What hospitality security teams are actually trying to solve
The three properties look different but the loss buckets repeat.
Casinos watch for cheating, advantage play, exclusion-list violations, cage and count-room compliance, and gaming-commission audit prep. A self-excluded patron on the floor is a regulatory event the moment they hit the door. The surveillance department isn't a cost center, it's a licensing condition.
Hotels watch for guest-room theft, parking-garage incidents, after-hours lobby altercations, hospitality-trafficking signals, ADA compliance, slip-and-fall documentation, and employee-on-guest issues. Branded operators (Marriott, Hilton, Hyatt, IHG) carry corporate security standards on top of franchisor requirements.
Resorts stack all of that plus pool safety, beach perimeter, retail and F&B incidents across multiple buildings, amenity safety, and missing-child protocols. A multi-building resort has the camera count of a small city.
In all three, the surveillance program already exists. The cameras are mounted, the recording works. The gap is real-time interpretation and searchable export.
What video analytics actually does in hospitality
The analytics layer sits on top of cameras you already have (any modern ONVIF-compliant IP camera) and watches the feed the way an operator can't. What gets flagged depends on the property.
In a casino:
- Exclusion-list and self-excluded patron detection. Facial recognition against the exclusion list at every entrance, supervisor paged within seconds of a match. Gaming commissions accept this when audit logs are clean.
- Loitering and advantage-play patterns. A patron returning to the same table family across sessions, dealer-relief gaps, chip-tray anomalies. The team makes the calls; the system surfaces candidates.
- Cage, count room, and soft-count documentation. Every entry, every door event, every handle. Time-stamped, exportable, audit-ready.
In a hotel:
- Lobby and corridor incidents. Late-night altercations, intoxicated guest disputes, unaccompanied minors in restricted areas. The night manager gets a clip, not a wake-up call after the fact.
- Parking garage. LPR captures every plate in and out. A stolen vehicle, an unauthorized after-hours visitor, or a recurring trespass pattern lands in the log automatically.
- Hospitality-trafficking signals. Industry training (AHLA's NHTH-aligned program, Polaris-aligned operator guides) lists behavioral signals surveillance can flag for human review. The system surfaces candidates; the trained employee makes the call.
- Slip-and-fall and ADA documentation. A corridor spill sits ten minutes before housekeeping arrives; the system flags it the second it lands. When the claim shows up six months later, the time-stamped clip exists.
In a resort:
- Pool perimeter and lifeguard absence. A swimmer in the deep end with no lifeguard at the stand, a child near the gate after hours. The operations team needs to know in real time, not from the incident report.
- Multi-building correlation. A theft reported in tower B at 2:14 PM. Pull every camera that saw that guest across the property in the prior two hours. A click, not three hours of scrubbing tape.
The principle: cameras you already paid for, watched by software that doesn't get tired, with the operator's attention reserved for events that need human judgment.
The VMS underneath
Analytics without a real VMS underneath is a demo, not an operations program. The right architecture depends on size, openness requirements, and IT posture.
- Open-platform VMS lets you layer analytics from multiple vendors, mix camera brands, and integrate access control and POS. Many flagship casino and large resort-chain deployments run on an open platform.
- Unified-platform VMS brings video, access control, LPR, and intercom onto one system, strong in gaming with the compliance reporting modules.
- Native-analytics VMS ships analytics built in. Tighter ecosystem, less flexibility for third-party analytics.
- Cloud-managed VMS deploys faster across multi-property hotel groups; the trade-off is the closed ecosystem and cloud-dependence questions for your IT team.
Banned vendors per NDAA Section 889 (Hikvision, Dahua, Hytera, and OEM relabels) need to be off the network on any federal-touching property, including FEMA-grant-funded sites and federally subsidized housing. The FCC Covered List is the source of record.
What hospitality compliance officers actually want
- Audit-ready export. Pull a clip, a window of clips, or every event from a specific camera in a date range, without three hours of scrubbing.
- Access logs on the logs. Who pulled what clip, when, why. Gaming commissions and franchise inspectors look at this.
- Retention that matches your jurisdiction. Most US gaming jurisdictions want 7 to 30 days minimum on the floor, longer on cage and count room, and litigation holds run years.
- Privacy controls. Guest-room corridors and pool decks are recorded; guest rooms aren't. Masking on changing-room exteriors and ADA areas. Privacy-mask and redaction-on-export are not optional.
- Integration with access control and POS. A door-open event tied to a cash-drawer opening tied to a camera clip. That's a forensic export in a real investigation.
Where the cost actually moves
Properties we benchmark report savings in four buckets after a real rollout. The numbers vary by size and baseline, but the pattern repeats.
- Surveillance hours, redeployed. The operator stops staring at a wall of monitors and starts running flagged events. Headcount drops or covers more floor.
- Audit prep. What took a half-day before a gaming-commission visit takes minutes. Same for franchise inspections.
- Claim defense. A slip-and-fall claim with a clean time-stamped clip negotiates differently. Insurers commonly issue protective-device credits for properly monitored, retention-compliant systems.
- Loss reduction at friction points. Cage, count room, F&B back-of-house, retail, parking. Each has its own payback curve.
Honest payback: in a multi-property rollout the math typically lands in the twelve-to-twenty-four-month window once you count audit-prep labor, claim avoidance, redeployed surveillance hours, and the eventual cost of one incident the documentation prevented or settled cheaper. Before signing, walk the camera inventory, press for gaming-commission and AHLA specifics, confirm the false-positive tuning window (two to four weeks is reasonable), and pin down where cloud footage lives and who can revoke access. If the answers aren't sharp on a hospitality-specific call, the vendor doesn't know the vertical.