What Is Cavity Sweeping? (Bug Sweeps)
Cavity sweeping, often called a bug sweep, is an authorized inspection of accessible wall, ceiling, floor, or joinery voids for suspected hidden microphones, cameras, transmitters, or recorders. It combines records review, visual checks, and suitable specialist tools. It is not a building-code procedure, and no code sets a standard sweep interval.
A suspicious mark or unexplained radio signal can create a difficult question: is there a device, or is there an ordinary building feature? A careful sweep answers that question through a planned inspection, not a blind cut or a single detector reading. The work must protect occupants, services, and rated construction as well as privacy.
What cavity sweeping means
A cavity sweep is a security inspection of accessible building voids for suspected surveillance devices. “Cavity” means a space within or behind a building element, such as a wall, ceiling, floor, or built-in cabinet. “Bug sweep” is a common informal name; it is not a defined building-code task.
A sweep may use visual checks, a review of building records, and specialist technical methods. The scope depends on the concern, the rooms involved, the access granted, and the building’s construction. A normal building inspection, a general electrical check, and a technical security sweep have different goals.
There is no universal code procedure or required frequency for cavity sweeps. A sound plan follows written authorization, local codes, and qualified technical-security practice. I treat an instrument reading as a lead to assess, not as proof that a device is present or absent.
What a sweep can and cannot establish
A sweep can document what an inspector could access and examine under the agreed scope. It may identify an item that warrants further review, or areas where access was limited. It cannot establish that every hidden space in a building is clear if those spaces were not accessible or suitable for inspection.
Radio-frequency, or RF, tools detect energy in parts of the radio spectrum. Wi-Fi routers, phones, and other ordinary equipment can produce signals. A reading alone does not identify its source. Likewise, a quiet reading does not prove there is no recording device, since some devices may not transmit during the inspection.
Planning the Sweep: Authorization, Threat Scope, and Building Records
Planning defines what the inspector may examine, which methods may be used, and how findings will be handled. Written authorization should name the rooms and accessible cavities, set privacy limits, and state who may approve opening or repair work. This prevents unclear scope and unnecessary damage.
Before work begins, I would ask the property owner or authorized representative to set out the concern and the boundaries of the inspection. The plan should say whether the work is visual only or may include controlled openings, who can approve those openings, and who is responsible for restoration.
Review available plans and records before inspecting. Useful items include renovation notes, electrical and plumbing drawings, fire-rating information, and records of prior access or repairs. Plans can be incomplete, so they guide the inspection but do not replace checks on site.
Agree on how the inspector will handle a suspected device. The safe response is to stop, record its location without disturbing it, and refer handling to authorized, qualified personnel. Do not conceal it, relocate it, or remove it as part of an informal inspection.
A written scope can include:
- Rooms and cavities that may be inspected
- Permitted tools and whether openings are allowed
- Areas that are off limits, including occupied or private spaces
- Who may authorize work that changes the building
- How photographs, notes, and findings will be stored and shared
- Who will repair finishes and rated assemblies
Access and Clearances: Services, Electrical Safety, and Rated Assemblies
Access must be planned around hidden services, structural parts, fire protection, and safe working space. There is no universal clearance for a sweep opening. Requirements depend on the assembly, equipment, and locally adopted codes; do not borrow clearances from unrelated appliances or ductwork.
Start with non-destructive checks and available plans. Identify likely electrical cables, plumbing, HVAC parts, framing, and fire-protection systems before considering an opening. Do not make blind cuts. Preserve existing ventilation paths and any clearance required by the equipment or assembly involved.
Electrical and attic access requirements
Where the locally adopted IRC provision applies, Section R807.1 generally requires an attic access rough opening of at least 22 by 30 inches. A ceiling opening also requires 30 inches of unobstructed headroom above it. Confirm the adopted edition and applicable exceptions with the local building authority; these dimensions are not a general rule for every cavity opening.
For covered electrical equipment, NEC 110.26(A) requires working space at least 30 inches wide or the equipment’s width, whichever is greater. The minimum height is generally 6 feet 6 inches. Required depth depends on voltage and the conditions in NEC Table 110.26(A)(1), so one depth should not be assumed for every installation.
Before anyone is exposed to electrical parts, OSHA 29 CFR 1910.333(b)(2) requires a qualified person to verify that equipment is de-energized, including by testing for absence of voltage. Applicable lockout/tagout procedures must also be followed. These workplace rules may apply depending on the work and setting; use a qualified electrician to determine safe controls.
Rated walls and concealed services
A fire-resistance-rated wall or ceiling is not ordinary patch-and-paint construction. Under IBC 714.4.1.1, through-penetrations in rated assemblies require an approved, tested firestop system suited to the actual assembly and penetrant. The listed system’s details govern; a generic sealant or assumed bead thickness is not a substitute.
If the assembly rating or the path of a service is unknown, stop before opening it. Have a qualified trade identify the assembly and plan any necessary repair. Cutting or enlarging an opening can damage wiring or weaken fire protection. Keep required electrical working space clear.
Execution: Non-Destructive Inspection, Controlled Opening, and Restoration
A careful sweep proceeds from records and visual checks to specialist tools, then to an opening only if it is authorized and needed. Each step should leave a record of what was checked and what could not be checked. This method reduces avoidable damage and makes the findings easier to assess.
- Survey and authorize. Confirm the written scope, rooms, access limits, permitted methods, and restoration responsibility. Review records and note known rated assemblies and utilities.
- Check access and hazards. Identify electrical, plumbing, HVAC, structural, and fire-protection elements. Set electrical safety controls with qualified personnel. Do not enter a confined space without the required evaluation and controls.
- Inspect and document. Use visual checks and appropriate specialist methods. Record locations, instrument settings, observations, and limits. Treat readings as leads, not conclusions.
- Open only with approval. If invasive access is necessary, have qualified trades open the smallest area that meets the scope. Protect services and stop if conditions differ from the plan.
- Restore and report. Repair the assembly using compatible methods, including a listed firestop system where required. Record findings, photographs, repairs, and any remaining access limits.
Method comparison and suitable use
| Method | What it can contribute | Main limitation | Appropriate next step |
|---|---|---|---|
| Records and visual review | Highlights altered finishes, known services, and areas for closer inspection | Records may be incomplete; visible surfaces do not show every void | Compare findings with the authorized scope |
| RF or spectrum tools | Shows radio-frequency activity that may merit investigation | Ordinary electronics can create signals; inactive devices may not appear | Assess the signal source with qualified specialist methods |
| Physical inspection of accessible voids | Allows direct viewing of accessible spaces | Access may be limited, and visibility is not proof that all areas are clear | Document the inspected area and any blind spots |
| Controlled opening | Provides access where non-destructive checks are insufficient | Can damage services or rated assemblies if poorly planned | Obtain approval and use qualified trades for opening and repair |
Verification: Evidence, Limitations, and Closeout Documentation
Verification means checking suspected findings and recording the limits of the work. A report should separate observations from interpretations, explain which areas were inaccessible, and note any actions taken. Clear documentation helps the owner decide whether further authorized review or building repair is needed.
A report should include the date, locations examined, methods used, relevant instrument settings, observations, photographs where permitted, and any openings or repairs. It should also state what was outside the scope. Do not write “clear” if some cavities could not be inspected; describe precisely what the inspection did and did not cover.
Two illustrative inspection scenarios
These examples are hypothetical workflows, not claims about documented incidents.
A signal near a remodeled wall: A homeowner notices an unfamiliar RF reading near a wall altered during a prior renovation. The inspector checks the written scope and renovation records, then considers ordinary sources such as nearby network equipment. The reading is not treated as proof. If further inspection is warranted, the owner approves a controlled plan before any opening.
A proposed opening in a rated ceiling: A contractor is asked to open a ceiling cavity during a sweep. Records or on-site review indicate the ceiling may be part of a rated assembly. Work pauses until the assembly and nearby services are assessed. If an opening is authorized, the repair must follow an approved tested system suited to that construction, not ordinary patching.
The key closeout question is not simply whether a device was found. It is whether the agreed area was inspected safely, what evidence supports each finding, what remains uncertain, and whether any building element needs repair.
Conclusion
Cavity sweeping is an authorized technical-security inspection, not a code-defined construction task. A reliable process sets clear permission and scope, checks records and hazards, uses suitable methods, and documents limits. If access requires cutting, involve qualified trades and protect rated assemblies, utilities, and electrical working space.
Frequently asked questions
Is cavity sweeping required by building code?
No universal building-code procedure or sweep frequency exists. Local codes still apply to access, electrical safety, and any opening or repair.
Does a cavity sweep mean opening every wall?
No. The scope may use non-destructive checks and accessible voids. Any invasive opening should be necessary, authorized, and planned around services and rated construction.
Can an RF detector prove that a bug is present?
No. An RF reading can have ordinary causes and does not identify a device by itself. It should be treated as a lead for qualified assessment.
Can a quiet RF reading prove a room is clear?
No. A device may not transmit during an inspection, and the tool may not detect every type of device. Reports should explain method limits.
Who should perform a technical sweep?
Use qualified technical-security professionals for specialist inspection. Use licensed or otherwise qualified trades for electrical work, openings, and repairs as local rules require.
Can I cut a small inspection hole myself?
Do not make a blind cut. First identify possible services and whether the assembly is rated. Obtain authorization and qualified help if the opening could affect wiring, structure, or fire protection.
What size must an attic access opening be?
Where the applicable IRC R807.1 provision is adopted, the rough opening is at least 22 by 30 inches, with 30 inches of unobstructed headroom above a ceiling opening. Confirm local adoption and exceptions.
How should a suspected device be handled?
Do not disturb, conceal, relocate, or remove it during an informal sweep. Document its location and refer handling to authorized, qualified personnel.
How often should a home be swept?
There is no code-set interval. The need and timing depend on the owner’s concern, changes in access or occupancy, and the authorized scope.
What should a final report include?
It should list areas checked, methods and settings, observations, photos if permitted, repairs, and areas not inspected. It should distinguish evidence from interpretation.
(This article was written by one of our staff writers, Garrett Vance. Visit our Meet the Team page.)
