Buying Security IP Cameras from China: Sensor Size, WDR and the Firmware Question Nobody Asks

What an IP camera actually costs you over five years

Most buyers I meet quote cameras at unit price and stop there. That's the wrong number. A 4MP bullet that costs 38 USD from Ningbo and 52 USD from a Korean brand can land within 15% of each other once you add the box, the PoE switch port, the bracket, the installer's half day on the ladder, and — this is the one people forget — the guy who has to drive out with a ladder again in year three because a lens fogged up or the IR ring died in a heatwave.

So when I sit down with a Chinese OEM, I ask two questions before we even talk image quality: what is the failure distribution over 36 months, and what is the RMA path from a customer site in Düsseldorf back to your factory door. A supplier that can't answer the second one in detail is telling you they've never had a serious EU account.

Resolution is the least interesting spec

Everyone sends the same 2MP / 4MP / 8MP table. Fine. What separates an install that survives summer from one that doesn't is the sensor and the encoder behind that number.

Sensor size, not pixel count. A 1/2.8" 4MP sensor gathers far more light per pixel than a 1/3" 5MP. Night footage from the bigger sensor will look cleaner even though it reads as "lower spec" on the sheet. Ask for the sensor part number and check it — Starvis-class CMOS from Sony or the OmniVision equivalents behave very differently from a no-name part.
Real frame rate under load. The datasheet says 25fps. Turn on dual-stream plus smart events plus audio plus on-board storage and see whether it still holds 25. I've had cameras drop to 18fps over H.265+ with noise reduction at full strength, and nobody noticed until a night-time incident came back blurry.
IR distance is a sales number. "Up to 30m" usually means one IR LED at bare minimum exposure at 1/30s. In practice you get usable identification to maybe 12 to 15 metres. If the site needs faces at 20m, spec a camera with a separate illuminator and don't pay for the on-board IR you won't use.

WDR, and why the factory gate always looks like a white rectangle

True WDR of 120dB from a dual-exposure sensor is different from "digital WDR" that just crushes the highlights in post. The test I run is boring but decisive: set the camera facing a doorway, stand outside in sunlight and ask someone to walk in. If you can see the person's face and read the badge on their chest in the same frame, it's real WDR. If the background is correct and the person is a silhouette, it isn't, whatever the datasheet says.

Also ask how WDR interacts with frame rate. On cheaper models, enabling WDR drops you from 25fps to 15 or even 12, which makes it useless for anything with movement.

The firmware question nobody wants to answer

This is where the buying decision actually gets made in 2026. Most Chinese cameras ship with either an OEM's own stack or a rebadged version of a mainstream platform. Both work. What matters is:

Can the factory give you a firmware change log for the last 24 months, with dates and CVE references?
How fast do they ship a patch when a new CVE lands in the ONVIF or RTSP stack? I want days, not quarterly.
Do they expose an API for bulk config, or do you have to click through a web UI 200 times for a site rollout?
Is the default password changing scheme actually enforced on first boot, or just documented?

For anything touching a public body, a school, or critical infrastructure, the regulatory side now matters as much as the hardware. Several national and municipal buyers in Europe, North America, and India have restricted Chinese video surveillance brands on procurement grounds over the last few years, not on quality. Before you design a large rollout around one brand, check the current procurement rules in the destination country. This applies regardless of which manufacturer you pick; rules have changed more than once and they will change again.

ONVIF, and the NVR trap

ONVIF Profile S compliance is claimed by nearly everyone and verified by almost nobody. The practical issues:

Profile S covers streaming, but not the PTZ control or the analytics fields you may actually need. If you require event triggers, ask for Profile T or at least a documented event API.
Unicast and multicast behaviour differ. On 200-camera sites, multicast saves upstream bandwidth but many low-cost units handle it poorly and you get mosaic artefacts.
Recording to a third-party NVR is where integration breaks first. Before a big order, buy five units, hook them to the exact NVR and VMS the customer runs, and record for a week. This test has saved more projects than any spec sheet review I've done.

Housing, and the parts that rust in year two

IP67 on the box says the enclosure is sealed. It doesn't say the screws are 304. In coastal or industrial sites the mounting screws, the pigtail connector collar and the junction box clips are what fail. Ask what grade of stainless is used for exposed fasteners, whether the pigtail has a proper weatherproof boot, and whether the PoE connector is moulded or just heat-shrunk. On a chemical plant project I watched 60 cameras get replaced because the pigtail boots cracked within 14 months in a sulphur atmosphere — the cameras themselves were fine.

The other cheap-out is the lens holder. Plastic lens barrels move under thermal cycling and the focus drifts. On outdoor fixed cameras with a 6mm or 12mm lens, a metal barrel and a locking screw are worth paying for.

What to put in the purchase order

Short and specific beats long and general:

Sensor part number and a photograph of the board, so you can confirm it matches on the first article.
Firmware version locked at shipment, plus written commitment to supply security patches for a defined number of years — five is a reasonable ask for fixed cameras.
Minimum sustained frame rate with all advertised features enabled, measured on the delivered units, not the sample.
WDR performance verified by the doorway test, recorded on video, attached to the PPAP or first-article report.
RMA turnaround in calendar days and who pays freight each way. Chinese factories will usually accept DOA freight if you write it in; they won't volunteer it.
Component change notification. If they swap the sensor or the SoC mid-series, you want 90 days' notice, because your VMS integration may not survive it.

Do those six things and the 14 USD price gap stops being the main topic of the meeting. That's usually the right outcome.