WHERE STANDALONE NVRs HURT

Six reasons multi-site customers migrate off pure-NVR architectures.

Port-forward for remote view

Every NVR that needs remote access opens an inbound port through the firewall. Post-ransomware corporate IT mandates "no inbound ports" - the NVR fails the policy.

CVE history is ugly

IPVM disclosed 12 CVEs in Dahua DSS (Chinese) in January 2023 alone, affecting ~3,100 Internet-exposed servers. Hikvision iVMS-4200 (Chinese) has carried plain-text passwords in dealer comms. Hik-Connect treated as a botnet risk by parts of the integrator community.

Multi-site is awful

20 sites = 20 NVRs = 20 firewall configurations, 20 sets of credentials, 20 firmware-upgrade visits. VPN concentrators help but don't solve the operational tax.

NDAA-banned hardware

Hikvision and Dahua NVRs are banned for US federal-adjacent buyers under NDAA Section 889. Canadian ban now official 2025. UK and AU restricting on government sites. NVR migration is the slow + expensive part.

Hardware refresh every 3-5 years

NVR appliances age out. Firmware support drops. Customer pays for replacement on a cycle the integrator can rarely predict accurately.

No cross-site search

Need to find a vehicle that visited three sites? Pure NVR means three separate searches and three separate exports. Cloud VSaaS searches all sites at once.

NVR vs HYBRID VSaaS

Two recording paradigms. One usually beats the other beyond a single site.

Standalone NVR / DVR

One box per site, recorded locally only

Inbound port through the firewall for remote view

Multi-site = N firewalls, N VPNs, N firmware visits

Hikvision and Dahua banned by NDAA + Canadian ban + UK restrictions

Hardware refresh every 3-5 years owned by the customer

Per-site search only - no cross-site queries

Free desktop clients (iVMS-4200, DSS Express, EZStation) Windows-only, single-brand, ~64-256 camera ceiling

TetherX hybrid VSaaS

TetherBox at each site records locally, syncs to cloud on demand

Outbound-only encrypted tunnel - no inbound ports through the firewall

One cloud console for unlimited sites and 200+ camera manufacturers

Keep existing Hikvision / Dahua cameras behind the TetherBox while phasing replacement (ringfencing)

Cross-site search and AI-driven retrieval across the whole estate

Continuous cloud delivery - no version-upgrade projects on the NVR

Channel-only - integrator owns the customer + the recurring revenue

Pricing figures, ownership, acquisition dates and product behaviour cited on this page are point-in-time and drawn from public sources - see the disclaimer at the bottom of this page for sourcing, "as of" date, and how to flag corrections.

FAQ

Questions before you move from NVR to cloud VSaaS

DVR (Digital Video Recorder): records analogue cameras at one site. Mostly legacy in 2026 - everything new is IP.

NVR (Network Video Recorder): records IP cameras at one site. Examples: Hikvision DS-7600 series (Chinese), Dahua NVR4000 series (Chinese), Uniview NVR301 (Chinese), Avigilon HD NVR (Canadian, Motorola Solutions American), Bosch DIVAR IP (German, now Triton/Keenfinity), Milestone Husky X2/X8 (Danish, Canon).

VSaaS (Video Surveillance as a Service): cloud-managed CCTV across many sites. The recording lives in the vendor's cloud (Verkada American, Rhombus American), at the edge plus the cloud (TetherX UK + AU via TetherBox, Eagle Eye Networks American via Bridge), or in an existing on-site NVR that an adapter pushes to the cloud (Videoloft British, Camcloud Canadian).

Two real reasons. Bandwidth: 30 cameras at 4MP each is roughly 60-120 Mbps continuous upload. Many sites don't have it. Retention cost: storing 90 days of 4MP continuous video for 30 cameras in someone else's cloud is materially more expensive than on a $1,500 NVR with $300 of disks.

Note that evidence chain of custody is actually a cloud strength, not an NVR one: local NVR footage can be edited, deleted or replaced on the recorder; TetherX generates a SHA-1 checksum for every minute of recording at the time it is written, so any later tamper is detectable on export. A "local recorder hash" only proves the file matches the local recorder - which is the device the attacker controls.

The 2026 answer for most sites is hybrid: a small on-site appliance (TetherBox, Eagle Eye Bridge, Milestone Husky) records locally for bandwidth and retention efficiency, while the cloud provides the tamper-evident hash, audit trail and time-bound sharing the local recorder cannot.

Bad. In January 2023 IPVM disclosed 12 CVEs in Dahua DSS affecting ~3,100 internet-exposed servers. Hikvision's iVMS-4200 had a long history of plain-text passwords in dealer comms. Hik-Connect (the Hikvision remote-access cloud) is treated as a botnet recruitment risk by some integrators. Every NVR that needs remote access requires port-forwarding through the firewall - the exact configuration ransomware attackers exploit.

Verbatim 2025 integrator quote in the IPVM 120-integrator survey: "EagleEye cloud because a major client had a ransomware attack and their corporate IT dept mandated a no open port policy. Cloud was the solution to meet this requirement." Same conversation forces every NVR-to-VSaaS migration.

Hardware NVR: $1,000-3,000 box + $300-800 disks + $0/month + Internet for remote access (port-forwarded). Plus replacement every 3-5 years when the appliance ages out, the manufacturer drops firmware support, or the customer adds sites.

Pure cloud VSaaS (Verkada American, Rhombus American): $99-1,799/cam/year licence (depending on tier) + camera hardware. At 16 cameras over 5 years that is materially more than the NVR even before storage tiers.

Hybrid VSaaS (TetherX with TetherBox, Eagle Eye Bridge): annual platform subscription priced by channel count, TetherBox at each site for local resilience, cloud only for what needs it. Usually beats both pure cloud at scale and pure NVR on operating cost beyond year 2 because the multi-site management overhead disappears.

Yes, in two ways. Cloud adapter (Videoloft British, Camcloud Canadian) pushes streams from an existing recorder up to AWS. Cheapest retrofit. Inherits any limitations of the underlying NVR. Hybrid VSaaS overlay (TetherX with TetherBox alongside the NVR) takes the cameras under TetherX management while the NVR keeps recording locally as backup. Same cameras, two recording paths, single multi-site cloud dashboard.

Free Hikvision iVMS-4200, Dahua DSS Express and Uniview EZStation hit walls fast: Windows-only, single-brand, no real cloud, port-forwarding for remote view, ceiling around 64-256 cameras per server. Most installers outgrow them by the second multi-site customer. TetherX is the channel-only path off them - keep the existing Hikvision / Dahua cameras at first, decommission the free desktop tool, manage everything through the cloud. See iVMS / DSS / EZStation alternative for the full migration plan and NDAA compliance and ringfencing for NDAA implications.

Yes. Cameras never touch the public Internet directly. The TetherBox is the only thing that talks to TetherX cloud, over an outbound-only encrypted tunnel. Two paths to the same architecture: TetherBox software on an existing server or PC already at the site, or a dedicated unit from the TetherBox range (compact in-vehicle and lamp-post models through to rackmount servers for sites recording hundreds of cameras with long local retention).

Yes. 30-day free trial through an integrator partner with a TetherBox, full platform access, and a dedicated onboarding contact. Run alongside the existing NVR for comparison. No card, no commitment. Extensions on request.

Want this at your site?

Get a quote from a certified TetherX installer. We will match you with a local partner who knows your area and your needs.

Certified Installers
Local to You
No Obligation
Prefer to browse partners first? See our partner directory →

Need a 5-year TCO worked example for a specific multi-site retrofit off Hikvision NVR / DSS / iVMS?

Try TetherX free for 30 days

Run TetherX over the existing NVR estate for a 30-day trial - keep the cameras and the recorder, add cloud management over the top. No rip-and-replace, no card.

Start Free Trial

About this comparison. Information about other vendors is drawn from their public product pages, datasheets, integrator forums (Reddit, vendor user groups), public CVE databases (NVD, CISA) and customer conversations - accurate to the best of our knowledge as of Q2 2026. Pricing, features, security posture and policies change. A vendor may have shipped a fix, dropped a price, added a region or changed an architecture since this page was last reviewed.

If you believe anything here is inaccurate or out of date, please contact us and we will review and correct it. Trademarks and product names belong to their respective owners and are referenced here for identification only.