Method and apparatus are disclosed for vehicle security monitoring in a key-off state. An example vehicle includes low-power sensors and high-power sensors for security monitoring, a communication module, and a controller. The controller is to, when in a key-off state, determine a first score based on the low-power sensors. The controller also is to, responsive the first score exceeding a first threshold, activate the high-power sensors and determine a second score based on the high-power sensors. The controller also is to, responsive the second score exceeding a second threshold, send an alert via the communication module.