Hardening Houses of Worship
A VYKEN Approach to Soft-Target Protection

Why Houses of Worship Are Soft Targets

Security professionals use the term “soft target” to describe a location that draws people together in predictable numbers, at predictable times, with minimal physical barriers to entry. By that definition, few facility types are softer than a church, synagogue, mosque, temple, or gurdwara.

Consider the features that make a congregation’s home so welcoming — and, without deliberate design, so exposed:

• Publicly posted schedules. Service times, holiday observances, and special events are advertised on websites, marquees, and bulletins by design, so that anyone in the community can plan to attend. That same information tells anyone with hostile intent exactly when the building will be occupied and exactly when it will sit empty.
• Open, unscreened access. Unlike an airport, courthouse, or corporate lobby, a house of worship is built around the expectation that a stranger can walk in unannounced and be welcomed, not screened.
• Large, unattended parking areas. Weekend and holiday services fill parking lots that sit empty and largely unmonitored the rest of the week — and even during services, few congregations have anyone watching the lot itself.
• Minimal or no professional screening. Most congregations do not operate metal detectors, badge systems, or dedicated security staff at the door. The people managing entry, if anyone is assigned to it at all, are more often greeters than guards.
• Volunteer-run security. Where a safety team exists, it is frequently staffed by well-meaning volunteers — off-duty officers, retired military, concerned parishioners — operating without a shared, structured assessment of where the building’s actual vulnerabilities lie.

None of these features are flaws. They are the point. A congregation that feels the need to interrogate every visitor at the door has, in a meaningful sense, already lost something essential to its mission. The challenge is not to eliminate openness. It is to understand exactly where that openness creates exposure, and to close the gaps that matter most without closing the doors.

It is also worth naming why this category of property draws sustained attention from security researchers and federal agencies alike. Soft targets are not defined by the presence of a specific threat — they are defined by low barriers to access combined with high concentrations of people. A house of worship checks both boxes on a weekly, sometimes daily, basis. That combination is what places congregations, alongside schools, shopping centers, and transit hubs, squarely within the soft-target category that guidance from federal and industry sources is built to address. Recognizing that classification is not an indictment of any single congregation’s current practices. It is simply the starting point for an honest vulnerability conversation — one that far too many faith communities have never had in a structured way.

The Openness-Versus-Security Dilemma

Every hardening decision a congregation makes runs into the same tension: security measures that feel intrusive can quietly undermine the hospitality that defines the community in the first place. Fencing the entire perimeter, staffing an armed checkpoint at every door, or requiring bag searches before entry may reduce certain risks on paper, but they also change what the building communicates to the people it exists to serve. A visitor’s first experience of a congregation should not feel like clearing security at a courthouse.

This is not a reason to avoid hardening. It is a reason to do it deliberately. Guidance from ASIS International on soft-target protection and active-assailant preparedness, along with resources published by the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Homeland Security for houses of worship and other soft targets, consistently emphasize the same principle: effective protection is layered, proportionate, and largely invisible to the people it protects. The best interventions do not announce themselves. Improved sightlines, better lighting, a clearly defined and monitored entry sequence, and trained ushers who understand what to look for all reduce vulnerability without changing how a visitor feels walking in.

That is the design brief. Not a fortress. A building that remains unmistakably open — while quietly closing the specific gaps an adversary would look for.

It also helps to separate two questions that congregations frequently conflate: “How do we make people feel safe?” and “How do we make the property actually safer?” The two overlap, but they are not the same question, and optimizing for the first at the expense of the second is a common mistake. A visible guard at the front door may reassure some congregants while doing little to address an unlocked side entrance that no one is watching. A structured assessment keeps the two questions separate, so that emotional reassurance and measurable risk reduction can both be pursued deliberately, rather than assuming that one automatically produces the other.

The Vulnerability Domains That Matter

A structured assessment of a house of worship looks across several distinct domains, because a vulnerability in one area rarely behaves the same way as a vulnerability in another. Environmental design principles associated with Crime Prevention Through Environmental Design (CPTED) — integrated within the VYKEN Asset Protection Matrix™ (VAPM™) — provide the analytical lens for most of them.

Perimeter

Where does the property boundary sit, and how clearly is it defined? Overgrown landscaping, unmonitored rear property lines, and unclear separation between public sidewalk and church grounds all create ambiguity that a well-designed perimeter removes. Natural surveillance — the ability of staff, volunteers, and passersby to see what is happening on the property — starts at the property line.

Entry Points

How many doors allow public access, and is that number a deliberate choice or simply a byproduct of the building’s design? Congregations frequently have far more unlocked, unmonitored entry points than they realize — side doors propped open for ventilation, fellowship-hall entrances left unattended, staff doors without controlled access. Every entry point is a decision point, and every decision point should be a deliberate one.

Interior and Sanctuary

Inside the building, sightlines and egress matter most. Can ushers and greeters see the full width of the sanctuary from their posts? Are exits clearly marked, unobstructed, and sufficient in number for the congregation’s peak attendance? A sanctuary designed for reverence and acoustics was rarely designed with rapid, orderly egress as a primary consideration — and that gap is worth identifying before it matters.

Parking and Grounds

The parking lot is often the least protected and most heavily used part of the property. Lighting quality, distance from the building to the farthest parking spaces, and the presence or absence of any monitoring during services all shape how exposed congregants are during the highest-traffic minutes of the week — arrival and departure.

Special Events and Gatherings

Holiday services, weddings, funerals, and community events change the risk profile temporarily but significantly. Higher attendance, unfamiliar visitors, additional vehicle traffic, and sometimes press or public attention all raise the stakes for a single day or evening — and a congregation’s everyday security posture is rarely sized for its highest-attendance day.

How VYKEN Property Vulnerability Intelligence™ Assesses a House of Worship

VYKEN Property Vulnerability Intelligence™ applies the same disciplined, four-phase process to a house of worship that it applies to any other property type — adapted to the specific rhythms and sensitivities of a faith community. The engine behind the assessment is the VYKEN Asset Protection Matrix™ (VAPM™) — Vyken’s proprietary framework integrating recognized methodologies including CPTED and CARVER alongside proprietary AI-native analytics.

A VPVI™ score gives a governance board something a volunteer walkthrough rarely produces: a single, comparable, trackable number that can be reported to the congregation, revisited at the next board meeting, and improved over time through VYKEN Intelligence Monitoring™ (VIM™) as corrective actions are completed.

Prioritized, Phased Hardening Through the Corrective Action Plan

The most common mistake congregations make is not underinvesting in security — it is investing in the wrong things first, usually because no one has told them, with evidence, what the priority order should be. A Corrective Action Plan solves that problem by ranking interventions according to how much vulnerability reduction they produce relative to their cost, so a congregation with a limited budget knows exactly where to start.

In practice, this usually means environmental and procedural fixes come first, because they are the lowest-cost and highest-leverage interventions available:

• Lighting improvements across parking areas and building perimeters, closing the gap between where cars are parked and where the nearest illuminated path leads.
• Vegetation and landscaping management to eliminate concealment near entrances and walkways, restoring natural surveillance without any construction.
• Consolidating and controlling entry points during services, so greeters and ushers can focus their attention on a known, limited number of doors rather than an unmonitored building perimeter.
• Basic access control for administrative offices, classrooms, and any attached childcare areas, separating public gathering space from spaces that should remain restricted.
• Trained greeter and usher protocols, giving volunteers a specific, structured role in observing arrivals rather than a general instruction to “keep an eye out.”

Only after these lower-cost, lower-friction measures are addressed does a Corrective Action Plan typically turn to higher-cost interventions — camera coverage, reinforced entry hardware, panic alert systems, or a professionally trained safety team — and even then, each is scoped and sequenced according to the vulnerabilities the assessment actually found, not according to a generic security vendor’s product catalog.

Ad-Hoc Volunteer Security vs. Structured Vulnerability Intelligence

Most congregations already have some form of safety effort in place — a rotating group of volunteers, an informal usher assignment, perhaps a retired officer who walks the lot before service. That effort reflects real commitment. What it typically lacks is structure: a documented, prioritized, revisitable basis for deciding what to do next.

The comparison is not a criticism of volunteer safety teams — it is an argument for giving them better information. A structured VPVI™ assessment does not replace a congregation’s safety volunteers. It gives them a shared, evidence-based map of where their attention matters most.

This distinction matters most in the moments after an incident, near-miss, or insurance renewal, when a governance board is asked what the congregation knew about its risk profile and what it did about it. “Our volunteers do their best” is a sincere answer, but it is not a documented one. A dated VPVIA™ report, a scored VPVI™, and a Corrective Action Plan with a visible timeline of completed items is the kind of record that boards, denominational risk offices, and insurance carriers can actually evaluate.

Funding Your Security Upgrade

Cost is the most common reason congregations delay hardening, even after vulnerabilities are identified. The FEMA Nonprofit Security Grant Program (NSGP), administered by the Department of Homeland Security, exists specifically to help nonprofit organizations at high risk of terrorist attack — including houses of worship — fund target-hardening and other physical security enhancements. A documented, scored vulnerability assessment is exactly the kind of evidence NSGP applications are built to evaluate: it demonstrates that requested funding is tied to identified, specific vulnerabilities rather than a general wish list.

A VPVIA™ report’s Corrective Action Plan — with its prioritized findings and planning-level cost guidance — translates directly into the kind of narrative and budget justification NSGP applications require. For a closer look at how the grant program works and how to build a competitive application around a vulnerability assessment, see Funding Your Security Upgrade: FEMA NSGP.

Grant funding is also a reason to complete the assessment before shopping for hardware, not after. NSGP reviewers are evaluating whether an applicant understands its own risk and is requesting funding to address it specifically — a generic list of cameras and door locks reads very differently from a request tied line-by-line to a documented VPVI™ finding. Congregations that assess first and apply second consistently submit a stronger, more defensible case for funding, and they avoid spending limited grant dollars on interventions that do not address their highest-priority vulnerabilities.

Protect the Welcome, Not Just the Walls

A house of worship’s greatest asset is not its building — it is the openness that makes people want to walk through its doors. Hardening that building well means protecting exactly that quality, not trading it away for a false sense of security. The path there is not more hardware or more suspicion at the door. It is a structured, prioritized understanding of where the real vulnerabilities are, and a phased plan to close them in the order that matters most.

VYKEN Property Vulnerability Intelligence™, powered by the VYKEN Asset Protection Matrix™ (VAPM™), gives congregations of any size and any faith tradition that structured understanding — a scored VYKEN Property Vulnerability Index™ (VPVI™), a defensible VPVIA™ report, and a Corrective Action Plan that respects both the safety and the spirit of the community it protects.

Frequently Asked Questions