RSC vs TL-15: When Does It Make Sense to Upgrade?

The short answer: upgrade to TL-15 when your insurer requires a commercial UL rating, when you're storing high-value inventory overnight without reliable alarm coverage, or when your threat model involves a determined attacker with real tools. For most homeowners storing firearms with a working alarm system, a well-built RSC is enough.

That answer gets more useful the more you understand what each rating actually measures, because RSC and TL-15 are not different grades of the same test. They come from completely separate testing standards, with different tools, different definitions of what counts as a breach, and different assumptions about who's trying to get in. The "5 minutes vs. 15 minutes" comparison that dominates most of these conversations is real, but it's the least important part of the difference.

At Safe & Vault Store, this is one of the questions we field most often, and below we break down exactly what each rating tests and how to match the right one to your situation.

What Is an RSC Safe?

RSC stands for Residential Security Container. It's a certification issued under UL 1037, a testing standard written specifically for the residential market, most commonly applied to gun safes.

To earn an RSC rating at the baseline tier (Attack Level One), the safe has to withstand a single certified technician attacking it for five minutes using common hand tools: hammers, chisels, wrenches, pry bars, screwdrivers, and drills with up to a 1/4-inch bit. No carbide-tipped tools are permitted. Nothing longer than 18 inches or heavier than 3 pounds. If the technician can't create a 4-inch opening in any surface of the safe within that window, the safe passes.

That's the floor. A well-built RSC long gun safe like the AMSEC NF5924E1 is built with an 11-gauge body (one step above the 12-gauge minimum) and a 1/4-inch solid steel door, which exceeds the standard's minimum requirements. But the certification itself only confirms what the test measured.

What Is a TL-15 Safe?

TL-15 is a completely different certification, issued under ANSI/UL 687, a commercial burglary-resistance standard. The "TL" stands for "tool resistant," and the "15" refers to the net attack time the safe is required to resist.

At the TL-15 level, two certified technicians attack the door and front face of the safe for 15 minutes using a significantly broader toolkit: carbide drills, high-speed grinding wheels, and pressure-applying devices, in addition to hand tools. To pass, the safe must prevent any opening of 6 square inches or more through those surfaces within that time. The body of the safe must also meet a separate construction specification, and depending on the materials used, may undergo its own attack test as well.

TL-15 is part of a family of escalating ratings: TL-15, TL-30, and TL-30x6. Each step up means a longer attack time or more surfaces tested, or both.

Why This Comparison Gets Confusing

Most people who look into this topic end up treating it as a time comparison: 5 minutes versus 15. But that framing skips over the part that matters most, which is the toolset.

A test conducted with constrained hand tools is measuring one kind of attack resistance. A test conducted with carbide drills and grinding equipment under lab conditions with two technicians is measuring a completely different one. A safe that holds up under the RSC toolset was never tested against the TL-15 toolset, so you can't extrapolate from one rating to the other.

To be clear, neither number means "this is how long a burglar takes to get in." Both are net working time (NWT), meaning the actual hands-on time a certified test crew spends attacking the safe under controlled lab conditions. As we note on our burglary ratings page, even professional safe technicians with full knowledge of the safe's construction and the right tools typically take one to eight hours to open a rated safe legally. Real-world break-in attempts take longer still, because most attackers are working blind, under time pressure, without specialized equipment.

RSC vs TL-15: Side-by-Side Comparison

One thing worth knowing: UL's 2016 revision of UL 1037 added Attack Level Two and Three above the baseline. Level Two raises the attack time to 10 minutes and expands the permitted tools. Level Three tightens the allowed breach size to 2 square inches. Both are uncommon ratings with relatively few safes currently carrying them, and to date, no safes carry a Level Three rating.

The Part Most Buyers Miss: TL-15 Body Testing Is Different from the Door Test

This is the detail that consistently catches people off guard.

The TL-15 timed tool attack applies to the door and front face. The body has its own requirements, but they work differently depending on how the safe is built.

If the body is constructed from solid metal meeting UL 687's baseline specification (walls equivalent to at least 1 inch of open-hearth steel at 50,000 psi tensile strength, fastened with the equivalent of a continuous 1/4-inch penetration weld), it qualifies on construction alone.

Most commercial TL-rated safes, however, use composite construction rather than solid steel for the body walls. Under UL 687 Section 6.1.5, when alternative materials are used, the manufacturer must prove equivalency through an actual attack test: the body material must resist 5 minutes of attack using TL-30-level tools without producing a 6 square inch opening. This is a separate, shorter test than the 15-minute door attack, but it does use the same advanced toolset.

The practical takeaway: the body of a TL-15 safe is not unprotected, but it is tested to a different standard than the door. That gap matters if your installation puts the safe where a patient attacker could get sustained access to a side panel.

If side-wall exposure is a concern, the answer is a TL-30x6 or similar x6-rated safe, which extends the full timed tool attack to all six surfaces. While TL-15x6 exists as a classification under UL 687, it's uncommon in the commercial market. TL-30x6 is the practical option most buyers and insurers work with for all-surface protection. Browse our TL-30x6 safes to see what's available.

Weight and Anchoring Matter More Than Most People Expect

A safe that can be picked up and moved gets attacked somewhere else, on someone else's schedule, with better tools. That's a very different threat scenario from a safe that has to be defeated on-site, in whatever time is available before someone notices.

Under UL 1037, lighter residential safes must pass a drop test (simulating being knocked or thrown to the floor) unless proper mounting provisions are supplied. Physical stability is part of the security concept from the start.

TL-15 raises that bar considerably. ANSI/UL 687 requires the safe to weigh at least 750 lb (340 kg) or be anchored to the premises. A mid-range model like the AMSEC CE2518 AMVAULT comes in at 1,105 lbs before anything goes inside it. At that weight, you're looking at professional delivery, deliberate placement, and structural floor considerations if it's going anywhere above the ground level.

That weight also prevents an attacker from tipping the safe over onto its back to get better leverage for prying the door open, which is a real-world attack method against lighter safes.

Insurers and security professionals consistently treat weight and anchoring as first-order constraints, not afterthoughts. A safe that can't realistically be removed or repositioned forces any attack to happen on-site in its installed position, which means the time and noise required to defeat it work directly against the attacker.

How Alarm Coverage Changes the Equation

The security value of any rated safe depends heavily on what else is in place around it.

A UNC Charlotte study of 422 incarcerated burglars across three U.S. states found that 83% tried to determine whether an alarm was present before committing to a target, and 60% said they would look for an alternative if an alarm was present.

Both RSC and TL-15 safes are fundamentally delay devices. Their job is to slow an attack down long enough for detection and response to intervene. The longer the required attack time, the greater the risk of getting caught. That's the actual security value proposition of a higher rating.

When a monitored alarm and reliable response are already in place, an RSC at Attack Level One or above is often adequate for residential or lower-inventory situations, because the detection layer cuts the attack short before the delay window runs out. The case for TL-15 gets stronger when you can't rely on that detection layer: no monitoring, slow emergency response times, or an installation where extended undetected access is genuinely possible.

When the Upgrade Makes Sense

The table below translates the standards into practical decision logic. These are guidelines grounded in the real differences between each rating, not guarantees.

One consistent thread: verify your insurer's requirements before committing to a rating. Jewelers Mutual advises buyers to factor in current and future inventory value when choosing a safe rating, and specifically notes that safes are heavy, bulky, and expensive to move. A forced upgrade later can mean significant rework.

Which Rating Is Right for You?

Most homeowners storing firearms with a working alarm system don't need a TL-15. A well-built RSC gets the job done when detection is already in place to interrupt an attack. If you're in that camp, browse our RSC safes and filter by size and features that fit your situation.

If you're storing high-value inventory overnight, your insurer requires a UL 687 rating, or you're in a location where a monitored alarm isn't a reliable backstop, TL-15 is where we'd point you. The broader toolset it's tested against is a meaningful step up, and the weight and anchoring requirements alone change the threat profile significantly. Browse our TL-15 safes to see what's in stock.

Not sure which side of the line you're on? That's exactly the kind of question we're here for. Contact us, and we'll help you think through your installation, your inventory value, and what your insurer actually requires before you commit to anything.