Implementations generally relate to systems, apparatuses, and methods for a security application for a residential electrical switch sensor device platform. In some implementations, a sensor device performs operations including detecting an activity in the living space, determining contextual security information, and determining an occurrence of an intrusion event based on the activity in the living space. In response to the occurrence of the intrusion event, the device is operative to perform further operations including sending a notification to one or more destinations based on the intrusion event, and activating one or more surveillance devices based on the intrusion event.