← Reviews

Noviscan

Tested on our bench

Vendor
Secufor
License
Commercial (licence signée ; palier gratuit 1 poste)
Platforms
Linux, Windows, Docker, app desktop, app mobile iOS/Android, web

Self-hosted video surveillance suite with built-in facial recognition, encrypted media caches at rest, a signed licensing model, and a directory-only relay that keeps remote access off any vendor cloud.

Strengths

  • Encrypts cached media at rest by default — most VMS that encrypt at rest at all still make you turn it on: Synology, Nx Witness and Milestone require enabling it, a higher edition, or NAS-level folder encryption, and even the enterprise tier (Genetec's Fusion Stream Encryption, Avigilon's FIPS-mode encryption) treats it as a feature to switch on rather than a default.
  • Remote access uses a directory-only relay with direct/WebRTC data path — footage never transits a vendor cloud.
  • Built-in facial recognition, plus web, desktop and mobile apps sharing one front end.
  • Works with ONVIF/RTSP cameras and a growing catalogue of source plugins — no hardware lock-in.
  • The recognition stack is named and auditable: published models (YuNet detection + SFace recognition, OpenCV Zoo, Apache-2.0), fetched from their official repository with pinned SHA-256 verification, and runnable fully offline. No proprietary algorithm to take on trust.

Limitations

  • Not open source — if auditable source code or zero cost is your priority, Frigate or ZoneMinder lead there, not Noviscan.
  • Commercial product (the free tier is limited to a single connection), and younger than long-established VMS like ZoneMinder or Blue Iris.
  • Full disclosure: this is Secufor's own product, so this entry's claims are first-party — treat them as a starting point to verify independently, not as a neutral lab's verdict.

Criteria

Open source (auditable code)
Self-hosted (runs on your hardware)
Works without a mandatory vendor account
Works with any ONVIF/RTSP camera (no hardware lock-in)
Built-in facial recognition
Encrypts stored footage at rest
Remote access without a vendor cloud
Web + desktop + mobile apps

Sources