Roof leak diagnosis and troubleshooting for commercial roofs

The truth about roof leaks: it is the details, not the field

A roof leak almost never starts in the open field of the membrane. It starts where the sheet stops being one continuous piece and somebody had to seal around something by hand: a pipe boot, a curb, a drain, a seam, a wall termination, an edge. The flat field is the part a machine made and it rarely fails on its own. The details are the part a person made at the end of a shift, and that is where the water gets in.

So the first rule of leak diagnosis is to stop looking at the field. Chase the details first, in the order they leak, and you will find the entry on most roofs without ever touching the open membrane. The companion guide on penetration flashing details lays out how those boots, curbs, and terminations are built and why each one fails. This guide is about finding which one is leaking now.

A perfect field over a rushed boot leaks. A modest field over clean details stays dry for thirty years. When the call comes in, put your attention where the water actually enters, not on the easiest part of the roof to walk.

Why is the roof leak not above the stain?

The interior stain is rarely below the entry point, because water travels before it drops. It comes through the breach in the membrane, then runs along the top of the deck, down a flute in steel decking, along a joint in the insulation, or down a rafter or bar joist until it finds the first place gravity lets it fall. By then it can be ten or twenty feet from where it entered, in a different bay, sometimes on a different part of the building.

This is the one thing that makes roof leaks hard, and it is why the obvious move, sealing the spot above the stain, so often fails. The hole is uphill of the stain along the path the water took, not straight up. On a steel deck the flutes act like gutters and carry water a long way before it spills at a side lap or an end lap. On a concrete deck the water spreads and pools until it finds a crack or a conduit penetration through the slab.

Read the path backward. Follow the stain to where the water dropped, get above the deck if you can, and trace the trail uphill to the high point where it entered. The entry is always at or above that high point, never below it.

The usual suspects, ranked

When you start the hunt, work the list in the order each source leaks, not at random. The ranking holds across low-slope commercial roofs, and it matches what anyone who has chased leaks for years already carries in their head.

Curbs and the equipment on them lead, because they are the biggest hand-built details, they sit in the flow of water, and every one has four corners. Pipe penetrations and boots come next, the cracked boot and the neglected pourable pocket. Drains and scuppers are close behind and the most underrated source on the roof. Wall and parapet terminations follow, then seam and lap failures, then the edges and metal, then fasteners backing out. The open field is dead last and rarely makes the list at all.

Work top-down through that list. The flashing guide covers how each detail is built. Here the point is the order you check them in when something is leaking.

What does the leak history tell you?

The fastest diagnostic tool is the interview, before you ever climb up. When the leak shows tells you what to suspect, because different failures only leak under different conditions. Get the building's history from whoever has watched the ceiling.

A leak only in driving, wind-driven rain points at a wall, a counterflashing, or a lap the wind drives open, because it takes wind pressure to push water up behind a flashing or sideways into a seam. A leak only after snow or a hard freeze-thaw points at ice damming and snowmelt backing over a base flashing that is too low. A leak every time it rains, even a light rain, points at an open hole, a failed boot, or a puncture in the field, because that needs no help to let water through. A leak that gets worse hours after the rain stops points at ponding draining slowly through a breach, or at saturated insulation wringing itself out. And a problem that runs all winter and never in summer is usually not a leak at all. It is condensation.

Write the answers down. The history narrows the search from the whole roof to one kind of detail before your boots leave the ground.

The inspection from inside

Start under the stain, not on the roof. The inside inspection reads the path the water took and points you at where to look up top, and skipping it sends you onto the roof guessing. Get into the ceiling, the plenum, or the attic space below the stain with a strong light.

Follow the stain to its highest point and keep going up. Look at the underside of the deck for a trail: a rust streak on a steel deck, a mineral stain on concrete, a darkened path on wood. Water leaves a track that points uphill toward where it entered. Trace it along the flutes, across the insulation, down the bar joists and beams, back to the high point where the trail starts. That high point is directly below, or close to, the entry.

Note the structure as you go. On a steel deck the water rides the flutes, so the entry is often up-flute from the drip and offset to one side. Mark the spot on the deck, measure it off two walls or a column line, and carry those coordinates to the roof. The number you bring up top is what keeps the roof inspection honest.

The inspection from the roof, worked uphill

On the roof, go to the coordinates you marked from inside, then work uphill from there, because the entry is always at or above the point where the water dropped. Stand over the interior high point and look up-slope, the direction the water came from.

Inspect every detail uphill of and around that spot before you touch the field. The pipe boots, the curbs and their corners, the drains, the wall terminations, the seams. Get down on the membrane and look closely: a cracked boot, a clamp ring with loose bolts, a fishmouth in a seam, a term bar pulling away, a pourable pocket dished and cracked. Probe the seams and the detail welds with a blunt tool. Most of the time the entry is one of these, sitting uphill of the stain along the water's path.

Do not flood the field and skip the details. A roof inspection that ignores the flashings and washes the open membrane is backwards, because the field is the part that rarely leaks. Spend the time where the water gets in.

Why do ponding water and drains cause leaks?

Standing water finds every weakness, so ponding turns a detail that would shed a passing rain into a detail that leaks. The NRCA calls water that stays on the roof 48 hours or more after rain ponding, and a roof is supposed to be built to drain, commonly with at least 1/4 in per foot of slope, so water reaches the drains and scuppers instead of sitting. Where it sits, it leaks.

The drain itself is the most underrated leak source on the roof. The clamping ring backs its bolts out and stops compressing the membrane, so water runs under the ring. The drain was set without a sump, so the field slope dies short of it and water ponds in a donut around it. The scupper through the parapet has an open joint at its sleeve. Any of these sits under standing water that tests it around the clock.

A low spot that ponds is a leak waiting on a flaw. Check the drains and scuppers first when the leak gets worse after the rain stops, because that is the signature of water draining slowly through a breach it found while it sat.

Penetration and curb leaks: the most common source

The pipe boot and the equipment curb are the two details that leak most, so they are the first place to look on almost any leak call. A pipe boot bakes in the sun, the material hardens and cracks at the top where it clamps, and the clamp's sealant dries and pulls away, so water runs straight down the pipe and into the building. A boot that looks fine from a distance is often split at the top when you get down to it.

Curbs leak at the corners. A rooftop unit, a fan, or a hatch sits on a curb with four field-fabricated corners, and the corner is where flat material had to become three-dimensional and somebody stretched it thin or trapped a fishmouth. The unit's own cabinet leaks too: a rusted pan, an open access panel, a condensate line dumping where it should not. On an HVAC curb, check the roofing corners and the unit before you blame the field.

Get above the stain, find the nearest curb and boot uphill, and work them hard. The flashing guide covers how these are built. The leak is usually in how this particular one weathered or was rushed.

Walls, parapets, and counterflashing

A leak that shows only in driving rain usually comes from a wall, because it takes wind to push water up behind a vertical flashing. Where the roof meets a wall or parapet, the membrane turns up as base flashing and a counterflashing or reglet caps the top edge. The water gets in at that top edge, or above it, in the wall itself.

The reglet is the usual culprit. The counterflashing tucks into a saw-cut groove sealed with caulk, and caulk is maintenance, so a reglet nobody re-seals lets water into the cut and down behind the base flashing. A surface-mounted counterflashing leaks where its sealant line fails, or where it laps behind the base flashing instead of over it. And the wall above the roof leaks on its own: open mortar joints, a failed coping, a cracked stucco parapet, all of which feed water into the wall that then runs down behind the flashing and into the building well below.

Look above the roof line, not just at it. When the stain is at an exterior wall and only appears in wind-driven rain, the entry is often a foot or several feet up the wall, not in the roof at all.

Seam and lap failures

Seams leak where two sheets were joined and the joint was never sound. On a thermoplastic roof, TPO or PVC, the field seams are hot-air welded, and a cold weld, a skip, or a dirty lap leaves a void that looks closed but is not. A T-joint, where three sheets overlap, is the classic weak point. On EPDM the seams are taped or glued, and the tape lifts at the edge or the splice was contaminated.

Find them with a probe, not your eyes. Run a blunt steel probe along the edge of every seam in the suspect area after the weld has cooled, with steady pressure, and any spot that catches or opens is a void that leaks. A seam can look perfect and probe open an inch down. The fishmouth, a small open wrinkle along the lap, is visible and a known leak path.

Seams rank in the middle of the suspect list, below the penetrations and drains but above the field. Work them when the boots, curbs, and drains uphill of the stain check out clean. The seam-probe discipline is the same one the seam-QA work uses on new roofs. Here you are applying it to find the failure, not to certify the install.

The pitch pan: a chronic leaker

The pourable sealer pocket, the pitch pan, is on the short list for any leak near an odd-shaped penetration, because it is the detail built to leak eventually. It is a metal or molded box flashed to the membrane around a shape nothing else can flash, filled with a pourable sealant. The sealant shrinks as it cures and again as it weathers, settles below the rim, ponds water in the dish it leaves, then cracks or pulls from the penetration.

A pocket nobody tops off is a funnel pointed into the building. When you find a pitch pan near the stain, expect it to be the leak until proven otherwise: look for a dished, cracked, or pulled-away filler with water sitting in the dish. The fix is not another bead of caulk over the top. It is cleaning it out and re-pouring it crowned above the rim so it sheds, or better, rebuilding the detail without a pocket at all.

The flashing guide covers why the pocket is the last resort and how it is built. On a leak call, it is the first detail to doubt.

Skylights, hatches, and equipment

Skylights leak at the curb and at the glazing, and telling which is the diagnosis. The curb is flashed like any other curb and leaks at its corners and term bar. The skylight unit itself leaks at the gasket between the dome or glass and the frame, at weep holes that clogged, or at the screws through the frame. Water at the gasket runs down inside the curb and shows up looking exactly like a flashing leak, so check the unit before you tear into the roofing.

Roof hatches are the same story: the curb flashing, then the hatch's own gasket and hinge side. Equipment cabinets, the rooftop unit itself, a sign, a satellite dish base, all have their own leak paths that have nothing to do with the membrane. A condensate drain from an RTU that dumps onto the roof can stain a ceiling and read as a roof leak when the membrane is fine.

Separate the roofing from the thing sitting on it. When the stain is under a skylight or a unit, prove whether the water is coming through the roofing detail or through the product on top of it, because the repair and the responsible trade are different.

Mechanical damage and foot traffic

Some leaks are not a detail wearing out. They are a hole somebody put there. The most common is mechanical damage from other trades: an HVAC tech drops a tool, a satellite installer drives a screw through the membrane, a crew drags equipment across the roof and tears it. These show up as leaks right after work was done up top, which is the tell to ask what changed.

Foot traffic does it slowly. The membrane around a rooftop unit takes a beating because that is where the service techs stand, and traffic abrades the sheet, drives grit into it, and works the flashing loose right where you least want it. The path from the hatch to the equipment is a wear line, and the leak often sits on it.

When the history says the leak started after recent rooftop work, walk the new equipment and the path to it before anything else. Look for fresh screws, dropped fasteners, tears, and crushed membrane. A puncture in the open field is rare on its own, but a puncture from a dropped tool is common, and it is one of the few times the field actually is the leak.

Is it a leak or condensation?

Sometimes it is not a leak at all. Warm, moist indoor air rises, hits the cold underside of the deck or a cold metal fastener, condenses, then drips onto the insulation and the ceiling looking exactly like a roof leak. Misdiagnose it and you replace roofing that was never the problem, while the real cause, indoor humidity and poor ventilation, keeps going.

The tells separate the two. Condensation tracks the weather backward: it shows up in cold months, runs all winter, and disappears in summer, while a leak follows the rain. Condensation is widespread and even, a general dampness with rust on the fasteners and frost on the deck in a cold snap, not a single concentrated drip. It is worst where indoor humidity is high, over a kitchen, a pool, a process with steam, or a building sealed up tight with no ventilation. A leak is tied to a rain event and traces to a single entry.

Check the underside of the deck on a cold morning before you condemn the roof. Frost or sweat across the whole deck, with no rain in days, is condensation, and the fix is ventilation and humidity control, not roofing. Treating the two backward costs money either way.

The testing methods, and which answers which question

When the inspection does not nail the entry, you test, and the method depends on the question. There are four, and they answer different things. A water or hose test finds the entry on an exposed roof by reproducing the leak under controlled water. A flood test confirms whether a low-slope area or a plaza deck holds water at all, pass or fail, without telling you where. Electronic leak detection points at the exact breach in the membrane, and it works under overburden where the others cannot. An infrared or moisture survey maps wet insulation inside the assembly, a different question from where the membrane is holed.

Match the tool to the question. Where is the entry on an exposed roof: a hose test. Where is the breach under soil or ballast, or down to a pinhole: electronic leak detection, covered in the companion guide on that method. How much of the roof is wet inside: a moisture survey. Does the assembly hold water: a flood test, where the structure can take the load.

No single test does all of it. A real forensic program uses more than one: a moisture survey to map the wet zones, then electronic leak detection or a hose test to find the breach feeding them.

How do you find a roof leak with a water test?

You find it by flooding the roof in small sections, starting at the lowest point and working uphill, with a person inside watching the stain. Run water on one zone at a time, roughly a 6 ft by 6 ft area, and soak it for several minutes before moving up. The discipline is the whole method: start low and go up.

Working uphill is what makes it work. If you start at the top, water runs down across everything below and you cannot tell which detail let it in. Starting low and moving up, the first zone that reproduces the drip inside is the zone with the entry, because nothing above it has been wetted yet. Test each detail in turn, the boot, then the seam above it, then the curb above that, and mark each zone you clear with chalk so you do not lose your place.

Two people, one on the hose and one inside on a radio with eyes on the stain, and patience. Soak each zone long enough to mimic a real rain, because a leak that takes a steady rain to show will not appear in thirty seconds of hose. When the drip appears, you have isolated the entry to the last zone you wet. Hold there and find the exact detail.

The moisture survey: finding wet insulation

A moisture survey answers a different question than a leak hunt: not where the membrane is holed, but how much of the insulation under it is already wet. You map that before a re-roof to decide how much to tear off, and after a long-running leak to find how far the water spread.

Three tools do it. An infrared survey reads the roof after sundown, when wet insulation holds the day's heat and glows warmer than the dry field through the camera, fast and economical when the surface gives a clean image. A nuclear gauge measures hydrogen content with neutron moderation, so it reads moisture deep in a multi-layer or ballasted roof where infrared cannot see the bottom of the system. A capacitance meter reads the change in electrical properties that water causes near the surface. All three find wet material in the assembly. None of them points at the breach the way a hose test or electronic leak detection does.

Pair them. A moisture survey shows the extent of the damage; the leak hunt finds the entry feeding it. A roof with wet insulation across a third of its area is telling you something the single drip inside never will, which is that the problem has been running a long time.

What to look at, by symptom

The history and the symptom narrow the search before you climb. This is the field version of the interview, the same logic in a form you can carry up the ladder: what the leak does, what it usually means, and where to look first.

The repair versus the recurring leak

A leak that comes back was misdiagnosed. If you repaired a roof and it leaks again at the same stain, you did not find the real entry the first time, you covered a symptom, or you fixed one of two entries and left the other. The recurring leak is the most reliable sign that the diagnosis was wrong, not that the repair material failed.

The trap is gooping over the spot above the stain without finding the source. Caulk smeared on the field above a drip might hold for a season while the real entry, a boot uphill, keeps soaking the insulation, and the leak comes back a few feet over when the water finds a new path down. Goop is not diagnosis. Find the entry, prove it with the deck trail or a hose test, and repair the detail itself.

There is a place for the emergency patch: stop the active water now, in the rain, to protect what is inside, then come back dry and do the real repair. The mistake is letting the emergency patch become the permanent fix. A patch that was never followed by a real diagnosis is a leak on a delay. Repair the detail that actually leaked, not the easiest place to reach.

When is the leak the roof, not a detail?

Most leaks are a single detail and the fix is a single repair. The roof is the problem, not the detail, when the leaks are widespread, the insulation is wet across a large area, and the membrane is at the end of its service life. One bad boot is a repair. Boots, seams, and edges failing all over a fifteen-year-old roof is a system telling you it is done.

A moisture survey is what makes that call defensible. When the survey shows wet insulation across a large fraction of the roof, chasing individual breaches is throwing money at a roof that needs recovering or replacing. At that point the decision shifts from repair to recover or tear-off, which is its own analysis: how much wet material can stay, whether the deck is sound, what the structure can carry. That decision is covered by topic in the recover-versus-replace work.

Know which problem you have. Patching a roof that needs replacing wastes the repair money and the replacement still comes. Replacing a roof that needed one boot wastes far more. The moisture survey and the leak history together tell you which side of that line you are on.

The leak over a data center or critical facility

Over a data center, a hospital, a museum, or an archive, the stakes change and so does the response. The cost of a leak is not the ceiling tile. It is the racks of IT, the operating room, or the collection underneath, and a slow drip that would be a callback on a warehouse is an emergency here. On the first response, the clock matters more than the diagnosis.

Protect the asset first, then find the leak. Get temporary protection over the equipment, divert the active water into containment, and buy time before you start the methodical hunt, because the wrong order means you are diagnosing while water lands on a live electrical load. On these buildings the hunt is also more constrained: you often cannot flood-test a deck over a running data hall, and you cannot shut the space down to chase a stain, so electronic leak detection and a careful moisture survey carry the load a hose test would handle on an empty warehouse.

These are the buildings that justify a permanent leak-detection grid built into the roof, so the next breach is flagged the moment water crosses the membrane instead of when it reaches the racks. The electronic leak detection guide covers that system. On a critical facility, the diagnosis discipline in this guide runs under a stopwatch, and temporary protection comes before everything.

What to document

The leak record is what keeps a roof from being chased forever. Without it, every leak is a fresh mystery, and nobody knows which details have failed before, which were patched, and whether the patch held. The history of a roof is a map of which details to re-walk first, and that map only exists if someone wrote it down.

Capture the leak by location: where the interior stain is, tied to a column line or two walls, the entry you found and how you confirmed it, the conditions when it leaks, the date, the repair made, and the re-test result. Photograph the stain inside and the entry outside, and tie them together, because the next person needs to see that this stain came from that detail. Note the moisture-survey extent if you ran one. A leak documented this way turns into a pattern the third time it happens, and the pattern is what tells you whether you are fixing details or whether the roof is done. This is the kind of location-by-location record, photos attached, that a tool like FieldOS is built to hold.

Common mistakes

• Assuming the leak is in the membrane right above the interior stain, when water travels along the deck before it drops.
• Chasing the open field instead of the details, where almost every leak actually enters.
• Gooping caulk over the spot above the stain without finding and repairing the real entry.
• Mistaking winter condensation for a leak, and replacing roofing that was never the problem.
• Running a hose test from the top down, so water masks every detail below the one you are testing.
• Skipping the inside inspection and the deck trail, then guessing on the roof.
• Treating an emergency patch as the permanent repair and never coming back to diagnose it.
• Patching individual breaches on a roof whose insulation is wet across a large area and is actually done.
• Leaving no record, so the same roof is diagnosed from scratch every time it leaks.
• Blaming the membrane when the water comes from a wall above the roof, a skylight gasket, or a condensate line.

Field checklist

Standards and references

There is no single code section that tells you how to find a leak. The framework is industry practice and the manufacturer's warranty. The NRCA Roofing Manual is the practical reference for leak investigation and the construction details behind it, including the commonly cited figure putting the large majority of leaks at flashings and penetrations rather than the field, and the definition of ponding as water remaining on the roof 48 hours or more after rain. Treat its figures as recommended industry practice and confirm the current edition, because the manual is revised across cycles.

The manufacturer's warranty is the document that controls the repair. Most warranted systems require repairs made with approved materials and methods, often by an approved applicator, or the warranty is void, so confirm what the warranty allows before you cut into a roof under one. A repair that fixes the leak and voids the warranty can cost more than the leak did.

The test methods have their own standards. Electronic leak detection is framed by ASTM, principally the D7877 guide for electronic methods and the D8231 practice for low-voltage scanning, covered in the companion guide on that method. Flood testing and the moisture-survey methods, infrared, nuclear, and capacitance, have their own ASTM references, and the secondary-drainage and ponding requirements live in the building and plumbing codes. Codes are adopted and amended by jurisdiction, so confirm the requirement against the adopted edition, cite the standard that controls the point, and let the manufacturer's warranty override any rule of thumb in this guide.

Units, terms, and conversions

Leak diagnosis borrows a vocabulary from the whole roofing trade, and the same idea reads differently across a consultant's report, a warranty, and a spec, so the terms are worth pinning down.

The entry point or breach is where water crosses the membrane. The interior stain or drip is where it finally shows, often well away from the entry. Ponding is water standing on the roof 48 hours or more after rain. A water test or hose test reproduces a leak with controlled water; a flood test confirms whether an area holds water. Electronic leak detection, ELD, locates the breach electrically; a moisture survey, infrared, nuclear, or capacitance, maps wet insulation inside the assembly. Overburden is anything covering the membrane, soil, ballast, or pavers. Base flashing is the membrane turned up a wall or curb; counterflashing is the metal that caps it.

Entry point / breach

Where water actually crosses the membrane, often uphill of and away from the interior stain

Interior stain / drip

Where the water shows inside, after traveling along the deck and structure

Ponding

Water remaining on the roof 48 hours or more after rain, per the NRCA definition

Water test / hose test

Reproducing a leak with controlled water, worked in small zones from low to high

Flood test

Filling an area to confirm whether the assembly holds water, pass or fail, not where

Moisture survey

Infrared, nuclear, or capacitance mapping of wet insulation inside the assembly

Electronic leak detection (ELD)

Locating a membrane breach electrically, including under overburden

Related tools

Calculators and readiness checks for this work

Compare your options

FAQ

People also ask

• How high should base flashing be on a commercial roof?
• What is electronic leak detection?
• What is ponding water on a roof?
• What is a roof cricket?
• Why do data centers need liquid-cooling leak detection?