WHY INTEGRATORS LEAVE HIKCENTRAL

The "Central" architecture is also the bottleneck.

HikCentral genuinely is a central VMS - that is the design. The problem is what "central" implies in 2026: a Windows server somebody has to host, every remote site funnelling back to it, and a licensing model from the perpetual-license era. Each item on its own is manageable. Together, they are why integrators look at cloud-native.

A Windows server (or a whole stack) to own and operate

HCP runs on Windows Server (2012/2016/2019/2022). At scale it is not even one box - a large estate needs a high-spec management server (16 vCPU / 32 GB / 10 Gbps), plus separate streaming and storage servers, each on its own Windows Server licence. The customer hosts it all (or buys the Hikvision-branded Dell appliance for ~$18,933 AUD at 64ch). You patch, back up, restore and rescue it - work that compounds with every additional customer or site you add.

Remote sites need VPN or port-forward

Cameras and NVRs (Network Video Recorders) at each site have to connect back to the central server. In practice that means a VPN per site or port-forwarding through the customer's router. Network changes break everything. Installers consistently report customers switching to cloud after IT introduced a "no open ports" policy - often after a ransomware incident, sometimes just modern security baseline.

Perpetual per-channel + add-on modules + annual maintenance

Each channel is a perpetual licence (HIKCENTRAL-P-VSS-1CH - you buy it once) tied to a specific server install, plus separate modules for access, ANPR (number-plate recognition), facial recognition, alarm, FocSign and AcuSeek. On top sits the SMA (Software Maintenance Agreement - annual fee that keeps the platform updated and patched). The "buy once" sticker is just the first line - leftover licences when a site closes, surprise module costs when scope grows, and the SMA cycle quietly rebuilds a subscription on top.

A GPU workstation per operator, capped concurrency

Each operator position needs a dedicated Windows PC with a discrete graphics card running the Control Client - installed, configured and patched per seat. Concurrent client access is capped too: 100 on current HCP, just 5 on older versions. TetherX runs in a browser or mobile app from any modern device, with nothing to install per seat and no concurrent-user cap.

Cybersecurity track record

Multiple HikCentral Pro CVEs published over the last few years (see NVD search). The HCP server is typically exposed to the network for remote access - ransomware risk is the reason integrators give for moving to cloud.

NDAA Section 889 + country bans

US federal and federal-funded sites must remove Hikvision kit and the surrounding management software. Canada's federal ban became official in 2025. UK, Australia, Netherlands and Taiwan have added their own restrictions. HikCentral Connect inherits the same camera exposure.

Hikvision-camera-first

Auto-discovery, firmware management, AcuSense/ColorVu and AcuSeek surface natively for Hikvision devices only. Third-party cameras work via ONVIF but are second-class. Customers running multi-brand fleets end up with two consoles.

THE HIKCENTRAL FAMILY

"HikCentral" is four products. Know which one is in the quote.

"Central" does not mean cloud and does not mean single-site. It means a Windows server (or cluster) the customer owns, that all sites point at. The SKU you are looking at decides what that actually costs to run.

HikCentral Professional (HCP)

Flagship VMS

Client-server on Windows Server 2012 / 2016 / 2019 / 2022. Per-channel perpetual licensing, separate add-on modules (access, ANPR, facial, AcuSeek). V3.0 (May 2024) added clustering for horizontal scale.

HikCentral Master / Master Lite

Enterprise federation

Federates many HCP servers under one console for very large estates. Same Windows-server operating model multiplied by the number of regional servers.

HikCentral Connect

Cloud-managed sibling

Hikvision's cloud move. Near-zero independent integrator coverage so far. Stays Hikvision-camera-centric, and the underlying NDAA / country-ban exposure does not go away because the hardware is the same.

AcuSeek (HCP add-on)

Natural-language AI search

AI / natural-language video search ("find the red van"). Genuine recent advance, but licensed as a separate module and Hikvision-camera-centric in practice.

HIKCENTRAL vs TETHERX

Same multi-site goal. Different decade.

Both products give an operator one view across many sites. The honest read on where each one wins and where each one costs you something - a central Windows server everyone connects back to, versus a cloud platform every site connects to directly.

HikCentral Pro

Strengths

Deep Hikvision camera integration - all Hikvision premium features (ColorVu, AcuSense, DarkFighter) wired in natively

Mature add-on module ladder (LPR, face, retail, traffic, healthcare) for Hikvision-stack deployments

Perpetual per-channel licence model - capex-friendly for customers who prefer one-time payments over subscription

Trade-offs

Central Windows server hosted by you or the customer - patching, antivirus, backup, plus VPN or port-forwarding for remote sites

Single point of failure - the central server is the whole estate; an outage, a lost licence dongle or a failed patch can take management of every site offline at once

Aging on-premise architecture - a monolithic Windows-server VMS while the industry, Hikvision included (HikCentral Connect), shifts to cloud, leaving the on-premise line with slower, less frequent development

NDAA Section 889 + UK / Australia / Netherlands / Taiwan restrictions and multiple HikCentral CVEs disclosed (NVD record)

TetherX

Strengths

No central Windows server - cloud-native, remote sites reach the cloud directly, no VPN or port-forwarding

1,000+ integrations equally supported including Hikvision and NDAA-compliant brands (Hanwha, Axis, Avigilon, Pelco, Bosch)

Cloud recording optional per camera - local-only, cloud-only or both, all in one platform

Trade-offs

On a fully air-gapped site - defence, classified or critical-infrastructure networks where policy forbids any outbound Internet link at all - a purely on-premise VMS is the right fit; TetherX needs an outbound connection from the TetherBox to the cloud (the cameras themselves still stay isolated behind it)

REAL-WORLD EXAMPLE

Pharmacy chain, 80 stores: HikCentral vs TetherX

HikCentral: 80 stores each running their own Hikvision NVRs, all connecting back to a single HCP server at HQ. Per-channel perpetual licences for ~800 cameras. Windows Server patched on Patch Tuesday by HQ IT. VPN tunnels from every store to the central server. When the HQ server has an outage, all 80 stores lose management at once.

TetherX: 80 stores each run a TetherBox on the store network. Cameras stay behind the TetherBox with no direct Internet exposure; the TetherBox is the only thing that talks to the cloud, over an outbound-only tunnel. No central server at HQ, no VPN tunnels per store, no per-channel perpetual licences. The integrator gets ~800 cameras of RMR. Add a store next month - activate the new TetherBox, add the channels to the platform subscription, done. Drop a store - the subscription stops.

Want the numbers? See the full 5-year on-premise vs VSaaS cost breakdown - capex up front, opex over five years, set out line by line.

HOW THE MIGRATION ACTUALLY WORKS

Migrate the platform first. Phase the cameras when the budget says so.

You do not need to rip out cameras on day one. The TetherX migration is sequenced so the qualified installer can move the management layer to cloud immediately while the customer keeps using the hardware they already paid for.

01

Add TetherX over existing cameras

Install a TetherBox at each site (TetherBox software on an existing server or PC, or a dedicated unit - vehicle-size through to rackmount) and connect the existing Hikvision cameras to it on the site network. The TetherBox is the only thing that talks to the cloud, the cameras themselves have no direct Internet access. No re-cabling, no re-mounting, no downtime for the customer.

02

Decommission the Windows server

Once cameras are live in TetherX, decommission the HikCentral server. Customer reclaims a UPS slot, an IT licence and one more thing-that-can-fail.

03

Phase camera swaps over 12-36 months

When NDAA, end-of-life or warranty triggers a camera swap, replace with Hanwha / Axis / Avigilon. TetherX never noticed the difference; the customer never noticed the migration.

FAQ

Questions integrators ask before they switch

HikCentral is the central VMS (Video Management Software - the platform that runs your CCTV) product family from Hikvision (Hangzhou, China, listed Shenzhen 002415). It is a family of products, not a single SKU.

The family: HikCentral Professional (HCP) is the flagship client-server VMS that runs on a customer-owned Windows Server (2012, 2016, 2019 or 2022) and centralises management of cameras, NVRs (Network Video Recorders - the on-site recording boxes), alarms and access control across one or many sites. HikCentral Master and Master Lite link many HCP servers under one console for very large estates. HikCentral Connect is the newer cloud-managed sibling, but independent coverage of it is near zero - a sign it has not landed with the installer audience yet.

Compliance context: Hikvision sits under NDAA Section 889 ban (US), federal ban (Canada 2025), Cabinet Office restrictions (UK 2022), Defence-site ban (Australia 2023), with equivalent moves in the Netherlands and Taiwan. India added a full Chinese-CCTV import ban effective 1 April 2026 via mandatory STQC cybersecurity certification. Hikvision resigned its SIA (Security Industry Association) membership in the wake of these restrictions - relevant context any time the trade body is referenced. CISA added CVE-2017-7921 (Hikvision IP-camera authentication-bypass backdoor) to its Known Exploited Vulnerabilities catalog on 5 March 2026 with a mandatory federal remediation deadline.

TetherX position: where the rules allow, ringfence Hikvision kit behind a TetherBox so the cameras never touch the Internet directly. Where the rules require replacement, phase camera swaps over 12-36 months - see the compliance and ringfencing page.

HikCentral does multi-site by funnelling every remote site back to a central Windows server you (or the customer) own - the Hikvision-branded Dell appliance for 64 channels lists at about $18,933 AUD before licences (Security Wholesalers AU). The server has to be hosted somewhere, patched, backed up, restored when it falls over, and reached by every remote site via VPN or port-forward. TetherX delivers the same multi-site control as a true cloud platform - no server to own, no VPN per remote site, no Windows patch cycle, no per-channel perpetual licensing to expand it. Run it side-by-side on a 30-day free trial before any commitment.

In most HCP deployments cameras and NVRs at each remote site continue to record locally - HCP is the management layer above them. HCP V3 ships a Storage Server module for centralised recording, but in practice integrators leave recording on per-site NVRs and use HCP as the console. With TetherX every site runs a TetherBox gateway - the TetherBox software on an existing server or PC at the site, or a dedicated unit from the range (compact in-vehicle / lamp-post models through to rackmount servers - see the range). The cameras stay on the site network behind the TetherBox with no Internet access, and you choose per camera whether the TetherBox records locally, streams to cloud, or both - changeable later without re-platforming.

AcuSeek is HCP's AI search add-on - ask in plain English ("find the red van between 2pm and 4pm") and get matching clips. It's a genuine recent improvement on the HikCentral side. The catch: it only works properly on Hikvision cameras, and it's priced as a separate per-camera module on top of the per-channel base - reseller pricing runs roughly $300-800 per camera, perpetual, which at a few hundred cameras dwarfs the base licence. TetherX AI delivers person, vehicle and animal detection plus 63-class audio analytics, searchable across multi-site footage in seconds across any camera brand, so installers don't have to lock every site to Hikvision to get modern search - see the cloud / edge / camera analytics post for how we think about analytics in general.

Yes. TetherX supports 1,000+ integrations including all Hikvision IP cameras over ONVIF, RTSP and native integration. Migrate the management layer first and keep the cameras already installed. When the customer is ready (NDAA, end-of-life, multi-brand strategy), swap cameras to Hanwha / Axis / Avigilon / Bosch one site at a time without re-platforming.

HikCentral Professional uses per-channel perpetual licensing tied to the central server (you buy each licence once), plus separate add-on modules for access, ANPR (Automatic Number Plate Recognition), facial recognition, AcuSeek and intelligent inspection - then an SMA (Software Maintenance Agreement - the annual fee that keeps a perpetual licence updated and patched) on top to keep security patches and updates flowing - free for the first 36 months from activation, then a per-camera annual fee, so the recurring cost never really goes away (see the full FAQ on perpetual versus subscription costs). TetherX is an annual subscription priced by channel count (from £80/site/year), with cloud recording, TetherX AI and ARC monitoring as optional per-camera add-ons - quoted through your installer. No perpetual licences, no dongles, no SMA renewal, no leftover licences when a site closes. For the full five-year build-up - per-camera licences, servers, operator workstations, maintenance and the capex-versus-opex split - see our VSaaS vs on-premise cost breakdown.

HikCentral Connect is Hikvision's cloud-managed sibling and is positioned as multi-site-friendly. Three things to flag: it is still billed per camera, per month, with cloud storage as a separate per-camera line - so the cloud move does not escape per-camera recurring cost; it stays Hikvision-camera-centric (auto-discovery, AcuSense, ColorVu and AcuSeek surface natively on Hikvision devices only); and the NDAA Section 889 / country-level ban exposure does not go away because the underlying hardware is the same. Independent integrator coverage is also near zero today - it has not yet landed with the channel. TetherX is multi-brand from day one with an NDAA-friendly camera path for sites where regulations require replacement.

You replace the central Windows server with a TetherBox gateway at each site. The TetherBox is either our software running on an existing server or PC at the site, or a dedicated unit from the range - no Windows, no IT skill required. The cameras stay on the site network behind it with no direct path to the Internet; the TetherBox is the only thing that talks to the cloud. Local recording, edge analytics and alarm-panel integration are built in. The Windows server hosting HikCentral goes away.

NDAA Section 889 applies to US federal contractors and federal-funded sites - those deployments must use compliant cameras. For sites outside that scope, the practical play is to keep existing kit secure by ringfencing it behind a TetherBox so the cameras never touch the Internet directly, then phase camera replacement over 12-36 months where regulations or end-of-life require it. TetherX runs the same multi-site dashboard against compliant brands (Hanwha Vision, Axis, Avigilon, Pelco, Bosch) so the management layer migrates first and the camera swap happens on the customer's budget cycle. See the compliance and ringfencing page.

TetherX is sold only through qualified installers via the Partner Programme - we never sell direct. The qualified installer remains the customer's single point of contact for design, deployment and ongoing support, and the built-in health monitoring and visual timeline cut down on site visits because most "is this camera working" questions get answered from the dashboard. With HikCentral, the commercial model centres on the perpetual licences and SMA renewals Hikvision sells through distribution.
COMPANY HISTORY

Hikvision, HikCentral and the regulatory timeline

Hikvision Digital Technology was founded in Hangzhou, China in 2001 and is the world's largest video surveillance manufacturer by unit shipments. Hikvision is publicly listed (SZSE: 002415) and majority state-linked through its government-controlled parent. HikCentral was launched in 2017 as the on-prem Windows-server VMS family, with V3.0 (May 2024) adding the current clustering architecture. HikCentral Connect is the cloud-managed sibling product; AcuSeek is the AI / natural-language search add-on.

The regulatory journey dominates the history. NDAA Section 889 (2019) banned Hikvision from US federal procurement and federal-grant-funded projects. Canada made its federal ban official in 2025. The UK blocked Hikvision and Dahua from sensitive government sites in 2022. Australia ordered removal from federal sites in 2023. The Netherlands banned the brands from government use in 2023. Hikvision resigned its Security Industry Association (SIA) membership in 2024.

5 March 2026: CISA added CVE-2017-7921 to the Known Exploited Vulnerabilities catalogue, mandating federal Hikvision-HikCentral remediation on a fixed 30 / 60-day clock. FAR 52.204-25(c) "reasonable inquiry" obligation puts the procurement buyer on the hook for verifying compliance across federal-adjacent and critical-infrastructure deals. The manufacturer's site is the authoritative source for current product status.

Want this at your site?

Get a quote from a certified TetherX installer. We will match you with a local partner who knows your area and your needs.

Certified Installers
Local to You
No Obligation
Prefer to browse partners first? See our partner directory →
ALSO COMPARED

See TetherX against another VMS

Researching options? Read the side-by-side for each VMS the channel asks about most.

Network Optix / Nx Witness

On-prem-first VMS with cloud overlay - same engine ships as DW Spectrum and Wisenet WAVE. Russian engineering heritage flag for NDAA/AUKUS procurement.

Compliance and ringfencing

Keep existing kit secure where rules allow; phase replacement where they require it. Covers NDAA, UK, AU, India.

Immix

Established enterprise ARC workflow standard for video-heavy receiving centres - TetherX is the modern cloud-VMS alternative for centres that want leaner, more intuitive tooling.

Cisco Meraki

Tied to Cisco networking stack vs network-agnostic.
See all comparisons

Still have questions about migrating off HikCentral, licensing, supported cameras or NDAA?

Read the full FAQ Compare all VSaaS providers Vendor comparison hub

Try TetherX free for 30 days

Run it next to your existing HikCentral install. If TetherX does not pay back in saved site visits within the trial, walk away. No card, no commitment, extensions on request.

Start Free Trial

Across the partner network

TetherX partners hold the accreditations security-procurement buyers and insurers filter on. Coverage varies by partner.

NSI 9 ISO 9001 7 SSAIB 5 SafeContractor 5 BAFE 4 CHAS 4 ConstructionLine 4 Cyber Essentials 3 NICEIC 2 ISO 14001 2 ISO 27001 1

Counts reflect partners currently in the TetherX directory holding each accreditation.

Anything wrong on the HikCentral comparison?

Flag an inaccuracy, an outdated fact, or a missing nuance on the HikCentral page. We update the per-vendor pages and the /compare hub from this inbox - real reply, real human.

Please tell us what to call you.
Please enter your email address.
Please tell us what to fix or add.
Please complete the reCAPTCHA verification.

We reply within 1 business day. No newsletter, no follow-up sequence.

[1] About this comparison. Information about other vendors is drawn from their public product pages, datasheets, integrator forums (Reddit, vendor user groups), public CVE databases (NVD, CISA), publicly-listed LinkedIn company pages (headcount, headquarters, founding year, leadership transitions and corporate ownership signals) and customer conversations - accurate to the best of our knowledge as of Q2 2026. Pricing, features, security posture and policies change. A vendor may have shipped a fix, dropped a price, added a region or changed an architecture since this page was last reviewed.

If you believe anything here is inaccurate or out of date, please contact us and we will review and correct it. Trademarks and product names belong to their respective owners and are referenced here for identification only.

Start trial Call now

30 days free. No card. Talk to a local installer.