E-Surveillance

The decision

Repair before selling. Fix the two products that are failing in the field, prove the fix at ANG and SIS, convert the 3,000-plus out-of-warranty EVA units into an AMC, and only then carry the same kit into gold-loan NBFC branches and design-services work. Classification: Pilot first. Confidence: medium, because the market series is primary and the loss attribution is Rax's own record, but the failure modes of the two products have not been examined on a bench. Recommendation

Three facts drove it. First, the base is shrinking: the RBI's own bank-wise statistics show off-site ATMs, the sites that carry the fullest e-surveillance kit, down a quarter in four years. VerifiedS19 Second, the buyers are becoming one buyer: CMS now owns Securens, has bought FSS's 8,000-ATM managed-services book, monitors 50,000-plus sites and tells investors it builds its own hardware. VerifiedS46S47S54 Third, Rax's decline outran the market: revenue from this line fell 34% and then 37% in consecutive years, and the company's own delivery book attributes the largest loss to product failures and service load at ANG and to undelivered panels at ITAS. VerifiedS2 Rax-suppliedS9

The five findings that matter

The shrinking-market question has a two-part answer, and both parts are true. The unit base is contracting: 219,506 scheduled-bank ATMs in March 2023 became 209,331 in March 2026, and the fall is concentrated in off-site machines, which private banks and public banks are closing while adding on-site recyclers. VerifiedS19S22 The money in the segment is not contracting: CMS puts the BFSI remote-monitoring pool at ₹2,000 to 3,000 Cr and grew its own line from about ₹100 Cr in FY25 to about ₹200 Cr in FY26, mostly by acquisition and by winning sites from smaller service companies. VerifiedS46S51 Rax's revenue tracks the unit base and the small service companies, not the money. That is why the FY2021-22 spike and the FY2023-24 fall line up with the SBI Phase IV and public-sector roll-outs of 2021 and with the 2022-23 peak of the ATM estate, and why the recovery of the monitoring companies has passed Rax by. EstimatedS39S41S19S1

Rax's losses are named, and they are quality losses first. ANG cut orders from ₹3.05 Cr to ₹1.03 Cr and said why: failures and service load on the PSPB power line, where 251 units came back for service in FY26 against seven the year before. ITAS fell from ₹1.43 Cr to ₹0.23 Cr with 100 of 150 panels on a June 2025 order still undelivered a year later. Soteria left on quality. AGS Transact, ₹0.86 Cr, went into insolvency. The ACS OTP keypad shows a 66% return rate at Zicom and 86% at SIS on an upper-bound basis, and zero at Securens and ANG, which points to a batch or environment problem that has never been diagnosed. Rax-suppliedS2S9S4 VerifiedS59

The buyers are integrating backwards. CMS's investor deck states it owns hardware, software and AI models; Securens' own job advertisements ask engineers to know Securico and Vighnaharta panels; SIS describes its alarm business as trading and installing devices; iVIS won 1,000 PNB ATMs at about ₹3,070 per site per month all-in. None of these buyers needs Rax; each could, and the biggest is choosing not to. VerifiedS46S56 Publicly observedS76S66

Regulation shapes the market but does not require Rax's products. The RBI's June 2019 circular says banks may consider e-surveillance; the mandatory items are OTC locks and grouting. What is now mandatory is security certification of cameras (MeitY's Essential Requirements, enforced from April 2025 and April 2026) and TEC MTCTE for cellular devices and routers, and Rax holds none of it while its datasheets claim a CE mark the company does not hold. VerifiedS20S27S29S30 Rax-suppliedS10S1

Price is not why Rax loses. Its 8-zone panel lists at ₹13,000 against Securico at ₹12,450, Vighnaharta at ₹9,275 and DSC at ₹6,000; the observed erosion in Rax's own book (ITAS panels from ₹29,437 to ₹7,033) is a symptom of losing the relationship, not of being undercut at the outset. Publicly observedS16S79S78S81 Rax-suppliedS4

Is Rax a major player?

Gabriel describes Rax as one of the major players in e-surveillance, globally. The evidence supports a narrower statement. At the FY2022-23 peak Rax was a meaningful Indian supplier of ATM site kits to service companies: about ₹19.5 Cr of e-surveillance sales against an estimated ₹130 Cr service-company hardware pool, roughly 15%, with SIS, Securens, Zicom, CMS, AGS, ANG, Apar and ITAS all buying. It is not a major player today: ₹5.96 Cr is under 4% of that pool, the four large service companies supplied 14% of FY26 revenue, CMS bought ₹7,200, and no analyst key-player list, bank RFP make list, trade-press story or service-company job advert names Rax, while Securens' adverts name Securico and Vighnaharta. Globally it is not visible: ₹5.96 Cr is about USD 0.7 million, some 0.02% of a USD 3.3 billion intruder-alarm market, and the only public trade record shows panel and junction-box shipments to Saudi Arabia, not alarm exports. The claim describes 2021 to 2023, not 2026; the fall from ₹14.27 Cr to ₹5.96 Cr is what reconciles the two. Rax-suppliedS1S2 EstimatedS1S46S19 Publicly observedS153S76S154S155

The three numbers to remember

Off-site ATMs are down 25% since March 2022. This is the headline of the market question: the sites that buy a full kit are being closed, so replacement demand shrinks every year even if every bank renews its monitoring contract. VerifiedS19

Rax's e-surveillance revenue is down 58% in two years, to ₹5.96 Cr. The market fell single digits; Rax fell double digits twice. The gap between the two is share loss, and it is explained by named accounts. VerifiedS2

Units through Rax's own repair rose fourteen-fold in one year, from 43 to 603, with two products accounting for 499 of the 646 units over two years. This is the number that decides whether any commercial plan works, because it is the one the buyers see. Rax-suppliedS9

What would change the verdict

Upward, toward Sell now: a bench report on twenty returned units of each failing product with a fix that survives 200 units in the field; an AMC signed by SIS or ANG for the EVA base; a written hardware-supply trial with iVIS or CMS. Downward, toward Defer or Bundle: evidence that CMS has moved Securens' sites to in-house devices and that SIS and iVIS are sourcing imported kits; a TEC ruling that the 4G communicator cannot be sold without MTCTE and a certification cost above ₹10 lakh per model; or a second year in which the ANG line does not recover after the fix. Recommendation

The first ninety days

Engineering: bench twenty returned ACS OTP keypads and twenty PSPB units, record fault, batch, build date and site, and ship a corrected revision with 100% functional test; result, a written fault report and zero installation-time failures on the next 200 units. Managing Director: take that report to ANG and SIS with a replacement plan and a 24-month warranty on revised units; result, ANG PSPB orders back above 150 units a month. Sales: offer SIS and ANG an AMC and firmware-update contract on the 3,000-plus EVA units; result, one signed AMC covering at least 1,000 units. Quality: remove the CE claim from every datasheet, file TEC MTCTE for the 4G communicator and ESG panel, finish BIS CRS for the power supplies; result, applications lodged with test slots booked. Managing Director: open a hardware-supply conversation with iVIS, whose parent Magellanic Cloud already buys PSPB from Rax, for the Manappuram and PNB roll-outs; result, a 100-kit trial or a written no. Finance: cost-sheet the ten main SKUs so floor prices exist. Recommendation

What ships today

The e-surveillance catalogue in the product master lists eighteen hardware models and, in the software family, the CMMS central monitoring software and the OTP management software. The hardware falls into six groups: alarm panels (RT-AP-4Z, 8Z, 16Z) and alarm automation panels (RT-AAP-32Z, 48Z, with a 16-zone variant expandable to 32); the login keypad RT-KYPD-G2; communicators (RT-2WC GSM two-way, RT-2W4G-G0 4G two-way, RT-ADG-G0 4G auto dialler); the Access OTP keypad RT-ACS-OTP-KPD; the edge video analytics family RT-EVA-G0 (GOX, GOA with inbuilt speaker, GOT with two-way communication); the power and control group (PCMU RT-PCMU-G0/G1, interposing relay panels RT-IRC-4C and RT-IRC05-UPS, and the PSPB-E and PSPB-M power supply and backup cards that appear in the order book but not the product master); the ESG hybrid panel RT-ESG-G-G1; sensors (TLS temperature and light, TSU temperature); the 4G dual-SIM router RT-R1M2S-26Q; and a shutter control system RT-SCS-E and activity push button RT-APB-3 that exist as datasheets. Rax-suppliedS6S10S11S4

The datasheets are consistent in form: two to seven pages, a features list, a product selection table, dimensions, a calibration note, a certification line, a one-year warranty, and a revision block signed by the same three initials. Most were revised between March and September 2025; the EVA sheet was reissued in February 2026. The revision history on the EVA family goes back to December 2020, which dates the product to the pandemic mask-detection wave. Rax-suppliedS10S11

What is verified and what is claimed

The ISO 9001:2015 certificate is verified: Bureau Veritas, UKAS-accredited, certificate IND.25.902/QM/U, first cycle from 22 September 2025 to 21 September 2028, with a scope that names alarm panels and electronic security products, edge video analytics, automation panels, IoT products, software and customised hardware and software design services. It is a quality-system certificate, not a product certificate, and it is ten months old. VerifiedS12

Every e-surveillance datasheet ends with the line "CE certified, RoHS compliant, ISO 9001:2015". The internal record states that CE is not held, that RoHS is claimed, that BIS CRS was applied and is in process, and that TEC MTCTE, UL, FM, EN 54, SABER and ECAS are not held. The CE line is therefore a claim that a customer, a customs officer or a tender evaluator could test and find false. The Saudi dossier on RT-EVA-G0 reached the same finding in July 2026: certificates were not supplied and the sheet alternates between G0 and GOA. Rax-suppliedS10S1S13

No performance figure on any datasheet is independently supported. The EVA sheet gives no precision, recall, latency, distance or false-alarm rate; the panel sheets give no EN 50131 grade, no environmental test, no EMC report; the communicators give no MTCTE status though they carry 2G, 3G and 4G modems. The router datasheet is written in generic OEM language ("widely used in the M2M industry... coal, petrochemical and other related fields") and lists TD-SCDMA and CDMA bands that no Indian ATM site uses, which reads as a sourced product with a Rax label. That contradicts the sales lead's statement that Rax never rebadges and it matters because a sourced router falls under MTCTE as a router regardless of whose label it carries. Rax-suppliedS10S2 Inferred

Installed base and references

The only installation record supplied is a single line: SIS, bank sites, EVA, 3,000-plus units, commissioned 2023 onward, one-year warranty, no AMC. The delivery book from April 2024 shows ANG buying 2,450 EVA units in FY25 and 630 in FY26 and SIS buying 10 and 107, so either ANG supplies SIS's sites or the record names the wrong account. Either way about 3,000 EVA boxes are in the field, most of them now out of warranty, with no service contract. Rax also states 10-plus CMMS deployments and 17-plus alliances on its website, and the customer list carries 38 e-surveillance accounts by city: Mumbai 16, Delhi 8, Chennai 4, Bangalore 3, Kerala 2. No customer logo, case study or named reference appears anywhere public. Rax-suppliedS2S4S14S7

The order book gives the real reference base for FY24 to FY26. ANG bought EVA, PSPB, 4G communicators and OTP keypads; Apar bought PCMU (2,500 units over two years), panels and IRC; ITAS bought panels and CMMS; Automation Systems bought panels and EVA; SIS bought 4G communicators (2,566 units over two years), OTP keypads, PSPB and SMPS; Zicom bought OTP keypads (513 units); Securens bought 4G communicators and OTP keypads; AGS bought 222 panels at ₹37,000 before it failed. These are the accounts a prospective buyer would call. Rax-suppliedS4S5

Service model and the quality record

The service model is one year of carry-in warranty and nothing after it. No AMC is sold on any product. Remote firmware upgrade is claimed on the panels and EVA. Spares and repairs run through the production team, which is why the delivery books record them as line items. Rax-suppliedS10S2S9

That record is the most important table in this report. Units through service rose from 43 in FY25 to 603 in FY26. Two products account for 499 of the 646 units over two years: the ACS OTP keypad (248 serviced against 645 shipped) and the PSPB power line (251 against 3,243). Alarm panels and EVA, the two highest-volume families, show zero recorded service. The OTP keypad returns come from two customers, Zicom (204 of 309) and SIS (44 of 51), and none from Securens, ANG or Hemabh, which points to a batch, firmware or site-environment cause rather than a design fault across the product. The PSPB returns are all ANG. The rates are upper bounds because returns may include units shipped before April 2024, but the ranking is not sensitive to that caveat. Rax-suppliedS9S3

The sales lead's own words match the numbers: support calls at installation, sample-based quality control on large orders, missed urgent deliveries because of component dependency, and a market in which no one will refer the company. Rax-suppliedS2

Readiness gaps ranked by commercial impact

1. Field failure of the ACS OTP keypad and PSPB, undiagnosed. Blocks ANG recovery (₹2 Cr), SIS and Zicom expansion, and any new service-company trial. Rax-suppliedS9S2
2. Delivery reliability: 100 of 150 ITAS panels undelivered a year after order; component dependency named as the cause. Blocks ITAS recovery (₹1.2 Cr) and bank-tender roll-outs that require 1,000 to 1,500 sites a month. Rax-suppliedS2 Publicly observedS75
3. No AMC or service product, so the EVA base earns nothing after year one and failures arrive as complaints. Rax-suppliedS2
4. The unsupported CE claim and the absence of BIS CRS and MTCTE; the first blocks export and invites challenge, the second and third block PSU tenders and any prime contractor's compliance check. Rax-suppliedS1S10 VerifiedS26S30
5. No test data on EVA analytics, which every analytics competitor now publishes in some form; the Saudi dossier lists the eight missing items. Rax-suppliedS13
6. No cost sheet, so no floor price; PCMU "conversions" at ₹3,800 and panels at ₹7,033 may be below cost. Rax-suppliedS4S3
7. No references a buyer can call, and a 3.9-star IndiaMART rating from ten reviews with an 89 to 90% response rate. Publicly observedS16

Adjacent Rax products that bundle naturally

The rack monitoring controller (RT-RMC-GX, Rax's largest FY26 line through Fuji) shares the same 16-input, relay-output, Ethernet architecture and could be sold to the same service companies for bank server rooms and currency chests. The Auto Dialler 4G is already positioned for fire panels, generators and pumps. The industrial edge IoT gateway and the HSE people-count product overlap with EVA at plants. The ZenCampus school platform gives a route into the CBSE CCTV mandate. The custom-design capability, certified in the ISO scope, is the product that could turn CMS or iVIS from a competitor into an OEM customer. Rax-suppliedS6S2S12 Publicly observedS36

What is in and what is out

In scope is every device that sits between the sensors and the monitoring centre at a remotely monitored site: the intrusion alarm panel and its zone expansion, the two-way audio communicator or dialler, the power supply, backup and power-control unit, the interposing relays that switch lights and air-conditioners, the OTP-controlled door for the back room or vault, the edge analytics box that turns camera feeds into events, the site router, and the receiver software at the monitoring centre. This is the list that a bank RFP calls the "alarm panel, black box or control panel" and its peripherals, and it is exactly the list in Rax's product master. VerifiedS41 Rax-suppliedS6

Out of scope, but adjacent and often bought together, are the cameras, DVRs and NVRs (now under MeitY's security requirements and STQC testing), the sensors themselves (PIR, vibration, door contacts, smoke, glass-break), the SIM and VPN connectivity, the monitoring centre and its staff, and the quick-response teams and beat marshals that banks pay for as options. A buyer can substitute in three ways: keep guards (₹36,000 to 45,000 a month), buy an imported private-label kit that bundles panel and NVR, or, for the largest operators, build the device in-house as CMS states it does. VerifiedS27S39S46 Publicly observedS104S105S101

The value chain and where the margin sits

The chain runs from component suppliers to the bank. Component makers (cellular modules, MCUs, SMPS parts, batteries) sit at the top; Rax names dependency on them as the reason urgent orders are missed. Hardware OEMs (Rax, Securico, Vighnaharta, DSC, Hikvision, Ajax and imported kits) sell the device once with a one-year warranty. E-surveillance service companies (CMS HAWKAI, SIS VProtect, iVIS, Igzy, Zicom SaaS, Securens, and integrators such as AnG, Apar, ITAS and Automation Systems) win the bank tender, buy or build the kit, install it, monitor it and respond. ATM deployers and managed-service providers (Hitachi Payment Services, NCR, Findi/TSI, EPS, and now CMS with the FSS book) sometimes bundle e-surveillance into brown-label contracts, as NCR did when it placed the PNB orders on iVIS and as Findi's Central Bank contract shows. The bank or NBFC pays a rental per site per month for five years under a 99% uptime SLA with penalties. Above it all sit the RBI, the MHA and MeitY, which set expectations, and the police, who arrive when the two-way audio fails to deter. Rax-suppliedS2 VerifiedS39S41S46 Publicly observedS66S119S76

The margin sits with the service company. SBI's Phase IV price discovery implies a rental of about ₹5,800 per site per month, or ₹3.5 lakh over a five-year contract; iVIS's PNB orders work out at about ₹3,070 per site per month all-in. Against that, a full Rax kit at transacted prices is ₹25,000 to 45,000 once. Hardware is therefore 8 to 15% of contract value at the SBI rate and 15 to 25% at the iVIS rate, and an investor note on CMS puts remote-monitoring margins above 40%. The OEM sells once and carries the failure risk; the service company collects sixty months of rental and carries the uptime risk, which is why it prices devices by truck rolls. VerifiedS39 EstimatedS66S4 Publicly observedS105

Rax sits in the OEM box today. It could sit in two other boxes: as a contract designer and manufacturer for a service company that wants its own device (the CMS model, done for CMS), or, with a monitoring partner, as a bundled kit-plus-CMMS supplier to regional integrators who cannot afford Manitou-class software. It cannot sit in the service box without a command centre, a field force and bank empanelment, none of which it has. Rax-suppliedS1S12 Publicly observedS98

How buyers describe and search for it

Bank tenders use "e-Surveillance", "centrally monitored electronic surveillance solution", "integrated e-surveillance system on OPEX model", "alarm panel / black box / control panel", "two-way audio", "event-based surveillance system", "energy/power management solution" and "quick response team". Service companies market "remote monitoring", "AIoT remote monitoring services", "Vision AI", "alarm monitoring and response" and "video surveillance as a service". Dealers and marketplaces list "intrusion alarm panel", "8 zone GSM alarm panel", "GSM auto dialer", "OTP door lock access control" and "wireless alarm system". Rax's own storefront uses "alarm automation panel", "two way deterrent system", "surveillance health monitoring device" and "Squadron", a brand name that appears nowhere else in the market. Regulators say "security measures for ATMs", "e-surveillance mechanism", "CCTV/Video Surveillance System" and "Essential Requirements for Security". The HS heading buyers and customs use for alarm panels is 8531 (electric sound or visual signalling apparatus); routers fall under 8517. VerifiedS39S40S41S20S26 Publicly observedS46S55S79S84S83S16

Market structure

The service layer is concentrated and getting more so. CMS reports 50,000-plus HAWKAI sites and a 36% BFSI share after absorbing Securens (which had been the fourth player with ₹76.6 Cr of revenue) and FSS's 8,000-ATM managed-services business. SIS reports 25,749 VProtect connections across all segments and calls itself the largest alarm-monitoring network. iVIS reported 20,000 ATM and banking sites in 2023 and is winning PSU and NBFC work in 2026. Igzy serves ICICI Bank and Airtel Payments Bank. Zicom's listed parent has been in insolvency resolution since 2021. AGS Transact, once a top-six Rax account, entered CIRP in August 2025. The long tail of regional integrators, which is where most of Rax's 38 accounts sit, is the layer being squeezed. VerifiedS46S49S54S56 Publicly observedS67S92S62S59S7

The hardware layer is fragmented and price-tiered. The bottom tier is dealer-grade Indian panels and imported panels at ₹5,000 to 12,500 (DSC HS2032, Vighnaharta V-Cop, Securico Solitaire); Rax's published 8-zone price of ₹13,000 sits at the top of that tier and its automation panels at ₹18,000 to 40,000 above it. The middle tier is video-verified wireless hubs at ₹19,500 (Hikvision AX PRO). The top tier is certified European wireless ecosystems at ₹42,000 to 78,000 (Ajax) and Keenfinity, which no ATM lobby needs. The import share of the bottom tier is high through DSC, Hikvision and private-label Chinese kits; the domestic makers are Securico, Vighnaharta, Rax, Atigo, Godrej (homes) and CP PLUS's alarm subsidiary. Publicly observedS81S78S79S16S80S82S101S128S129

Above the hardware layer, analytics is a separate contest: Videonetics, Vehant, Staqu and Wobot sell software that overlays existing VMS; Uncanny Vision's edge heritage now sits inside a US cloud VSaaS company; CP PLUS sells an Edge AI Box; CMS builds its own models. Rax's EVA competes with all of them at the bottom of the price range and with none of them on published accuracy. Publicly observedS97S94S93S95S96S128 VerifiedS46

Where Rax ranks among equipment suppliers

Rax's claim to be a major player (Rax-supplied) is best tested in the hardware layer, where it competes. In the service-company kit market Rax had a genuine position in 2021 to 2023: its customer list covers four of the five largest ATM monitoring operators and most of the regional integrators, and its FY2022-23 e-surveillance sales of about ₹19.5 Cr imply roughly 15% of the estimated ₹130 Cr hardware pool bought by service companies that year. By FY2025-26 the share is under 4%, and the public record gives no sign of a top-tier position: the published key-player lists name Hikvision, Dahua, CP PLUS, Honeywell, Bosch, Matrix and the monitoring companies but not Rax, no bank tender names Rax as an approved make, and the largest service company specifying ATM panels to its installers names Securico and Vighnaharta. On the evidence Rax is best described as a specialist Indian OEM that was a significant supplier to ATM service companies during the 2021 roll-out wave and is now a minor one; there is no public evidence of an international e-surveillance footprint. Rax-suppliedS1S7 EstimatedS1S2S19 Publicly observedS153S76S154

How the category evolved in India

In 2014, 1% of India's 1,60,055 ATMs had alert-based surveillance; Securens was running a Navi Mumbai control room, PNB tendered 6,000 ATMs and four public banks about 10,000 together, and the pitch was ₹7,000 to 12,000 a month against ₹35,000 for three guards. In 2015 Axis Bank reported ₹5,000 a site and two lakh guard jobs were said to be at risk. SIS launched VProtect in 2017. The RBI's 2018 cassette-swap direction and the June 2019 security measures (OTC locks, grouting by September 2019, e-surveillance "may also consider") gave the security officers of public banks a compliance story; SBI issued a 15,000-site RFP in June 2018 and Phase IV in January 2021, and Central Bank of India tendered about 3,000 locations in 2021. That is the wave that took Rax from ₹7.5 Cr to ₹18.3 Cr in FY2021-22 and to ₹21.7 Cr in FY2022-23. Publicly observedS103S104 VerifiedS56S21S20S40S39S41S1

From 2023 the estate turned. Scheduled-bank ATMs peaked at 219,506 in March 2023; off-site machines had peaked a year earlier and fell to 73,693 by March 2026 as private banks in particular closed them. Hikvision launched AX PRO wireless panels in India, Ajax invested in an Indian team, Bosch sold its intrusion business to Keenfinity, MeitY made camera security certification mandatory and the MHA told every state to buy under the Public Procurement Order. In 2025 CMS bought Securens and AGS Transact failed; in 2026 CMS bought FSS's ATM book and reported HAWKAI at 50,000 sites, iVIS won PNB and Manappuram, and the sales relaxation for uncertified cameras ended. The category became a consolidated, certified, service-led market in three years, and Rax's revenue fell 63% from its peak over the same period. VerifiedS19S26S27S46S47S54S1 Publicly observedS89S86S73S59S65S66S29

Is the market shrinking? The time series

The primary series is the RBI's bank-wise ATM statistics. For March of each year this report summed the on-site and off-site columns of every scheduled commercial bank; the totals reconcile exactly with the RBI's Trend and Progress figures once white-label ATMs are added (218,815 plus 34,602 equals 253,417 for March 2024; 214,841 plus 36,216 equals 251,057 for March 2025). VerifiedS19S22

Sources: on-site and off-site from the RBI monthly pages (atmid 97, 109, 121, 133, 145, 157, 169, 181); white-label and branch counts from the RBI Trend and Progress report as reported. VerifiedS19S22S23S57

The conclusion is stated plainly. The ATM estate is shrinking, and the part of it that buys the fullest e-surveillance kit is shrinking fastest. Off-site ATMs, the unmanned lobbies where a panel, two-way audio, power control and analytics earn their keep, fell 24,574 units, or 25%, in four years, a compound decline of about 7% a year that accelerated to 10% in FY25 and 12% in FY26. On-site ATMs and cash recyclers rose about 18,800 over the same period, but those sit inside branches where a branch alarm, a guard and the branch's own cameras already exist and the incremental kit is smaller. Public-sector banks closed 3,084 off-site ATMs in FY26 alone; all other scheduled banks closed 6,741. White-label ATMs grew, but by 1,600 a year, and their operators (Hitachi, Findi/TSI, EPS) buy site services through their own deployers. VerifiedS19S22S23 Publicly observedS68S70

The monitoring market is not shrinking. CMS's HAWKAI grew from about ₹100 Cr and 30,000 ATM sites in FY25 to about ₹200 Cr and 50,000-plus sites in FY26 by acquiring Securens and by winning sites; SIS's VProtect held 25,749 connections; iVIS won 1,000 PNB ATMs and a 1,000-branch Manappuram LOI in 2026; SIS's consolidated sales of traded electronic security devices rose from ₹30.11 Cr in FY25 to ₹51.82 Cr in FY26; CMS states the BFSI remote-monitoring pool at ₹2,000 Cr (August 2025) and a TAM of ₹3,000 Cr BFSI plus ₹5,000 Cr non-BFSI (May 2026). Penetration of monitoring across the estate is therefore still rising while the estate shrinks, and the growth is being captured by three or four consolidators. VerifiedS46S51S56 Publicly observedS66S65S138

Rax's revenue follows the estate and the small integrators, not the consolidators. Its turnover rose 144% in FY2021-22 and peaked in FY2022-23, the year scheduled-bank ATMs peaked; it fell 27%, 30% and 30% in the three years in which off-site ATMs fell 3%, 10% and 12% and in which the accounts that bought from Rax (AGS, Soteria, ITAS, ANG) failed, churned or cut back. The market explains a single-digit decline; the rest is share loss to buyers who build or buy elsewhere. VerifiedS1S19 Rax-suppliedS2

The market-trend table

The question needs four series side by side: the estate, the monitored share, the monitored sites that listed companies report, and the evidence of when kits were bought and renewed. Rax's revenue is the last column. VerifiedS19S46S56 Rax-suppliedS1S2

Sources: RBI bank-wise statistics as printed (S19); 2014 and 2017 from press (S103, S108); monitored sites from company filings and releases (S46, S49, S56, S67, S138); tenders (S39, S40, S41, S134, S135, S137, S48); Rax from its accounts and performance workbook (S1, S2). The share column divides estimated outsourced BFSI monitored sites by scheduled-bank ATMs and is a range, not a measurement. VerifiedS19S46S49S56S39S41S135 Publicly observedS103S108S67S138 EstimatedS46S56S19 Rax-suppliedS1S2

Compound rates from the table: scheduled-bank ATMs grew 2.1% a year from 2019 to the 2023 peak and have fallen 1.6% a year since; off-site ATMs have fallen 7.0% a year since 2022; CMS's HAWKAI revenue doubled in two years and its sites grew about two-thirds in one; Rax's e-surveillance revenue fell 35% a year from FY2023-24 to FY2025-26. EstimatedS19S46S2

Does the FY2021-22 spike match a market event?

Yes, on the evidence available. SBI's Phase IV RFP for centrally monitored e-surveillance at its Capex ATM sites was issued on 8 January 2021 with a 100-site pilot per selected vendor and a rental discovered by reverse auction of about ₹5,800 per site per month; Central Bank of India tendered about 3,000 ATM locations in 2021 on a five-year OPEX model; the RBI's March 2021 cassette-swap deadline and its 2019 grouting and OTC measures had put ATM security on every public bank's compliance agenda. Service companies that won those contracts had to install thousands of kits inside twelve weeks, and the SBI documents show the buyers were the L1, L2 and L3 e-surveillance companies, several of which (SIS, Securens, AGS, ITAS, AnG) were Rax accounts. The internal record cannot name the customer or product that produced the ₹10.8 Cr jump, so the match is circumstantial and is labelled accordingly. VerifiedS39S41S21S20 Rax-suppliedS2S3 EstimatedS1

The FY2023-24 fall matches the other side of the same wave. Roll-outs completed in 2022 and 2023; the ATM estate peaked in March 2023 and off-site closures began; CMS entered remote monitoring with its own devices and took revenue from zero to ₹100 Cr in under twelve months; and the next bank tenders went to prime contractors (NCR for PNB) and to consolidators rather than to the regional integrators who bought Rax panels. Rax's first drop, ₹5.77 Cr in FY2023-24, precedes the ANG quality problem and the AGS insolvency; it is the end of the roll-out wave. VerifiedS19S1 Publicly observedS105S66 Inferred

Regulation and mandates

No government scheme pays for ATM or branch e-surveillance. The MHA's police-modernisation money buys city surveillance, not bank sites; the Union Budget's security allocations are for defence and borders. Searches on "scheme", "subsidy" and "grant" with "e-surveillance ATM" returned nothing relevant. Demand here is paid by banks and NBFCs from operating budgets, which is why five-year OPEX rentals dominate. Unknown VerifiedS39S41

Incidents and public events that drive procurement

ATM burglaries and attempts keep the topic on police and bank agendas: a Hubballi attempt in December 2025 where the police commissioner said the alarm system had been disabled and questioned installation standards; a Ludhiana attempt in March 2026 foiled when the alarm went off; excavator and SUV attacks reported in Maharashtra in 2022 and 2025. Parliament asked in July 2025 what the government was doing about ATM theft and skimming, and the answer leaned on RBI's fraud statistics. The AGS Transact collapse in March 2025 left ATMs without cash and, later, without a service provider, which pushed banks toward larger, better-capitalised vendors. Publicly observedS106S107S37S61S59

Technology shifts

Three shifts change what the buyer expects. Analytics moved from a box beside the DVR to software overlaid on the VMS (Videonetics, Vehant) or to the camera itself (Hikvision, CP PLUS Edge AI Box), and buyers now expect masked-face, helmet and loitering detection as a specification item, as Central Bank's 2021 RFP shows. Connectivity moved from GSM/3G to 4G with dual SIM and VPN, and 2G sunset risk sits over every GSM communicator in the field. Monitoring moved from alarm receivers to AIoT platforms with mobile apps, health checks and "robotic" SOP responses, which CMS, Securens and Igzy market as the product. Wireless panels (Ajax, AX PRO) took the residential and small-business tier, though wired zones still rule the ATM lobby. VerifiedS41 Publicly observedS97S128S89S86S53S74S92

Macro and sector indicators

Bank branches keep growing (1,63,216 in March 2024, about 1,64,000 in March 2025, up 2.8%), and every branch has a strong room and a back office that can be monitored; the NBFC branch estate grows with gold lending (Muthoot 4,800-plus, Manappuram about 1,000 in the iVIS LOI). Cash in circulation and ATM withdrawals are under pressure from UPI, and CMS reported a ₹25 Cr hit in Q1 FY27 from under-supplied ATMs. The India electronic security market is put at USD 3.05 billion in 2025 growing 11% a year, with cameras 38% of it. Non-BFSI monitoring, which CMS sizes at ₹5,000 Cr across quick commerce, EV charging, QSR and retail, is growing faster than BFSI. VerifiedS22S23S111 Publicly observedS57S112S65S121S71S46

Timing windows

Bank e-surveillance contracts run five years from go-live, so the 2021 SBI Phase IV, Central Bank and comparable PSU contracts fall due for renewal or re-tender in 2026 to 2027; renewal is when a service company swaps or refreshes the site kit, and when a bank can move its sites to a new vendor. Bank capital budgets are set in the January to March quarter and orders issue from April; RFPs cluster in the first half of the calendar year. Rax's own delivery book shows March and June peaks. CMS itself blamed flat H1 FY26 revenue on delays in key banks' ATM refresh cycles, which is the same window seen from the other side. EstimatedS39S41 VerifiedS48 Rax-suppliedS4

Counter-drivers

Digital payments reduce ATM use and give banks a reason to close off-site machines; the RBI reports the closures directly. Consolidation reduces the number of buyers and gives the survivors the scale to build devices. Imported and dealer-grade panels at ₹6,000 to 12,500 cap prices. Certification (ER:01, MTCTE, CRS) raises the fixed cost of each SKU, which favours large OEMs. Insolvency at Zicom and AGS reduces the credit-worthy buyer pool. And the reputation constraint is specific to Rax: buyers who have experienced installation-time faults do not pay for the next generation. VerifiedS22S46S27S30 Publicly observedS81S78S62S59 Rax-suppliedS2

Bottom-up: sites, penetration, content

The unit base. Scheduled-bank ATMs stood at 209,331 in March 2026 (135,638 on-site, 73,693 off-site); white-label ATMs at 36,216 in March 2025; bank branches at about 1,64,000; gold-loan NBFC branches at roughly 15,000 (Muthoot 4,800-plus, Manappuram about 1,000 in the iVIS LOI, others estimated). VerifiedS19S22S23 Publicly observedS112S65 EstimatedS112S65S111

Penetration. The reported monitored-site counts are CMS 50,000-plus (of which 45,000 were BFSI at the Securens closing), SIS 25,749 connections across all segments, iVIS 20,000 in 2023, and unknown but smaller numbers at Igzy, Zicom and regional integrators. Allowing for overlap and non-BFSI sites, about 115,000 BFSI sites are under outsourced e-surveillance, or roughly 45% of ATMs plus a small share of branches. The revenue cross-check agrees: CMS's ₹200 Cr at a 36% share implies about ₹555 Cr of BFSI monitoring revenue, which at ₹3,070 to 5,800 per site per month is 80,000 to 150,000 sites. VerifiedS46S51S56 Publicly observedS67S66 EstimatedS46S56S66S67

Content per site. At Rax's transacted prices a full off-site kit (automation panel ₹27,250 median, 4G two-way ₹2,650, PSPB-E ₹7,300, IRC ₹2,400, TLS ₹3,500, EVA ₹7,500) is about ₹50,000; a typical on-site or branch kit (small panel, communicator, power card) is ₹15,000 to 20,000. Weighted across the estate, ₹30,000 per new or replaced site is used. Rax-suppliedS8S4 EstimatedS8S4

Replacement and growth. Bank contracts run five years; hardware is assumed to be renewed on a six-year cycle, so 115,000 sites give about 19,000 kits a year, plus about 8,000 net new monitored sites a year as penetration rises despite closures (CMS alone added 20,000 sites in a year, half by acquisition). VerifiedS39S41S46 EstimatedS39S41S46

EstimatedS19S22S46S51S56S66S8S16S39S41

Top-down triangulation

Mordor puts the India electronic security market at USD 3.05 billion in 2025 (about ₹25,600 Cr at ₹84) growing 11% a year, with video cameras 38% of it and intrusion detection and alarms a smaller slice it does not size publicly; ₹400 Cr is 1.5% of that market, which is plausible for panels, communicators, power units and analytics boxes excluding cameras and recorders. IMARC puts a broader India security market at USD 5.5 billion. CMS sizes BFSI remote monitoring at ₹3,000 Cr and non-BFSI at ₹5,000 Cr of service revenue; if hardware is 8 to 25% of contract value, as the SBI and iVIS pricing implies, the BFSI hardware pool is ₹240 to 750 Cr over a five-year cycle, or ₹50 to 150 Cr a year, which brackets the bottom-up ₹93 Cr. The two families agree within the error of the assumptions; the dealer-channel line is the least certain and is excluded from SAM. Publicly observedS71S72 VerifiedS46 EstimatedS39S66

Rax's share, then and now

Rax's e-surveillance revenue was ₹14.27 Cr in FY24, ₹9.39 Cr in FY25 and ₹5.96 Cr in FY26; the FY23 figure is not split but total turnover was ₹21.71 Cr with e-surveillance around 90%, so about ₹19.5 Cr. Against a SAM of about ₹130 Cr in FY23 (fewer monitored sites, higher kit content) and ₹160 Cr now, Rax's share fell from roughly 15% to under 4%. Within the accounts it kept, the share held: SIS bought 1,808 4G communicators in FY26 against 758 in FY25, Zicom 470 OTP keypads against 43. The loss is concentrated in ANG (PSPB), ITAS (panels), AGS (insolvent) and the regional tail. VerifiedS2S1 Rax-suppliedS4S5 EstimatedS1S2S46

Five-year series

TAM grows 2 to 3% a year because non-BFSI and NBFC sites grow faster than off-site ATMs shrink; SAM grows slower because consolidators internalise hardware. SOM is the base case and requires every precondition in the strategy section. EstimatedS19S46S2

Sensitivity

The third driver dominates: the difference between 3% and 10% of SAM is ₹12 Cr, twice the swing from either market variable. Market decline explains why Rax cannot return to ₹19 Cr on ATM kits alone; it does not explain the fall to ₹6 Cr. EstimatedS19S2

Government versus private, India versus export

Public-sector banks own 63% of scheduled-bank ATMs (134,008 of 209,331 in March 2026) and are the largest specifiers, but they buy e-surveillance as a service through private companies, so the demand reaches Rax as private-company purchase orders. Direct government buying of alarm systems and AMC exists on GeM (regional rural banks, government offices) but is small and L1-priced. Private banks own 71,040 ATMs and close off-site machines fastest. NBFCs are wholly private. Export demand is unproven: the Saudi dossier models a SAR 3.6 million three-year SOM for EVA retrofits and requires SABER and partner proof first; RaxTech Europe and Gulf Connect have no e-surveillance sales. India should carry 100% of the plan for the horizon. VerifiedS19S43S44 Rax-suppliedS13S1

What the sizing does not capture

It does not capture the monitoring revenue that Rax cannot earn without a command centre, which is where 75 to 90% of the money sits. It does not size the custom-design and small-batch manufacturing market that Rax's DDP and OEM lines serve; that market is measured in the thousands of crores of high-mix low-volume EMS and design services and is scored as a segment rather than sized here. It does not know CMS's in-house hardware share, Securens' current panel mix after the acquisition, or the true number of monitored branches. It treats dealer-channel panels as a TAM line only. The numbers should be read as ranges: TAM ₹300 to 500 Cr, SAM ₹120 to 200 Cr, SOM 2029 ₹5 to 17 Cr. EstimatedS19S46S2 Unknown

Segment ranking

Scores use the charter's eight dimensions; the reasoning per dimension is recorded in the segment data file. EstimatedS46S51S55S56S65S66S113S36S42S13S43S2

Why the top three rank where they do

Segment 1 wins on demand and access: the buyers exist, are named, have five-year contracts and already send Rax purchase orders; it loses on readiness (7 of 15 for the product line, 9 here because the accounts are warm) and differentiation (4 of 10) because Securico, Vighnaharta and imports match the panel and CMS builds its own. Segment 2 wins on fit (19 of 20): the ISO scope names customised hardware and software design, the work is free of the e-surveillance reputation problem, margins in Indian ODM run 8 to 14%, and the line grew from ₹1.66 Cr to ₹1.95 Cr while e-surveillance fell; it loses on access because no offer is published and Rax has never sold it. Segment 3 wins because the demand is documented in filings (Muthoot's "seven-layer security system", Manappuram's LOI) and the intermediary is one company whose parent is already a Rax customer; it loses on readiness because vault and branch kits need the OTP keypad that is Rax's worst product. Rax-suppliedS2S12S9S5 Publicly observedS76S117S111S65 VerifiedS46

The ideal customer profile

Firmographics: an e-surveillance service company or ATM deployer with 5,000 to 50,000 monitored sites, a bank or NBFC contract on a five-year OPEX rental, a field force that installs 500 to 1,500 sites a month during roll-outs, and a technology head who specifies the site kit. Trigger events: a contract renewal or new tender award (the 2021 SBI and Central Bank contracts fall due in 2026 to 2027), a bank RFP that adds masked-face or helmet detection, a 2G sunset or connectivity change forcing a communicator swap, a supplier failure (AGS) or a supplier's absorption into a competitor (Securens into CMS, which unsettles SIS and iVIS). Current alternative: Securico or Vighnaharta panels for the lobby, DSC for branches, an imported kit for price, or in-house devices at CMS. Budget holder: the service company's business head for capex, recovered through the rental; the bank never pays for the device separately. Decision timeline: 60 to 90 days for a trial of 100 sites, mirroring SBI's 100-site pilot per vendor, then volume orders monthly for twelve weeks per circle. VerifiedS39S41S56S47 Publicly observedS75S76 Inferred

The buying committee

The economic buyer is the service company's business head, who prices a device by its five-year cost including truck rolls; a device that fails at 25% is dearer than one 60% more expensive that does not. The champion is the head of technology or product, who wants SIA DC-09, remote firmware, zone maps that match the RFP and a supplier who answers the phone. The technical evaluator is the same person plus the CMS integration engineer, who will kill a deal on a missing certificate when a tender asks for BIS or MTCTE. Procurement wants a price at or below Securico and Vighnaharta, MOQ flexibility and delivery in weeks; the sales lead names under-table expectations as a reason deals are lost, which Rax will not meet. Field operations decides in practice: installation-time faults and repeat visits are what turned ANG and Soteria away. The bank's chief security officer or ATM channel head owns the specification and the SLA; any incident where the alarm did not work reaches this desk. Risk and compliance at the bank and the service company will, from 2026, ask about MeitY ER, DPDP readiness and firmware security. Rax-suppliedS2 VerifiedS39S41S26 Inferred

Jobs to be done and willingness to pay

The service company's job is to keep 99% uptime on thousands of sites at the lowest cost per site, deter intrusions before cash is lost, and produce evidence for the bank and the police. Willingness to pay for hardware is bounded by the rental: at ₹3,070 to 5,800 per site per month, a ₹30,000 kit is five to ten months of revenue, so a supplier that removes one truck roll a year (₹1,500 to 3,000 each) is worth a 10 to 20% price premium. The NBFC's job is vault security and audit compliance across a thousand branches with staff who are not security professionals; it pays for the service, and the OTP-controlled vault door is the device it notices. The industrial OEM's job is to get a controller or card designed, certified and built in hundreds, not thousands, without hiring an electronics team; it pays NRE plus unit price and values delivery reliability above all. VerifiedS39S66 Publicly observedS111S65 Rax-suppliedS2 EstimatedS39S66S4

Case studies, one per top-three segment

ATM service companies: ANG India and the EVA and PSPB lines. ANG bought 2,450 EVA units and 1,850 PSPB-E cards in FY25 at ₹7,000 to 7,500 and ₹7,300, then cut PSPB new orders 41% and sent 251 power cards back for service in FY26 while EVA showed zero returns. The account is still open and described internally as good. The lesson is that the same customer buys one Rax product at volume and rejects another on reliability; the fix is product-specific, and the account will tell Rax exactly what failed if asked with a bench report in hand. Rax-suppliedS2S4S9

Custom design and small-batch manufacturing: Fuji and the rack monitoring controller. Fuji went from zero to ₹1.75 Cr in FY26, buying 265 RMC sets at ₹66,675, and became the largest account of the year; the origin of the relationship is unknown internally. The product is in the ISO scope, the customer is industrial, and the unit price is nine times an alarm panel. It shows what a design-led, low-volume, high-value account looks like and that Rax can win one without a sales campaign. Rax-suppliedS2S4S12

Gold-loan NBFC branches: iVIS and Manappuram Finance. On 30 June 2026 Manappuram issued a non-binding LOI to iVIS International (Magellanic Cloud) for AI-powered e-surveillance across about 1,000 branches including vault operations monitoring, supply, installation, commissioning and maintenance; six weeks later iVIS won ₹18.4 Cr of five-year orders for 1,000 PNB ATMs through NCR. Magellanic Cloud appears in Rax's FY26 order book buying PSPB cards (₹23 lakh). The route into the segment already exists as a supplier relationship with the prime contractor's parent. Publicly observedS65S66S127 Rax-suppliedS5

Named research targets

The following are research targets. Where the order book shows a relationship it is stated; otherwise inclusion implies fit, not contact. Rax-suppliedS5S7 Publicly observedS46S55S65S66S67S68S69S70S92S111S112S113S119S128S36S42

Segment-specific gates

Segment 1 requires ISO 9001 (held), a demonstrable failure rate, SIA DC-09 compliance (claimed), and increasingly BIS CRS for power supplies and MTCTE for cellular devices. Segment 2 requires the ISO design scope (held), NRE pricing, a portfolio page and one or two references that can be named. Segment 3 requires the OTP keypad to work and DPDP-ready video handling. Segment 4 requires environmental ratings (the PCMU is 10 to 70 degrees C indoor) and a tower-company vendor registration. Segment 5 requires cloud connectivity and app integration with the service company's platform. Segments 8 and 11 require GeM listing and, for cameras, ER:01 certified partners. Segment 10 requires SABER for electrical products and CE for anything that leaves India. Rax-suppliedS12S10S1 VerifiedS27S30 Publicly observedS38S43

Landscape overview

Direct competitors make the same devices: Indian panel makers (Securico of Faridabad, Vighnaharta of Pune, Atigo of Ahmedabad), the global panel brands sold through Indian dealers (DSC PowerSeries Neo from Johnson Controls, Honeywell VISTA via ADI, Texecom, Paradox, Risco), the video-first majors that added intrusion (Hikvision AX PRO through Prama, CP PLUS and Dahua through Aditya Infotech, Keenfinity as the former Bosch business), the premium wireless entrant Ajax, and the Chinese private-label kits (Athenalarm) that any service company can rebadge. For EVA the direct rivals are Uncanny Vision (now Eagle Eye), Vehant, CP PLUS's Edge AI Box and CMS's own models; for the router, Teltonika, Robustel and the Four-Faith-class OEMs that Rax itself sources from; for the OTP keypad, Matrix Comsec's access range and generic OTP door controllers at ₹37,200. Publicly observedS79S78S100S81S88S90S91S89S128S87S86S101S96S94S99S29S83

Indirect competitors sell a different thing that removes the need for Rax's: analytics software overlaid on the VMS (Videonetics, Staqu, Wobot), ATM deployers who bundle site services (Hitachi Payment Services, NCR, Findi/TSI, EPS), and camera vendors whose recorders now carry alarm inputs. Substitutes are guards at ₹36,000 to 45,000 a month, central-station software such as Bold Manitou in place of RT-SW-CMMS, and doing nothing, which for an off-site ATM in 2026 means closing it. Publicly observedS97S93S95S68S66S119S69S104S105S98 VerifiedS19

Partner-competitors are the service companies: CMS HAWKAI, Securens, SIS VProtect, iVIS, Igzy, Zicom SaaS, and the integrators AnG, Apar, ITAS and Automation Systems. Every one of them buys hardware; the largest builds it; all of them could switch. VerifiedS46S56 Rax-suppliedS5S7

Import versus domestic: the bottom price tier is dominated by DSC, Hikvision and Chinese kits; the domestic makers are Securico, Vighnaharta, Rax, Atigo, Godrej (homes) and CP PLUS's AIL Dixon alarm subsidiary. The Public Procurement Order for CCTV and the MHA's April 2024 memorandum tilt government-linked buyers toward Indian-made security goods, which is Rax's one structural advantage over imports, and it is unexercised because Rax holds no BIS or TEC certificate. Publicly observedS81S80S101S128S129 VerifiedS26 Rax-suppliedS1

Competitor deep-dives, top five

CMS Info Systems (HAWKAI). India's largest cash-management company entered remote monitoring around 2022 to 2023, took revenue from zero to over ₹100 Cr in FY25 and about ₹200 Cr in FY26, monitors 50,000-plus sites across BFSI and eight non-BFSI sectors, claims a 36% BFSI Vision AI share, and states in its May 2026 deck that it owns the full stack: hardware, software and AI models. It paid ₹75 Cr for Securens (turnover ₹76.6 Cr FY25, declining since FY23) to buy "a decade of AI training data", ₹115 Cr for FSS's ATM managed-services business (about 8,000 ATMs), runs ALGO MVS on 63,000 ATMs and targets 80,000 HAWKAI sites by FY30 with technology at 20 to 22% of revenue. It reported ₹2,487 Cr revenue in FY26. Its recent moves: a quick-commerce expansion order, an SBI cash contract, a ₹1,000 Cr ten-year ATM contract and 5% ATM price increases. Rax's FY26 sales to CMS were ₹7,200, though CMS's subsidiary Hemabh bought 20 OTP keypads. The threat is high and structural: CMS is the buyer, the builder and the consolidator. The opening is equally structural: a company building 20,000 sites a year of its own devices needs contract design and manufacturing partners with an Indian address, and Rax's ISO scope says that is what it does. VerifiedS46S47S48S49S54 Publicly observedS51S52S53S130 Rax-suppliedS5S12

SIS Limited (VProtect and SIS Alarm Monitoring and Response Services). India's largest security company (₹15,982 Cr revenue FY26) runs VProtect, the largest alarm-monitoring network by connections: 25,000-plus in March 2025 and 25,749 at end-FY26, monitoring 19.6 lakh alarm responses a month, with BFSI wins and B2C expansion in Bengaluru, Mumbai and Lucknow; the FY26 report shows a ₹89.1 Cr figure against VProtect. Its alarm business is described as "trading and installation of electronic security devices", which means it buys from OEMs. SIS is Rax's third-largest e-surveillance account and grew 183% in FY26 to ₹0.79 Cr on 4G communicators, OTP keypads, PSPB and SMPS, but returned 44 of 51 OTP keypads for service. Connections growth was flat between FY25 and FY26, which suggests VProtect is renewing rather than expanding its BFSI base. Threat: high as a buyer that can switch; opportunity: the one large account where Rax's volumes are rising. VerifiedS55S56 Rax-suppliedS5S4S9

Vighnaharta Technologies and Securico Electronics. These two Indian panel makers are named in Securens' own recruitment advertisements as the panels its installation engineers should know; that is the clearest public statement of who supplies the ATM lobby panel to a top-four service company. Vighnaharta (Pune, 17 years on IndiaMART) sells V-Cop wired and IP-hybrid panels at ₹8,600 to 9,275, TrueSense sensors, fire and gas detection and ODM services, and its bank-and-ATM page describes exactly Rax's use case: back-room door monitoring, vibration and glass-break zones, battery alerts, GSM or CDMA VPN reporting to a CMS. Securico (Faridabad) sells Solitaire, Galaxy and Millennium panels with speech and GSM diallers through dealers nationally at ₹12,450 for an 8-zone Solitaire. Neither publishes certifications or failure data. Threat: high, because they sit in the specification of the service company that Rax's customer Securens has become. Publicly observedS76S77S78S124S79

Hikvision AX PRO (Prama Hikvision India) and CP PLUS/Dahua (Aditya Infotech). The two largest video brands in India have both added intrusion. Prama launched AX PRO in September 2020 and Hikvision India relaunched it in March 2023; a wireless hub with video verification sells at ₹19,500. Aditya Infotech, the largest Indian-owned surveillance company with 20.8% of video revenue and exclusive Dahua distribution, listed in August 2025, sells an Edge AI Box with intrusion detection, mask detection and tampering alerts, makes alarms through its AIL Dixon subsidiary, and reaches 1,000-plus distributors and 2,150-plus integrators. Their advantage is that they already own the camera and recorder at the site; their weakness in PSU tenders is Chinese origin under the MeitY security requirements. Threat: high for EVA and for any site where the recorder becomes the alarm panel. Publicly observedS125S89S80S128 VerifiedS27

iVIS International (Magellanic Cloud). A Hyderabad command centre that oversaw 20,000 ATMs and banking sites by December 2023, won a public-sector bank contract that month, secured ₹18.4 Cr of five-year e-surveillance orders for 1,000 PNB ATMs through NCR in August 2026 (about ₹3,070 per site per month, capex and opex), and holds a non-binding LOI from Manappuram Finance for about 1,000 branches including vault monitoring. Its listed parent reported ₹700-plus Cr of FY26 income and also runs railway surveillance contracts. Its hardware sourcing is not public; its parent bought PSPB cards from Rax in FY26. Threat and opportunity in one: the fastest-growing PSU and NBFC winner, and the one whose supply chain Rax is already in. Publicly observedS67S66S65S127 Rax-suppliedS5

Profiles, remaining competitors

Feature and price comparison on the criteria buyers use

VerifiedS39S41 Rax-suppliedS10S8S9S2 Publicly observedS77S79S78S81S80S82S128S86 VerifiedS46

The positioning map, in words

The horizontal axis is the price of a monitored-site kit; the vertical axis is how much of the stack the seller supplies. The crowded space is the bottom-left: single components at ₹5,000 to 13,000 from a dozen Indian and imported brands, where Rax's 8-zone panel sits with Securico, Vighnaharta and DSC and where price is the only argument. The crowded space at the top is full-stack service: CMS, Securens, SIS and iVIS supply hardware, software and monitoring and compete on sites, not devices; Rax cannot enter it. The empty space is the middle: an Indian-made, certified, integrated kit (panel plus power control plus communicator plus OTP plus a CMMS receiver) at ₹25,000 to 45,000 with published field data and a service contract, sold to service companies that do not want to build their own. Nobody occupies it. Rax has the product set for it and none of the proof. Inferred Publicly observedS79S78S81 VerifiedS46S56

Testing the claim that Rax is a major player

Rax states that it is one of the major players in e-surveillance, globally. Each test below uses public evidence where it exists and Rax's own record where it does not. Rax-suppliedS1

The claim is true of a period and a niche: Indian ATM site kits sold to service companies during the 2021 to 2023 roll-out wave. It is not true of India today, and there is no public evidence for it globally. The reconciliation with falling revenue is direct: a supplier that held about 15% of its niche in FY23 and holds under 4% in FY26 has lost its major-player position, and the loss is visible in named accounts rather than in the market. Presenting Rax as a major player to CMS, iVIS or a bank would invite a reference check the company cannot pass; presenting it as a specialist Indian OEM with a certified design scope and 3,000-plus EVA units in the field is accurate and defensible. Inferred Rax-suppliedS2S12 Recommendation

Where Rax wins, where it loses

Rax wins repeat orders where the integration already exists: SIS's 4G communicators (1,808 units in FY26), Apar's PCMU (2,500 units over two years), Zicom's OTP keypads (470 units), Automation Systems' panels. It wins on breadth (nobody else in the bottom tier sells power control, relay panels, OTP and analytics from one catalogue), on firmware customisation for a service company's CMS, and on being Indian when a PSU tender or the MHA memorandum favours domestic goods. Rax-suppliedS4 VerifiedS26

Rax loses on reliability (ANG, Soteria, the OTP keypad at Zicom and SIS), on delivery (ITAS), on certification (no BIS, no MTCTE, a CE claim it cannot support), on install support at roll-out scale (Securens installs 1,500 units a month; Rax misses urgent orders on components), and on procurement culture (under-table expectations it will not meet). It has never lost on list price in the evidence: its panel is at or below DSC-class dealer prices once the automation panel's extra zones and power monitoring are counted, and the erosion in its own book followed the relationship loss rather than preceding it. Rax-suppliedS2S9S4S1 Publicly observedS75S81

What buyers say about the incumbents is in the voice section; the short version is that service companies describe legacy SMS-based panels as useless, prize install capacity and response, and increasingly want analytics and app-level health monitoring; nobody praises a panel. Publicly observedS75S74S53

Competitor responses to expect

If Rax recovers share at SIS or wins iVIS, expect Securico and Vighnaharta to match on price within a quarter, since their panels already sit below Rax's; expect CMS to ignore it unless Rax proposes OEM supply, in which case expect a request for design ownership and exclusivity; expect Hikvision and CP PLUS to bundle alarm inputs into recorders at near-zero incremental price; expect Ajax to stay premium and residential. The response Rax cannot survive is a service company publishing comparative field-failure data, so Rax should publish its own first. Inferred Publicly observedS79S78S128S86

What the market pays

No Indian price for a dedicated two-channel edge box from CP PLUS or Hikvision was found; both sell on quotation. The observed substitutes bracket EVA: an AI camera at ₹4,200 makes a separate box unnecessary on new sites, while a multi-camera analytics server costs twenty times EVA's ₹8,500 list. EVA's case is the retrofit of existing DVRs at ATM and branch sites. Publicly observedS145S144 Rax-suppliedS8 Inferred

Rax's pricing and its inconsistencies

Rax has no published price list beyond the IndiaMART storefront, and that storefront disagrees with itself: the 8-zone panel appears at ₹13,000 on the seller page and at ₹90,000 in a directory listing of the same model; the CMS-bundled panel is branded "Geo Marshall" on one listing. The delivery book's list prices (PSPB-E ₹9,000, EVA ₹8,500, OTP ₹7,200, 4G two-way ₹2,800, IRC ₹2,400) are internal reference values, not an approved list, and the internal analysis warns that "unit_price" may be a list value rather than the invoiced price. Publicly observedS16S18 Rax-suppliedS8S3

Transacted prices for the same family range five-fold. Panels went to AGS at ₹37,000, Automation Systems at ₹26,800 to 40,480, ITAS at ₹28,987 to 33,537 in FY25 and ₹7,033 in FY26, Ironwall at ₹12,120 to 13,120, Inforob at ₹8,500 then ₹5,450, and SIS at ₹5,000 for 488 units in FY26; some of the spread is zone count and enclosure, some is customer power. EVA went from ₹10,000 (VC Tech) to ₹7,000 (ANG); PCMU from ₹8,100 to ₹7,500 to ₹3,800 for "conversion" work; PSPB from ₹7,300 to ₹1,775 to 1,925 on some FY26 ANG lines, which are probably cards without enclosure but are not labelled. The erosion follows the loss of pricing power in accounts where service problems arose. Rax-suppliedS4S8

How Rax compares

On like-for-like panels Rax is not expensive: ₹13,000 for an 8-zone GSM/Ethernet panel with SIA-DCS against ₹12,450 (Securico), ₹9,275 (Vighnaharta) and ₹6,000 (DSC HS2032 without communicator), and the 32-zone automation panel with power monitoring and fifteen relays has no dealer-grade equivalent below ₹40,000 (Ajax). The 4G two-way communicator at ₹2,650 to 2,800 is below every dialler observed. The OTP keypad at ₹7,200 to 8,500 is a quarter of the ₹37,200 OTP door controller on the market. Rax's problem is not the sticker. Publicly observedS16S79S78S81S82S84S83 Rax-suppliedS8

Price architecture options

Hardware plus AMC. Keep list prices, add a per-unit annual service and firmware contract at ₹600 to 900 for EVA and communicators and ₹1,000 to 1,500 for panels and power units, with a defined RMA turnaround. This is the option the 3,000-plus EVA base and the 2,500 PCMU units make possible today and the one every service company already sells to its bank. Recommendation Rax-suppliedS2

Kit price per site. Bundle panel, communicator, power card, relay and sensors interface at a single per-site price of ₹25,000 to 30,000 for on-site and branch sites and ₹40,000 to 45,000 for off-site lobbies with EVA, matching how the service company quotes to the bank. It simplifies the buyer's costing against the ₹3,070 to 5,800 rental and hides the panel's exposure to ₹6,000 imports. Recommendation VerifiedS39 EstimatedS66

OEM and design pricing. For CMS, iVIS or Igzy: NRE for a customised device (design fee, tooling, certification support) plus a per-unit price with volume tiers and a service SLA; ODM margins in Indian EMS run 8 to 14% of EBITDA, which is the benchmark a buyer will apply. Recommendation Publicly observedS117

Subscription is not available to Rax without a monitoring centre; the service company owns the recurring relationship. Per-site rental for hardware alone is possible through a financing partner but adds receivable risk Rax cannot carry. Inferred

Cost to serve and the margin that must be true

No cost of goods, gross margin or profitability exists in the record for any product or year. For the plan to work at ₹11 Cr by 2029, and given that repairs run through the production line, the business needs a product-level gross margin above 35% on hardware and a service line priced above its truck-roll cost. Without a cost sheet the price floor is unknown, and lines such as PCMU conversions at ₹3,800 or panels at ₹5,000 to 7,033 may already be below it. The first pricing deliverable is therefore a bill-of-materials-based cost for the ten SKUs that carry 90% of e-surveillance revenue. Rax-suppliedS3S4 Recommendation

Subsidy and scheme effects

None. No central or state scheme reduces the price a bank, NBFC or service company pays for e-surveillance hardware or monitoring; the effective price is the tendered rental. Unknown VerifiedS39S41

Tender pricing dynamics

Banks discover price by reverse auction and allocate sites L1:L2:L3 in fixed ratios (SBI 2018: 50:30:20, with L2 and L3 matching L1), which pushes the rental down and spreads the volume; SBI's Phase IV split the rental 60% event-based surveillance, 25% cloud storage and 15% power management, and paid 50% of the rental for shifting a site. Penalties are severe: 100% of a site's rental for any failure beyond 72 hours, ₹500 to 1,000 per week for late installation, actual loss for equipment failure. The service company therefore prices hardware by the penalties it can cause, which is why a device with a 25% return rate is disqualifying at any price. On GeM, regional rural banks buy alarm-system AMC at L1 with small values. VerifiedS40S39S41S43S44

Payment terms and receivable risk

Service companies are paid monthly in arrears by the bank after penalties, so they pay OEMs on 30 to 90 days and stretch when the bank stretches. Two of Rax's top-six accounts of the last three years are insolvent (AGS in CIRP since August 2025; Zicom's parent in CIRP since 2021 with a plan before the NCLT in July 2026), and ₹0.86 Cr of AGS order value was lost. Advance or milestone terms for unrated buyers, credit limits per account, and no shipment to a buyer in CIRP without cash in advance are the minimum. VerifiedS39S59 Publicly observedS62S63 Rax-suppliedS2

Every route, assessed

Procurement mechanics

Bank RFPs are two-bid: technical eligibility (ISO 9001, prior sites, audited accounts, sometimes a command centre) then a commercial bid with an indicative price and a reverse auction; SBI's Phase IV required each selected vendor to implement 100 pilot sites before scale, defined the rental as 60% surveillance, 25% cloud storage and 15% power management, and allowed the bank to withdraw services on 60 days' notice. Central Bank's RFP ran five years with 12-week installation, beat marshals per ten ATMs, and a requirement that every additional sensor be installed at no extra cost. The technical annexes list the zones (mains and UPS sensing, chest door, thermal, removal, cheque-drop, panic, motion, glass-break, camera tamper) and the communication (GSM/CDMA VPN router, 3G SIM); they specify function, not brand, but ask that peripherals be "certified" and from a "proven OEM/reputed make". Rax's route into these documents is to be the make the service company names. VerifiedS39S40S41

Empanelment and rate contracts exist at bank circle level for fire alarm systems and AC vendors (SBI Kolkata and Hyderabad circles published such EOIs in 2024 to 2026) and on GeM for alarm-system AMC; they are open to manufacturers but are small and L1-priced. VerifiedS45S44

NBFC procurement is LOI-then-PO through a prime: Manappuram issued a non-binding LOI to iVIS, with definitive agreements and purchase orders to follow in phases; the prime buys the kit. Publicly observedS65S127

What Rax tried before, and why re-proposing it would differ

Digital marketing through agencies and in-house, and channel partners with their own sales teams, were both tried and failed. Nothing here re-proposes either as a growth engine. The one narrow exception is evidence-led: since referrals are dead by the sales lead's account and inbound already arrives through Google and IndiaMART, the storefront should be corrected (the ₹90,000 listing, the "Geo Marshall" brand, the missing EVA and PCMU prices) and a single page of field-failure and certification data published, because that is what a technology head at a service company will look for before returning a call. That is content, not marketing spend. Rax-suppliedS1S2 Publicly observedS16S18 Recommendation

The sales motion a two-person team can run

Account one and two, the Managing Director: CMS (OEM and design conversation, through Hemabh and the HAWKAI product team) and SIS (AMC on the EVA base, OTP keypad fix, communicator volumes). Account three to six, the sales lead: ANG (PSPB fix and recovery), Apar (PCMU, panel and IRC continuity), iVIS/Magellanic (site kits for PNB and Manappuram), ITAS (deliver the 100 panels, then re-open). The part-time technical person: the fault reports, the trial installations and the datasheet corrections. Everything else waits. Recommendation Rax-suppliedS1S2S5

Proof assets needed before any new-customer conversation: a two-page field reliability note per product family with units shipped, units returned, fault categories and the fix; the corrected datasheets without the CE claim; the ISO certificate and scope; a reference letter from Apar or Automation Systems; and a site-kit price sheet. Recommendation Rax-suppliedS9S12

The pilot design mirrors the banks' own: 100 sites at one service company over 90 days, with Rax installing the first ten alongside the customer's engineers, a weekly fault log shared with the customer, a 24-month warranty on the revised units, and an agreed kill criterion (more than 2% installation-time failures or more than 3% returns in 90 days ends the pilot). Success unlocks a volume price and the AMC. Recommendation VerifiedS39

Reference-building given the quality history: name the fix, name the account that accepted it, and let that account speak. ANG is described internally as a good customer that is still buying; it is the reference to earn first. Recommendation Rax-suppliedS2

Marketing that matches how these buyers find suppliers

Service-company technology heads find suppliers through installer networks, through the panels named in their own job adverts, through industry events (PACC, Intersec India), and through IndiaMART when they need a component quickly; banks do not find OEMs at all. The evidence-led actions are: fix the storefront, publish failure and certification data, present a paper on integrated power control at one industry event, and write to the eight named accounts with the fault report. No agency, no campaign. Publicly observedS76S89S16 Rax-suppliedS2 Recommendation

Group entities as routes

iibdaei's own July 2026 research concluded that EVA should enter Saudi Arabia only through a partner-led retrofit pilot on two camera feeds with a Saudi integrator, priced at SAR 55,000 to 95,000, after the certificate, camera-matrix and cyber gaps are closed; alarm panels were not assessed as ready. Gulf Connect has one small OEM client; RaxTech Europe has no sales. These are not routes for the e-surveillance line in the next twelve months; the Saudi pilot is the only export action that should proceed, and only after the EVA test data exists. Rax-suppliedS13S1 Publicly observedS38

How the ranking was built

Rax does not sell to banks by state. It sells to service companies whose technology heads specify the site kit from a head office and whose field teams install it wherever the bank's sites are. The state score therefore mixes three things: where the buyers sit (weighted most), where the monitored sites sit (bank branches, ATM density, gold-loan branches), and how far the state is from Chennai's service and repair capacity, which matters because the two failing products were returned through the production line. Rax's own account map is the fourth input. The RBI's quarterly state-wise ATM tables would have been the preferred site measure, but every file sits behind a human-verification page that this session could not pass, so branch counts and published ATM-density figures stand in. Rax-suppliedS7S9 Publicly observedS57S143 UnknownS24

The remaining scored states are Haryana (42), Rajasthan (38), Punjab (36), Madhya Pradesh (34), Bihar (30) and Odisha (26). EstimatedS7S57S142S143S46S56S67S112

Cities and corridors that matter

Mumbai and Navi Mumbai hold the consolidator. CMS's HAWKAI team, Securens' Mahape monitoring station and Zicom's command centre are all there, as are the procurement desks of Central Bank of India and Union Bank of India, whose 2024 and 2026 RFPs define what an ATM or branch kit must do. A Rax engineer who can sit with a CMS or Securens integration team for a week is worth more than any campaign. VerifiedS46S135S137 Publicly observedS108S64

Delhi NCR holds the volume buyers of Rax's most-shipped products. SIS Alarm Monitoring and Response staff review the company from Gurugram and SIS's principal office is in Okhla; ANG, the largest EVA and PSPB buyer, lists an NCR telephone exchange; Igzy is in Gurugram and Securico in Faridabad. Every recovery conversation in the 90-day plan except Apar happens here. Rax-suppliedS2S5S7 Publicly observedS92S79S110S56

Chennai and its periphery are the proving ground. The August 2026 Somangalam attack, where the alert reached ICICI Bank's Mumbai control room but police could not find the ATM, shows the gap a site kit with location data and local audio can close, and it happened thirty kilometres from Rax. Tamil Nadu's high ATM density means a 100-site pilot can be installed and serviced within a day's drive. Publicly observedS132S143S142 Inferred

Hyderabad is iVIS's home. The command centre that oversaw 20,000 sites in 2023, won 1,000 PNB ATMs through NCR in August 2026 and holds the Manappuram branch LOI makes Hyderabad the second hub for the NBFC and PSU kit conversation. Publicly observedS67S138S65

Kochi and Thrissur decide gold-loan branch security. Muthoot Finance reports a seven-layer security system across 4,800-plus branches; Manappuram's LOI names vault operations monitoring. Kerala already holds two Rax accounts buying panels, two-way units, EVA and routers. VerifiedS111 Publicly observedS112S65 Rax-suppliedS7

Bengaluru has an existing panel and EVA buyer and the design-house cluster (Mistral) against which the custom-design offer will be compared. Rax-suppliedS7 Publicly observedS148

Government versus private demand by geography

Public-sector bank sites are spread in proportion to branches, with Uttar Pradesh, Bihar and Madhya Pradesh heavy in PSU branches and low in ATM density; that demand arrives through national tenders written in Mumbai and Delhi. Private banks closed off-site ATMs fastest in FY25 and FY26; no state split of those closures could be opened, but private-bank off-site estates are metro-heavy, which is where Rax's small-integrator accounts sat. Gold-loan NBFC demand is private and concentrated in the south by head office, though branches are national. Regional rural banks, the only direct government buyers of alarm AMC seen on GeM, are state-sponsored and scattered (Chhattisgarh is the observed example). VerifiedS19S44 Publicly observedS57S143S46 Inferred

Export: what each route would require

Export is less than a tenth of this report's evidence and deserves no more of the company's effort. The group entities have no e-surveillance revenue, the datasheets claim a CE mark that is not held, and the one export action with a written plan, the Saudi EVA pilot, depends on accuracy, camera-compatibility and cyber evidence that does not exist yet. Rax-suppliedS1S10S13

Sequence and triggers

First, months 0 to 6: Delhi NCR (ANG, SIS) and Mumbai (CMS, Securens, Zicom) for recovery and the AMC, with the bench work and the 100-site pilot run from Chennai. Trigger to move on: 200 revised units installed with zero installation-time failures and one AMC signed. Recommendation

Next, months 6 to 12: Hyderabad (iVIS for PNB and Manappuram kits) and Kerala (NBFC branch vault kits through iVIS or a regional integrator). Trigger: a written trial order of at least 100 site kits from iVIS or a CMS team, and returns below 3% at 90 days in the pilot. Recommendation

Later, months 12 to 24: national primes' bids for Uttar Pradesh, Bihar and Madhya Pradesh PSU sites as the named OEM, once BIS CRS and MTCTE are held; the Saudi EVA pilot once the test pack exists. Trigger for export: a completed EVA accuracy and camera-matrix report and a Saudi integrator willing to co-fund the pilot. Recommendation Rax-suppliedS13

What would change the order: if CMS or SIS moves its kit decisions to regional offices, or if a southern bank (Indian Bank, Canara Bank, IOB, Karur Vysya, Tamilnad Mercantile) tenders branch e-surveillance with a local-content preference, Chennai should rise to first. Inferred VerifiedS134S26

Where the signals came from

Buyers of site kits rarely post reviews. The places where they speak are the pre-bid query annexures that banks publish after a meeting, the clauses the banks write into RFPs, the investor decks and annual reports of the listed service companies, police statements after an ATM attack, and employee reviews of the monitoring companies. This section uses all of them. Forums, consumer-complaint portals and RTI responses were searched for e-surveillance panel failures and returned consumer CCTV complaints that do not concern ATM or branch kits; they are not used. Parliamentary answers on ATM theft discuss fraud counts, not equipment. VerifiedS134S136S137S37 Publicly observedS106S132S110 Unknown

VerifiedS46S134S135S137S20 Publicly observedS132S105S76 Rax-suppliedS2

What buyers complain about

Penalties first. Every bank RFP in the record ties the service company's rental to uptime: SBI deducts 30% to 100% of a site's monthly rental as a failure lengthens from half an hour to 72 hours; Indian Bank adds penalties for undetected incidents and missing footage; Union Bank levies ₹200 a day for a site down beyond 24 hours on top of the lost rental. Bidders push back in writing and lose. VerifiedS39S134S137

Request to to please consider and review as penalty are very high and not sustainable

Connectivity and what panels can actually do. Banks write clauses that the hardware on the market cannot meet, and bidders say so: two-way audio that never disconnects even when the network is lost, SMS or a phone call when there is no network, 128-zone panels for sites that use fewer than 64 sensors, ten hours of battery on the panel and every connected device. Union Bank conceded the zone count and cut the battery requirement to six hours. VerifiedS134S137

Panels used for e-surveillance models do not have this capability.

False alarms and response. Bidders warned Union Bank that three sirens at a public site will sound on false alerts. In Hubballi the police commissioner said the alarm had been disabled; at Somangalam near Chennai the attack was detected and reported from Mumbai, but police on night duty could not find the ATM. Detection without location and response is what banks remember. VerifiedS137 Publicly observedS106S132

police personnel on night duty could not immediately locate the ATM as they did not receive its precise location

Replacement turnaround and field load. A Zicom SaaS customer scored "replacement of IP panel" as needing improvement even in feedback the vendor chose to publish; SIS's alarm-business staff describe the job as field work that is hectic. These are the costs a failing device multiplies. Publicly observedS150S110

Eligibility that favours scale. Indian Bank asked for e-surveillance at 1,500 sites in two banks and completed works of ₹35 to 45 Cr each; a bidder asked the bank to count pure e-surveillance turnover instead, and the bank refused. UCO Bank, by contrast, relaxed its 2,000-site requirement to 1,400 and accepted branches as experience. The small integrators Rax used to supply are being written out of direct bank work. VerifiedS134S136

What buyers say they want

Proof before scale, paid by the vendor. SBI's Phase IV asked every selected bidder for a 100-site pilot; Central Bank's 2026 RFP says service providers carry out the proof of concept at their own cost. A supplier who cannot fund and survive a pilot does not reach volume. VerifiedS39S135

Tamper and health detection. Central Bank wants instant detection of an alarm-panel disconnection or a cut sensor wire, health status for two-way audio, hooter, CCTV and every sensor, GPS coordinates for each site, and repair within 24 hours. Union Bank wants the command centre to change panel, NVR and router settings remotely and to produce health reports for every device. VerifiedS135S137

Capability to instantly detect the disconnection of Alarm Panel at ATM site, (such as wire cut, etc.) or disconnection of any of the critical sensor from Alarm Panel and initiate appropriate and corrective actions

Analytics and cyber assurance. Central Bank of India asked in 2021 for detection of covered faces and helmets; Indian Bank repeated it for branches. Central Bank now requires an annual security clearance certificate for the e-surveillance system from CERT-In empanelled auditors, and Union Bank requires the CMS hardware and software to comply with the bank's information-security protocols. VerifiedS41S134S135S137

Integration and fewer boxes. Union Bank accepted a bidder's point that an integrated intrusion and fire panel removes the need for a separate fire panel; a UCO bidder argued that branch and ATM systems are the same; Videonetics sells analytics that overlay existing VMS rather than replacing hardware. Buyers want one controller that does more, not more controllers. VerifiedS137S136 Publicly observedS97

Scale and a credible operator. CMS says banks prefer one large player; Magellanic Cloud's chairman frames iVIS's PNB win as fifteen years of BFSI experience; Securens sold install capacity of 1,500 units a month. Publicly observedS105S138S75 VerifiedS46

Requirements observed in real RFPs, clause level

VerifiedS135S137S134S41S39

Signals about Rax specifically

Publicly, Rax is nearly silent. The IndiaMART storefront shows 3.9 stars from ten reviews and an 89 to 90% response rate; Justdial shows 4.3 from 48 ratings in the first capture and 4.4 from 52 later, categorised as an electrical goods dealer; the testimonials page of the IndiaMART microsite carries five-star reviews for emergency exit lights and a comment on supplier response, none for e-surveillance products. No forum post, tender clarification, news item or court record names Rax's panels, communicators or EVA. Publicly observedS16S17S152

Internally, the signals are precise and unfavourable, and they come from the people closest to customers. Rax-suppliedS2

Lots of support calls that too for new one. During installation itself issues.

The sales lead also said referrals are dead because of Rax's name in the market and that urgent orders are lost because production depends on components; Gabriel recorded that ANG stopped power-supply orders because of failures and frequent service needs. These match the delivery-book record of 603 units through service in FY26 and 100 of 150 ITAS panels undelivered a year after order. Rax-suppliedS2S9

Patterns and what they imply

The signals point one way. Banks buy uptime, response and evidence and punish their service companies for downtime; service companies therefore buy devices by the failures and site visits they cause, prefer to build or standardise, and want proof at the supplier's cost. The specification is climbing toward supervised zones, device health, integrated fire and intrusion, analytics and cyber audit. The people who complain are bidders complaining about banks, not banks complaining about panels; the device vendor is invisible until it fails. VerifiedS39S134S135S137S46 Inferred

For positioning this means Rax should talk to the service company about truck rolls avoided and penalties not paid, publish a field failure rate per product family, lead with the integrated panel plus power management plus communicator that already matches the Union Bank and Central Bank clauses, and add the missing pieces buyers now name: supervised zones with a CMS heartbeat, GPS or site-ID mapping, a 6-hour power budget statement and a security pack for audits. For product it means the next engineering hour goes to reliability and supervision, not new features. Recommendation Rax-suppliedS10

The register in brief

Severity is likelihood times impact on a 1 to 5 scale each; the full register with evidence is rendered below. Rax-suppliedS9S2S4S1S10S13 VerifiedS46S19S134S135S137S59 Publicly observedS30S34S35S38S78S140S141 EstimatedS9S46S19

The reputation and quality constraint, applied to this product

The charter's constraint is sharper for e-surveillance than for any other Rax line, because every buyer runs an uptime-penalised contract. A bank deducts 30% of a site's monthly rental when a failure lasts beyond half an hour and all of it beyond 72 hours; Union Bank adds ₹200 a day beyond 24 hours. A service company that installs a card which comes back at 8% to 38% is paying those penalties and the truck roll, and it remembers the supplier. VerifiedS39S137 Rax-suppliedS9

The quality record is specific. Units through service rose from 43 in FY25 to 603 in FY26. The OTP keypad returns are concentrated at Zicom and SIS and absent at Securens and ANG, which points to a batch, firmware or site cause that has not been diagnosed; the PSPB returns are all at ANG. Quality control is sample-based on large orders. Installation-time faults are reported by the sales lead. ITAS waited a year for 100 of 150 panels. Soteria left on quality. None of this is public, which means it is still containable, but every new account Rax approaches is likely to call one of the existing ones. Rax-suppliedS9S2S3

Three consequences follow. First, no new service company should be offered a trial until the two failing lines have a documented fix, because a failed trial converts a private problem into a market one. Second, the warranty and AMC terms must be written to cover the revised units generously (24 months), because the buyer is pricing the risk Rax has already shown. Third, the fault analysis must be published to the affected accounts, not just fixed quietly, since the accounts experienced the failures and will judge the fix by the explanation. Recommendation

Compliance map

Dependencies

Components. The ESG panel uses a Quectel 4G modem; the communicators and panels depend on cellular modules, microcontrollers, SMPS parts and batteries; the router appears to be a sourced OEM product. The sales lead names component dependency as the reason urgent orders are lost, and no second-source list exists in the record. A modem allocation or price shock hits the 4G communicator line, which is the one line growing at SIS. Rax-suppliedS10S2S4 Inferred

Connectivity. Every site kit depends on a SIM. Vodafone Idea planned to close 3G in FY25 and no 2G retirement date exists, so the GSM and 3G installed base can be stranded at short notice; bank RFPs now demand dual SIM plus wired links, which moves value to the router and communicator. Publicly observedS140S141 VerifiedS137S135

Partners. All demand reaches Rax through service companies and integrators; two of Rax's top-six accounts of the last three years are insolvent, and the largest remaining buyer is integrating backwards. There is no channel to banks that does not pass through a service company. VerifiedS59S46 Publicly observedS62 Rax-suppliedS2

Scheme money. None. No central or state scheme pays for ATM, branch or NBFC e-surveillance; banks fund it from operating budgets on five-year rentals. The only public money in adjacent segments is in camera mandates (CBSE schools) and public-sector infrastructure orders such as GAIL's integrated e-surveillance project. Unknown VerifiedS39 Publicly observedS36S139

Early-warning indicators

The decision in one paragraph

Rax cannot grow e-surveillance by selling harder into a market where the unit base is shrinking, the largest buyer builds its own kit, and its own two products are coming back in hundreds. It can stop the loss, earn from the installed base, and redeploy the same design and manufacturing capability into lines that are growing inside the company already: rack monitoring (Fuji, ₹1.75 Cr from zero in FY26), FIOT devices, and design and OEM work (DDP and OEM together about 21% of FY26 revenue). Gabriel has said the company is actively trying to grow FIOT and rack monitoring; the evidence in this report supports doing so, provided the discipline built in the repair programme goes with them. Rax-suppliedS1S2S9 VerifiedS19S46

Option A: defend and repair the ATM base

What it is. Fix the ACS OTP keypad and PSPB power line, prove the fix at ANG and SIS, deliver ITAS's backlog, sell an AMC and firmware contract on the 3,000-plus EVA units and 2,500 PCMUs, and become the named OEM inside the bids of the large primes (SIS, iVIS, NCR) and bank-owned command centres. Rax-suppliedS2S4S9 VerifiedS137

What must be true. The failures have a diagnosable cause (the concentration of OTP returns at two customers suggests batch, firmware or site conditions); ANG and SIS will reorder on evidence; SIS and ANG see value in an AMC on out-of-warranty EVA units; primes will name an Indian OEM that brings a compliance dossier. Rax-suppliedS9S3 Inferred

Quality and service preconditions. 100% functional and burn-in testing on the two lines; a written fault report per product with batch, firmware revision and site; a 24-month warranty on revised units; an RMA turnaround target of ten working days; a service log that separates warranty, non-warranty and upgrade work (today's delivery book cannot). Recommendation Rax-suppliedS3

Pilot design. Two accounts, 200 revised units each of PSPB (ANG) and OTP keypads (SIS or Zicom), installed alongside the customer's engineers with Rax attending the first ten installations; weekly shared fault log for 90 days; AMC offered on 1,000 EVA units at ₹600 to ₹900 a unit a year. Recommendation Rax-suppliedS4

KPIs. Zero installation-time failures on the first 200 revised units; returns under 3% at 90 days; service units below 20 a month company-wide by month six; ANG PSPB orders back to at least 150 units a month; one AMC covering at least 1,000 units; 100-panel orders delivered within 30 days. Recommendation Rax-suppliedS9S4

Investment and time to revenue. Two engineers for about three months and a test jig; replacement units for field swaps (cost unknown, no COGS in the record); BIS CRS for three power and panel models at about ₹51,000 to ₹76,000 each in fees and tests; MTCTE for the 4G communicator and ESG panel (fees not captured, about 60 days). Revenue returns in three to six months: ANG's PSPB line was ₹1.24 Cr in FY25 and ₹0.55 Cr in FY26, ITAS was ₹1.43 Cr, and a 3,000-unit AMC at ₹600 to ₹900 is ₹18 to 27 lakh a year of recurring revenue. EstimatedS34S2S4 Publicly observedS33 Unknown

Kill criteria. Revised units return above 3% at 90 days: stop selling the product and source or discontinue it. ANG places no PSPB order within six months of receiving the fault report: treat the account as lost and move the engineers to option C. No AMC signed within six months of offer: stop pursuing recurring service on the EVA base. Recommendation

Why it cannot be the whole plan. Even fully successful, it caps at the base-case SOM of about ₹11 Cr by 2029 in a pool where off-site sites fall about 10% a year and CMS internalises hardware. EstimatedS19S46S2

Option B: expand to adjacent segments, led by FIOT and rack monitoring

What it is. Carry Rax's controllers, power and relay units, diallers and gateways into sites that need remote monitoring but are not ATMs, in this order: rack and server-room monitoring (the RT-RMC controller already selling to Fuji); FIOT devices for towers, plants, pumps and generators (auto dialler, industrial IoT gateway, PCMU); gold-loan NBFC branch vault kits through iVIS; and non-BFSI sites bought by the service companies (dark stores, warehouses, retail). Rax-suppliedS1S2S6 Publicly observedS65S139 VerifiedS46

Why this order. Rack monitoring and FIOT are the lines Gabriel names as growth priorities, they carry no ATM reputation, and one of them is already the largest account of the year; CMS sizes non-BFSI monitoring at ₹5,000 Cr and Indus Towers runs 264,514 towers with round-the-clock operations centres; NBFC vault kits come third because they need the OTP keypad that is Rax's worst product. Rax-suppliedS1S2 VerifiedS46S113 Rax-suppliedS9

What must be true. The RMC and FIOT products are as reliable as the EVA and panel lines (zero recorded service) rather than the OTP and PSPB lines; tower companies and plants will buy from an OEM without a field force if a service partner installs; iVIS or a CMS team will trial a branch kit. Rax-suppliedS9 Inferred

Quality and service preconditions. The same test and warranty regime as option A before any unit ships to a new buyer; MTCTE for the IoT gateway (mandatory since January 2024) and the auto dialler; environmental qualification for outdoor and tower sites (the PCMU datasheet states indoor 10 to 70 degrees C); a named installation partner per segment. Publicly observedS31 Rax-suppliedS10 Recommendation

Pilot design. Rack monitoring: two paid pilots of 20 to 50 controllers with an existing industrial or data-centre account and one bank or NBFC server-room estate reached through a service company, 90 days, with door, temperature, smoke and water-leak events logged against ground truth. FIOT: one tower or plant operator, 50 sites, auto dialler plus PCMU plus gateway, measuring missed-event and false-alert rates and site visits avoided. NBFC: 100 branches through iVIS after option A's gate is passed. Recommendation VerifiedS39

KPIs. Two paid adjacent pilots running by month six; returns under 3%; ₹1 Cr of non-ATM monitoring-device revenue in the first twelve months; three new adjacent accounts by month twelve; one NBFC branch programme of at least 100 sites by month twelve. Recommendation

Investment and time to revenue. Engineering adaptation of existing products (enclosure, outdoor rating, gateway firmware) rather than new designs; MTCTE fees for the gateway and dialler; one application engineer who can visit sites; pilot hardware at transacted prices (Fuji's RMC sets at ₹66,675 to ₹69,065). Time to first revenue six to nine months; NBFC and tower volumes twelve months or more. Rax-suppliedS2S4 Publicly observedS33 EstimatedS2

Kill criteria. No paid pilot in any adjacent segment within nine months; pilot returns above 3%; a tower or plant buyer requires a certification Rax cannot obtain within six months. Recommendation

Why it loses as a stand-alone plan. Opening four new segments with two salespeople while two products are failing exports the reputation problem to new buyers and splits engineering time that option A needs first; digital marketing and channel partners with their own sales teams, the usual tools for opening segments, have already failed at Rax. Rax-suppliedS1S2

Option C: productise custom design and OEM supply

What it is. Sell Rax's certified design scope as a product: a published offer of NRE (design, firmware, prototypes, certification support) plus a per-unit manufacturing price with volume tiers and a service SLA, aimed at two buyer groups. The first is the consolidators that build their own hardware or need a site device they do not want to design (CMS, iVIS, Igzy, and camera makers' alarm arms such as CP PLUS's AIL Dixon). The second is industrial OEMs like the ones already buying from Rax (Fuji, Pradeep Kitchen, Tamchem, Nuetech, Ion Exchange). VerifiedS12S46 Publicly observedS128 Rax-suppliedS2

Why it is different. It turns the biggest competitive threat, CMS building its own hardware, into a customer type; it uses the audited ISO scope that names customised hardware and software design; it is free of the e-surveillance reputation; and it is priced by engineering value, not by the ₹6,000 to ₹13,000 panel tier. The benchmark is Indian ODM margins of 8% to 14% of EBITDA and design houses such as Mistral (Bengaluru, with a Chennai office) and VVDN; design is about a fifth of India's ESDM market. VerifiedS12 Publicly observedS117S148S149S147S81S16

What must be true. Buyers will pay NRE to a small Chennai company; Rax can protect customer IP and deliver to a schedule; hardware and firmware engineering, which the record describes as booked, can be freed or expanded, while software engineering has spare capacity. Rax-suppliedS1 Inferred

Quality and service preconditions. A documented design-control process (the ISO scope requires it), a cost sheet so NRE and unit prices are above cost, delivery reliability that ITAS did not get, NDA and IP-assignment templates, and a design-verification test report as a standard deliverable. Rax-suppliedS3S2 VerifiedS12

Pilot design. One paid design study with a consolidator (a CMS or iVIS site module, for example a supervised-zone power and communication board that meets the Central Bank and Union Bank clauses) and two new industrial OEM engagements sourced from the existing OEM accounts' peers; each with a fixed-price NRE, a prototype in 60 to 90 days and a first production lot of 100 to 500 units. Recommendation VerifiedS135S137

KPIs. Design-services page and offer published by month three; three new paid OEM or design accounts in twelve months; NRE invoiced on every engagement; gross margin on each lot at or above the cost-sheet floor; on-time prototype delivery on every engagement. Recommendation

Investment and time to revenue. A cost sheet and templates (finance and legal time), one hardware engineer added or reallocated from e-surveillance maintenance once option A stabilises, and portfolio material built from existing work with customer permission. First NRE revenue in three to six months; production revenue six to twelve months. EstimatedS1S2 Recommendation

Kill criteria. No paid NRE within nine months of publishing the offer; a consolidator demands design ownership and exclusivity at a price below the cost-sheet floor; an OEM engagement slips its prototype date by more than 50%. Recommendation

Why it loses as a stand-alone plan. It abandons three quarters of revenue and the 3,000-unit EVA base, and hardware engineering is already booked; without option A the company funds a new business while the old one keeps falling. Rax-suppliedS1S2

The options compared

Rax-suppliedS2S4S12 VerifiedS46 EstimatedS8S19 Publicly observedS117

Ninety-day plan