Nearly every piece of marketing advice a security integrator will read was written for a plumber. Run Google Ads, tidy the Business Profile, collect reviews, answer the phone faster. It is not wrong, exactly. It is solving a problem this industry does not have.
Home service marketing exists because nobody knows who is about to need a roofer. Demand is triggered by failure, failure is random, so the entire apparatus, marketplaces included, is built to react quickly to an event nobody saw coming.
Fire, security, access control and low voltage are not like that. In each one, the date the customer becomes a buyer is set from outside the customer, and it is published.
The short answer
Find out which clock governs an account, and call before it strikes. That is the entire strategy. Everything below is which clock applies where, and what to say when you arrive.
The four clocks
| Clock | What sets it | The trades it governs | What you sell |
|---|---|---|---|
| Code | NFPA 72, NFPA 25, local AHJ | Fire alarm, sprinkler, life safety | Inspection agreements, ITM programs |
| Standards | ANSI/TMA-AVS-01 | Intrusion, video, monitoring | Verification upgrades, monitored service |
| Lifecycle | 8–10 yr refresh, Prox/Wiegand obsolescence | Access control, low voltage | Retrofits, credential migration |
| Funding | NSGP, COPS SVPP, state programs | Commercial and institutional security | Assessments, scoped projects |
None of these depend on a customer having a bad day. All of them are documented publicly. Almost nobody in the trade markets against any of them.
Clock one: code
The most reliable of the four, because it is not optional.
NFPA 72 requires most commercial fire alarm systems to undergo semiannual visual inspections and annual functional testing, with control equipment and power supplies inspected quarterly to semiannually. NFPA 25 does the same for water-based systems on frequencies running from weekly to every five years.
That means every building in your radius has a known, recurring, legally required buying date, and the incumbent contractor holds it only until somebody better-organised arrives 60 days earlier. The mechanics are in fire alarm inspection lead generation and, for water-based systems, fire sprinkler inspection leads.
Tip
The sprinkler side has an extra lever worth knowing even if you do not hold that licence: NFPA reports that in 79 percent of incidents where sprinklers failed to operate, the system had been shut off, damaged or poorly maintained. That statistic converts inspection from a compliance cost into the reason the system works at all, and it comes from NFPA rather than from you.
Clock two: standards
Slower, larger, and almost entirely unexploited.
The ANSI/TMA-AVS-01 Alarm Validation Scoring standard classifies alarms into levels so law enforcement can prioritise response. As jurisdictions adopt it, verified alarms are prioritised and unverified ones are deprioritised. Every account running an unverified system therefore has a concrete, externally imposed reason to upgrade that has nothing to do with your pricing.
This turns video from a commodity hardware sale into the verification layer that determines whether anyone is dispatched, which is covered in CCTV installer lead generation. It also makes verification capability a field your records must carry, which we set out in best CRM for security alarm companies.
Clock three: lifecycle
Consultants generally suggest refreshing an access control system every 8 to 10 years, and retrofits of 25 years and older are common enough to be a discussed category. So a large share of the installed base is already overdue by the industry's own guidance.
Layered on top is credential obsolescence. 125 kHz Prox and Wiegand are widely regarded within the industry as insecure legacy technology, with OSDP as the sanctioned migration path. That makes the replacement argument a security argument rather than a feature argument.
The buyer has also changed. IT departments are auditing the technical debt they own, and on capital projects the CIO frequently outweighs the CSO. If your commercial pages cannot answer questions about 802.1x, TLS 1.3, signed firmware and SOC 2, you are filtered out before the call. The full approach is in access control installer lead generation.
Clock four: funding
For nonprofits, houses of worship and K-12 schools, the question is rarely whether they want security. It is whether they have money, and that is decided on a published federal schedule.
The Nonprofit Security Grant Program made $300 million available in FY2026, at up to $200,000 per location and $600,000 per organisation. The COPS School Violence Prevention Program funds K-12 safety technology at up to $500,000 per award over 36 months, with roughly 200 awards anticipated.
Applications require a described threat, a scoped solution and a cost estimate, which is the site assessment you already produce for free. Award lists are public. The full play, including timing, is in how to get commercial security contracts.
Watch out
Grant work runs 9 to 18 months from first conversation to invoice. That length is why the channel is uncontested, and why it is defensible once you are in it. It is also why it cannot be your only channel: you need code-driven inspection work paying the bills while the grant pipeline matures.
What is true across all four
The installed base is the best list you will ever have, and it is a records problem. Every campaign above starts with a query: which sites are due, which run obsolete credentials, which are not verification-capable, which agreements renew next quarter. If your system cannot answer those, you do not have a marketing problem, you have a data model problem. That is the argument running through low voltage contractor CRM software.
Assessments convert, quote requests do not. In every one of these trades the winning offer names the buyer's specific exposure: a due-date check, a records check, a credential audit, a would-your-cameras-actually-identify-someone review. They qualify while they convert, so the answers arrive before the first call.
Marketplaces are the wrong tool. Built for homeowner emergencies, useless where the buyer is a committee working to a budget cycle.
Limit your line card. One on-premise and one cloud platform per discipline, trained on hard. Depth wins technical evaluations and brings manufacturer reps into your deals. Nine logos reads as a reseller.
Price so you can afford to market. This is the one most often missed. Published buyer-side research puts fire alarm inspections at $12 to $25 per device while contractors routinely quote $2.50 to $7.50, and a shop underpriced by half cannot fund any of the above. We ran that arithmetic in how to price fire alarm inspection contracts.
We build the assessment offer, the conversion page, the qualifying form and the follow-up behind whichever clock governs your book, so enquiries arrive with the building, the systems and the timeline attached. If your real gap is that nobody is working the installed base you already own, we will tell you that instead of selling you a campaign.
The metric to run it on
Not cost per lead. Cost per dollar of new recurring revenue, plus retention by source.
These businesses are valued on recurring revenue: monitoring MRR trades at roughly 35x to 45x monthly and inspection ARR at 2x to 3.5x, with buyers looking for annual attrition under 5 percent. A lead producing a monitored account on a multi-year agreement and a lead producing a one-off camera install are not the same object, and averaging them hides which channel is building the company.
Three things to have in place:
- Tag the trigger at intake, every time: code date, standard, refresh, grant, incident. In a year that tells you which clock actually pays in your market.
- Report new recurring revenue by source quarterly, not lead count.
- Track retention by source. Accounts won on price churn; accounts won on a deadline renew. The gap compounds into the multiple.
Where to start
If you are starting from nothing, the order that produces revenue fastest:
- Build the forward calendar from your own installed base. Almost always finds work about to lapse.
- Fix the pricing before you market, or you will scale a loss.
- Replace the quote form with one assessment offer. One trade, one clock, one page.
- Add the reminder sequence. 60 to 90 days ahead, automatically.
- Then open the slow channel — grants or legacy-credential outbound — with the fast one already paying.
Every other trade has to manufacture urgency. This industry has four published calendars and almost no competition reading them.