Unauthorized access often starts with unnoticed sabotage. The new OS Malevich update introduces the Photo by arming/disarming feature, ensuring that every security mode change is recorded. When the system is armed, disarmed, or switched to Night mode, MotionCam (PhOD) detectors capture images, providing clear visual confirmation. This new feature is available for all Ajax PhOD detectors regardless of the firmware version, and “PhOD” in the name means that a detector can take photos on demand. Installers can configure the new feature for an entire property or specific groups, assigning who may change settings and when.
Photo by arming/disarming is supported by PhOD detectors from both the Baseline and Superior product lines:
Sabotage protection and access control
Vacant property, commercial spaces, public facilities, and manufacturing sites often face a hidden risk—unauthorized access camouflaged as a routine activity. Dishonest real estate agents or personnel with access to a property can sabotage security systems. In Spain, a vacant property faces another serious risk: squatters. Once inside, legally removing them is a long and challenging process. Their common tactic is to mask motion detector lenses while the system is disarmed, leaving a blind spot for upcoming break-ins. For example, a couple of squatters come as potential tenants to view an apartment. Then, one distracts a landlord while another covers the detector lenses. When fake tenants leave, a landlord arms the system, not realizing it was sabotaged.
Another risk is compromised access codes, cards, or key fobs. For example, they were stolen, and the owner hasn't noticed it yet. Without visual confirmation, unauthorized access can go unnoticed. Photo by arming/disarming eliminates these blind spots by capturing an image every time the system security mode is changed. The key benefits are:
- It’s always clear who armed or disarmed the system and whether they had valid access.
- If detectors are sabotaged, they are immediately identified.
- It brings more context to monitoring teams, reduces unnecessary patrol dispatches, and improves response time.
Flexible configuration via the Ajax apps
Photo by arming/disarming is supported by OS Malevich starting from version 2.29. The feature requires the latest versions of the Ajax apps for professionals (Ajax PRO: Tool for Engineers or PRO Desktop) and for users (Ajax Security System or Ajax Desktop). The feature can be configured for any PhOD detector in just a few steps:
- Open the Ajax app, select Space and then the hub.
- Tap the gear icon to enter Settings.
- Select Automation scenarios → Create scenario or Add scenario (if one or more scenarios have already been programmed).
- Choose Photo by arming/disarming as the trigger.
- Enter the scenario name and define when the detector should take photos: when arming, when disarming, when Night mode on, or when Night mode off.
- Decide whether to consider or ignore entry/exit delays.
- Choose the MotionCam (PhOD) detector from the device list and tap Done.
- Tap Save to apply the settings.

This customization ensures that the system’s events are visually verified and provides flexible settings to meet various security requirements.
Compatibility and requirements
Photo by arming/disarming is supported by all compatible hubs running on OS Malevich 2.29 or later. To configure this feature, users must have the necessary access rights.
The new feature is available in the Ajax apps for both end users and PROs. To ensure full functionality, all apps must be updated to the latest version.
- Ajax Security System: iOS/Android 3.20
- PRO Desktop: Windows/MacOS 4.20
- Ajax PRO: Tool for Engineers: iOS/Android 2.20
- Ajax Desktop: Windows/MacOS any version
Privacy and security: full control over visual data
All MotionCam (PhOD) detectors are designed to enhance security while maintaining user privacy. From the moment a photo is taken to its storage and viewing, every stage is secured through encryption and access control.
To guarantee data security, Ajax uses end-to-end encryption for both transmission and storage. Photos are stored on Ajax Cloud, a geographically distributed server infrastructure that complies with the General Data Protection Regulation (GDPR).
Ajax apps ensure data security with passcodes, biometric login, two-factor authentication, and automatic session control. The Privacy menu adds an extra layer of protection, allowing system administrators to manage user access to detector photos. Installers and security companies cannot view Privacy settings or photos, but the admin can grant them permission to use the Photo by arming/disarming feature. This access is disabled by default for all users.
In addition to the Photo by arming/disarming feature, Ajax MotionCam (PhOD) detectors also provide Photo by schedule, Photo on demand, and Photo by scenario features.