Cross that line and a human truth takes over.
Common mistake: treating false alarms as a tuning detail instead of the whole game. A perimeter system that fires twenty nuisance alarms a night does not get fixed — it gets muted. Guards stop walking out to check, the monitoring contract gets downgraded, and the system that "has 99% detection" on the datasheet now protects nothing, because nobody is listening to it. The number that kills perimeter projects is not a low detection rate; it is a high nuisance rate that destroys trust. Design for the nuisance rate first.
And never accept a single perfect accuracy figure. A vendor that advertises "99.95% false-alarm filtering" or "zero false alarms" is quoting an unaudited number from a favourable test. The real performance is a range that depends on weather, season, lighting, the length and shape of the perimeter, and how carefully the system was tuned and calibrated on your site. Ask for probability of detection and nuisance rate, both with the conditions attached; treat any number without conditions as marketing.
How perimeter intrusion detection systems are tested and graded
The most rigorous public test regime for perimeter detection is the UK National Protective Security Authority’s (NPSA, formerly CPNI) PIDS evaluation, and it measures exactly the two numbers above: a detection rate from attack trials and a false-alarm rate from months of live running. A barrier-mounted evaluation takes 8–9 months, with 250–254 days of trials against version 6.0 of NPSA’s Barrier Mounted PIDS Standard. Products that pass enter the Catalogue of Security Equipment with a CLASS 1, 2 or 3 rating, which is shared with government and critical-national-infrastructure sites rather than advertised, and the pass has to be renewed every two years (NPSA scheme page, checked October 2026). NPSA lists five schemes — barrier-mounted, ground-based, free-standing, wide-area and rapidly deployable — and currently only the barrier-mounted one is open to new submissions while the other standards are under review. In July 2025, for example, Senstar announced that its FlexZone-60 fence cable and FiberPatrol FP1150 fibre system had passed against version 6.0.
Tenders in Europe usually add the intruder-alarm grade from EN 50131-1, which runs from Grade 1 (low risk) to Grade 4 (high risk). For a buyer the practical rule is simple: ask which independent body tested the product, in which category, under which attack and weather conditions, and with what result. A vendor’s own “99% detection” is a claim; a CLASS rating or a site acceptance test with walk-tests and a logged nuisance rate is evidence.
Why old motion detection failed, and what deep learning changed
For twenty years the default perimeter analytic was video motion detection (VMD): the software watched for pixels changing between frames and alarmed when enough of them moved. It is cheap, it runs on anything, and on an outdoor perimeter it is close to useless on its own — because everything moves. Wind in the trees moves pixels. A cloud crossing the sun moves pixels across the whole scene. Headlights, rain, snow, a flag, a plastic bag, a cat, a spider building a web across the lens at dusk — all of it trips pixel-change motion detection. This is the source of the nuisance-alarm flood that gave perimeter analytics a bad name.
The shift that changed perimeter security is object classification. A modern analytic built on a deep-learning model does not ask "did pixels change?" It asks, in order: is there an object here, and what is it — a person, a vehicle, an animal, or environmental noise? Only after it has classified the object does it check whether that object broke a rule. A swaying branch is never a person, so it never alarms. A fox is an animal, filtered out. A human climbing the fence is classified as a person in a forbidden zone, and that alarms. By gating the rule check behind classification, deep-learning analytics cut the nuisance flood by a large margin — the practical reason perimeter video analytics became trustworthy enough to put in front of police-dispatch decisions. When the off-the-shelf analytic in the camera is not enough — a cluttered industrial yard, unusual targets such as small boats or drones, or classes the camera vendor does not ship — the detector is trained and deployed per site; that is the work our AI video recognition development team does for edge hardware.
The model internals — how a network is trained to detect and classify a person against a cluttered night-time background — are an engineering topic in their own right, covered in our AI for Video Engineering section. Here the focus is the surveillance application: what rules you build on top of the classifier, and how you tune them.
There are three rule types you will configure on almost every perimeter, and they map cleanly onto the behaviours an intruder shows:
- Line crossing (also called a tripwire): an invisible line drawn along or just inside the boundary; an object of the chosen class crossing it, in the chosen direction, alarms. This is the classic fence-line trigger.
- Intrusion zone (area intrusion): a closed region — a yard, a substation, a no-go strip between two fences — where any person or vehicle of the chosen class appearing or entering raises an alarm. Direction and dwell can be added.
- Loitering: an object of the chosen class staying inside a zone longer than a set time, which catches the person studying the fence rather than crossing it.
These rule types — line, zone, loitering, plus crowd and direction variants — are the shared vocabulary of behavioural analytics across the whole field; we cover the rule logic in depth in behavioural analytics: loitering, intrusion, and zones. On a perimeter, the classification gate in front of them is what makes them usable outdoors.
Figure 2. The classifier comes first. Only after the moving object is confirmed as a person or vehicle does the system check the rule it broke — a crossed line, an entered zone, or loitering. Animals and environmental motion are filtered before any rule is evaluated, which is what tames the outdoor false-alarm problem.
The sensor layers: video, thermal, radar, and fence — and why you fuse them
No single sensor is good at everything, so serious perimeters layer several, each covering another's blind spot. This is defense-in-depth applied at the sensor level, and it is how you push detection probability up and nuisance alarms down at the same time — because a target that trips two different sensor types is far more likely to be real than one that trips only one.
A visual camera with analytics is the cheapest layer and the one that lets a human see and identify what is there — but it needs light, and at night that means lighting the perimeter or accepting degraded performance. A thermal camera sees the heat of a body, not reflected light, so it detects a person in total darkness, through light fog, and against camouflage, and it detects them much farther away than a visual camera can — which is exactly what "detect early" demands. Thermal pairs naturally with analytics: the same person/vehicle classification runs on the heat image. Radar does not see images at all; it detects movement and range across a wide area, is almost unaffected by darkness, shadows, small animals, rain, or blowing debris, and can hand the precise coordinates of a target to a pan-tilt-zoom camera so the camera swings to it automatically. Physical fence sensors (fibre or accelerometer cable woven into the fabric) and buried cable sensors detect the vibration of someone climbing or the disturbance of someone crossing a line in the ground — they confirm contact with the barrier itself.
The modern reference pattern fuses three of these into a triad: radar for early wide-area detection, thermal for the fence line in the dark, and visual/PTZ for verification and identification. Radar catches the approach far out and slews a camera to it; thermal confirms a human shape at the fence; the visual camera (or the visible channel of a bispectral camera) gives the operator a picture clear enough to verify the threat and, where needed, identify the person or read a plate.
Figure 3. Defense in depth at the sensor level. Each layer covers the layer behind it: radar detects the approach at distance and points a camera at it, thermal confirms a body at the fence in darkness, and the visual camera verifies and identifies. A target seen by two layers is almost certainly real — fusion lifts detection and cuts false alarms at once.
| Sensor layer | What it does best | Typical range | Nuisance behaviour | Day / night | Where it fits |
|---|---|---|---|---|---|
| Visual camera + AI | Verify, identify, read plates | Short–medium | Needs light; AI cuts false alarms | Day (or lit) | Verification, identification |
| Thermal camera + AI | Detect a body in darkness, far out | Long | Low with classification | Day & night | Fence line, long approaches |
| Radar | Wide-area detection, slew a PTZ | Long, wide | Very low; immune to weather/animals | Day & night | Outer approach, large open areas |
| Fence sensor | Confirm contact with the barrier | The fence itself | Weather/foliage can trip it | Day & night | The physical boundary |
| Buried cable | Covert line-of-crossing detection | The buried line | Low; hidden from intruders | Day & night | Covert lines, gaps between fences |
| Microwave / IR beam | Invisible wall across a sterile zone | Short–medium, line of sight | Low on flat ground; long grass, snow drifts, animals can trip it | Day & night | Gates, sterile zones between fences |
| LiDAR | 3D tracking and classification on open ground | Medium–long (about 70–300 m by model) | Low with software exclusion zones | Day & night | Open areas, rooftops, water edges |
Table 1. No sensor wins every column — which is the argument for layering. Ranges are indicative and depend heavily on the model, the optics, and the site; confirm against the specific product and a site survey. Fusing two layers is what lifts detection while holding the nuisance rate down.
The last two rows are the oldest and the newest options. Microwave links and active-infrared beam columns are the classic free-standing sensor: cheap per metre and excellent across a flat, clear sterile zone, touchy wherever grass grows or snow drifts. LiDAR is the newest wide-area layer: a laser scanner builds a 3D point cloud of the zone and classifies what moves in it, with detection and exclusion zones drawn in software instead of by re-aiming hardware. In May 2026 Southwest Microwave launched its INTREPID LiDAR line in three models rated at about 70 m, 150 m and 300 m, with ONVIF and third-party VMS integration, a sign the technology has moved from pilots into mainstream perimeter catalogues. Treat it like radar: a detection layer that still hands off to a camera for verification.
Figure 5. The five core layers from Table 1 as a visual: no row is strong in every column, which is the whole argument for layering rather than betting a perimeter on one sensor type.
Camera placement: the pixel-density reality at the fence line
A recurring perimeter mistake is buying one camera to do two incompatible jobs. The camera that detects a person crossing a wide stretch of fence is framed too wide to identify that person's face — and identification needs roughly ten times the pixel detail. The governing standard is IEC 62676-4, the video-surveillance application guideline (second edition, published by IEC on 9 October 2025), whose DORI scale (Detect, Observe, Recognise, Identify) sets the pixel-density thresholds: detecting a person needs about 25 pixels per metre of scene width, recognising someone you already know about 125, and identifying a stranger from the footage about 250.
Put numbers on it. Suppose one analytics camera must cover a 50-metre run of fence:
Camera covering a 50 m fence run, horizontal resolution 1920 px:
Pixel density = 1920 px ÷ 50 m = 38.4 px/m
→ Above the ~25 px/m Detect threshold: good enough to ALARM on a person.
→ Far below the ~250 px/m Identify threshold: cannot recognise a face.
That camera will reliably detect an intruder anywhere along the 50 metres — exactly what the alarm needs — and it will be hopeless for identifying who they are. Both facts are fine, as long as you planned for them. The reference design therefore separates the jobs: wide detection cameras (or thermal/radar) raise the alarm across the whole boundary, and a smaller number of identification cameras — fixed at choke points, or a PTZ that the alarm automatically slews to the target — carry the resolution to show a face or a plate once something has tripped. Buy cameras to the job, never the job to the camera. (For the camera-to-VMS ingest path behind all of this, see the anatomy of a video surveillance system.)
Why detection runs at the edge
Perimeter response is measured in seconds, so where the analytics run matters. Running detection on the camera or a nearby appliance — at the edge — means the alarm fires locally, in near-real time, instead of after the video has been shipped to a distant server or the cloud and analysed there. Edge detection also slashes bandwidth, because the camera sends a small event ("person, zone 3, 02:14:07") rather than a continuous high-bitrate stream.
The bandwidth gap is large enough to change a design. A continuously streamed thermal-plus-visual camera can run well over 10 Mbps; the metadata describing what it detected is a few kilobits.
Per-site uplink, 16 perimeter cameras:
Stream all video to a central SOC: 16 × ~12 Mbps ≈ 192 Mbps (impractical on most WANs)
Send events + verification clips: 16 × <0.2 Mbps < 3.2 Mbps (trivial)
Saving on the wide-area link: ~98% of the traffic
So the pattern is: record and detect locally at the edge, send the alarm event and a short verification clip upstream, and pull full live video only when an operator chooses to verify. This is the perimeter face of the edge vs cloud analytics decision the whole section turns on, and it is why low-latency edge classification is the default for security-grade perimeters.
From alarm to response: integration and verified dispatch
An alarm that lights up a screen nobody is watching changes nothing. The value is created in the last link: turning a classified detection into a response. In a complete perimeter system the analytic event flows from the camera into the video management system (the software that records and manages many cameras, the VMS) and then fans out to the rest of the security stack.
How does the event reach the VMS in a way that works across different camera brands? Through ONVIF Profile M — the ONVIF profile (released June 2021) that standardises how analytics metadata and events, including object classification, travel from camera to VMS, with events carried over the lightweight MQTT messaging protocol. The caveat most articles miss: Profile M standardises the transport of the event, not the quality of the detection behind it. Two Profile-M cameras can both emit a "person in zone" event while detecting at very different reliability. Interoperability is not comparable accuracy. For how events and metadata move from camera to VMS, see events, metadata, and the ONVIF analytics interface, and the commercial overview of ONVIF profiles in security systems.
From the VMS, the verified alarm drives the response: it can lock a gate or trigger an access-control response, automatically slew a PTZ camera to the target for a clear picture, push the clip to an operator, and forward the alarm to a central monitoring station over the alarm-signalling standard SIA DC-09. That last hop is where a quietly important shift is happening. Because municipalities are drowning in false alarms, a growing number of police jurisdictions now apply verified response — they prioritise, or outright require, that an alarm be confirmed by video, audio, or a human before they dispatch. Seattle is the clearest recent example: since 1 October 2024 its police respond to burglar alarms only with supporting evidence — video, audio, a panic activation or an eyewitness — after fewer than 4% of the roughly 13,000 alarm calls it received in 2023 turned out to involve a confirmed crime (Seattle Police Department figures reported by KOMO News, September 2024). A video-verified perimeter alarm is dispatched as a likely crime-in-progress and arrives while it still matters; an unverified alarm may go to the back of the queue or be ignored. Verification is no longer a nicety — it is increasingly the price of getting a response at all.
Figure 4. The last link is where the value is. A classified detection becomes a VMS event (ONVIF Profile M), which slews a PTZ to verify, triggers access control, and forwards a video-verified alarm to the monitoring centre (SIA DC-09) — where verification increasingly determines whether police respond at all.
The false-alarm tuning that makes it usable
Perimeter analytics are not plug-and-play, and the gap between a noisy install and a trusted one is almost entirely tuning. Factory defaults are deliberately sensitive so the system "sees everything" in a demo; left at those settings on a live perimeter, it will flood operators within a night. Commissioning a perimeter is the work of pulling the nuisance rate down without dropping real detection, and it is iterative:
- Draw zones to the threat, not the whole scene. A line or zone that hugs the actual boundary ignores the busy road, the neighbour's yard, and the swaying tree-line behind the fence.
- Use the object filters. Restrict each rule to the classes that matter — person and vehicle — so animals and debris never reach the rule check.
- Calibrate perspective. Telling the analytic how big a person should look at each distance lets it reject objects that are the wrong size to be human, a major nuisance cut on long fence runs.
- Schedule and adapt. Different sensitivity by day and night, by zone, and by season; foliage in summer and low winter sun are different problems.
- Field-test against reality. Walk-test every zone for detection (does a real intruder reliably trip it?) and watch it across bad weather for nuisance alarms. Then review the nuisance rate weekly and re-tune — a perimeter is commissioned over weeks, not in an afternoon.
This tuning discipline — the precision-versus-nuisance balance, measured and adjusted — is the same craft we treat in general in tuning analytics: false alarms and accuracy. On a perimeter it is the difference between a system the guards rely on and one they switched off in week two.
A worked example: a 600-metre site
Put the pieces together on a mid-size industrial site with a 600-metre perimeter fence, monitored from a small on-site control room with a guard who can also call verified police response.
Sensor plan (600 m perimeter):
Radar units (wide-area, ~120 m each) 4 units → outer-approach detection
Thermal + AI cameras (fence line) 8 cams → person/vehicle classification in the dark
Visual PTZ (auto-slew to verify/identify) 2 cams → verification & face/plate at choke points
Nuisance-alarm budget:
Target < 1 nuisance alarm / zone / day across ~12 detection zones
→ aim for < ~12 nuisance alarms / day total after tuning, trending down weekly
Edge uplink (events + verification clips, not full streams):
14 detection/verification cams × < 0.2 Mbps < 2.8 Mbps (well within a modest WAN)
Response-window logic:
Radar detects an approach ~100 m out → ~30–60 s of "delay" before the fence is reached
→ enough time to slew PTZ, verify on video, and dispatch a verified alarm while it matters
The numbers are illustrative and move a lot with terrain, fence type, climate, and vendor — size a real build with our surveillance cost model and the perimeter detection planning checklist below, which lays the detect-delay-respond logic, the sensor-layer plan, the Pd/NAR targets, and the privacy gate on one page. The shape of the design, though, is stable: layer the sensors so detection happens early and is confirmed by more than one, run classification at the edge for speed, tune relentlessly to hold the nuisance rate down, and wire the verified alarm into a response that can arrive in time.
The privacy line for perimeter cameras
Perimeter cameras point outward, which means they routinely capture ground you do not own — a public footpath, a road, a neighbour's garden. That is a privacy question with settled law behind it, and it is sharper than most installers assume. In the EU, the Court of Justice's Ryneš judgment (C-212/13, 2014) held that a home camera which films a public space is not covered by the "household" exemption and so falls under data-protection law in full. The European Data Protection Board's Guidelines 3/2019 on video devices build on this: most surveillance relies on the legitimate-interest basis (GDPR Article 6(1)(f)), which demands a documented necessity and proportionality test — you must show the cameras are necessary for a real security purpose and aimed no wider than needed.
In practice that means three things on a perimeter. Minimise what you capture — angle cameras inward and use privacy masking to black out a neighbour's windows or the public pavement that the camera does not need. Document the purpose — a legitimate-interest assessment, signage, and a retention period that is no longer than necessary. And where the site monitors a publicly accessible area systematically and at scale, a Data Protection Impact Assessment (GDPR Article 35) is likely required before you switch it on. A separate and heavier gate applies the moment a perimeter analytic moves from detecting a person to identifying one — face recognition, or licence-plate recognition at a vehicle gate. Those cross into special-category biometric and personal-data rules (GDPR Article 9; in the US, state biometric laws such as Illinois BIPA), and they belong behind a deliberate review, not a default toggle. In the EU the AI Act adds its own layer: real-time remote biometric identification in publicly accessible spaces for law-enforcement purposes has been prohibited, with narrow exceptions, since 2 February 2025, and the high-risk obligations for biometric systems listed in Annex III now apply from 2 December 2027, after the Digital Omnibus on AI (Regulation (EU) 2026/1744, in force since 27 July 2026) moved the date from August 2026. Classifying a shape on the fence line as “person” is not biometric identification; matching that person against a face database is. Route any identification workflow through GDPR for video surveillance, privacy by design for surveillance, and licence-plate recognition (LPR/ANPR) — with counsel.
Perimeter intrusion detection: frequently asked questions
What is a perimeter intrusion detection system?
A perimeter intrusion detection system (PIDS) is the combination of sensors, analytics and alarm handling that detects someone approaching, crossing or attacking a site’s boundary early enough for a guard, operator or police to respond. It is measured by probability of detection and nuisance-alarm rate together.
What does perimeter detection mean?
Perimeter detection means noticing an intruder at the outer boundary of a site — the fence line, wall or approach zone — rather than inside the building. The earlier the detection, the more delay the barriers still impose, and the more time the response has to arrive.
What sensors are used for perimeter intrusion detection?
Five families: fence-mounted sensors (fibre-optic, coaxial or accelerometer cable), buried cable, free-standing microwave and infrared beams, wide-area radar and LiDAR, and visual or thermal cameras with AI classification. Serious sites layer two or three so a real intruder trips more than one.
What is a good nuisance alarm rate for a perimeter system?
A widely used operational target is fewer than one nuisance alarm per detection zone per day, roughly one per kilometre of well-designed fence per day. Above that, operators start ignoring alarms, which is how real intrusions get missed.
Can CCTV cameras detect perimeter intrusions on their own?
Yes, if the cameras run AI object classification — person, vehicle, animal — before line-crossing or zone rules; plain pixel-change motion detection outdoors produces too many false alarms to be usable. Thermal cameras extend this to darkness and longer range, and radar or fence sensors add a second, independent confirmation.
How do I choose AI video analytics for perimeter security with low false alarms?
Ask for probability of detection and nuisance-alarm rate with the test conditions attached, any independent test result (such as an NPSA CLASS rating), edge processing, and person/vehicle filtering per zone. Then run an on-site pilot of several weeks with walk-tests and a logged nuisance rate before you sign.
Are perimeter intrusion detection systems certified?
In the UK, the National Protective Security Authority tests PIDS in barrier-mounted, ground-based, free-standing, wide-area and rapidly deployable categories and lists passing products with a CLASS 1–3 rating. In Europe, intruder alarm systems are also graded 1–4 under EN 50131-1.
Do perimeter cameras that see a public road fall under GDPR?
Yes. Under the EU Court of Justice’s Ryneš ruling (C-212/13, 2014), a camera that films public space is not covered by the household exemption, so the operator needs a lawful basis, signage, minimal framing with privacy masking, and a retention limit.
Free download: Perimeter Detection Planning ChecklistOne page to take to the site survey: the detect-delay-respond math and the response-window rule, the probability-of-detection and nuisance-alarm targets with the under-one-nuisance-alarm-per-zone-per-day discipline, the sensor-layer plan across radar, thermal, visual/PTZ, fence and buried cable, the DORI pixel-density numbers that separate a detection camera from an identification camera, and the commissioning steps that pull the nuisance rate down before handover.Where Fora Soft fits in
Fora Soft has built video streaming, real-time video, and computer-vision software since 2005, across 250+ projects, and perimeter detection sits squarely at that intersection. When we build or integrate a perimeter system, we lead with how it behaves under real load — the detection probability and the nuisance rate at the site's actual weather and fence geometry, the response-window math, the bandwidth a multi-zone edge rollout truly consumes — and only then the feature list, because a perimeter that alarms on every fox is a perimeter that gets muted. We treat the privacy line and the verified-response chain as architecture decisions made early, not compliance and integration scrambles bolted on late, so the system survives both a stormy night and a regulator's question. Perimeter projects run through our video surveillance software development team, with the detection models tuned to each site by our computer vision for surveillance engineers.


The handbook
Fora Soft Video Engineering Handbook
We wrote a seven-volume, 9,000-page series that works through the whole video stack — encoding, delivery, audio and AI — so an engineer who has read it can design and build a perimeter system rather than only specify one. Volume 6 sits closest to this article: how detection and classification models actually decide that a moving object is a person and not a fox, which is the gate every perimeter rule hangs behind. Volume 7 covers running those models in real time at the edge, with the latency, cost and compliance questions a perimeter raises, and volume 1 covers the encoding behind the 12 Mbps-per-camera arithmetic that decides what you can send upstream. Written by Nikolay Sapunov, CEO at Fora Soft.
Will your perimeter still be trusted after its first stormy night?
Send us the site — the length and shape of the boundary, the sensors on your shortlist, the response you can actually field and how fast it arrives, and the weather and wildlife that will test it — and we will tell you where detection probability and nuisance rate are likely to land, which layers are worth fusing, what the edge-versus-central uplink costs per camera, and where the privacy line falls for the ground your cameras overlook. Before the cameras go up on poles, not after the guards have muted them. From a team that has shipped 250+ video products since 2005.
See our case studies
Case study
Mindbox
Classify, then alarm, on a real fleet: an AI video management system across 50+ deployments in transport, pharma and gated communities, where RTSP feeds run through FFmpeg into HLS, ANPR reads 500,000+ vehicles a day at about 95% accuracy, and intrusion, fire and crowd events reach operators as instant alerts with automatic recording, PTZ control and Smart Forensic Search — with a REST API and SDK so the alarm reaches the rest of the security stack.
Case study
NetcamStudio
Rules and PTZ on a small perimeter: Windows surveillance software that takes webcams and network IP cameras from many different brands, drives PTZ remotely, and fires customisable motion and sound rules into email and SMS alerts and recordings — free for up to 4 cameras, from $75 for 16, with a Web Service API for whatever the console does not cover. We built the web version and redesigned the interface.
Case study
VALT
The privacy line treated as architecture, not paperwork: a SaaS recording and observation platform used by 770+ U.S. organizations and 50,000+ active users, managing fixed IP cameras alongside phones and tablets under one scheduling, permission, retention and transcript-search model with HIPAA and GDPR obligations designed in. We built it from scratch and have been their sole development team for 10+ years.
What to read next
Analytics
Behavioural analytics: loitering, intrusion, zones
The rule logic in depth, once the classifier has decided what the object is.
Tuning
Tuning analytics: false alarms, accuracy, the operator
How the nuisance rate comes down without dropping the detections you need.
Reference design
Industrial and critical-infrastructure surveillance
The high-reliability design next door, where this perimeter is the outer ring.
Estimating
Estimating a surveillance project: scope to number
Turn the reference design into a figure you can put in a proposal.
References
- IEC 62676-4: Video surveillance systems — Part 4: Application guidelines (DORI). IEC (current edition EN IEC 62676-4:2025). Tier 1. Sets the pixel-density thresholds — Detect ~25, Observe ~62.5, Recognise ~125, Identify ~250 px/m — behind the detection-camera-vs-identification-camera distinction. https://webstore.iec.ch/en/publication/83425 (Ed. 2.0, published 2025-10-09)
- ONVIF Profile M Specification (released June 2021). ONVIF. Tier 1. Standardises the transport of analytics metadata and events — including object classification, with events over MQTT — from camera to VMS; the basis for the "transport, not accuracy" point. https://www.onvif.org/profiles/profile-m/
- EN 50131-1: Alarm systems — Intrusion and hold-up systems. CENELEC. Tier 1. The European standard for intruder alarm systems; defines four security grades (Grade 1 low risk to Grade 4 high risk) used to specify perimeter and intrusion systems. https://www.cenelec.eu/
- Court of Justice of the EU, František Ryneš v Úřad pro ochranu osobních údajů, C-212/13 (11 Dec 2014). CJEU. Tier 1. A fixed home camera filming a public space is not covered by the GDPR/Directive "household" exemption; the operator is a controller with full data-protection obligations. https://curia.europa.eu/juris/liste.jsf?num=C-212/13
- Guidelines 3/2019 on processing of personal data through video devices (v2.0, 2020). European Data Protection Board. Tier 2. Restrictive household exemption; legitimate-interest basis (GDPR Art. 6(1)(f)) with a necessity-and-proportionality test; data minimisation and privacy masking for areas not under the controller's responsibility. https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-32019-processing-personal-data-through-video_en
- General Data Protection Regulation (Regulation (EU) 2016/679), Art. 6(1)(f), Art. 9, Art. 35. European Union (EUR-Lex). Tier 1. Legitimate-interest legal basis; special-category biometric data; the requirement for a Data Protection Impact Assessment for systematic large-scale monitoring of a publicly accessible area. https://eur-lex.europa.eu/eli/reg/2016/679/oj
- Physical Protection Systems — detection, delay, response and the EASI model. Sandia National Laboratories (SAND2008-5730 and related). Tier 2. The detect-delay-respond framework and the principle that an intrusion is interrupted only when response time is shorter than the remaining delay after detection. https://www.osti.gov/biblio/983673
- Perimeter protection with intelligent surveillance (white paper); AXIS Perimeter Defender; thermal and radar for perimeter protection. Axis Communications. Tier 4. Edge-based AI classification of humans/vehicles, the radar+thermal+visual fusion pattern, radar's near-immunity to weather/animals, and edge latency/bandwidth benefits. https://www.axis.com/solutions/perimeter-security-and-intrusion-detection
- Seattle police will no longer respond to alarm calls without “supporting evidence” (23 Sep 2024). KOMO News, reporting Seattle Police Department figures. Tier 3. Policy effective 1 October 2024; about 13,000 burglary alarm calls a year; fewer than 4% of 2023 calls confirmed as a crime. https://www.komonews.com/news/local/seattle-police-no-longer-respond-to-alarm-calls-without-supporting-evidence-police-change-video-audio-patrol-response-crime-arrest-conserve-resources-officer-washington-spd
- Perimeter Intrusion Detection with AI-based Video Analytics. Davantis. Tier 4. Vendor engineering description of classification-gated perimeter analytics and the nuisance-alarm-reduction mechanism; used for the mechanism, not as an accuracy source. https://www.davantis.com/en/blog/technology/intrusion-detection/
- The Security Math: thermal cameras for perimeter; pairing thermal cameras and radar. Hanwha Vision / Security Sales & Integration. Tier 4. Thermal detection at distance and in darkness, and the thermal-plus-radar pairing for cost-effective long-perimeter coverage. https://hanwhavision.eu/the-security-math-why-expensive-thermal-cameras-are-actually-the-most-cost-effective-way-to-protect-a-perimeter/
- Perimeter Intrusion Detection Systems (PIDS) evaluation schemes. National Protective Security Authority (NPSA), UK. Tier 1. Five scheme categories; detection-rate and false-alarm-rate trials; Barrier Mounted PIDS Standard v6.0; CLASS 1–3 ratings in the Catalogue of Security Equipment; 8–9 month evaluations; two-year renewal. https://www.npsa.gov.uk/perimeter-intrusion-detection-systems-pids-evaluation-schemes (accessed 21 Oct 2026)
- Senstar FlexZone-60 and FiberPatrol FP1150 achieve NPSA certification (28 Jul 2025). Senstar. Tier 4. Example of barrier-mounted PIDS tested against NPSA Barrier Mounted PIDS Standard v6.0. https://senstar.com/press-releases/senstars-flexzone-60-and-fiberpatrol-fp1150-achieve-npsa-certification-for-critical-infrastructure-protection/
- Introducing INTREPID LiDAR (19 May 2026). Southwest Microwave. Tier 4. Solid-state LiDAR perimeter sensor in 70 m, 150 m and 300 m models with software-defined zones and VMS/ONVIF integration. https://ssd.southwestmicrowave.com/lidar-new-product-launch/
- Digital Omnibus on AI — Regulation (EU) 2026/1744. AI Act Explorer (Future of Life Institute). Tier 3. In force 27 July 2026; Annex III high-risk obligations, including biometrics, apply from 2 December 2027. https://artificialintelligenceact.eu/ai-act-explorer/digital-omnibus/
