A guard tour system is how a security company proves its guards actually walked their patrols: checkpoints placed along a route, scanned by the guard at each stop, producing a timestamped record nobody has to take on faith. For decades that meant proprietary wands and wall-mounted stations. Today the strongest version is simpler and harder to fake: printed QR codes, scanned during a shift that is itself verified by a GPS-located, face-checked punch.
This guide covers what a guard tour system is, how QR checkpoints compare with NFC tags and the old wands, the ways guards actually cheat tour systems — and what defeats each one — and why the tour log belongs in the same system as the time clock and the client's own portal.
What is a guard tour system?
A guard tour system is a set of physical checkpoints, a scanning device, and a log. The guard scans each checkpoint as they pass it; the system records what was scanned and when; supervisors and clients read the record instead of relying on anyone's word. The idea is over a century old — the mechanical watchman's clock made rounds verifiable by stamping a paper disk with keys chained to stations around a building. The technology changed (touch-button wands in the 1990s, NFC tags in the 2010s, phone-scanned QR codes now), but the product has always been the same thing: evidence.
Modern systems add what the wand era could not: GPS coordinates captured at each scan, optional photos at the checkpoint, exception flags when a round is missed, and a live view instead of a log that uploads after the shift ends.
Why 'trust us, we patrolled' loses contracts
Property managers cannot watch an overnight post, so doubt is the default. Every incident — a break-in, a flooded floor discovered at 6 AM, a car broken into in the garage — triggers the same question: was anyone actually making rounds? In security-industry forums, owners describe buying tour systems for exactly two reasons: clients demanding reports, and needing to know their own staff are where they are supposed to be.
Patrol obligations are also contractual. Post orders and service agreements commonly specify round frequency — hourly garage sweeps, twice-nightly floor checks — and after an incident the client, their insurance carrier, or opposing counsel may ask for the patrol record. A company that can produce timestamped, location-verified logs is defending itself with evidence; a company that cannot is negotiating from memory.
For a small firm competing against national brands, proof is also an offensive weapon. A live, client-visible patrol dashboard is a differentiator the megafirms rarely offer on small contracts — and it is much cheaper than underbidding them on rate.
QR codes vs NFC tags vs the old wands
Wand systems are durable but expensive in every direction: proprietary hardware per station, a reader that must be bought and replaced, and in classic setups a log that only uploads when the wand is docked — meaning no live view during the shift.
NFC tags are cheap, scan with a tap from most modern phones, and require physical proximity, which makes them harder to fake remotely than a bare QR code. The tradeoffs are installation (tags must be mounted and replaced when they fail) and the requirement that every guard carry an NFC-capable device.
QR checkpoints cost whatever your printer charges. They can be produced, replaced, and re-placed in minutes, and any phone or tablet camera reads them. Their known weakness is that a code can be photographed once and scanned later from anywhere — which is exactly why a bare QR scan is weak evidence, and a QR scan bound to GPS and a verified shift is strong evidence.
The practical conclusion: the checkpoint technology matters less than what each scan is bound to. A wand log proves a wand was touched; an unbound QR scan proves a phone saw a picture. A scan that carries GPS coordinates, a timestamp, and the identity of a face-verified worker proves a patrol.
How guards cheat tour systems — and what actually stops it
The cheating methods are traded openly in guard communities: photograph every QR code once, then scan the pictures from the break room; scan the last checkpoint of the night and go home; hand your phone to a coworker who scans for two people; peel a tag off its door and keep it in a pocket.
Each has a specific countermeasure. GPS captured at the moment of each scan defeats photographed codes — the scan says stairwell B, the coordinates say parking lot, and the exception flags itself. Time-windowed or randomized round schedules defeat scan-and-leave, because the next window still has to be met. Binding the tour to a shift that began with a face-checked, GPS-located punch defeats the buddy handoff: the tour record inherits the identity of a verified worker, not just a device. And requiring a photo at selected checkpoints turns the highest-risk stops into visual evidence.
One fairness note from the worker's side: verification lands best when it is in the post orders, applied to everyone, and visible to the guard — a worker who can see their own completed rounds is a worker who cannot be blamed for a round someone else missed. Accountability systems fail when they feel like surveillance and succeed when they feel like protection.
Why the tour system and the time clock should be one system
Most security companies that adopt tour software end up running two parallel systems: a tour app that knows about checkpoints, and a time clock that knows about hours. Two rosters, two logs, and a weekly reconciliation nobody enjoys. The failure modes are predictable: a guard who is paid for a night with zero scans, a guard whose scans exist but whose punch was never recorded, and an invoice a client disputes because the patrol report and the billed hours came from different systems and disagree.
When the punch and the patrol live in one system, the discrepancies become impossible by construction. One verified punch opens the shift; every checkpoint scan attaches to it; the same record simultaneously produces the patrol report the client sees, the hours payroll pays, and the invoice the client is billed from. There is exactly one version of the night.
That is how StockPoint approaches it: guards punch in at a tablet kiosk or phone with a PIN, selfie face check, and GPS; QR checkpoint scans during the shift attach to that verified punch; clients watch checkpoint activity through their own portal; and the same punches flow to payroll exports (Gusto, ADP, QuickBooks, Paychex) and to invoices priced from verified hours.
Setting up checkpoints that survive the real world
Place checkpoints where skipping them would mean skipping the patrol: the far stairwell, the roof door, the loading dock, the back fence line — not three codes in the lobby. Laminate the codes, mount them out of easy public reach, and name each one by its location so exception reports read like a walk through the building. Match round frequency to the post order you actually signed, decide which checkpoints deserve a required photo, and brief the crew before enforcement starts, not after. Then make review a routine: exceptions weekly with supervisors, a patrol summary monthly with each client — ideally one they can already see live.
How much does a guard tour system cost?
Wand-era systems are typically priced as proprietary hardware per site plus software licensing, and replacing lost or damaged readers is a recurring line item. Phone-based tour apps are commonly priced per guard or per device per month. QR checkpoints themselves are effectively free — the cost is paper and lamination — which moves the real comparison to the software around them, and to whether tour tracking is a separate subscription or included in the workforce platform you already run shifts on.
The honest cost math runs the other direction, though: weigh any subscription against the admin hours of reconciling two systems, and against what losing a single contract to a preventable 'nobody was patrolling' dispute would cost. For most firms, the second number ends the discussion.
Do small security companies actually need one?
If any contract includes patrol obligations, or any post runs unsupervised overnight, then yes — in some form, even at five guards. The record protects the company in disputes, protects good guards from blame for rounds they did complete, and doubles as the proof-of-service story that wins renewals and new bids. Start with one building: a handful of QR checkpoints, a defined round schedule, and scans bound to verified punches.
If you want to see the combined version in practice — checkpoint scans attached to face-checked, GPS-verified punches, with a client-facing portal on top — StockPoint's time clock and client portal are built for exactly this workflow. A free signup at getstockpoint.com lets you set up a building, its checkpoints, and a tour schedule in an afternoon.