AI that watches every camera: what ships today, and what comes next

At a glance

What ships today, what is being built, and what comes after, item by item.

See it work

When it is fully built

One on-site platform for every camera on the site, sold under your own name. Each app switches on and off on an Apps page, and the licence decides which apps a site may use.

• CCTV and recordingLive wall, recording, a playback timeline, export, PTZ and camera discovery.
• PPE complianceZone rules, confirmed violations with evidence, review, and a model that learns the site.
• SecurityFaces of named people, a watchlist, no-go and authorised-only zones, camera tamper and a floor map studio.
• Safety checksFire and smoke early warning, person down, phone use, forklift proximity, safe corridors and occupancy.
• Counting and area analyticsIn and out lines, occupancy, heatmaps, dwell times and queues.
• Vehicles and number platesVehicle counts and plate reading at gates.
• Video searchFind people and vehicles across recordings by describing them.
• Time and attendanceArrivals and departures of named people, from the cameras they pass.
• Incidents, alarms and reportsAssign and resolve incidents, alarms by siren, SMS, WhatsApp and email, and branded PDF and CSV reports.

Available today

Everything in this section runs in the current release. It has been verified end to end: from a camera feed to a reviewed event, to a model trained on the reviewed frames and activated by a person.

• Monitor wallAuto brings the camera that needs a person to the front; Focus, fixed columns, pins that follow your account (and can be set for every screen), Kiosk and a wall screen for a second display.
• Compliance tag per personEach tracked person shows OK or the number of missing items; each PPE item is boxed in its type colour.
• NotificationsLive bell with unread count, per-camera mute and optional desktop notices. For each kind of alert in your browser (High, Medium and Low violations, and account and system notices) you choose Bell only, Pop-up or Pop-up with sound. High violations get an urgent tone and other alerts a soft one. Alarms always ring with the siren and a red banner, whatever you choose.
• Alarms and outputsA red banner, a siren and a header chip on every page until someone acknowledges the alarm, which also switches the siren off.
  • In Settings → Notifications, administrators add channels (email, webhook, SMS, WhatsApp, an HTTP siren or beacon box and a fire-panel watchdog), with secrets stored encrypted and never shown again.
  • Routes pick channels by check and severity, unacknowledged alarms escalate, and quiet hours, which follow the site time zone and can be set per day, never hold back alarms.
  • Email goes through one Mail server panel, with presets for your own server, Microsoft 365, Google or another provider, and Send a test names the step that failed.
  • An email output sends to a group of roles, people or addresses: each person gets their own email, retried for up to an hour.
  • Routes can be limited to cameras and zones.
  • A delivery log shows what was sent, pages back and can retry failed sends.
  • The watchdog stops pinging when detection is unhealthy, so a fire panel raises a fault, and if the server stops responding the HTTP outputs switch on by themselves.
• Slower checks under loadWhen the computer is overloaded, loitering, phone, smoking and forklift checks run at half rate, one by one, and so can the far look for people and vehicles. Fire, smoke and person-down checks are never slowed. The System page lists the slowed checks, and the header shows "Not enough compute".
• Live video off siteWhen the browser cannot reach a camera directly, the tile plays the video through the server, about a second behind, before it falls back to pictures. On an iPhone this needs iOS 17.1 or later. Small tiles and walls of five or more play the lighter sub stream, and a focused tile plays the full stream.
• Pose, hazard and phone marksA person flagged as down gets a red outline, fire, smoke and forklift boxes show in the check's colour, and a Skeleton switch draws the body outline when a pose model runs. Hover a person's box to find their row in the summary.
• Pan, tilt and zoomA camera that can turn gets a pad on the Monitor: hold to move, zoom, a Home position, and saved views you can name and remove. Admins, supervisors and reviewers move cameras; viewers cannot.

• PlaybackLook back at what the cameras recorded.
  • Up to four cameras play at the same moment, and a tile says so where its camera recorded nothing.
  • A timeline shows a lane per camera with recorded and not-recorded spans, motion and event marks, a day strip and a Jump to time field.
  • Speeds run from 0.25× to 4×, with 8× key frames only; Space plays, the arrow keys step, and Sync cameras and Pause at events are options.
  • A camera an administrator switched Record sound on for plays its sound muted; an unmute button on its tile turns it on.
• Boxes over recordingsThe boxes the system found are drawn over the recorded video, with Labels and a button per PPE type. A camera that records but is not analysed says so. Video from a camera with a vehicle line shows each vehicle's box and type too.
• Open in PlaybackEvents, incidents and the Monitor inspector (Look back 5 minutes) link to the right moment for roles that may watch recordings.
• Export a clip or snapshotPick the cameras and times, give a reason, and download an MP4 or a picture with a manifest that Verify checks again. Boxes in an export are only those the system made. Admins, supervisors and reviewers can export; viewers can watch. Finished exports delete themselves after 14 days. An export holds pictures only, except from a camera that records sound. Each export is signed unless Sign this export is switched off (see Signed exports and Check a file).

• Any IP cameraRTSP and RTSPS (Hikvision included), HTTP streams, USB webcams and video files. Each camera can keep a local and an outside address.
• Main and sub streamsDetection runs on the light sub stream by default. Read the main stream for detection checks the full-size picture instead, and Find far people and vehicles looks again at the far part of the picture for small, distant people and vehicles; both are off by default and cost more processing (a far look makes a camera about 3 times the work). The main stream is recorded in 60-second segments without re-encoding.
• AreasGroup cameras into areas: create, rename, reorder, fold and delete them on the Cameras page. A camera with no area sits in a last group, so none disappears. The Monitor, Overview, Reports, Visits and Incidents pages have an Area filter, the Cameras and Rules pages group by area, Reports adds a By area table, and the wall screen rotates through areas.
• Find camerasSearches the networks the server is on by itself, or a typed address range of up to 256 addresses, marks the cameras already added and any recorder, reads a picked camera's streams with the login you type and opens the camera form filled in. Add all channels fills the recorder form.
• Paused over the licence limitWhen a licence allows fewer cameras than are added, the newest cameras are paused and say "Paused — licence limit". The oldest keep running and nothing is deleted.
• Vendor presets and Test connectionHikvision, Dahua and EZVIZ presets fill the main and sub stream addresses. Test connection opens the stream and reports its codec, size and rate, or why it failed. The password is never shown.
• Add cameras from an NVREnter the recorder's address and login, pick channels 1 to 64 and see which answer before anything is added. Cameras are added together or not at all.
• Fixed items and floor calibrationWith Safety Checks on, a camera has a Fixed items tab for lamps, signs and vents the checks should ignore, learned from steady boxes and confirmed by a person.
  • Every camera's Settings tab has Floor calibration, with 4 to 8 matched points, a tape check and a plain accuracy figure, so forklift distances are in metres.
  • Measure a floor rectangle is one way to start, and existing calibrations carry over.
• Record soundCameras keep pictures only unless an administrator switches on Record sound for one camera. It is in the Recording section of the camera's form and is off by default. The administrator confirms that everyone in view is told that sound is recorded and gives a reason of 4 to 500 characters, which goes in the audit log with their name. A privacy profile can keep the switch locked off.
  • That camera's sound is then kept in its recordings, evidence clips and exports.
  • Live view and Playback play it muted until someone unmutes it.
  • Switching it off needs only permission to edit cameras and acts at once.
• Accuracy and size limitsA camera's page shows its accuracy grade (Counting, Presence and PPE only, Unreliable or Not yet checked), how much of its zones is big enough to judge, and size limits that can be set for that camera alone: Presence, Counting line, Head and torso items, Hands and feet items, Identity and Face, each in pixels tall.
• Where each camera runsWith a helper server added, each camera shows the server that runs its checks, or Waiting for room, and Where to run its checks lets an administrator pin it to one server. It is still recorded on the main server.

• Draw or upload each floorFloor map (Operate) shows the site as one place. Edit in the studio opens five steps: Plan, Cameras, Calibrate, Zones and Publish. Zones draws a zone once for every camera that sees it.
  • On Plan, choose a picture or a PDF page of the floor plan, or Start drawing with the Wall, Room, Stairs, Lift, Fixed item, Door and Label tools.
  • Mark a line you know the length of to set the scale. Measure again at any time and the whole draft is rescaled.
  • Nothing on the live map or in detection changes until you publish. Editing needs permission to edit cameras.
• Place, aim and calibrate camerasThe Cameras step lets you click the plan to drop a camera, set which way it faces and how far it sees. A camera already on another floor says so and cannot be dropped twice.
  • The Calibrate step shows the camera picture beside the plan, so clicks on the plan give the floor points in metres.
  • A camera calibrated on its own can be fitted to the plan with Fit to the plan, by dragging its outline or clicking two matching points.
• Publish and lookReview and publish puts the draft on the live map. The map opens in 3D, with 2D and a flat plan when you need them, and a Floor list when the site has more than one. A camera on no floor map shows Not on the map in the camera list, with a link to place it.

• ZonesDraw zones on each camera. A person is judged by the smallest zone their feet stand in, after an entry grace period.
• Rules matrixTick the PPE each zone requires. Each rule has a severity (High, Medium, Low), optional hours and weekdays that follow the site time zone (Settings > Site), and optional warn after and violate after seconds.
• Warning before a violationA person who has been missing an item for the rule's warn time shows amber on the live wall and in the summary, with the item named. Burned-in snapshots are labelled Warning. Nothing is stored as an event until the violation time is reached.
• Overlapping viewsWhere cameras in one area see the same ground, a violation both see is one event, and the event page shows the second camera's pictures under Also seen by. The Monitor counts people from the camera that sees the most and shows the most there could be.
• Safety and security checks tabsThe Rules page has four tabs: Requirements, Safety checks, Security checks and PPE types.
  • The two checks tabs list every zone against each check whose app is on and licensed, with a switch, severity, alarm, settings and hours per check.
  • Security checks holds Restricted area, Loitering, Unknown face, Watchlist match, Authorised people only and Camera blocked or moved.
  • A check that cannot run says why.
• Counting linesWith People Counting on, a camera page has a Counting lines tab: draw a line of 2 to 8 points, set Counts into area and Counts out of area, and see today's in and out counts. Each count says its error is not measured yet. An area can set Most people allowed, and a warning opens after a minute over the limit.
• Counting pageWith People Counting on, Counting (Operate) shows Counted in, Counted out, Inside now and Busiest hour, a bar for each hour of people coming in and going out, Inside now for each area against its limit, and a table of Counting lines. Choose a Period and an Area, and download a CSV per line, a CSV per hour or a PDF report.
• PPE types and presetsBuilt-in types with their own colours, custom types for site-specific equipment, and two presets: construction and industry, and hygiene and food safety. A preset lists what it switches on and off, and keeps your zone rules.
• Class mapsMap any model's classes to your PPE types, including "no helmet" classes counted as evidence of absence.

• Safety helmet
• Safety vest
• Goggles
• Gloves
• Safety boots
• Face mask
• Coverall
• Ear protection
• Face shield
• Safety harness
• Hairnet
• Apron

The first six are on by default. Coverall, ear protection, face shield, safety harness, hairnet and apron are switched on per site. On the Rules page, Start from a preset switches on the types for construction and industry, or for hygiene and food safety.

• Vehicles pageWith the Vehicles & Plates app on, Vehicles (Operate) counts cars, motorbikes, buses, trucks and bicycles crossing a line on a camera, in and out. It shows Vehicle crossings, Wrong-way alerts and Vehicles by type for Today, Last 7 days or Last 30 days, for all lines or one. Each pass over a line counts once, so in plus out is crossings, not vehicles. It works with or without PPE detection.
• Lines with a one-way ruleSet up lines and bays opens a window where you pick a camera and draw a line across a gate or road on its picture. Allowed direction is Both ways, Only in or Only out, and a vehicle going the other way raises a wrong-way alert. Switch Ring on wrong way off and it is only logged and counted. Settings → Vehicles sets the smallest vehicle counted. Parking bays and number plates are not built yet.
• Boxes and a reportPlayback draws each vehicle's box and type on video from a camera with a vehicle line. Reports has a Vehicles tab with crossings by type and hour on each line and every wrong-way alert, as a landscape PDF or a CSV.

• Tracking, not single framesPeople are detected and tracked, and each PPE item is matched to the right body region of the right person.
• Confirmed over timeA violation opens only after an item stays missing for 8 s by default and clears after 2 s of being seen, so a flicker never raises an alarm. When the model can tell a bare head from a hidden one, only a bare head starts the clock: a helmet out of sight pauses it, and the live view says Can't see helmet.
• One event per episodeOne event per person per episode, a 60 s cooldown, and a size limit per item: 80 px for a helmet, 140 px for gloves. When a camera loses a person briefly and finds them again, it joins the two pieces into one person with one violation; pieces it is not sure about stay apart and count as possible repeats. Two people who pass close enough to be mixed up are both checked again for 2 seconds.
• Safety and security checksFire and smoke need to hold through a short window, person down uses a pose model or a dedicated model, phone use counts a phone held by a person, smoking is experimental, forklift proximity uses metres on a calibrated camera, and restricted area and loitering work per zone.
  • Unknown face, Watchlist match and Authorised people only read the faces of enrolled people, and a watchlist match is always a possible match, never proof.
  • Camera blocked or moved raises an alert when the picture is covered, blurred, very dark or turned away.
  • A lamp that looks like fire raises only a low-severity event until it is learned.
  • Occupancy limit runs with the People Counting app.
  • Above Most security alerts per camera per hour (Settings → Detection), a camera keeps further security alerts as sightings and shows one notice; alarms still ring, and 0 means no limit.
• Thresholds you can tuneAll timings and confidence levels are site settings that apply live.
• A grade for each cameraEach accuracy figure is marked current, recomputing, stale or aged, so a figure that no longer matches the camera's settings, or whose check set is too old, is not read as fresh. A camera whose checks show it cannot be trusted for a figure is left out of it and named under the figures, as Excluded, instead of quietly moving the site total.
• Changes are checked before they applyA new model, a counting setting or a camera's size limits is replayed on the camera's saved check sets before it takes effect. A camera whose new figures do not hold up loses its grade at once, and saving without the check also leaves it ungraded (Not yet checked) until it is checked again.
• A moved view is noticedEach day the system compares a camera's picture with a saved one. If the view has shifted, or the camera's stream changed, its accuracy figures read Not yet checked and an alert asks you to check its zones and collect a fresh check set. A weekly check that shows a camera's protective gear claims going wrong also asks for a fresh check set.

• Evidence with every eventAnnotated and raw snapshots at the moment of the violation, and a video clip cut from the recording within about a minute.
• ReviewMark each event a real violation or not a violation. Events marked not a violation go straight into the training queue.
• FiltersFilter events by camera, severity, review state, missing PPE, person and check.
• Acknowledge alarmsAlarm events show an Acknowledge button in the list and on the event page, for roles that may review events. Afterwards the page shows when and the note.
• Video searchFind recorded footage by describing it or by showing an example picture. Each match is a still with its camera, time and score, hovering plays a 30 second clip, and a selected moment opens in Playback or exports as a clip. Everything runs on this server, and searches are logged.
• OverviewCamera health, open violations and the trend at a glance, with what needs attention first.
• ReportsA compliance summary for any period, in the site time zone: time in compliance with its range, violations with their rate, ids seen as an estimate, charts by day, PPE type, hour and weekday, top zones and cameras, each against the previous period.
  • Filter by camera, PPE type, shift and area; download a branded PDF or a CSV that opens correctly in Excel, with an Area column.
  • Names written in Sinhala or Tamil print in report and incident PDFs; the screens are in English only.
  • The Compliance tab also lists events, alarms and how many events review confirmed per check, and how many detections each camera's fixed items ignored, in the PDF and CSV too.
  • Where to look first ranks the zones or shifts where problems cluster, never people.
  • Customize picks what a report shows and the area, PPE type and shift it opens on.
  • The Visits and Incidents tabs each have their own report: the incident log exports as CSV, JSON or PDF, and the visit log compares with the previous period and prints as a landscape PDF.
  • The Vehicles tab reports crossings by type and hour on each line, and every wrong-way alert, as a landscape PDF or a CSV.
• IncidentsThe Incidents page with status tabs, assignment, notes and history, an incident PDF and an evidence pack as a zip, the Events CSV export and a Held only filter. The bell shows incidents assigned to you, and legal hold on events survives every delete path.

• Cross-camera identityEach person gets a stable id such as P-1A2B3C4D across cameras, with a journey of where and when they were seen.
• People directoryEnrol a person from one to five photos, or add photos to someone already there. Put people in groups, mark a watchlist, see who is on site now and when someone was last seen. Delete face data alone, or delete the whole person; sightings and events stay under the bare id. The face photos and consents of a named person who has not been seen for a year are deleted and the name stays. Two weeks before, the System page warns how many people will be deleted and on which day, and a person on legal hold is skipped.
• Names and mergesName a person once and the name follows them; merge two ids that turn out to be one person.
• VisitsEvery stay of a person in a zone, with when it started and ended and the PPE they were missing. A visit log to filter and export as CSV, a Visits tab on each person and on Reports, and a visit gap setting (60 seconds by default). Visits are kept 90 days by default, and merging two people moves their visits.
• Face recognition for named peopleOptional. Only named people are matched. Under the strictest rules, which apply until the site picks its country, the face of an unnamed person is not kept; a profile can allow longer. On security cameras each person shows their name, Unknown, or a possible watchlist match, and the People page shows for each camera how often a face was clear enough to recognise.
• PPE or security modeSwitch PPE checking per camera or for the whole site. With PPE off the model unloads and frees the GPU.

• Hard examples collected for youUncertain, low-confidence and unusual frames are saved for review, rate-limited per person and per camera-hour.
• Review and labelCorrect boxes and classes in the Datasets review queue; approve, reject or add to the golden set. Suggest boxes draws dashed boxes to accept or discard, from the active model or a built-in labeller. Labels import and export as YOLO or COCO, the label editor has zoom and the keys A, R, N, the numbers and Delete, and the queue has filters and bulk decisions.
• Golden setA permanent validation set, never trained on, that every new model is measured against. Evaluate scores any model on it, with ranges, misses and a confusion matrix; Compare shows two models class by class and says plainly when the new one is worse; and a Model validation report prints as PDF or CSV.
• Test images stay out of trainingTraining and test images are split by camera and hour. A picture taken within 10 minutes of a test image or an accuracy check on the same camera is left out of training, and the dataset notes say how many were left out.
• Training in idle hoursJobs run in the idle windows you set and pause when live cameras need the GPU. A job also starts only when enough memory is free and, on a graphics card, uses at most a set share, so live detection is never starved; the job says what it is waiting for. Automatic training is optional.
• A person activates modelsA new model never goes live by itself, and rollback is one click. New sites need 85% on their own test images to go live (Minimum score to go live). Activate compares the new model with the live one item by item: an item more than 2 points lower, or under its minimum, needs a written reason of at least 10 characters, and the page names the item.
• Accuracy checksImprove → Accuracy checks, for admins, supervisors and reviewers, has the tabs This week, Disagreements and Camera sets, and three figures at the top that each open their tab.
  • Reviewers answer a blind weekly set of moments, and the answers never change an event.
  • An admin collects a camera's check set over four working days, and a reviewer fixes its boxes and answers, so each camera is measured on its own pictures.
  • On Camera sets, Start a walk measures how often a missing item is caught: a supervised walk past the camera without one item at a time, near, at middle distance and far. Walk without an item only during a stoppage or under supervision.
  • Collect clips gathers eight short clips for the site, and Label a clip lets a reviewer say who is who in them. They measure how often the system loses or swaps people, and they tune how pieces of a path are joined.
  • It is on by default; Settings → Counting & coverage sets its size.

• Model library and Test benchInstall ready-made models, search all 664 models that could be added and install from that list, import .pt or .onnx files, make an ONNX copy of a model, bake a hygiene labelling model, and check photos or stored videos on the Test bench. A Running now table shows each model's memory and speed, and the All models shortlist is shared by all administrators.
• Licence on every modelEach model card shows its licence, built-in models included, and installing from the library or from a URL asks no licence question.
  • Ultralytics models run in every edition.
  • A release build installs only models with a published checksum, and turns off Add from URL and says why.
  • New sites download a pinned D-FINE small person detector (Apache-2.0); if the GPU cannot run it, it runs on the processor, and if it cannot load, the built-in detector finds people.
• Hazard, behaviour and pose modelsWith Safety Checks on, the Models page holds fire and smoke, forklift, behaviour and pose models, several active side by side, and a button to bake a person-down model. RTMPose, a pose model that runs on every installation and is quick on a processor, lets Person down use its pose method without the PyTorch engine; other pose models need it. A second fire and smoke model, trained on outdoor and aerial scenes, suits yards and open sites and runs on the Ultralytics engine that every release build includes.
• Test bench replayA finished test video replays with its recorded boxes and violation ticks, and shows Before and After a reanalyse. A video run can name the safety checks it must cover, and a picture shows their boxes.
• Model qualification cardEach model on the Models page shows its licence and commercial use, whether its checksum was verified, whether it loads on this PC, its speed and its accuracy, with Run or Re-run benchmark. Models installed from the library are benchmarked automatically. A signed online model feed and discovery of new releases (shown as unverified) are optional and off until an operator turns them on.
• Test bench modesAnalysis mode Fast, Accurate or Max; a person and PPE model chosen per run; model A and B with a second opinion and an A/B difference; video runs with a report and CSV; and the rebuilt page with a compare slider and export.

• Sign-inKeep me signed in on trusted devices, a Caps Lock warning and messages that say what went wrong. People can request access and reset a forgotten password from the sign-in page, and change their password from the account menu.
• Accounts without emailAdmins approve or reject each request and pick its role, invite people by a one-time link, and hand over a reset link or a temporary password. A new request rings the bell, and Settings → Sign-in & access turns requests on or off.
• Names and faces by roleAdmins, supervisors and reviewers see names, face pictures and the People page. Viewers and display screens see none of them, and an event shows them no person.
• RolesAdmin, supervisor, reviewer and viewer, plus custom roles an administrator can build (up to 20), each seeing only the pages it may use. A custom role never gets more than the person who builds it holds.
• Display accountsA viewer account can be flagged as a display for a wall screen. Sessions last 30 days and slide forward while in use. Only admins can update the system.
• Audit logEvery change to cameras, rules, models, people and settings is recorded with who and when.
• A clear sign-in pageA split-screen sign-in with your brand on one side and a focused form on the other.

• Online activationAn administrator types a product key on the Licence page and the server gets a licence bound to its installation ID. The licence renews itself once a day, and a server can be moved to another one with its key. It shows where the build has an activation address; the offline licence file works everywhere. Only the key, the installation ID and the software version leave the site.
• Offline licence fileActivation works offline with a signed licence file, bound to the installation ID. It sets the edition, modules, trial and grace period (a released trial key ends at once, while paid keys keep the grace), and a guard stops a rolled-back clock from extending it. Manage it on the Licence page.
• Fully white-labelThe product name, logo and accent colour come from the licence, so the vendor sets your brand; a licence with Own branding lets an administrator change them. The site name stays yours to edit. The sign-in page, every screen, reports and the browser tab use them.
• Licence page, banners and locked featuresAdministrators see the licence status, installation ID and history, apply a file or activate online, and renew or move to another server. A banner on every page warns of a trial, an expiring or expired licence, a clock that runs behind or an AI engine that disagrees. A feature outside the licence stays in the menu with a lock and says who to ask.

• Secrets protectedCamera passwords are encrypted at rest; production refuses weak or default secrets, and a go-live check reports them.
• HTTPSBuilt-in proxy with Let's Encrypt certificates, or an internal certificate authority for offline sites.
• Privacy profilesSettings → Privacy, for admins only, picks the site's country and applies its privacy profile.
  • Until a country is picked, the Strictest profile applies: recordings are kept at most 30 days, clips and snapshots 90 days, evidence and event records 3 years, and sightings and visits 90 days, and the faces of people with no name are not kept.
  • A save above a limit shows the limit.
  • Recordings, evidence clips, exports and live view carry pictures only, unless an administrator switches on Record sound for one camera. It is off by default, and a profile can keep it locked off.
  • Each setting with a privacy limit shows the limit beside it, and the Privacy tab lists them all. Above the value the profile advises, the platform asks why, and the reason goes into the site's privacy paperwork; it never locks anything.
  • Once the site fills in its privacy contact, the sign-in page says that sign-ins are recorded for security and where to send privacy questions.
• Health and backupsA health check for monitoring tools, nightly backups with a restore script, a Backups panel on the System page with a warning when backups stop or fail, a support file an administrator can download with passwords, keys and email addresses taken out, and documented upgrade and rollback.
• StorageThe Storage page with use by category, a forecast, clean-up that asks you to type DELETE, retention for each kind of data capped by the site's privacy profile, a space-saving mode (Auto, On or Off), critical cameras exempt from clean-up, a guard that refuses uploads when the disk is nearly full, and log rotation.
  • Exports are measured as their own category and delete themselves after 14 days, and a detections file is kept and deleted with each recording segment.
  • Settings > Storage replaces Retention.

• Command paletteJump to any page, camera, person, event or model with ⌘K or Ctrl K, or find a setting by its name or a word from its description.
• Light and dark themesA dark control-room theme by default and a full light theme. Theme, row spacing and home page are kept with your account, under Your preferences.
• What's New in the appThe sidebar shows the running version. Open it to read what changed in each update; a dot marks news you have not seen. A release with a long title shows a short line while it is folded, ending in "and more"; open it to read the whole title.
• Controls that explain themselvesEvery setting, control and Customize option has a plain name and one line on what it changes, with its default and range.
  • Overview, Events, People, Rules, Training, Models, Datasets, Users, Licence, Apps, System and the camera pages all have Customize, and 30 glossary words show their meaning when you point at them.
  • Customize opens beside the wall, so a change shows at once, and it follows you to any browser.
  • Pages with help explain their parts on a small sketch, and ? opens a map of the keys.
• Calmer, faster screensA page fades in once and nothing replays on a second visit or a filter change.
  • Lists, charts, markers and counts move only when their data changes, and with reduced motion switched on in your system a change shows as a short fade.
  • A page opens filled in after a pause on its menu entry, the Rules page and the Overview open faster, and during a burst of events the lists refresh together about every 1.5 s while the alert count and pop-ups update at once.

• One server on siteUbuntu, Windows or macOS. Docker Compose or system services on Ubuntu; background services that start with the computer on Windows and Apple-silicon Macs.
• Works offlineModels are local files. If a service restarts, events queue on disk and replay when it is back.
• Embedded database optionRun without a separate database server on small installs. Windows and macOS installs bring their own database and key-value store, so nothing else needs installing, and an earlier Windows install keeps its database and passwords.
• Double-click setupOn macOS, Windows and Ubuntu a launcher installs what is missing, starts everything and opens the browser.
• One-click installerDocker, Ubuntu, Windows and macOS. It shows the admin password once and opens the local network only: the firewall admits the local subnet, and the server answers to a .local name over Bonjour. A re-run keeps the owner's settings and restarts the services. One owner step is left.
• Signed release packagesOne zip per operating system, compiled and signed with Ed25519.
  • Each file is checked against its sha256 before install.
  • Release packages ship no source code, and development keys are removed from them.
  • On Ubuntu with Docker, one command installs a signed package and shows the first admin password once, and a retried install says where that password is kept. platformctl install --adopt moves a source install onto the release build and keeps the old copy.
• Upgrade in placeRunning a newer installer upgrades the existing install, keeps its data and settings, and keeps the previous version beside the new one so going back stays possible.
• Updates from a fileAn administrator uploads a signed update file in Settings, reads what is new and how long the platform will stop, and clicks Install.
  • The new version installs beside the running one, and if it fails its checks the platform goes back by itself, unless that release turns this off.
  • Then the new version stays installed, the Updates page says so, and an administrator rolls back in Settings → Updates or with platformctl rollback.
  • After a database change, rolling back keeps a copy of the newer database for 7 days.
  • Rolling back is one click for 7 days.
  • An operator can do the same with platformctl on the server.
  • Install and Discard work on an update that passed its check, and a version older than any installed before is refused (anti-rollback). platformctl repair rebuilds a refused update state.
  • The first signed release is not published yet, so a packaged server does not accept update files until it is.
• Signed exports and Check a fileEvery export is signed with the site's own key and carries a list of check values, so a recipient can prove with OpenSSL that it is unchanged. A Share safely page checks any file against what this site exported, without uploading it. Settings has a Sharing tab for the key.
• Remote accessOptional access from outside the site through a secure tunnel, with video and data staying on site.
• Helper serversSettings → Helper servers adds another computer you own to share the work when the main server is full. Add a helper server, then run the command it gives you for Linux, macOS or Windows on the other computer, where the platform is already installed; it joins within a minute.
  • A helper can be on this site or somewhere else. The site's country must be picked first in Settings → Privacy, and footage goes to a helper in another country only with a transfer reason recorded for it. Faces, attendance and number plates stay on the main server.
  • Each helper has Pause, Empty and Remove. Remove cuts it off at once and wipes what it keeps; its cameras then move to other servers, and Empty first moves them before you remove it.
  • If a helper stops answering, its cameras come back to the main server within a minute and nothing is counted twice. The System page lists every server with how busy it is, and each event says which server checked it.
• GPU accelerationNVIDIA GPUs on Ubuntu and Windows; on a Mac, detection uses the Mac's own machine-learning chip. On Intel hardware, detection can run through OpenVINO, which was faster than the standard engine on the same processor in our test, and is picked automatically once installed. ONNX Runtime and TensorRT providers are included for tuning.
• Offline alerts, load test and acceptance checksThe bell and the System page raise an alert when a camera goes offline, the camera checks or the trainer stop, or live updates fail, and close it when the cause clears.
  • The System page also raises an alert when a helper server stops answering, needs an update, has its clock off or loses pictures.
  • The System page runs a load test and says how many cameras fit, and an acceptance script checks a new site step by step.
• Guided first-run set-up listA new site opens on a short list of steps, from replacing the install password to adding the people who will use it. Each step ticks itself when the work is really done, an administrator can skip one with a reason, and the list hides itself a week after the last step.

In progress

Being built now. Each piece ships on its own.

Milestones

The plan, in order of delivery. Each milestone ships when its last piece passes acceptance; the table gives order, not dates.

How it will look

Previews of the planned screens, from the approved designs. Details can change before release.

Today's pages Available

M1: Accounts Available

M2: Client go-live Partly available

M3: Sell-ready white label Available

M4: Security system Partly available

M5: More apps Partly available

Designed screens Partly available

The small details Partly available

Safety and security checks

The Rules page holds the checks on two tabs. A check that cannot run says why.

Left behind, Removed and Blocked exit or walkway are also listed on the Safety checks tab, marked Experimental. They compare a zone with an approved reference picture and raise an alert with both pictures side by side.

Apps

One installation carries several products. An administrator switches apps on and off on the Apps page (Admin group); the licence decides which apps can be on. An app that needs another says "Needs <app>, which is off." until that one is switched on. A switched-off app leaves the menu and the command palette, its pages say "This app is switched off", and the AI engine unloads the models no app needs. Switching an app off never deletes its data: recordings, events, rules and history stay, and switching it on again picks up where it was. Everyone else sees which apps are on but cannot change them. Every model in the library shows its licence, and installing one asks no licence question. Ultralytics models run in every edition.

Ask the site and all sites

Both pages are on the platform today, and more is being built on each.

• Ask the site in plain wordsAsk about events and visits on the Ask page and get an answer with its evidence, worked out on the site's own server by fixed rules. A local language model, the site's manuals and a policy editor come next.
• All sitesA head-office server shows each site's compliance, open alarms and camera health on one page. It needs the head-office module.

How the numbers are measured

Available. Every figure on the Overview and the Monitor follows one set of definitions, kept in one place. The size limits and tracking times behind them are starting values until a camera is graded from its own check set. Each camera can be graded, and a camera that cannot be trusted for a figure is left out of it; the Reports page has an Accuracy tab with each measured error and its range. Each people figure carries How counted.

• Time in complianceThe share of judged person-time that was compliant. People too small, too new or with no PPE model to check are shown as undecided, never as compliant, and the figure always carries a best and a worst case.
• CoverageHow much of the expected camera time, inside the working hours you set, was observed. Under 90% a figure says partial; under 50% it shows no figure and names the camera. A camera checked less often than it is set to says so.
• Rates, comparisons and false alarmsViolations per 100 judged person-hours, compared on the cameras observed in both periods, with reviewed false alarms shown beside the count. Test-bench runs are in no figure.
• Estimates are labelledLive counts such as "People seen (estimate)" say so, and no data is shown as no data, never as zero.
• Overlapping camerasWhere cameras overlap, the Monitor counts people from the camera that sees the most and shows the most there could be, a range rather than a guess at who is the same person. A violation two cameras see is still one event.
• Broken tracks joinedWhen a camera loses a person briefly and finds them again, it joins the two pieces into one person with one violation. Pieces it is not sure about stay apart and count as possible repeats. Settings → Counting & coverage holds the joining scores.
• Weekly accuracy checkReviewers answer a blind weekly set of moments on Improve → Accuracy checks, and each camera can have its own check set. The answers measure how often detection is right on each camera and never change an event.
• Silent camerasA camera that stops reporting for 3 minutes has its open violations closed at its last heartbeat.

In progress: a measured error range on every report figure. Planned: a count of people per day, and counting across cameras with the floor map.

Later

• Several sitesMore than one site per installation.
• More storage optionsRecordings on a second disk, disk health, and archive to a NAS before deletion.
• Scheduled reportsReports emailed on a schedule.