Nx Witness

Not yet benchmarked

Vendor: Network Optix
License: Commercial (licence perpétuelle par caméra ; tarif revendeur)
Platforms: Windows, Linux, macOS, ARM Linux

Developer-friendly open-platform VMS, widely used as an OEM base ("Powered-by-Nx"), with optional AES-encrypted archives. Not yet benchmarked on our test bench.

Strengths

Optional 'Encrypted Archives' (AES) — genuine encryption of stored footage at rest.
Open platform (ONVIF/RTSP, no lock-in), cross-platform, with web and mobile clients.

Limitations

Commercial, per-camera licensing (no public list price; reseller quotes).
No built-in facial recognition — only via third-party plugin (e.g. CyberLink FaceMe).
Two high-severity session-hijacking vulnerabilities disclosed in 2026 — CVE-2026-78414 (stored XSS, CVSS 8.0, fixed in 6.1.3) and CVE-2026-10056 (CORS misconfiguration, CVSS 7.5, fixed in 6.1.2) — both could lead to administrator account takeover; keep deployments updated.

Criteria

Open source (auditable code)	✗
Self-hosted (runs on your hardware)	✓
Works without a mandatory vendor account	✓
Works with any ONVIF/RTSP camera (no hardware lock-in)	✓
Built-in facial recognition	✗
Encrypts stored footage at rest	✓
Remote access without a vendor cloud	✓
Web + desktop + mobile apps	✓

Sources

https://www.networkoptix.com/nx-witness — officiel (plateforme ouverte, inchangé) (2026-10-01)
https://securityonscreen.com/network-optix-cyber-security-enhancements-in-v5/ — presse (archives chiffrées AES) (2026-07-21)
https://app.opencve.io/cve/CVE-2026-78414 — CVE élevé (8.0) — XSS stocké, prise de contrôle admin, corrigé en 6.1.3 (2026-10-01)
https://app.opencve.io/cve/CVE-2026-10056 — CVE élevé (7.5) — mauvaise config CORS, prise de contrôle admin, corrigé en 6.1.2 (2026-10-01)

This product has not yet been tested on our bench. The information above comes from dated documentary sources; no comparative verdict is published until a real test has taken place.