Ajax Systems is a Ukrainian security-hardware company founded in Kyiv in 2011 by Oleksandr Konotopskyi, building wired and wireless intrusion systems: control-panel hubs, motion and door/window detectors, smoke detectors, sirens, cameras, and smart-home automation. The OUI footprint splits across two legal entities. The canonical MA-L block, 9C:75:6E (~16.8M addresses), is registered to "Ajax Systems DMCC" at a Dubai (DMCC free-zone) registry address; a separate MA-M block, 38:B8:EB:C (~1M addresses), belongs to "Ajax Systems Inc" in Wilmington, Delaware, US. The MAC-bearing device is principally the Ajax Hub — an alarm control panel that uplinks to Ajax Cloud over Ethernet (RJ-45) and cellular (2G/4G SIM), coordinating sensors over the proprietary encrypted Jeweller and Wings radio protocols rather than standard IP. The globally-administered Ethernet MAC on the hub draws from these blocks, so an Ajax OUI on a wired interface reliably identifies genuine Ajax hardware. No IEEE assignment date exists for either block — IEEE publishes none; third-party "registration dates" on MAC-lookup sites are database artifacts, not IEEE facts. No public CVEs specific to the Ajax security-hardware vendor were found in this pass, which reflects the current state of public disclosure rather than confirmed absence of vulnerabilities.
- IEEE assignment (primary)
- 9C:75:6E → "Ajax Systems DMCC", MA-L (24-bit OUI, ~16.8M addresses), Dubai, AE registry address [Confirmed] — IEEE MA-L / oui.csv (line 798)
- IEEE assignment (secondary)
- 38:B8:EB:C → "Ajax Systems Inc", MA-M (28-bit block, ~1M addresses), Wilmington, DE, US [Confirmed] — IEEE MA-M / mam.csv (line 3352)
- Registry / block sizes
- MA-L (primary) + MA-M (secondary, separate legal entity) [Confirmed] — IEEE oui.csv / mam.csv. NOTE: IEEE public OUI/MAM data publishes NO assignment/registration date; "date registered" values on third-party tools (e.g. maclookup.app 2016-02-05 for Ajax Systems Inc, 2021-08-07 for Ajax Systems DMCC) are database artifacts, not IEEE facts, and must not be attributed to IEEE.
- Registry addresses
- MA-L — Mazaya Business Avenue, Dubai, AE 04201; MA-M — 910 Foulk Road, Suite 201, Wilmington, DE 19803 [Confirmed] — IEEE oui.csv / mam.csv
- Vendor / company
- Ajax Systems — Ukrainian security-technology company, founded Kyiv 2011 by Oleksandr Konotopskyi; HQ and R&D in Kyiv [Confirmed] — ajax.systems/about, ajax.systems/company-history
- Country of origin
- Ukraine (HQ Kyiv); DMCC entity registered in Dubai, UAE; a Swiss entity (Ajax Systems CH) also exists [Confirmed] — ajax.systems/company-history, eulerpool.com (DMCC registration)
- Company status
- active [Confirmed] — ajax.systems
- Device types
- security alarm control panels (Ajax Hub) plus IoT security/automation devices — motion, door/window, smoke detectors, sirens, cameras [Confirmed] — ajax.systems/groups/hubs, ajax.systems/support/manuals/hub
- Connectivity
- Ajax Hub uplinks via Ethernet (RJ-45) and/or cellular (2G or 4G/LTE SIM); some lines add Wi-Fi. Sensor-to-hub link uses proprietary encrypted Jeweller/Wings radio, not standard IP. Ethernet MAC from the OUI block serves the wired interface. [Confirmed] — ajax.systems/support/manuals/hub
- Security context
- OS Malevich (proprietary RTOS), end-to-end encryption hub↔cloud, frequency hopping (anti-jamming), tamper detection; coordinated vulnerability-disclosure program (report.vulnerability@ajax.systems). No public CVEs for the hardware vendor found this pass — "Ajax CVE" search hits were unrelated web-tech (Telerik, PHP ajax.php). Absence of public CVEs ≠ absence of vulnerabilities. [Likely] — ajax.systems/blog/cyber-safety-essentials, ajax.systems/report-a-security-or-privacy-vulnerability
- Website
- https://ajax.systems/ [Confirmed] — ajax.systems
- Scale claim
- company states it protects over 4.5M users in 187 countries [Likely — vendor self-reported] — ajax.systems/about
- Disambiguation note
- oui36.csv "ajax" hits matched the city Ajax, Ontario, CA and are unrelated to this vendor [Confirmed] — IEEE oui36.csv
- Analyst note
- An Ajax OUI on a globally-administered wired MAC identifies genuine Ajax hub hardware; sensors do not use IP MACs (proprietary radio), so OUI sees hubs, not the full device fleet.