What hospitality security teams are actually trying to solve

The three properties look different but the loss buckets repeat.

Casinos watch for cheating, advantage play, exclusion-list violations, cage and count-room compliance, and gaming-commission audit prep. A self-excluded patron on the floor is a regulatory event the moment they hit the door. The surveillance department isn't a cost center, it's a licensing condition.

Hotels watch for guest-room theft, parking-garage incidents, after-hours lobby altercations, hospitality-trafficking signals, ADA compliance, slip-and-fall documentation, and employee-on-guest issues. Branded operators (Marriott, Hilton, Hyatt, IHG) carry corporate security standards on top of franchisor requirements.

Resorts stack all of that plus pool safety, beach perimeter, retail and F&B incidents across multiple buildings, amenity safety, and missing-child protocols. A multi-building resort has the camera count of a small city.

In all three, the surveillance program already exists. The cameras are mounted, the recording works. The gap is real-time interpretation and searchable export.

What video analytics actually does in hospitality

The analytics layer sits on top of cameras you already have (any modern ONVIF-compliant IP camera) and watches the feed the way an operator can't. What gets flagged depends on the property.

In a casino:

  • Exclusion-list and self-excluded patron detection. Facial recognition against the exclusion list at every entrance, supervisor paged within seconds of a match. Gaming commissions accept this when audit logs are clean.
  • Loitering and advantage-play patterns. A patron returning to the same table family across sessions, dealer-relief gaps, chip-tray anomalies. The team makes the calls; the system surfaces candidates.
  • Cage, count room, and soft-count documentation. Every entry, every door event, every handle. Time-stamped, exportable, audit-ready.

In a hotel:

  • Lobby and corridor incidents. Late-night altercations, intoxicated guest disputes, unaccompanied minors in restricted areas. The night manager gets a clip, not a wake-up call after the fact.
  • Parking garage. LPR captures every plate in and out. A stolen vehicle, an unauthorized after-hours visitor, or a recurring trespass pattern lands in the log automatically.
  • Hospitality-trafficking signals. Industry training (AHLA's NHTH-aligned program, Polaris-aligned operator guides) lists behavioral signals surveillance can flag for human review. The system surfaces candidates; the trained employee makes the call.
  • Slip-and-fall and ADA documentation. A corridor spill sits ten minutes before housekeeping arrives; the system flags it the second it lands. When the claim shows up six months later, the time-stamped clip exists.

In a resort:

  • Pool perimeter and lifeguard absence. A swimmer in the deep end with no lifeguard at the stand, a child near the gate after hours. The operations team needs to know in real time, not from the incident report.
  • Multi-building correlation. A theft reported in tower B at 2:14 PM. Pull every camera that saw that guest across the property in the prior two hours. A click, not three hours of scrubbing tape.

The principle: cameras you already paid for, watched by software that doesn't get tired, with the operator's attention reserved for events that need human judgment.

The VMS underneath

Analytics without a real VMS underneath is a demo, not an operations program. The right architecture depends on size, openness requirements, and IT posture.

  • Open-platform VMS lets you layer analytics from multiple vendors, mix camera brands, and integrate access control and POS. Many flagship casino and large resort-chain deployments run on an open platform.
  • Unified-platform VMS brings video, access control, LPR, and intercom onto one system, strong in gaming with the compliance reporting modules.
  • Native-analytics VMS ships analytics built in. Tighter ecosystem, less flexibility for third-party analytics.
  • Cloud-managed VMS deploys faster across multi-property hotel groups; the trade-off is the closed ecosystem and cloud-dependence questions for your IT team.

Banned vendors per NDAA Section 889 (Hikvision, Dahua, Hytera, and OEM relabels) need to be off the network on any federal-touching property, including FEMA-grant-funded sites and federally subsidized housing. The FCC Covered List is the source of record.

What hospitality compliance officers actually want

  • Audit-ready export. Pull a clip, a window of clips, or every event from a specific camera in a date range, without three hours of scrubbing.
  • Access logs on the logs. Who pulled what clip, when, why. Gaming commissions and franchise inspectors look at this.
  • Retention that matches your jurisdiction. Most US gaming jurisdictions want 7 to 30 days minimum on the floor, longer on cage and count room, and litigation holds run years.
  • Privacy controls. Guest-room corridors and pool decks are recorded; guest rooms aren't. Masking on changing-room exteriors and ADA areas. Privacy-mask and redaction-on-export are not optional.
  • Integration with access control and POS. A door-open event tied to a cash-drawer opening tied to a camera clip. That's a forensic export in a real investigation.

Where the cost actually moves

Properties we benchmark report savings in four buckets after a real rollout. The numbers vary by size and baseline, but the pattern repeats.

  • Surveillance hours, redeployed. The operator stops staring at a wall of monitors and starts running flagged events. Headcount drops or covers more floor.
  • Audit prep. What took a half-day before a gaming-commission visit takes minutes. Same for franchise inspections.
  • Claim defense. A slip-and-fall claim with a clean time-stamped clip negotiates differently. Insurers commonly issue protective-device credits for properly monitored, retention-compliant systems.
  • Loss reduction at friction points. Cage, count room, F&B back-of-house, retail, parking. Each has its own payback curve.

Honest payback: in a multi-property rollout the math typically lands in the twelve-to-twenty-four-month window once you count audit-prep labor, claim avoidance, redeployed surveillance hours, and the eventual cost of one incident the documentation prevented or settled cheaper. Before signing, walk the camera inventory, press for gaming-commission and AHLA specifics, confirm the false-positive tuning window (two to four weeks is reasonable), and pin down where cloud footage lives and who can revoke access. If the answers aren't sharp on a hospitality-specific call, the vendor doesn't know the vertical.