Security-first by architecture

OpenNVR assumes cameras can be compromised. The goal is containment, not blind trust.

Containment (assume compromise)

Cameras remain on a private network. OpenNVR ingests and re-streams securely so compromised cameras can’t pivot into your LAN.

Threat modeling (STRIDE)

Spoofing, tampering, repudiation, information disclosure, DoS, elevation of privilege—mapped to controls and audit trails.

Auditability & evidence

Access logs, export integrity, retention enforcement, and governance features (Enterprise) for compliance and incident response.