Is the property owner or manager liable if a tenant is assaulted on the property?

Sometimes. Owners and managers generally owe a duty of reasonable care against foreseeable criminal acts by third parties, but they are not insurers of resident safety. Liability under a negligent-security theory typically turns on whether the crime was foreseeable — often based on prior similar incidents or the totality of the circumstances — and whether the operator took reasonable measures. The standard varies by state, so confirm it with local counsel for each jurisdiction where you operate.

What does 'adequate security' mean for an apartment community?

There is no universal checklist — adequacy is measured against your property's foreseeable risk. In practice it means functional lighting, working access control and locks, cameras that actually record, a physical presence proportionate to the risk, and a closed-loop process for fixing reported deficiencies and responding to known crime patterns. A low-incident suburban community and a high-risk urban asset are judged against different circumstances.

Courtesy officer or a contract security company — what's the difference for an operator?

A courtesy officer is usually an off-duty officer or resident in a security-adjacent role, often compensated with reduced rent, providing presence and an after-hours contact at low cost. A contract security company is a licensed, insured vendor providing patrol, static, or remote coverage with documented reporting. The courtesy-officer model carries role-ambiguity and classification risk that varies by state, so define the role in writing and confirm classification and insurance with counsel. Many operators use a licensed contract patrol as the backbone and reserve courtesy officers for a limited, defined role.

How much does apartment or multifamily security cost?

It depends on the model and the property. Ordered from least to most expensive: a courtesy officer (often a rent concession), remote/virtual guarding (a lower recurring fee), contract mobile patrol (moderate, priced by rounds and hours), and a continuously posted static guard (the most expensive, because it's a full labor line across multiple shifts). Actual pricing depends on your metro, hours, size, and risk — compare quotes for your specific property.

What is Crime-Free Multi-Housing?

It's a framework, often coordinated with local police, built around three parts: management training, physical crime-prevention design improvements like lighting and sightlines, and a crime-free lease addendum. It can strengthen an operator's safety posture and documentation. Note that some crime-free and nuisance-enforcement practices have drawn fair-housing scrutiny in certain jurisdictions, so review any lease addendum and enforcement practice with counsel to ensure compliance where you operate.

Apartment & Multifamily Security: A Property Manager's Guide

For operators and managers, apartment security is a business-risk decision, not an amenity. Here's how the models compare, what 'adequate security' means under a negligent-security lens, and how to build a defensible, documented program.

For a multifamily operator, security is not an amenity you add to a marketing sheet — it is a business-risk decision that sits at the intersection of resident safety, insurance, and litigation exposure. When a violent crime happens on a property with a documented history of similar incidents, the question a court, an insurer, and your legal team will all ask is the same: did the owner or manager provide reasonable security under the circumstances? This guide is written for the people who answer that question — property managers, owner-operators, REIT asset managers, and HOA boards acting as operators — and it walks through the security models, what "adequate security" actually means, and how to build a program you can defend. (If you're a resident or a homeowner association evaluating community security as a neighbor rather than an operator, our residential and HOA security guide is written for that audience instead.)

Quick answer

Multifamily security is a premises-liability decision. Owners and managers generally owe residents and their guests a duty of reasonable care against foreseeable criminal acts by third parties — and how "foreseeable" is measured varies by state. The practical models are courtesy officer, contract mobile patrol, static posted guard, and remote/virtual guard, in ascending order of cost and on-site response. Whichever you choose, the defense is the same: a program that matches the property's actual risk and is documented in timestamped reports.

Why security is a risk decision, not an amenity

On the leasing side, security reads like a perk — gated access, cameras at the mailroom, a patrol car at night. On the ownership side, it is a control against a specific and expensive exposure: negligent-security litigation. When a tenant, a guest, or a visitor is harmed by a criminal act on the property, plaintiffs frequently argue that the owner or manager failed to provide the security a reasonable operator would have provided given what the property knew about its own risk. That is not a claim about the crime itself — the criminal is a third party — it is a claim about the premises and whether its condition and safeguards were reasonable.

This reframes every security decision. You are not buying presence for its own sake; you are calibrating safeguards to the property's risk profile so that, if something happens, the program you ran was a reasonable one. Under-investing at a high-crime property is an obvious exposure. But over-investing blindly is also a mistake: it burns NOI without necessarily addressing the specific, foreseeable risks your property actually faces. The goal is a program that is proportionate and documented, not maximal.

Premises liability and the "foreseeability" standard

Premises liability is the body of law that governs when a property owner or possessor is responsible for harm that occurs on their property. In the security context, the relevant sub-theory is often called negligent security: the idea that an owner or manager breached a duty of reasonable care by failing to protect people on the property from a foreseeable criminal act by a third party. The key word is foreseeable, and this is where operators most often misunderstand their exposure.

Courts do not hold owners responsible for every conceivable crime — a landlord is generally not an insurer of resident safety. Liability typically attaches only when the criminal act was foreseeable and the owner failed to take reasonable measures against it. How foreseeability is measured varies significantly by state, and operators with property in multiple states should not assume one national rule. In broad terms, courts have used approaches such as:

A prior-similar-incidents approach, which looks primarily at whether comparable crimes had occurred on or near the property before, putting the owner on notice.
A totality-of-the-circumstances approach, which weighs a broader set of factors — the nature of the property, the surrounding area's crime conditions, the location and design, and prior incidents — rather than requiring a near-identical prior crime.
A balancing approach, which weighs the foreseeability and gravity of the harm against the burden of the security measures that would have prevented it.

Because the standard, the burden of proof, and even the availability of the claim differ by jurisdiction, the operational takeaway is not to memorize a rule — it is to treat notice seriously. Once your property is on notice of a pattern of crime, the reasonableness of your response becomes the whole game, and how you respond (and how you record it) is what a defense is built on. Verify the specific standard in each state where you operate with local counsel; do not port a policy written for one state to another without review.

Notice is the trigger — inaction is the exposure

The most dangerous posture is not "we had no security." It is "we knew and did nothing documented about it." Once a property is on notice of a recurring hazard — repeated break-ins in a garage, a pattern of assaults in a poorly lit breezeway, a broken perimeter gate reported for weeks — an operator that fails to respond reasonably has the weakest possible position if litigation follows. Do not treat resident complaints, incident reports, and local crime data as noise. They are the record of what your property knew, and reasonable, documented action on them is your best protection.

What "adequate security" actually means

There is no universal checklist that guarantees "adequate security," because adequacy is measured against your property's risk. But across negligent-security matters, the same categories of safeguard recur, and a reasonable operator can work through them deliberately:

Lighting. Functional, maintained lighting at entrances, parking areas, walkways, stairwells, and breezeways. Burned-out lighting at a property with prior incidents is one of the most common allegations.
Access control. Working perimeter gates, secured entry doors, functioning locks on units and common areas, and controlled access to garages and amenity spaces. A gate that is broken and known to be broken is a recurring theme.
Surveillance. Cameras positioned to cover entries, parking, mail areas, and common spaces — and, critically, actually recording and retaining footage. See our alarm monitoring options and the alarm monitoring guide.
Physical presence. Where the risk warrants it, a courtesy officer, a contract patrol, or a posted guard providing deterrence and response.
Maintenance and responsiveness. A closed-loop process for fixing reported deficiencies — locks, gates, lighting, doors — and a record showing the loop actually closed.
Response to known problems. Escalating patrols, adding lighting, coordinating with local police, or issuing notices when a pattern emerges.

"Adequate" is the intersection of these safeguards with your property's foreseeable risk. A low-incident suburban garden community and a high-turnover urban mid-rise with a documented crime history do not need the same program — and the reasonableness of each is judged against its own circumstances.

Choosing a security model

The four common models trade off cost against on-site response and deterrence. Most operators end up with a hybrid — for example, a nightly roving patrol backed by access control and cameras, with a posted guard only at a flagship or high-risk asset.

Courtesy officer on-site

A courtesy officer is typically an off-duty or moonlighting law-enforcement officer, or a resident in a security-adjacent role, who lives on or near the property — often in exchange for reduced or free rent — and provides a visible presence and after-hours point of contact. The appeal is cost and the deterrent value of a marked vehicle or a known presence. The risk is role ambiguity. A courtesy officer is not a substitute for a comprehensive program, and the arrangement raises questions that vary by jurisdiction: whether the person is an employee, an independent contractor, or a tenant with a concession; how their off-duty conduct is treated; and what duties they are actually authorized to perform. The employment classification and liability treatment of courtesy officers vary by state and by the specifics of the arrangement, and getting it wrong can create exposure rather than reduce it. If you use a courtesy officer, define the role, duties, hours, and limits in writing, confirm the classification and insurance treatment with counsel, and do not market the person as "security" if their actual role is narrower than that word implies.

Contract mobile / roving patrol

A licensed security company runs marked-vehicle patrols across the property on a schedule — checking gates, lighting, parking, and common areas, and responding to calls. Roving patrol covers a lot of ground for far fewer hours than a posted guard, which makes it the workhorse for many garden and mid-density communities. Its underrated advantage for operators is evidence: professional patrols produce timestamped activity logs, GPS-verified checkpoints, and photo-backed incident reports that document exactly what was patrolled and when. That record is precisely what demonstrates a reasonable, active response to known risk. See our mobile patrol service and the mobile patrol guide. The trade-off is the gap between passes — a patrol is not continuous presence, so predictable schedules and thin coverage can leave windows.

Static / posted guard

A stationed officer holds a fixed post — a gate, a lobby, an amenity entrance — providing continuous presence, access control, and the fastest on-site response. This is the strongest deterrent and the strongest response at a single point, and it is what a high-risk asset with a documented history may reasonably require. It is also the most expensive model by a wide margin, because a continuously staffed post is a full labor line, and covering a property around the clock means multiple shifts. Static coverage is usually reserved for the highest-risk assets or specific high-traffic points, often combined with patrol elsewhere on the property.

Remote / virtual guard

Remote operators monitor the property through cameras, sensors, and intercoms from a central station — verifying access, issuing live voice warnings through speakers, and dispatching police or a patrol when something is detected. Virtual guarding costs a fraction of a posted officer and produces excellent footage and detection, and live audio talk-down is a genuine deterrent. Its limit is physical: a remote operator cannot intervene on the ground, so it is strongest as a detection-and-documentation layer paired with a patrol or police response rather than as a standalone answer at a property that needs a human on site. Remote monitoring pairs naturally with alarm monitoring.

Comparing the models

Model	Coverage	Relative cost	Liability posture
Courtesy officer on-site	Visible presence and after-hours contact; not continuous, limited scope	Lowest (often a rent concession)	Depends heavily on how the role, classification, and duties are defined — undefined roles can add exposure rather than reduce it
Contract mobile / roving patrol	Scheduled rounds across the whole property; gaps between passes	Moderate	Strong if documented — timestamped, GPS-verified logs and incident reports evidence an active response; licensed vendor carries its own insurance
Static / posted guard	Continuous presence and fastest response at a fixed point	Highest	Strongest deterrence and response at the post; vendor-insured; must still be documented
Remote / virtual guard	Camera/sensor detection with live talk-down; no physical intervention	Low to moderate (recurring)	Excellent detection and footage as evidence; needs a paired physical response to close the loop

Relative cost above is directional — actual pricing depends on your metro, hours, property size, and risk. The pattern that holds across markets is the ordering: courtesy officer cheapest, remote guarding low and recurring, patrol in the middle, and a continuously posted guard the most expensive by far.

Matching the model to your property: a decision framework

The comparison above tells you what each model does; the harder question is which one your property needs. A practical way to decide is to grade the asset on two axes — its own incident history and the surrounding submarket's crime conditions — and let that grade set the floor of the program, rather than starting from a fixed budget line and working backward.

Low incidence, low-crime submarket (stable suburban garden community). A well-maintained access-control and lighting baseline plus recorded, retained cameras is often proportionate, with a periodic or as-needed mobile patrol during higher-risk stretches such as leasing turnover or the holidays. The exposure at this profile is usually maintenance, not manpower — a perimeter gate reported broken and left unfixed for weeks is a more likely allegation than the absence of a guard.
Moderate risk (mid-density asset, mixed submarket, or a recent uptick in incidents). A scheduled nightly roving patrol as the backbone, layered on working access control and cameras, is the workhorse configuration. Where cameras already exist, adding remote/virtual monitoring gives you live talk-down and after-hours eyes in the windows between patrol passes at a fraction of a posted-guard cost.
High risk (documented on-site crime history, high-crime submarket, prior serious incidents). Once a property is on notice of a serious, recurring pattern, a reasonable response often means continuous presence at the highest-risk point — a static posted guard at the gate or lobby — combined with patrol across the rest of the property and monitored, recording cameras. This is the configuration a court is most likely to weigh against the notice the property actually had.

Two cautions. First, the grade is not permanent: a submarket that deteriorates, or a cluster of incidents on the property, moves the asset up the ladder — and the program should move with it, with the change recorded. Second, uniform portfolio-wide policies are convenient but risky. A single standard applied across twenty assets will over-serve the quiet ones and under-serve the one that is heating up; the reasonableness of each property is judged on its facts, so grade each asset individually even within a standardized playbook.

Night roving patrol: the highest-leverage layer

For most multifamily assets, the hours that matter are overnight, and a nightly roving patrol is often the highest-leverage single investment. It puts a marked, visible presence on the property during the window when most incidents occur, breaks the predictability that opportunistic offenders rely on, and — because it is a licensed contract service — generates the documented record that protects the owner. When you scope a patrol, specify the number of rounds per shift, the checkpoints to be verified, the reporting you will receive, and the escalation path, so the coverage is defined and the evidence is consistent. Randomized timing matters: a patrol that shows up at the same three times every night is a schedule an offender can wait out.

Access control and CCTV as evidence

Access control and cameras do double duty in multifamily: they prevent and deter, and they create the record. Working gates, secured entries, and controlled amenity access reduce the opportunities that make a property foreseeably risky. Cameras covering entrances, parking, mail rooms, and common areas deter, help investigators, and — when they actually record and retain footage — become evidence of both what happened and the fact that the operator invested in surveillance. The failure mode operators must avoid is security theater: a gate that is broken and known to be broken, cameras that are decorative or not recording, or a call box that has not worked in months. A visible safeguard that does not function can be worse than none, because it can support an argument that residents were lulled into a false sense of security. If you advertise a control, it must work — and you should have a maintenance record proving it did.

Crime-Free Multi-Housing

Many operators layer in a Crime-Free Multi-Housing program — a framework, often coordinated with local police departments, built around three parts: management training, physical "crime prevention through environmental design" (CPTED) improvements like lighting and sightlines, and a crime-free lease addendum. Participation can strengthen an operator's safety posture and its relationship with local law enforcement, and it produces documentation of a proactive program. A caution worth flagging: some elements of crime-free and "nuisance property" enforcement have drawn fair-housing and civil-rights scrutiny in certain jurisdictions, so run any lease addendum and enforcement practice past counsel to ensure it complies with fair-housing law where you operate. Used carefully, it is a useful pillar of a defensible program; used carelessly, it is its own liability.

Building a defensible, documented program

Everything above converges on one principle: for an operator, the security program and its documentation are inseparable. A reasonable program that leaves no record is hard to prove; a documented program is your best defense. Build it around a simple loop:

Assess. Establish the property's risk with a real look at on-site incident history, resident complaints, and local crime data — a periodic security assessment, updated when conditions change.
Match the model to the risk. Choose patrol, static, remote, courtesy, or a hybrid that is proportionate to what the assessment found, and revisit it as risk changes.
Document everything. Keep timestamped patrol logs, incident reports with photos, maintenance records showing reported deficiencies were fixed, and a record of how you responded to complaints and crime patterns. Set a written retention schedule — camera footage kept long enough to survive the lag before an incident surfaces or a claim is filed, patrol and incident reports archived rather than overwritten — so the record still exists when someone finally asks for it.
Hire licensed and insured. Engaging a licensed, insured security company generally shifts operational liability to the vendor's coverage and gives you a professional partner who documents to a standard — a key reason to verify credentials rather than default to the cheapest option.
Review and adjust. Treat the program as living: escalate coverage when incidents rise, and record the adjustment so the response to notice is provable.

When you evaluate a provider, treat vetting as part of your own due diligence — the vendor's professionalism becomes your evidence. Before you sign, confirm:

State license in good standing for the security company (and its officers where the state requires individual registration), verified directly against the state regulator rather than taken on the vendor's word.
Insurance. Request a current certificate of insurance naming the ownership entity as an additional insured, with general-liability limits appropriate to the property — this is the mechanism that actually shifts operational risk to the vendor's coverage.
A sample daily activity report and incident report, so you can judge the record you'll receive before you depend on it: detail, timestamps, photos, and legibility.
Checkpoint and reporting technology. GPS-verified tour data or scanned checkpoints that prove where and when officers actually patrolled, not a paper sign-in sheet that proves nothing.
Supervision and post orders. How officers are supervised in the field, how site-specific post orders are written and kept current, and how an escalation reaches you at 2 a.m.

Their answers tell you how well you'll be protected — not just on the ground, but on paper if it ever matters.

Get quotes for your property

The right model depends on your property's risk, layout, hours, and market. Compare licensed multifamily security providers who can document their coverage the way an operator needs. Find companies in your market — for example security companies in Chicago or security companies in Los Angeles — or get free quotes from licensed security companies and describe your portfolio to compare patrol, static, remote, and hybrid options side by side.