Cybersecurity · head to head
Milestone XProtect vs WSO2 API Manager

Milestone XProtect
Cybersecurity
Open platform video management software with perpetual per-device licences
- From
- Free
- Rated
- -

WSO2 API Manager
APIs
Complete API management platform for designing and managing APIs
- From
- Free
- Rated
- -
The short version
- Each has a real cost: Milestone XProtect care Plus is presented as optional but is not in practice: without it, perpetual licences stop receiving version upgrades and eventually you cannot add a current camera because your frozen version does not support it.; WSO2 API Manager the free open source distribution does not include a subscription to the WSO2 Update service, so continuous improvements and security patches require a paid subscription
- They diverge on capability: Milestone XProtect covers Open device support, WSO2 API Manager covers API Gateway.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which Milestone XProtect and WSO2 API Manager actually diverge.
| Attribute | Milestone XProtect | WSO2 API Manager |
|---|---|---|
| Pricing model | One-time purchase per device licence, plus annual Care Plus | open-source |
| Platforms | Windows, Web, iOS, Android | Java, Linux, Docker, Kubernetes |
| Category | Cybersecurity | APIs |
| Founded | Unknown | 2005 |
Identical on both: starting price (Free), free tier (Yes), user rating (Not yet rated).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Milestone XProtect
- Open device support
- Perpetual device licences
- Federated architecture
- Failover recording
- Evidence export
- Smart Map
- Integration platform
- Video summarisation
Only in WSO2 API Manager
- API Gateway
- API Designer
- Developer Portal
- LDAP
- Okta
- Keycloak
- Microservices
- Java support
What people use each for
The jobs each tool is most often brought in to do.
Milestone XProtect
- A city or transport operator running tens of thousands of cameras across federated sitesnot WSO2 API Manager
- An enterprise with mixed legacy camera brands that refuses to standardise on one manufacturernot WSO2 API Manager
- A critical infrastructure site needing failover recording servers and tamper-evident evidence exportnot WSO2 API Manager
- An integrator building a bespoke security application on top of an open VMS platformnot WSO2 API Manager
WSO2 API Manager
- Publishing, securing and rate limiting APIs behind a gatewaynot Milestone XProtect
- Running an API developer portal with subscription key managementnot Milestone XProtect
- Self hosting an open source API management layer on premisesnot Milestone XProtect
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Milestone XProtect
- Care Plus is presented as optional but is not in practice: without it, perpetual licences stop receiving version upgrades and eventually you cannot add a current camera because your frozen version does not support it.
- Per-device licensing means multi-sensor and multi-imager cameras consume several licences each, so a headline camera count badly understates the true licence cost of a modern design.
- It is Windows only for servers and needs a properly designed server and storage architecture, so the software price is a fraction of a project that also needs recording servers, storage and an integrator.
- Complexity requires trained staff or a certified integrator; organisations that install it without either end up running a large deployment on default settings and never using the features they paid for.
- Milestone retired Kite from its portfolio in favour of Arcules from January 2025, which stranded buyers who had standardised on Kite and is a reminder that the cloud side of the portfolio has changed direction more than once.
WSO2 API Manager
- The free open source distribution does not include a subscription to the WSO2 Update service, so continuous improvements and security patches require a paid subscription
- A commercial production licence is not part of the free download and comes only with a subscription
- No subscription price is published; Basic Support and Enterprise Support both require contacting sales for a quote
- 24x7x365 coverage requires Enterprise Support; the general query SLA is one business day
- A Customer Success Manager is a paid optional add on covering business hours only
- Consulting services and WSO2 Private Cloud hosting are quoted separately
Pricing, plan by plan
Milestone XProtect
Free- XProtect Essential+Free
- Free for up to 8 cameras
- No recording time limit
- No vendor support included
- XProtect Express+$109/one-time
- Perpetual device licence, distributor list price
- Single site, single server
- Care Plus purchased separately per device per year
- XProtect Professional+$177/one-time
- Perpetual device licence, distributor list price
- Multiple recording servers
- Edge storage retrieval
- XProtect Expert$282/one-time
- Perpetual device licence, distributor list price
- Failover recording servers
- Advanced video wall and evidence handling
WSO2 API Manager
Free- CommunityFree
- Core API management
- Community support
- Commercial$undefined/monthly
- Enterprise features
- Technical support
- SLA
Which should you pick?
Choose Milestone XProtect if
- You need open device support.
- You want to start without paying.
- You work on Windows, Web, iOS, Android.
- You also want perpetual device licences.
Choose WSO2 API Manager if
- You need api gateway.
- You want to start without paying.
- You work on Java, Linux, Docker, Kubernetes.
- You also want api designer.
Questions people ask
- Is Milestone XProtect or WSO2 API Manager better?
- Neither clearly leads. Milestone XProtect starts at Free and WSO2 API Manager at Free, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Milestone XProtect or WSO2 API Manager?
- Milestone XProtect starts at Free and WSO2 API Manager at Free.
- Does Milestone XProtect or WSO2 API Manager run on more platforms?
- Milestone XProtect runs on Windows, Web, iOS, Android. WSO2 API Manager runs on Java, Linux, Docker, Kubernetes.
- Can I use Milestone XProtect for free?
- Both have a free tier, so you can try either at no cost before committing.
- What is Milestone XProtect best used for?
- Milestone XProtect is most often used for a city or transport operator running tens of thousands of cameras across federated sites, an enterprise with mixed legacy camera brands that refuses to standardise on one manufacturer, a critical infrastructure site needing failover recording servers and tamper-evident evidence export, an integrator building a bespoke security application on top of an open vms platform. Of those, a city or transport operator running tens of thousands of cameras across federated sites and an enterprise with mixed legacy camera brands that refuses to standardise on one manufacturer are not what WSO2 API Manager is typically brought in for.
- What can Milestone XProtect do that WSO2 API Manager cannot?
- Milestone XProtect covers Open device support, Perpetual device licences, Federated architecture, Failover recording. WSO2 API Manager covers API Gateway, API Designer, Developer Portal, LDAP.
Answered from the vendors’ own pages
Milestone XProtect: Is XProtect really free for small sites?
Essential+ is free for up to eight cameras with no recording time limit, but it comes with no vendor support and no multi-server capability.
WSO2 API Manager: How is WSO2 API Manager priced?
WSO2 API Manager pricing is not published on their website. As an enterprise API management platform, pricing is custom-quoted based on deployment model and organizational requirements.
SourceMilestone XProtect: Are licences perpetual or annual?
Device licences are perpetual. The annual cost is Care Plus, the support and software update contract, which you need to stay on current versions.
WSO2 API Manager: Does WSO2 API Manager offer different pricing for on-premises versus cloud deployments?
WSO2 API Manager supports multiple deployment options including on-premises and cloud, but pricing structures for different deployment models are not publicly disclosed.
SourceMilestone XProtect: What happens if I do not renew Care Plus?
The system keeps recording, but you stop getting version upgrades, and over a few years that blocks you from adding newer cameras.
WSO2 API Manager: What deployment flexibility does WSO2 API Manager provide?
WSO2 API Manager enables flexible deployment on-premises or in cloud environments, but specific pricing tiers for each deployment model require contacting WSO2 sales.
SourceMilestone XProtect: Who owns Milestone?
Canon. The portfolio also includes BriefCam analytics and Arcules cloud video, with Arcules replacing Milestone Kite from January 2025.
WSO2 API Manager: How would I request a WSO2 API Manager pricing quote?
Organizations can request pricing quotes by contacting WSO2 sales through their website. Custom quotes depend on API volume, deployment model, and feature requirements.
SourceRelated pages
More on Milestone XProtect
More on WSO2 API Manager
Other head to heads
- Milestone XProtect vs VIVOTEK VAST Security Station
- Milestone XProtect vs Salient CompleteView
- Milestone XProtect vs Rhombus Systems
- Milestone XProtect vs Spot AI
- Milestone XProtect vs Motorola Vigilant
- Milestone XProtect vs Genetec Security Center
- Milestone XProtect vs Hanwha Vision
- Milestone XProtect vs Eagle Eye Networks
- Milestone XProtect vs Dahua Technology
- Milestone XProtect vs March Networks
- Milestone XProtect vs Camio
- Milestone XProtect vs Varonis Data Security Platform
- Milestone XProtect vs Ory
- Milestone XProtect vs ProtonVPN
- Milestone XProtect vs Resolver
- Milestone XProtect vs Saviynt
- Milestone XProtect vs Securiti
- Milestone XProtect vs Sigstore
- Milestone XProtect vs TIBCO Mashery
- Milestone XProtect vs Appwrite
- Milestone XProtect vs Hasura
- Milestone XProtect vs PocketBase
- Milestone XProtect vs Sanity
- Milestone XProtect vs Apigee
- Milestone XProtect vs 3scale
- Milestone XProtect vs Akana
- Milestone XProtect vs Kong
- Milestone XProtect vs Boomi API Management
- Milestone XProtect vs Microsoft Azure API Management
- Milestone XProtect vs Spring Cloud Gateway
- Milestone XProtect vs Directus
- Milestone XProtect vs Dwolla
- Milestone XProtect vs Enable Banking
- Milestone XProtect vs Flybits
- Milestone XProtect vs i2c
- Milestone XProtect vs KeystoneJS
- WSO2 API Manager vs VIVOTEK VAST Security Station
- WSO2 API Manager vs Salient CompleteView
- WSO2 API Manager vs Rhombus Systems
- WSO2 API Manager vs Spot AI
- WSO2 API Manager vs Motorola Vigilant
- WSO2 API Manager vs Genetec Security Center
- WSO2 API Manager vs Hanwha Vision
- WSO2 API Manager vs Eagle Eye Networks
- WSO2 API Manager vs Dahua Technology
- WSO2 API Manager vs March Networks
- WSO2 API Manager vs Camio
- WSO2 API Manager vs Varonis Data Security Platform
- WSO2 API Manager vs Ory
- WSO2 API Manager vs ProtonVPN
- WSO2 API Manager vs Resolver
- WSO2 API Manager vs Saviynt
- WSO2 API Manager vs Securiti
- WSO2 API Manager vs Sigstore
- WSO2 API Manager vs TIBCO Mashery
- WSO2 API Manager vs Appwrite
- WSO2 API Manager vs Hasura
- WSO2 API Manager vs PocketBase
- WSO2 API Manager vs Sanity
- WSO2 API Manager vs Apigee
- WSO2 API Manager vs 3scale
- WSO2 API Manager vs Akana
- WSO2 API Manager vs Kong
- WSO2 API Manager vs Boomi API Management
- WSO2 API Manager vs Microsoft Azure API Management
- WSO2 API Manager vs Spring Cloud Gateway
- WSO2 API Manager vs Directus
- WSO2 API Manager vs Dwolla
- WSO2 API Manager vs Enable Banking
- WSO2 API Manager vs Flybits
- WSO2 API Manager vs i2c
- WSO2 API Manager vs KeystoneJS
