Milestone Systems Upgrades XProtect for Saudi Arabia's Vision 2030 Cities
Milestone Systems has released XProtect 2026 R1 and enhanced its Arcules cloud platform, targeting the rapid urban development underway across Saudi Arabia and the wider Middle East under Vision 2030 with smarter, data-driven physical security infrastructure.

Saudi city skyline alongside a security operator monitoring live video management feeds inside a smart city control centre
As Saudi Arabia races to build the most ambitious portfolio of smart cities in history, including NEOM, Diriyah, The Red Sea Project and Qiddiya, the security infrastructure underpinning those environments is quietly becoming as important as the architecture above ground. On 4 May 2026, Milestone Systems announced XProtect 2026 R1 and a series of enhancements to its cloud-native Arcules platform from Riyadh, placing the Kingdom explicitly at the centre of its Middle East growth strategy.
The release is not a routine product update. It is a deliberate response to what Firas Al-Beiruti, Milestone's Country Manager for Saudi Arabia, described as a "fundamental shift toward integrated and intelligent security infrastructures," one driven by the scale and pace of Vision 2030's physical transformation.
From passive recording to operational intelligence
The central shift in XProtect 2026 R1 is the evolution of video security from a passive, footage-archiving function into an active source of operational intelligence. The release's most significant addition is the expansion of XProtect Remote Manager, which makes this concrete.
Remote Manager is a browser-based management tool available to Milestone Care Plus subscribers. In its 2026 R1 form, it introduces customisable, scheduled reporting that automatically converts raw system data, including health metrics, performance indicators, maintenance records and device inventory, into structured visual reports tailored for different audiences within an organisation. For security operations teams managing infrastructure across multiple giga-project sites, this removes a persistent friction point: the manual compilation and translation of technical data before it can be presented to decision-makers.
The business case is straightforward. Operations teams spend less time on administrative reporting. Decision-makers receive non-technical performance overviews that support accountability and return-on-investment evaluation. Managed service providers can deliver data-backed proof of value at scale, a capability that supports the regional shift from CAPEX hardware purchasing towards OPEX-based Security-as-a-Service models increasingly preferred by GCC enterprise buyers.
Crucially, the intelligence generated by Remote Manager does not have to stay within the security function. Via open APIs, this operational data can be fed directly into Building Management Systems (BMS) or integrated with the Digital Twin models that underpin modern smart city platforms. A camera network that once existed solely as a cost centre becomes a live data contributor to broader city efficiency, informing occupancy modelling, energy optimisation, and real-time operational response across an entire giga-project footprint.
Platform-wide updates in XProtect 2026 R1
Beyond Remote Manager, the 2026 R1 release delivers improvements across several operational layers. A redesigned LogServer interface introduces centralised log visibility with improved filtering and alert notifications, reducing the mean time to repair (MTTR) for system faults across complex multi-site deployments, a material advantage for a giga-project's central command infrastructure.
The mobile client has been updated to include a What's New Archive, enabling operators to revisit previously released features on demand. Device Pack 14.1 expands verified hardware compatibility to more than 16,300 devices, with 181 new devices added from 15 technology partners since the previous release. This enables procurement teams to leverage existing hardware assets while scaling into the next phase of Vision 2030, without a costly rip-and-replace of installed camera infrastructure. For organisations managing 10-year project timelines, the breadth of Milestone's open platform and the vendor lock-in it avoids is a significant consideration.
Arcules: cloud video for compliance-driven environments
Alongside XProtect, Milestone has delivered spring 2026 enhancements to Arcules, its Video Security as a Service (VSaaS) platform. Camera-to-Cloud support has been extended to Axis multi-sensor cameras and supported i-PRO devices, enabling a broader range of hardware to connect directly to the cloud without on-premises servers or gateways.
The Arcules update of most relevance to GCC enterprise and government buyers is the introduction of long-term cloud video storage. As compliance frameworks across the region increasingly mandate extended data retention periods for security footage, particularly in financial services, critical infrastructure, and public sector environments, the ability to store, search, and retrieve archived footage from the cloud without managing physical media addresses a direct operational and regulatory requirement.
Additional Arcules enhancements include a WebSocket-based PTZ API for faster real-time camera control within automated workflows and third-party integrations, and mobile alert thumbnails for iOS that deliver immediate visual context alongside push notifications.
The cyber-physical convergence question
For enterprise security leaders evaluating this release, the framing matters. XProtect 2026 R1 is a physical security product, but in 2026, the boundary between physical security and cyber risk has become difficult to locate. Video management systems are networked, cloud-connected, and integrated with broader IT infrastructure. Every camera is an IoT endpoint. Every cloud integration is an attack surface.
The GCC cybersecurity landscape in 2026 is one in which organisations managing smart city infrastructure face both physical and digital threat actors. The security system that protects the city must itself be secure. In that context, the open platform architecture Milestone has built, and the compliance-grade cloud storage Arcules now offers, positions the product suite not merely as a video management tool, but as part of the broader security operations stack that enterprise CISOs are increasingly expected to govern.
For security leaders in Dubai and Riyadh navigating that convergence, XProtect 2026 R1 and Arcules represent a platform maturing in the right direction at the right time.
Layla Haddad
Cyber Policy & Digital Risk CorrespondentLayla Haddad covers cybersecurity regulations, data protection laws, and digital transformation initiatives across GCC and North Africa. She has worked closely with compliance teams, fintech startups, and government advisory groups. Her articles explore how cyber policy, AI governance, and privacy frameworks shape the region’s digital future.