Security for a private car collection

Delay, detection, response

A strong door only buys time. That time is worth something only if detection fires at the first touch of a tool, and a response arrives before the delay runs out. So the response time sets the strength of each barrier, not the other way round.

Real thefts rarely go through the vault door. They use the overlooked routes: a lift shaft, a window during maintenance, a key safe. Each of those routes is designed as a layer.

The ten layers, from estate to car

1. The perimeter. Boundary walls and fences, detection along them, and cameras that watch for movement, not just record it.
2. The approach. A controlled gate, number-plate recognition and landscape that stops a recovery truck reaching the pavilion. Planting, banks and walls do this discreetly.
3. The house. Alarmed and secured in its own right, with panic alarms. No car keys and no gallery codes are ever kept in the house.
4. The pavilion. It looks like a garden room, but its shell, doors and glazing are rated, and it is watched inside and out.
5. The lift shaft and lid. The shaft is never left as an open void. The lid locks, the shaft is alarmed, and the lift controls need a credential at both levels.
6. The ramp portal. The second way in is protected to the same standard as the first, with rated doors and a guarded approach.
7. The gallery air lock. Two interlocked doors, only one open at a time, with more than one proof of identity on the inner door.
8. The gallery shell. Reinforced walls, floor and ceiling, with detectors that sense drilling, coring and tunnelling. Large ducts are barred and alarmed.
9. Zones and the key store. Each zone sets separately. Keys live in a rated, screened store in the inner zone, released only to named people.
10. The car. Trackers, an immobiliser that needs a second factor, battery isolators and, on classics, clamps and forensic marking.

Designed with the insurer from the first sketch

For a valuable collection, the client's specialist collection insurer is in effect the design authority for security. Their surveyor's requirements become the security brief, so we bring them in at the start of design, not after fit-out.

Published insurer guidance asks for a centrally monitored alarm, smoke and heat detection with a backup communication path, and leak, gas and camera systems tied into the alarm. It also asks that cars cannot be seen from outside. Our car vault guide covers the wider insurance picture.

Ten layers designed with the insurer is one of the twelve principles of the BELOW Standard.

Monitored, dual-path, on standby power

Alarms are monitored around the clock by an accredited receiving centre, with confirmation before a police call. Under police rules, repeated false alarms can cost a site its police response, so systems are commissioned carefully.

Signals travel by two independent paths, so cutting one line does not silence the gallery. BS EN 50136 grades these dual-path systems by how fast a lost path is reported. Panels, cameras and communications run on standby power, and a power cut at night is treated as a security event. Our section on standby power explains how the gallery stays powered.

Cyber-secured lift and building systems

A connected gallery has a digital front door as well as a physical one. The security, building and lift systems each sit on their own network, separated by firewalls, with nothing exposed directly to the internet.

Remote access runs through a managed, logged connection. Every maintenance modem is accounted for. The owner's app can show status, but cannot open the gallery or start a car without a second factor.

The rules are tightening. The EU Machinery Regulation adds cybersecurity duties for machinery from 20 January 2027, and the UK has banned universal default passwords on consumer connected products since April 2024.

Keys, relay attacks and the car

Keyless cars can be opened by relaying the signal from a fob. Signal manipulation featured in 40% of vehicle thefts in the Crime Survey for England and Wales for 2022 to 2023, as reported by Crimestoppers.

So fobs live in screened storage inside the gallery, never in a hallway. Thatcham Research grades trackers, and its top category adds driver recognition and alerts for towing or battery disconnection.

Vetted people and need-to-know drawings

Staff and regular contractors are vetted, and everyone on the project signs a confidentiality agreement. Building periods bring extra risk, so contractor access is escorted and logged.

Security drawings are kept apart from the general project set, issued only on a need-to-know basis, and split so no single supplier sees the whole picture. Planning drawings are public, so security detail stays out of them. Our planning permission guide explains the planning side.

Escape always comes first

A gallery is a basement with people in it. Every door that people pass through opens freely from the inside, without a key, a code or a card.

Escape doors release in the direction of escape on a fire alarm or a power cut. Outer security doors stay locked to the outside. A fire alarm can never be used as a way to unlock the gallery. Our air and climate guide explains how smoke is cleared.