What Milestone's own documentation says XProtect does not do, or only does under a separate license, written for IT and security teams running due diligence on an open video management system. Every constraint below carries the documentation behind it, the operational impact, and the workaround.
Every constraint below comes from Milestone's own current documentation, checked on August 17, 2026. Where Milestone documents nothing, this page says so rather than guessing. Spot AI sells a competing platform, so nothing here rests on an anonymous source or an aggregated user rating, and two claims that circulate about open video management systems are corrected on this page: XProtect does not strand third-party hardware, and its device compatibility is published in more detail than almost anything else in this category.
Milestone publishes the device breadth, the edition ladder and the deployment choice in unusual detail. What the cameras are asked to recognize, and what happens when they do, is bought separately.
A constraint list is only useful next to an honest account of the product.
Milestone publishes a Supported Device List of more than 16,500 devices covering IP cameras, encoders, sensors and other IP based devices, and states it is continuously updated as new devices and firmware versions are evaluated. Encoders being on that list quietly settles the analog question too. A team with twelve years of mixed hardware can check real model numbers before booking a meeting.
More than 1,000 third-party applications sit around XProtect, findable through Milestone's own Technology Partner Finder. For a genuinely unusual requirement, a niche analytic or a vertical workflow, there is a decent chance the thing already exists as a product rather than becoming a custom project.
On premises, hosted on AWS, Google Cloud or Microsoft Azure, or hybrid through Arcules, so a data residency obligation or a constrained uplink can be accommodated without leaving the platform. The four editions are published side by side with their device and site limits, which is more disclosure than the category norm.
Each one is a consequence of how the platform is designed rather than a defect. What matters is whether it collides with your starting point.
Milestone's own edition comparison marks XProtect LPR, Access, Transact, Retail, Incident Manager and Smart Wall as requiring a license, with built-in video motion detection the analytic that ships in every edition. Broader video analytics are published as their own products: BriefCam is listed as the video analytics software with its own editions, and a Vision Language Model as a separate line.
The platform decision turns out to be the easy half. A 200-camera estate that wants personal protective equipment checks, forklift proximity and dock dwell is looking at a second procurement, a second vendor relationship and an integration project, and the quality of the outcome is then set outside Milestone's own release cycle.
Write down the five things you need spotted, then ask which of them ship inside the edition being quoted and which are a second purchase. Price BriefCam or the partner analytic alongside the VMS, over three years, before comparing totals with anything else on the shortlist.
Milestone's comparison page states that XProtect Essential+ has been discontinued as of XProtect 2025 R2, with upgrade offers for existing users. The entry edition is now Express+, published as up to 100 cameras and a single site, with a maximum of 100 IP devices per recording server and one recording server. Professional+, Expert and Corporate are published as unrestricted, with the note depending on system configuration.
A twelve-store chain is outside Express+ at store two whatever the camera count, because the edition is published as a single site with one recording server, and the 100-device ceiling is the second gate rather than the first. Teams whose plan started with a free deployment on a handful of cameras now need a new starting point, and a pilot that used to cost nothing is a purchase order.
Size the edition against a three-year camera count rather than today's, and confirm which side of the single-site and 100-device lines the design falls on before the pilot rather than after. Where the pilot itself is the blocker, ask the reseller what evaluation license is available and for how long.
Milestone states plainly that it no longer updates the drivers in the legacy device pack, that it will not fix bugs or extend their feature set, and that technical support on the system continues. Current devices are served by device packs published on a two-month cadence, and ONVIF and PSIA devices are supported across the editions.
This is a published position rather than a gotcha, and it is still the sentence that decides a refresh plan. On an estate assembled over a decade, the oldest third of the fleet is frozen at whatever feature set it has today, so a new capability that depends on a driver change will not reach those cameras.
Run the fleet against the Supported Device List and the legacy device pack list before planning a refresh, and mark which cameras are frozen. Encoders keep an analog run in the modern path, so a coax segment is often cheaper to bridge than to replace.
Milestone publishes a four-stage product lifecycle, General Availability to Limited Availability to Discontinued to Terminated, with a stated minimum availability period of four years per video management software product. Milestone Care is published as the maintenance and support program that carries feature updates, system health checks and technical support alongside it.
The upgrade happens on Milestone's calendar rather than yours. On a Corporate deployment with distributed sites and multiple recording servers, moving a version is a coordinated change across every server and client, which is a real project rather than a maintenance window, and it recurs.
Ask which lifecycle stage the exact version being quoted sits in, and get the date in writing. Align the Care term with it so upgrades are covered rather than repurchased, and schedule the version move next to a hardware cycle you were funding anyway.
Two-way audio and the playback of audio files on a rule are published. A strobe, a horn or a packaged talk-down behavior is not publicly specified from XProtect itself. The documentation covers what a rule can trigger inside the platform, not what happens at the fence, so anything further would come from a partner application in the same ecosystem the analytics come from.
For a site whose real requirement is that an intruder leaves rather than that the footage exists, this is the difference between a record and a response. It also means the deterrence decision is a third evaluation on top of the VMS and the analytic, with its own license and its own integration.
Name the partner product that would drive the speakers and strobes, and price it in the same quote. Where sites already run a public address system, ask each vendor on the shortlist which of them drives standard speakers without another device at each point.
The same five constraints in one view, sized to paste into an evaluation document.
Swipe the table sideways to see every column.
Milestone data comes from Milestone's own product, edition comparison, supported device and lifecycle documentation, checked on August 17, 2026. Gaps are marked as not publicly specified.
If the estate spans a decade of manufacturers and part of it is still analog, if the deployment model has to be argued past a data residency team, and if there is an integrator or an internal team who will select and wire the analytics, most of the constraints above stop applying. You are buying openness on purpose, and the Supported Device List proves it rather than claiming it.
Spot AI takes the opposite route, which is why its constraint list looks different. The detections ship with the platform rather than around it: 15+ pre-trained Video AI Agents cover vehicle break-in, fire, cash register theft, after-hours intrusion, personal protective equipment, forklift near-miss, falls and crowding in hazard zones, and Iris builds a custom detection in natural conversation in about eight minutes. There is no second analytics vendor to select, license and integrate before the first alert is useful.
The camera side stays open. Any ONVIF or RTSP IP camera works at full functionality and legacy analog cameras come in through the Intelligent Video Recorder, so a mixed fleet does not split into a supported half and a frozen half. Full-resolution video stays on the IVR in the building and only event metadata crosses the network, and response runs through talk down, strobes and horns on standard speakers already on site.
The question is not which platform has fewer constraints, but how many separate purchases sit between the software going in and the detections working.
None of that makes Spot AI the right answer for every buyer. Milestone's published device list runs to more than 16,500 models where Spot AI states compatibility by protocol rather than by manufacturer, its 1,000-application ecosystem covers requirements no single vendor's roadmap will reach, and its on-premises and hosted deployment options are broader than one architecture. Spot AI is a video AI platform rather than an open VMS, and access control and sensors arrive through integrations. A constraint list earns its keep by lining each platform's shape up against your starting point.
A live pilot on your cameras answers in a week what a spec sheet cannot.
Customer-reported outcomes from named Spot AI customers.
Silver Bay Seafoods replaced fragmented legacy camera systems across 22 locations, including remote Alaska facilities, and lifted operational efficiency 15%.
Unique Industries covers more than a million square feet with a three-person safety team, catching near misses and falls on the cameras already installed.
Cambridge City cut footage search from two hours to 30 seconds after consolidating seven municipal locations on one platform.
"Having cameras that talk back to you changes everything. Spot AI has become a real part of our safety team."
Five, all documented: LPR, Access, Transact, Retail, Incident Manager and Smart Wall are marked as requiring a license and BriefCam is a separate product; Essential+ was discontinued as of XProtect 2025 R2 and Express+ is capped at 100 cameras on a single site; the legacy device pack is no longer updated; every version carries a published lifecycle with a minimum availability period of four years; and on-site response from XProtect itself is documented only as far as two-way audio and audio file playback.
Yes, and better than almost anything else in this category. Milestone publishes a Supported Device List of more than 16,500 devices covering IP cameras, encoders, sensors and other IP based devices, states it is continuously updated as new devices and firmware versions are evaluated, and supports ONVIF and PSIA devices across the editions. The real constraint is the legacy device pack, whose drivers Milestone states it no longer updates.
Built-in video motion detection ships in every edition, and XProtect LPR, Access, Transact, Retail, Incident Manager and Smart Wall are marked on Milestone's own comparison as requiring a license. Broader video analytics are separate products, with BriefCam listed as the video analytics software and a Vision Language Model as its own line, so the detection set is assembled from the ecosystem rather than shipped with the platform.
No. Milestone's edition comparison states that Essential+ has been discontinued as of XProtect 2025 R2 and points existing users toward upgrade offers. The entry edition is now Express+, published as up to 100 cameras on a single site with one recording server, followed by Professional+ and Expert with unrestricted devices and multiple recording servers, then Corporate with distributed sites.
It depends on whether you want to assemble or to ship. If there is an integrator and the requirement is unusual, Milestone's ecosystem is hard to beat. If the detections have to run across security, safety and operations without a second procurement, a camera-agnostic platform such as Spot AI fits: any ONVIF or RTSP camera connects as it is, 15+ pre-trained Video AI Agents run across the fleet, and full-resolution video stays on the Intelligent Video Recorder on site.