Milestone Systems

What it does

Milestone Systems makes video management software (VMS). Its main products are XProtect, an open platform VMS; BriefCam, a video analytics product; and Arcules, a cloud video surveillance service. Milestone says it formally integrated BriefCam and Arcules, both previously separate Canon companies, into Milestone during 2025, bought the anonymisation company brighter AI and launched Project Hafnia, a video data and AI training effort with NVIDIA ^[1]. Canon describes BriefCam's integration into Milestone as a 2025 event ^[2].

A VMS is not a safety analytic in itself; it is the system that records cameras and routes alerts to operators. For safety teams, Milestone matters in two ways. First, BriefCam lets users train custom classes on site, and Milestone gives examples such as checking whether workers wear helmets or reflective vests in hazardous zones ^[3]. The BriefCam page lists trained classes for uniforms and PPE, line crossing, crowd and group detection, and occupancy and dwell time ^[4]. Milestone's manufacturing page says XProtect and BriefCam can check PPE use and alert supervisors to unsafe activity, and it gives forklifts crossing paths with AGVs as an example ^[5]. Second, XProtect integrates with more than 1,000 third-party applications, according to Milestone ^[6], so a specialist safety analytics vendor can send its alerts into an existing XProtect system.

These are alerting and review tools. They are not safety-rated protective devices under IEC 61496 or ISO 13849, and they should not be used to stop machines or vehicles.

Who it is for

Milestone sells mainly to security and IT teams across many sectors, including cities, critical infrastructure and manufacturing ^[5]. For EHS teams it matters most where a site already records its cameras in XProtect and wants to add safety alerts without replacing cameras. Milestone was founded in 1998 in Denmark and was acquired by Canon in 2014 ^[7]. It reported 2025 net revenue of EUR 298 million, up 10%, with operating income of EUR 14 million and more than 1,500 employees ^[1].

How it is deployed

XProtect runs on customer servers or Milestone Husky appliances, can be hosted on AWS, or can be combined with Arcules for remote sites ^[6]. BriefCam has a Review module that processes video into metadata and a Respond module that raises real-time alerts from it; alerts can go back to the VMS through ONVIF events, REST API or webhooks ^[3]. BriefCam runs on premises, in the cloud or on VMware, with Intel CPUs and NVIDIA GPUs ^[3]. XProtect supports permanent and liftable privacy masks, with lifting controlled by user role ^[8]. In March 2026 Milestone announced AI search, video summaries and automatic redaction of faces and plates based on brighter AI, with some features due by the end of 2026 ^[9][10].

Notable public customers and coverage

Milestone publishes a story on the City of Hobart, Australia, where a city officer says XProtect search cut the time to find footage by about 95% (vendor-reported security outcome) ^[11]. Milestone claims an ISO 27001 certificate covering its IT infrastructure at four sites (vendor claim) ^[12] and publishes a vulnerability management policy; it is a CVE Numbering Authority ^[13]. Its Arcules terms incorporate a downloadable data processing addendum ^[14]. In August 2026 CISA republished an advisory for a critical XProtect Management Server flaw, CVE-2026-3014, reported by Milestone's own security team and fixed in updates ^[15]. A 2022 US price list filed with the State of Minnesota shows per-device licensing: for example an XProtect Expert base licence at $2,099 and $282 per device, with Care Plus support mandatory in the first year ^[16]. Capterra shows 27 reviews of XProtect ^[17].

Things to ask in an evaluation

• Which BriefCam safety classes (PPE, vests, vehicles) work out of the box, and which must we train?
• What detection and false alert rates did you measure for PPE classes, and on what video?
• Which certified integrations send safety alerts into XProtect, and are they certified for our version?
• What will we pay per camera for XProtect, BriefCam and any partner analytic together?
• When will face and plate redaction be available for our deployment?
• Is CVE-2026-3014 patched in the version we would run?

Our take

Strengths

• Open platform with many third-party integrations, so safety analytics can be added to existing XProtect cameras ^[6][3].
• Documented privacy controls: role-based liftable privacy masks, plus an anonymisation business acquired in 2025 ^[8][10].
• Public company detail, an ISO 27001 claim and a published vulnerability process and DPA ^{[1][12][13][14]}.

Watch-outs

• PPE detection depends on custom classes trained on site, and Milestone publishes no accuracy method for them ^[3][4].
• Prices in public procurement records date from 2022 and real quotes vary; safety use needs both VMS and analytics licences ^[16].
• Public customer results are security outcomes reported by Milestone, not safety outcomes ^[11].

Best fit: Organizations already running XProtect that want to add safety alerts through BriefCam or a certified partner analytic on their existing cameras.