Switch guide

How to switch from Milestone XProtect to Spot AI without replacing cameras

The trigger moments that start this conversation, what actually changes on day one, and a four-phase plan that keeps every site recording throughout. Written for teams running an open-platform video management system who want the detections to ship with the software rather than be assembled on top of it.

Updated August 14, 2026
8 min read
By Joshua Foster, IT Systems Engineer
Switch from Milestone XProtect to Spot AI: The trigger moments that start this conversation, what actually changes on day one, and a four-phase plan that keeps every site recording throughout
What you keep
Your cameras
Milestone builds XProtect around the widest choice of cameras it can support, so the fleet is already mixed. Spot AI reads any ONVIF or RTSP camera.
What you keep
Your analog channels
Channels reaching XProtect through encoders today come into the Intelligent Video Recorder instead. No coax is pulled and no field of view changes.
What changes
Where the detections come from
Agents ship with the platform rather than arriving as a separate product, a second contract and a second integration.
What changes
What happens at the moment of an incident
Agents talk down, strobe and sound a horn through standard speakers rather than raising an alarm for somebody to action.
Where a frame goes after the switch

The cameras do not move, so switching changes what sits behind them and where the detections come from. Both rows describe what each vendor publishes.

Two ways in, and neither replaces a camera
IP cameras
ONVIF or RTSP, any manufacturer
The mixed fleet an open platform was chosen to support
Analog channels
Straight into the IVR
The feeds an encoder carries into XProtect today, with no coax pulled
Before: the platform records, the intelligence is assembled
The recording server
On prem, or hosted
AWS, Google Cloud and Microsoft Azure are published as hosting options
The detections are added
Licensed products and partners
BriefCam is a separate product, and LPR, Transact and Retail are marked as requiring a license
On site at 03:00
Audio on a rule
Two-way audio is published; strobe, horn or packaged talk-down is not publicly specified
After: the building keeps the video and the agents ship with it
The IVR records
Full resolution, on site
Only event metadata leaves the building
The agents watch
Security, safety and operations
15+ pre-trained agents plus Iris for a detection specific to your process
On site at 03:00
Talk down, strobes, horn
Through standard speakers, with nobody needing to read an alarm first
Architecture from each vendor's own product documentation. Timing is separate: rollout runs days per site, and Staccato reports seven weeks from first conversation to a full 800-acre campus on the cameras it already had.

When it makes sense to switch

Four moments when teams running an open-platform video management system start this conversation. If none of them are true, staying put is a reasonable answer.

The recording servers are due a refresh

XProtect is on-premises first, so the estate carries recording servers and storage on a capital cycle. When that cycle comes round the money is approved and the disruption is already scheduled, which makes it the cheapest moment to ask whether the replacement should be the same architecture with newer hardware. Model three years both ways against the same camera count and the same retention.

The detection list needs a second purchase

Milestone's own comparison chart marks XProtect LPR, Access, Transact, Retail, Incident Manager and Smart Wall as requiring a license, and BriefCam is a separate product with its own editions. So the detections a team actually wants usually mean another product, another contract and another integration. Write down the five things you need spotted, then ask each vendor which of them ship inside the platform.

A version is running out of lifecycle

Milestone publishes a four-stage product lifecycle, General Availability to Limited Availability to Discontinued to Terminated, with a stated minimum availability period of four years per VMS product. When a version reaches the end of that window the upgrade is happening either way, which makes it the honest moment to compare. Ask for both quotes against the identical site list over three years.

Old cameras landed on the legacy device pack

Milestone states plainly that it no longer updates drivers in the legacy device pack, that it will not fix bugs or extend their feature set, and that technical support on the system continues. That is a clear, published position rather than a gotcha. It does mean the oldest cameras in a mixed estate are frozen where they are, and it is worth knowing which ones before you plan a refresh around them.

Milestone XProtect and Spot AI side by side

The structural differences that decide whether a switch is worth starting.

Criterion
Spot AI
Milestone XProtect
Works with existing cameras
YesAny ONVIF or RTSP IP camera, plus legacy analog through the IVR
Yes, and it is the platform's identity: ONVIF and PSIA devices are supported across the editions, with device packs published on a two-month cadence
Where full-resolution video lives
On siteOn the Intelligent Video Recorder; only event metadata leaves the building
On your own recording servers on premises, or hosted with AWS, Google Cloud or Microsoft Azure, following the deployment you choose
Cloud dependency
Full-resolution recording runs on the local IVR, with search and multi-site management in the cloud
On premises first, with hybrid and hosted deployments published as options rather than required
Pre-trained agents
15+Security, safety and operations, from register theft to forklift near-miss
Built-in video motion detection ships in every edition, while LPR, Access, Transact, Retail, Incident Manager and Smart Wall are marked as requiring a license
AI coverage across a mixed fleet
Pre-trained Video AI Agents plus Iris custom detections across the whole fleet
BriefCam is published as a separate product with its own editions, and AI Search, Video Summarization and Video Anonymization were announced in March 2026, AI Search stated as available by end of 2026
Active deterrence
AI Talk Down, strobes and horns through standard speakers already on site
Two-way audio and playback of audio files on a rule are published; a strobe, horn or packaged talk-down behavior is not publicly specified
Compliance posture
SOC 2, NDAA, HIPAAAll three stated publicly
FIPS 140-2 compliant mode is published from XProtect 2020 R3 under stated driver and connection conditions; NDAA, SOC 2 and ISO 27001 are not publicly specified
Commercial model
Per-camera subscription covering the software and the IVR
License type is published per edition and it is perpetual across Express+, Professional+, Expert and Corporate

Swipe the table sideways to see every column.

Milestone data comes from Milestone's own product pages, comparison chart and support documentation as of August 2026. Where Milestone publishes nothing, this table says so rather than guessing.

The four-phase plan

A rollout that keeps coverage live throughout. Most sites go live inside six weeks.

Assess

Week 1

Inventory the fleet per site: manufacturer, model, resolution, codec and network path, plus which channels arrive through encoders and which cameras sit on the legacy device pack Milestone no longer updates. Then list the platform around it: the XProtect edition per site, the licensed add-ons, and every partner application with its renewal date. That second list decides how big this project is, because a site carrying two analytics vendors is a different cutover from a site carrying none.

Who is involved
IT or network owner, plus the security lead and whoever renews the partner applications
What you need ready
Camera inventory per site, the edition and licensed add-on list per site, and the retention your policy requires in writing

Pilot

Weeks 2 to 3

Run one site live on both platforms at once. XProtect keeps recording while the same cameras stream to an Intelligent Video Recorder, so search, detection quality and what happens after a detection are compared on identical footage rather than on a demo reel. Pick the site with the messiest camera mix, because a fleet assembled over ten years is the real test and the newest site flatters everybody.

Who is involved
Site manager plus the security or operations lead
What you need ready
One IVR on site, the existing cameras pointed at it, and a fortnight of normal operating conditions

Cut over

Weeks 4 to 6

Move site by site rather than estate-wide, keeping XProtect recording at each site until its replacement has run a full week. Cameras do not move and cabling does not change, so a cutover is a configuration change plus an IVR. Retire a recording server only once the site behind it is signed off, and sequence the sites whose partner-application renewals land soonest to the front of the queue.

Who is involved
IT, plus whoever signs off coverage per site
What you need ready
An agreed sign-off test per site, and the retention obligation for any footage that must survive the move

Tune

Ongoing

Once coverage is stable, the work moves from parity to the questions the recording layer was never asked: operations and safety agents on the same cameras, an Iris detection built in natural conversation for something specific to your process, and a decision about what fires at 03:00 with nobody watching. This is where a hardware refresh turns into an operations project.

Who is involved
The operations or EHS owner, with security
What you need ready
A shortlist of the questions the cameras were never able to answer before
Stays exactly as it is
Your IP cameras, whatever the manufacturer, as long as they speak ONVIF or RTSP.
Your analog cameras, which come in through the Intelligent Video Recorder rather than being replaced.
Your cabling, your VLANs and your existing network paths per site.
Your mounting positions and fields of view, so nobody re-surveys the site.
Your recording servers keep running through the pilot, so no site loses retention while the comparison is being made.
Changes on day one
One dashboard across every site, with unlimited user seats.
Search in plain English instead of scrubbing timelines.
Agents that act at the moment of an incident rather than filing a notification.
Full-resolution video staying in the building, with only metadata leaving it.
The detection roadmap stops being a procurement exercise: a new agent is a change you make rather than a product you buy.

Objections, answered

The six that come up in every one of these conversations.

We already own our device licenses.

Milestone publishes the license type per edition and it is perpetual, so those licenses are a sunk cost and the money does not come back whichever way this goes. The number that decides it is what the next three years cost from here: Care renewals, the server refresh already on the plan, storage growth, and every licensed add-on and partner application the detection list depends on. Compare that forward number, not the one already spent.

Will we lose coverage during the migration?

No, and the plan is built to make that structural rather than a promise. XProtect keeps recording at each site until its replacement has run a full week, the cameras never move, and cutover happens site by site. If a site fails its sign-off test, that site stays where it is while the others proceed.

What happens to our historical footage?

It stays on the recording servers under the retention you configured and does not migrate. Milestone documents exports in XProtect format with the Smart Client Player included, and in AVI or MKV, with password protection and a digital signature for authenticity. Export anything under a legal or insurance hold before those servers are decommissioned, and treat that list as a deliverable of the assess phase.

Milestone is the open platform. What does a switch actually change?

Camera reuse is common ground, and a page arguing that Milestone is closed is arguing with Milestone's own positioning. What changes is where the intelligence comes from. Milestone's chart marks LPR, Transact, Retail and the rest as licensed add-ons and publishes BriefCam as a separate product, so breadth is assembled. Spot AI ships 15+ pre-trained agents across security, safety and operations, plus Iris for a detection specific to your process.

Is this cheaper?

It depends on your retention, your site count and how many partner applications the detection list currently needs, and anyone answering without those numbers is guessing. The shape of the spend changes: capital for servers and storage plus per-application licensing, against a per-camera subscription covering the software and the IVR. Quote both against the identical site list over three years.

What should we confirm before committing to either platform?

Six things, and they are the same six whichever way you go. When each support agreement and partner-application license ends, and what notice each needs. Whether licenses are per device, perpetual or co-terminated. The export format and any time limit on historical footage. Which cameras are still under warranty. Who owns the camera VLAN at each site. And your own retention and data-residency policy in writing.

Map your fleet in one call

Bring a camera list and we will tell you what works as it is.

Request a demo

Proof points from teams that switched

Customer-reported outcomes from named Spot AI customers.

7 weeks

Staccato went from first conversation to full deployment across an 800-acre campus in seven weeks, on the camera infrastructure it already had.

Staccato, firearms manufacturing
25+

Bridge33 Capital standardized video across 25 plus properties, each acquisition arriving with a different camera system, and cut footage search from hours to minutes.

Bridge33 Capital, commercial real estate
2 weeks

The YMCA of Greater Richmond deployed 17 locations in two weeks and standardized retention across the estate.

YMCA of Greater Richmond, non-profit

"Within four minutes of the alarm going off, Spot AI gave us video footage of the incident on the responding officers' phones. We had five recoveries within the hour."

Josh Bowlin
IT Director, Don Franklin Family of Dealerships

Frequently asked questions

Do we have to replace our cameras to leave Milestone XProtect?

No. XProtect supports ONVIF and PSIA devices across its editions, so the fleet is already standards-based, and Spot AI reads any IP camera that speaks ONVIF or RTSP. Analog channels arriving through encoders today connect through the Intelligent Video Recorder instead. Nothing on the wall moves and no coax is pulled.

What happens to the partner applications we bought for XProtect?

They stay with XProtect, because they are separate products with their own licenses and renewal dates. List them during assess and check which of their jobs a pre-trained agent covers, because that comparison is usually the clearest part of the business case and the easiest to get wrong from memory.

How long does the migration take?

Most estates are live inside six weeks: a week to assess, a fortnight of pilot on one site, then site-by-site cutover. Sites go live individually rather than in a big-bang switch, so the timeline scales with how many sites you have rather than how many cameras.

Can we run both platforms at the same time?

Yes, and the plan depends on it. A camera can stream to an XProtect recording server and to an Intelligent Video Recorder at the same time, so the pilot compares search, detection and response on identical footage. XProtect keeps recording at every site until that site has passed a full week of sign-off.

What is the main architectural difference?

XProtect is an open recording platform whose breadth comes from the ecosystem around it: on-premises servers, four editions, and analytics added as separate products. Spot AI keeps the on-site recording model, with full-resolution video on the Intelligent Video Recorder and only metadata leaving the building, and ships the detections inside the platform.