Reviews

Below is the current state of our coverage — see themethodology for what "tested" means. Click any product for its detailed review, criteria and sources.

Software (VMS/NVR)

• NoviscanTested on our bench— Self-hosted video surveillance suite with built-in facial recognition, encrypted media caches at rest, a signed licensing model, and a directory-only relay that keeps remote access off any vendor cloud.
• Frigate NVRNot yet benchmarked— Open-source NVR (MIT) focused on real-time local AI object, face and licence-plate detection, with tight Home Assistant integration. Version 0.17.x as of mid-2026. Not yet benchmarked on our test bench.
• Blue IrisNot yet benchmarked— Long-standing commercial Windows VMS with very broad camera support (up to 128 cameras) and a low one-time licence fee. Build 5.9.9.99 is current (documentation pending for v6.0.0.00). Not yet benchmarked on our test bench.
• ZoneMinderNot yet benchmarked— Mature, fully-GPL self-hosted VMS with very broad camera support (IP, USB, analog) and zero cloud dependency. Version 1.38.3 ("Seek and Destroy") as of late May 2026. Not yet benchmarked on our test bench.
• ShinobiNot yet benchmarked— Lightweight modern Node.js VMS supporting thousands of cameras, easy Docker deployment and a plugin ecosystem. Not yet benchmarked on our test bench.
• ScryptedNot yet benchmarked— Polished cross-platform NVR with strong smart-home integration (HomeKit/Google/Alexa), native face and licence-plate recognition and AI search. Not yet benchmarked on our test bench.
• Synology Surveillance StationNot yet benchmarked— Polished, perpetually-licensed VMS that turns a Synology NAS into a capable NVR, with broad multi-brand camera support and (on DVA models) strong on-device AI. Not yet benchmarked on our test bench.
• UniFi ProtectNot yet benchmarked— Polished local NVR bundled free with Ubiquiti hardware, with tightly integrated apps and on-device AI. Version 7.1 as of mid-2026. Not yet benchmarked on our test bench.
• Milestone XProtectNot yet benchmarked— Enterprise open-platform VMS with massive device support and a large integration ecosystem (MIP SDK / Marketplace), scaling from small sites to federated multi-site deployments. Version 2026 R1. Not yet benchmarked on our test bench.
• Agent DVRNot yet benchmarked— Modern, cross-platform, browser-based NVR (successor to iSpy) with built-in object, face and plate recognition. Not yet benchmarked on our test bench.
• ViseronNot yet benchmarked— Self-hosted, local-only NVR and AI computer-vision software with built-in face recognition. Not yet benchmarked on our test bench.
• XeomaNot yet benchmarked— Modular, low-cost, cross-platform VMS (up to ~3,000 cameras/server) with a built-in face-recognition module. Not yet benchmarked on our test bench.
• Nx WitnessNot yet benchmarked— Developer-friendly open-platform VMS, widely used as an OEM base ("Powered-by-Nx"), with optional AES-encrypted archives. Not yet benchmarked on our test bench.
• Genetec Security CenterNot yet benchmarked— Enterprise unified security platform (video + access control + LPR), vendor-neutral with thousands of supported camera models. Not yet benchmarked on our test bench.
• Avigilon UnityNot yet benchmarked— Motorola Solutions' on-premises enterprise suite (Unity), with native AI analytics including facial recognition — a separate cloud-native suite (Alta) also exists. Not yet benchmarked on our test bench.
• ExacqVisionNot yet benchmarked— SMB-to-enterprise VMS with the broadest OS support of the enterprise tier (Windows/Linux/macOS), sold as software or NVR appliances. Not yet benchmarked on our test bench.
• Wisenet WAVENot yet benchmarked— Hanwha Vision's VMS, built on the Network Optix Nx platform, designed for large multi-site deployments with AES-256 encrypted archives. Not yet benchmarked on our test bench.
• DigifortNot yet benchmarked— Brazilian-origin open-platform VMS scaling from 32 to unlimited channels, with a facial-recognition module and AES-256 archive encryption. Not yet benchmarked on our test bench.
• Luxriot EVONot yet benchmarked— Open-architecture Windows VMS with a genuinely usable free tier (16 channels, no time limit) and open protocols (ONVIF/RTSP/MQTT). Not yet benchmarked on our test bench.
• AXIS Camera Station ProNot yet benchmarked— Axis Communications' full Windows VMS, with encrypted P2P remote access via Axis's own mediator servers and AI object analytics. Not yet benchmarked on our test bench.
• motionEyeNot yet benchmarked— The classic Raspberry Pi NVR: a free web frontend for the `motion` daemon, or the full motionEyeOS distribution that turns a board into a dedicated recorder. Not yet benchmarked on our test bench.
• Kerberos.io AgentNot yet benchmarked— A scalable open-source recording agent (MIT) with optional AES/RSA encryption of recordings — rare among self-hosted NVRs. An optional paid Hub adds central multi-camera overview. Not yet benchmarked on our test bench.
• Moonfire NVRNot yet benchmarked— A deliberately minimal open-source NVR: records H.264-over-RTSP straight to disk with no decoding, motion detection or analytics — extremely low CPU use. Not yet benchmarked on our test bench.
• Sighthound VideoNot yet benchmarked— A legacy AI desktop NVR (people/vehicle/animal detection, not just motion) recently released as open source on GitHub. No longer under active feature development. Not yet benchmarked on our test bench.
• SecuritySpyNot yet benchmarked— The macOS-native VMS: a polished, direct (no-cloud) NVR with AI human/ vehicle detection, popular in the Apple ecosystem. Not yet benchmarked on our test bench.

Manufacturer cloud ecosystems

• EZVIZ (appli & cloud)Tested on our bench— The camera maker's own app and cloud (EZVIZ app, EZVIZ Studio, CloudPlay). The easiest option out of the box, but cloud- and account-centric. EZVIZ is a Hikvision-affiliated brand. Not benchmarked as a VMS on our bench.
• Imou (appli & cloud)Tested on our bench— The camera maker's own app and cloud (Imou Life app, Imou Cloud/Protect). Cloud- and account-centric; Imou is Dahua's consumer brand. Benchmarked on our own test bench.
• Google Nest (appli & cloud)Not yet benchmarked— Google's own app and cloud for Nest cameras and doorbells (Google Home app, Nest Aware). The most polished consumer ecosystem, but also the most cloud-locked: no local stream and a mandatory Google account. Analysed in depth for a Noviscan integration (event-driven SDM plugin), not yet bench-tested — no Nest hardware on our bench so far.

Camera brands

• ReolinkNot yet benchmarked— DIY/prosumer favourite: wired/PoE models expose native RTSP/ONVIF and record locally with no forced cloud. Not yet benchmarked on our bench.
• AqaraNot yet benchmarked— Smart-home brand whose G-series cameras double as hubs and expose native RTSP/ONVIF verified to run fully offline. Not yet benchmarked on our bench.
• AmcrestNot yet benchmarked— US prosumer brand (Dahua OEM) with broad ONVIF/RTSP and a documented HTTP CGI API — one of the smoothest integrations. Not yet benchmarked.
• TP-Link VIGINot yet benchmarked— TP-Link's SMB/prosumer line with full ONVIF/RTSP, official third-party integration guides and a free desktop VMS. Not yet benchmarked.
• AnnkeNot yet benchmarked— Budget Hikvision-adjacent OEM; the PoE line exposes stable RTSP/ONVIF proven in Frigate/Home Assistant. Not yet benchmarked.
• Hikvision (Hik-Connect)Not yet benchmarked— One of the world's largest camera makers; textbook local RTSP/ONVIF and full facial recognition — but heavy security/geopolitical baggage. Not benchmarked on our bench.
• LorexNot yet benchmarked— Major North-American DIY brand strong in 4K NVR/DVR kits; most do RTSP (554) + ONVIF Profile S. Not yet benchmarked.
• RingNot yet benchmarked— Dominant US doorbell/camera brand, but a closed cloud ecosystem: no local RTSP/ONVIF on its own cameras. Covered here as a closed ecosystem.
• BlinkNot yet benchmarked— High-volume budget battery cameras, but no local stream — a closed ecosystem. Covered here as closed, not integrated. Not benchmarked.
• WyzeNot yet benchmarked— Very popular US budget brand. Official local RTSP finally shipped for the Cam v3/Pan v3 line in February 2026, but the newer V4 line and the oldest v1/v2/Pan v1 models still don't have it (V4 in development with no committed date; older beta pulled). Covered as inconsistently open at best. Not benchmarked.
• Dahua (marque propre)Not yet benchmarked— The world's #2 camera manufacturer's own (installer/professional) line — mature local RTSP/ONVIF matching Noviscan's architecture exactly, but with a repeated history of critical vulnerabilities and a US federal ban. Not benchmarked on our bench.
• SwitchBotNot yet benchmarked— A smart-home ecosystem brand (dominant in Japan) whose Video Doorbell and Outdoor Pan/Tilt Cam 3K officially support local RTSP — but the rest of its camera line does not. Not benchmarked on our bench.
• Xiaomi / Mi HomeNot yet benchmarked— A major global electronics brand whose mainline Mi Home cameras have no official local video path — only fragile, model-locked community firmware hacks on older hardware. Not benchmarked on our bench.
• YI / KamiNot yet benchmarked— A Xiaomi-ecosystem spin-off with no official local video path, declining brand/support quality, and currently unpatched 2026 CVEs. Not benchmarked on our bench.

Cameras (test bench)

• TP-Link Tapo C200Tested on our bench— The Tapo C200 is TP-Link's indoor pan-and-tilt Wi-Fi camera. The manufacturer's product page lists 1080p video (1920 x 1080), a 340° mechanical pan and a 70° mechanical tilt, 850 nm infrared night vision with a range of about 9 m (30 ft), two-way audio, and a microSD slot accepting cards up to 512 GB. Cloud storage (Tapo Care) is an optional paid subscription; recording to the microSD card does not depend on it. Local access is documented by TP-Link itself. Its support FAQ lists the C200 among the Tapo models that work with a PC, NAS or NVR over RTSP and ONVIF. You first create a camera account in the Tapo app (Advanced Settings, then Camera Account; 6 to 32 characters for each of the username and password), separate from your Tapo login. The streams are then rtsp://user:password@IP/stream1 (high quality) and /stream2 (standard quality) on port 554. ONVIF uses port 2020 with the same account and covers Profile S, which does not include two-way audio. TP-Link names Synology Surveillance Station and Agent DVR as examples of compatible software, so any recorder or VMS that accepts RTSP or ONVIF can ingest the camera without the vendor cloud. Points to know before relying on it. Cloud (Tapo Care), local microSD and NAS/NVR recording can only run two at a time: with all three enabled, NAS/NVR recording is turned off, and disabling the microSD recording restores it. TP-Link says the list of supported models can change with firmware, so check your hardware version. It also advises using RTSP and ONVIF only on trusted local networks with encrypted Wi-Fi, and using a VPN rather than port forwarding for remote viewing. Noviscan, Secufor's own product, ships a preset for this model in its camera catalogue (RTSP source, port 554, path /stream1). As Secufor edits this site, treat that mention as first-party and check TP-Link's documentation yourself.
• Imou Ranger 2CTested on our bench— The Imou Ranger 2C (3 MP version) is the consumer pan-and-tilt indoor camera from Imou, Dahua's consumer brand. Imou's product page lists a 3-megapixel sensor (2K QHD images), a 0 to 355° pan and a -5 to 80° tilt, automatic infrared night vision, human detection and smart tracking. The page expresses microSD capacity as recording time (about 4 days on a 64 GB card, 8 days on 128 GB, 16 days on 256 GB) but does not state a maximum card size. Cloud and subscription. The Imou Life app is the main client. Imou Protect is the optional paid cloud service: it offers up to 30 days of history, a 30-day free trial for every newly registered camera, and cloud-processed AI detection. Imou states that Protect is optional and that its absence does not affect use of the device; remote download of microSD recordings is listed among Protect features, so remote access to local clips depends on that subscription. Local streams. Imou's product page does not mention RTSP or ONVIF for this model, and an Imou support document says its battery cameras do not support them. For wired Imou cameras, the community documents a Dahua-style stream, rtsp://admin:SAFETYCODE@IP:554/cam/realmonitor?channel=1&subtype=0 (subtype=1 for the lighter sub-stream), the safety code being the one printed under the camera. Treat this as community-documented, not as an official Imou commitment, and test it on your own unit and firmware. Developers. Imou publishes an official cloud API, the Imou Open Platform, documented at open.imoulife.com, which is a separate path from the local streams. Noviscan, Secufor's own product, lists this model in its camera catalogue with the community RTSP preset and flags it as community-sourced. This site is edited by Secufor: verify these points against Imou's documentation before buying.
• Cinnado D1Tested on our bench— The Cinnado D1 is an indoor Wi-Fi camera sold under the Cinnado brand and run from the Wansview Cloud app, published by Ajcloud Labs Inc. The app's store listing describes live video, two-way audio, motion alerts, playback of recorded video, pan-tilt-zoom control and day and night vision. The listing gives no cloud pricing, and Cinnado's own site exposed no usable specification sheet when we consulted it, so resolution, card size and Wi-Fi bands are not stated here: check the label and the manual of your unit. Platform and security. The camera belongs to the AJCloud platform. Elastic Security Labs examined fifteen camera products from Wansview, Galayou, Cinnado and Faleemi and reported an access-control flaw in AJCloud's infrastructure that let a researcher read data from, and take control of, a camera they did not own, together with weaknesses in the peer-to-peer protocol, the ability to overwrite a device identity file and a possible buffer overflow in the configuration function. The researchers state that all devices running AJCloud firmware and connecting to the platform are affected. They also report that their attempts to contact AJCloud and Wansview to disclose the issues were unsuccessful, and the article reports no fix. If you own one, the reasonable stance is to limit exposure of the cloud side. Local stream. No official Cinnado page we could read documents RTSP or ONVIF for the D1. A community-documented path, rtsp://IP:554/live/ch0, is listed for AJCloud/Wansview-family cameras; it is not confirmed by the manufacturer, and a firmware may disable it. Verify it on your own unit before building any recording setup around it. Noviscan, Secufor's own product, lists the D1 in its camera catalogue with this community path, flagged as uncertain, and advises using the local stream only. This site is edited by Secufor.
• Wolfang WS03Tested on our bench— The Wolfang WS03 is a Wi-Fi indoor camera managed from the Osaio app. Wolfang's product page lists 2K (3 MP) resolution with infrared night vision, motion and sound detection, microSD recording up to 128 GB (card not included) that requires no subscription, optional encrypted cloud storage free for the first 14 days, and compatibility with Amazon Alexa and Google Assistant. The camera works on 2.4 GHz Wi-Fi only. Where the video lives. The page offers two storage paths: the SD card in the camera, and Osaio's cloud. Both are reached through the Osaio app, which is the manufacturer's platform; the app is published by AFAR, and other brands such as GNCC use the same platform. Local integration. Wolfang's product page does not mention RTSP, ONVIF or a public API. A Home Assistant community thread about Osaio cameras shows no working integration, and we found no official documentation of a local stream. On the evidence available, video access is through the Osaio app only, which makes this camera hard to bring into a recorder or VMS that expects a standard network stream. We could not confirm anything beyond that: a firmware may change this, and the manufacturer may document it differently on a page we did not find. What this means for a local-first setup. If you need to record on your own NAS or VMS, the useful check before buying is whether the product page or manual names RTSP or ONVIF; this one does not. The microSD card gives you on-camera recording without a subscription, but retrieving clips is done in the app. Noviscan, Secufor's own product, lists the WS03 in its camera catalogue as not integrable as-is. This site is edited by Secufor.
• GNCC GC3Tested on our bench— The GNCC GC3 is an indoor Wi-Fi camera from GNCC that is managed from the same Osaio app as the Wolfang WS03; the app is published by AFAR. A community thread about Osaio mentions GNCC and Wolfang among the brands sharing this platform. The two cameras therefore share the same access model: video reaches your phone through the Osaio app, not through a standard network stream. What we could and could not verify. GNCC's own web shop did not answer when we checked on 20 October 2026 (HTTP 423), and had already been unreachable since August 2026, so we could not read an official GC3 specification sheet. Resolution, card capacity, cloud pricing and subscription terms for this specific model are therefore not stated here. Retailer listings exist, but they are not manufacturer sources and are not used on this page. Local integration. We found no official document describing RTSP, ONVIF or a public API for the Osaio platform, and a Home Assistant community thread about Osaio cameras shows no working integration. On that evidence, the GC3 is not a camera to plan a recorder or VMS setup around. This is a statement about the evidence we could read, not a proof that no firmware could ever expose a stream. A practical check before buying. If a local NAS or VMS recording is the goal, look for RTSP or ONVIF named explicitly on the product page or in the manual of the exact model, and note the hardware version. If neither appears, assume the app is the only way to view and retrieve footage. Noviscan, Secufor's own product, lists the GC3 in its camera catalogue as not integrable as-is, like the WS03. This site is edited by Secufor.