Connected security app engineering
Paradox Insight & Insite Gold
Remote monitoring and control for professional security systems
Project overview
Paradox Security Systems supplies professional intrusion-detection, alarm, and camera products in more than 130 countries. Its mobile applications give customers remote access to panels, zones, events, and live camera feeds.
We maintained and extended the Insight and Insite Gold applications, with responsibility for reliable communication between mobile devices and Paradox hardware, including IP150 and IP180 modules. The work had to preserve low-latency behavior, secure access, and compatibility with professional alarm-system requirements.
The implementation used WebSockets for live alarm state, TCP and UDP networking with TURN/STUN traversal, and RTSP for camera feeds. It also covered encrypted credential storage, connection recovery, and observable failure states across iOS and Android.
130+
Countries Deployed
2
Apps Maintained
<500ms
Alarm Signal Latency
Our role
Technical contributions and key deliverables
Native Mobile Development
- Developed native iOS features using Objective-C (iOS 9+ SDK) with custom communication protocols for Paradox MG5000/MG6000 security panel integration
- Built Android app with Java 7+ (API 16+) implementing persistent WebSocket clients for real-time alarm zone status updates and event push notifications
- Implemented RTSP video streaming for Paradox HD77/HD77W PIR camera feeds with adaptive 720p quality adjustment based on available bandwidth
- Created secure multi-site authentication flows with encrypted credential storage using iOS Keychain Services and Android EncryptedSharedPreferences with AES-256
Enterprise Collaboration
- Coordinated with Paradox hardware engineering teams in Montreal to understand proprietary communication protocols for Spectra/SP5500/EVO192 panel families
- Partnered with QA teams across North America and Europe to test NAT traversal connectivity across diverse residential firewall configurations and carrier networks
- Collaborated with security certification experts to ensure EN50131 Grade 2/3 compliance for alarm signal transmission encryption and authentication protocols
- Worked with technical support teams to diagnose and resolve customer connectivity issues involving IP150/IP180 communication modules in production environments
Technical Implementation
- Integrated persistent WebSocket connections (RFC 6455) for bidirectional real-time communication with security panels enabling instant alarm event propagation
- Implemented TURN/STUN services (RFC 5766/5389) for NAT traversal enabling reliable connections behind residential/commercial firewalls and carrier-grade NAT
- Deployed TCP/UDP socket layers with custom retry logic and exponential backoff for reliable command transmission to alarm systems over unstable networks
- Established automated protocol compatibility testing across Paradox hardware generations (Spectra, EVO, MG series) with panel firmware version matrix validation
Security & Hardware Integration
- Implemented embedded development for reading/writing to Paradox security panel hardware registers via IP150/IP180 modules using proprietary binary protocols over TCP
- Designed secure credential storage with iOS Keychain (kSecAttrAccessibleWhenUnlockedThisDeviceOnly) and Android EncryptedSharedPreferences with hardware-backed keystore integration
- Created failover mechanisms with local event caching and store-and-forward for maintaining monitoring continuity during network interruptions up to 24 hours
- Ensured compliance with EN50131 European security standards for intrusion alarm systems including alarm signal encryption, authentication, and transmission integrity verification
Engineering challenges
Complex problems we solved during development
NAT Traversal
- Challenge: Security panels behind residential/commercial firewalls required reliable mobile connectivity across diverse network configurations and carrier-grade NAT
- Solution: Implemented TURN/STUN services (RFC 5766/5389) with fallback relay servers, connection pooling, and automatic failover to maintain persistent WebSocket connections
- Result: 99.2% connection success rate across diverse network environments with sub-500ms alarm signal propagation
RTSP Streaming
- Challenge: Live camera feeds from HD77/HD77W PIR cameras required low-latency streaming with adaptive quality based on variable network conditions
- Solution: Built RTSP client with adaptive bitrate adjustment, buffer optimization, reconnection logic, and hardware-accelerated decoding using AVFoundation (iOS) and ExoPlayer (Android)
- Result: <2 second stream start time with 720p quality on standard broadband and graceful degradation on cellular networks
Security Compliance
- Challenge: Professional security applications required EN50131 Grade 2/3 compliance for alarm signal transmission with zero tolerance for security vulnerabilities
- Solution: Implemented AES-256 encryption for all communications, hardware-backed keystore integration, secure credential storage, and regular third-party security audits
- Result: Full EN50131 compliance certification with zero security incidents during production operation
Real-Time Alarm Signals
- Challenge: Emergency alarm signals required immediate delivery to mobile devices with guaranteed delivery even during network interruptions
- Solution: Built store-and-forward architecture with local event caching, push notification fallback (FCM/APNs), and automatic retry with exponential backoff for failed deliveries
- Result: 99.8% alarm signal delivery rate with <500ms latency and 24-hour offline event caching capability
App Videos
Explore the user interface and key features
Insight App Video 1
Insight App Video 2
Insite Gold App Video
Technical Stack
Technologies and tools used in this project
iOS
Android
Backend & DevOps
Integrations
Project Outcomes
Measurable results and achievements
Global Deployment
- Deployed across 130+ countries with multi-language support and regional compliance
- 2 mission-critical apps maintained (Insight & Insite Gold) with synchronized release cycles
- 4.2+ star average rating across App Store and Google Play platforms
Performance Metrics
- <500ms alarm signal latency from panel to mobile notification
- 99.2% WebSocket connection success rate across diverse network environments
- <2 second RTSP stream start time on standard broadband connections
Security Excellence
- 100% EN50131 Grade 2/3 compliance for professional security applications
- Zero security incidents during production operation
- AES-256 encryption for all communications with hardware-backed keystore
Reliability & Uptime
- 99.8% alarm signal delivery rate with guaranteed delivery mechanisms
- 24-hour offline event caching with automatic sync on reconnection
- 99.5% crash-free session rate in production environment
Project Links
Related resources and information
Building something technically demanding?
Tell us what you’re shipping, where the risk sits, and what your team needs. We’ll come back with a clear next step.