I'm currently working on reverse engineering it so I can reprogram, change locked options and make it so I can get it set up as a GSM speech and text dialler so if the client doesn't want a new system then I can still take it over
3 things I learned already
1. There are tamper switch but they do nothing or just show the zone as active
2. To change parameters you just need a user code and a paperclip
3. None of the signals are encrypted