Cybersecurity · head to head
Milestone XProtect vs Teleport

Milestone XProtect
Cybersecurity
Open platform video management software with perpetual per-device licences
- From
- Free
- Rated
- -

Teleport
Cybersecurity
Certificate-based access to servers, Kubernetes, databases and apps, replacing shared credentials and VPNs
- From
- On request
- Rated
- -
The short version
- Only Milestone XProtect has a free tier, so it costs nothing to try first.
- Each has a real cost: Milestone XProtect care Plus is presented as optional but is not in practice: without it, perpetual licences stop receiving version upgrades and eventually you cannot add a current camera because your frozen version does not support it.; Teleport pricing is not published and is described as active users plus protected resources, so an autoscaling estate cannot forecast the bill and finance teams discover the true cost only after the first true-up.
- They diverge on capability: Milestone XProtect covers Open device support, Teleport covers Short-lived certificates.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which Milestone XProtect and Teleport actually diverge.
| Attribute | Milestone XProtect | Teleport |
|---|---|---|
| Starting price | Free | On request |
| Pricing model | One-time purchase per device licence, plus annual Care Plus | quote |
| Free tier | Yes | No |
| Platforms | Windows, Web, iOS, Android | Linux, macOS, Windows, Kubernetes, Cloud |
Identical on both: user rating (Not yet rated), category (Cybersecurity).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Milestone XProtect
- Open device support
- Perpetual device licences
- Federated architecture
- Failover recording
- Evidence export
- Smart Map
- Integration platform
- Video summarisation
Only in Teleport
- Short-lived certificates
- Protocol coverage
- Session recording and replay
- Access Requests
- Device Trust
- Identity provider integration
- Machine identity
- FIPS and FedRAMP builds
What people use each for
The jobs each tool is most often brought in to do.
Milestone XProtect
- A city or transport operator running tens of thousands of cameras across federated sitesnot Teleport
- An enterprise with mixed legacy camera brands that refuses to standardise on one manufacturernot Teleport
- A critical infrastructure site needing failover recording servers and tamper-evident evidence exportnot Teleport
- An integrator building a bespoke security application on top of an open VMS platformnot Teleport
Teleport
- Removing long-lived SSH keys and shared database passwords so that offboarding an engineer takes one action in the identity providernot Milestone XProtect
- Producing session recordings and per-user database audit trails as direct evidence for SOC 2 or FedRAMPnot Milestone XProtect
- Giving contractors or on-call engineers time-boxed, approved access to production instead of standing admin rightsnot Milestone XProtect
- Replacing a flat VPN with per-resource authorisation across servers, Kubernetes and internal web appsnot Milestone XProtect
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Milestone XProtect
- Care Plus is presented as optional but is not in practice: without it, perpetual licences stop receiving version upgrades and eventually you cannot add a current camera because your frozen version does not support it.
- Per-device licensing means multi-sensor and multi-imager cameras consume several licences each, so a headline camera count badly understates the true licence cost of a modern design.
- It is Windows only for servers and needs a properly designed server and storage architecture, so the software price is a fraction of a project that also needs recording servers, storage and an integrator.
- Complexity requires trained staff or a certified integrator; organisations that install it without either end up running a large deployment on default settings and never using the features they paid for.
- Milestone retired Kite from its portfolio in favour of Arcules from January 2025, which stranded buyers who had standardised on Kite and is a reminder that the cloud side of the portfolio has changed direction more than once.
Teleport
- Pricing is not published and is described as active users plus protected resources, so an autoscaling estate cannot forecast the bill and finance teams discover the true cost only after the first true-up.
- The proxy is a hard dependency on reaching production, so it needs its own high availability deployment and a tested break-glass path or an outage in Teleport becomes an outage in your ability to respond to outages.
- The open source Community Edition omits Access Requests, Device Trust and the FIPS builds, which are exactly the controls an auditor asks about, so the free tier rarely survives a compliance review.
- Self-hosting means running and upgrading a certificate authority and its backing store, and Teleport releases frequently enough that upgrade work becomes a standing operational commitment.
- Coverage across protocols is uneven in depth, so teams with legacy systems, unusual databases or bespoke network appliances find gaps that still require the old VPN to remain in place alongside it.
Pricing, plan by plan
Milestone XProtect
Free- XProtect Essential+Free
- Free for up to 8 cameras
- No recording time limit
- No vendor support included
- XProtect Express+$109/one-time
- Perpetual device licence, distributor list price
- Single site, single server
- Care Plus purchased separately per device per year
- XProtect Professional+$177/one-time
- Perpetual device licence, distributor list price
- Multiple recording servers
- Edge storage retrieval
- XProtect Expert$282/one-time
- Perpetual device licence, distributor list price
- Failover recording servers
- Advanced video wall and evidence handling
Teleport
On request- Teleport Community Edition$undefined/year
- Open source, self-hosted
- SSH, Kubernetes, database and app access
- Session recording
- Teleport Enterprise$undefined/year
- Cloud-hosted or self-hosted
- Access Requests and approval workflow
- Device Trust and hardware key enforcement
Which should you pick?
Choose Milestone XProtect if
- You need open device support.
- You want to start without paying.
- You work on Windows, Web, iOS, Android.
- You also want perpetual device licences.
Choose Teleport if
- You need short-lived certificates.
- You work on Linux, macOS, Windows, Kubernetes, Cloud.
- You also want protocol coverage.
Questions people ask
- Is Milestone XProtect or Teleport better?
- Neither clearly leads. Milestone XProtect starts at Free and Teleport at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Milestone XProtect or Teleport?
- Milestone XProtect has a free tier; the other does not. Paid plans start at Free for Milestone XProtect and On request for Teleport.
- Does Milestone XProtect or Teleport run on more platforms?
- Milestone XProtect runs on Windows, Web, iOS, Android. Teleport runs on Linux, macOS, Windows, Kubernetes, Cloud.
- Can I use Milestone XProtect for free?
- Yes. Milestone XProtect has a free tier, so you can try it without paying. Teleport starts at On request.
- What is Milestone XProtect best used for?
- Milestone XProtect is most often used for a city or transport operator running tens of thousands of cameras across federated sites, an enterprise with mixed legacy camera brands that refuses to standardise on one manufacturer, a critical infrastructure site needing failover recording servers and tamper-evident evidence export, an integrator building a bespoke security application on top of an open vms platform. Of those, a city or transport operator running tens of thousands of cameras across federated sites and an enterprise with mixed legacy camera brands that refuses to standardise on one manufacturer are not what Teleport is typically brought in for.
- What can Milestone XProtect do that Teleport cannot?
- Milestone XProtect covers Open device support, Perpetual device licences, Federated architecture, Failover recording. Teleport covers Short-lived certificates, Protocol coverage, Session recording and replay, Access Requests.
Answered from the vendors’ own pages
Milestone XProtect: Is XProtect really free for small sites?
Essential+ is free for up to eight cameras with no recording time limit, but it comes with no vendor support and no multi-server capability.
Teleport: Is the open source edition usable in production?
Yes, but it lacks Access Requests, Device Trust and FIPS builds, which most compliance programmes end up requiring.
Milestone XProtect: Are licences perpetual or annual?
Device licences are perpetual. The annual cost is Care Plus, the support and software update contract, which you need to stay on current versions.
Teleport: How is it priced?
Not publicly. The vendor prices on active users and protected resources and provides a quote after a sales conversation.
Milestone XProtect: What happens if I do not renew Care Plus?
The system keeps recording, but you stop getting version upgrades, and over a few years that blocks you from adding newer cameras.
Teleport: What happens if Teleport goes down?
Nobody reaches the resources behind it, so you need a highly available deployment and a documented break-glass procedure.
Milestone XProtect: Who owns Milestone?
Canon. The portfolio also includes BriefCam analytics and Arcules cloud video, with Arcules replacing Milestone Kite from January 2025.
Teleport: Does it replace our VPN?
For anything you put behind it, yes. Legacy systems and appliances it does not support will keep the VPN alive.
Related pages
More on Milestone XProtect
Other head to heads
- Milestone XProtect vs VIVOTEK VAST Security Station
- Milestone XProtect vs Salient CompleteView
- Milestone XProtect vs Rhombus Systems
- Milestone XProtect vs Spot AI
- Milestone XProtect vs Motorola Vigilant
- Milestone XProtect vs Genetec Security Center
- Milestone XProtect vs Hanwha Vision
- Milestone XProtect vs Eagle Eye Networks
- Milestone XProtect vs Dahua Technology
- Milestone XProtect vs March Networks
- Milestone XProtect vs Camio
- Milestone XProtect vs Varonis Data Security Platform
- Milestone XProtect vs Ory
- Milestone XProtect vs ProtonVPN
- Milestone XProtect vs Resolver
- Milestone XProtect vs Saviynt
- Milestone XProtect vs Securiti
- Milestone XProtect vs Sigstore
- Milestone XProtect vs JumpCloud
- Milestone XProtect vs HashiCorp Vault
- Milestone XProtect vs HashiCorp Boundary
- Milestone XProtect vs Beyond Identity
- Milestone XProtect vs Falco
- Milestone XProtect vs Delinea
- Milestone XProtect vs Sysdig
- Milestone XProtect vs BeyondTrust
- Milestone XProtect vs One Identity
- Milestone XProtect vs Zscaler Internet Access
- Milestone XProtect vs Doppler
- Milestone XProtect vs Infisical
- Milestone XProtect vs Akeyless
- Milestone XProtect vs DataGrail
- Milestone XProtect vs Envysion
- Milestone XProtect vs Feedzai
- Teleport vs VIVOTEK VAST Security Station
- Teleport vs Salient CompleteView
- Teleport vs Rhombus Systems
- Teleport vs Spot AI
- Teleport vs Motorola Vigilant
- Teleport vs Genetec Security Center
- Teleport vs Hanwha Vision
- Teleport vs Eagle Eye Networks
- Teleport vs Dahua Technology
- Teleport vs March Networks
- Teleport vs Camio
- Teleport vs Varonis Data Security Platform
- Teleport vs Ory
- Teleport vs ProtonVPN
- Teleport vs Resolver
- Teleport vs Saviynt
- Teleport vs Securiti
- Teleport vs Sigstore
- Teleport vs JumpCloud
- Teleport vs HashiCorp Vault
- Teleport vs HashiCorp Boundary
- Teleport vs Beyond Identity
- Teleport vs Falco
- Teleport vs Delinea
- Teleport vs Sysdig
- Teleport vs BeyondTrust
- Teleport vs One Identity
- Teleport vs Zscaler Internet Access
- Teleport vs Doppler
- Teleport vs Infisical
- Teleport vs Akeyless
- Teleport vs DataGrail
- Teleport vs Envysion
- Teleport vs Feedzai
