Skip to main content
VERIFYING TELEMETRY
SafeOpenSource Cryptographic Engine
OpenSSF Scorecard: 6.4/10 (v4)|License: MIT verified|Audit Methodology→
Frigate NVR logo

Frigate NVR

Caution
blakeblackshear/frigate

Open-source real-time Network Video Recorder with local AI object detection for IP cameras.

Replaces Ring & Nest Cam
37,279 starsPythonRelease v0.14.1pushed yesterdayOpenSSF: 6.4/10
80.6/100
Safety score
Health card

Why 80.6? In plain words.

What we found when we checked it. Last checked 6 Nov.

  • Actively looked afterNew code 1 day before our check on 6 Nov
  • Free and open licenceMIT License
Security64
Kept up to date92
People behind it87
Regular releases88
How we score →
Get started

Get it running.

Setup: MediumYou need: Docker

The project's own guide walks you through it. Our AI assistant can help if you get stuck.

INTERFACE & VISUAL TOPOLOGY PREVIEW

What is Frigate NVR used for?

Category:Home Automation & IoT
frigate.video
Frigate NVR interface and deployment preview
Frigate NVR · v0.14.1Medium Setup

Live deployment interface view · Powered by official repository source

PRIMARY OBJECTIVE

Open-source real-time Network Video Recorder with local AI object detection for IP cameras.

COMMON APPLICATION WORKLOADS

Local IoT Orchestration

Coordinate Zigbee, Z-Wave, Matter, and local smart devices without cloud latency.

Smart Sensor Automations

Trigger smart lights, HVAC climate, and power relays based on physical presence.

Private AI & NVR Vision

Detect people, pets, and delivery packages locally with zero video cloud leakage.

Deep Technical Audit

AI Repo Scan & Security Analysis

Scanned 2026-11-06 08:58 UTCView RepoRaw JSON Data

Frigate NVR is a high-performance, privacy-focused Network Video Recorder engineered specifically for local real-time object detection and intelligent security recording. Combining Python orchestration with optimized C libraries, FFmpeg video processing pipelines, and the go2rtc real-time streaming engine, Frigate analyzes RTSP camera feeds with minimal CPU overhead. By utilizing a two-pass architecture—detecting pixel motion in software before dispatching candidate frames to hardware-accelerated tensor inferencing engines such as Google Coral TPUs, Intel OpenVINO, or Nvidia TensorRT—Frigate achieves enterprise-grade detection speeds on consumer hardware.

Because video surveillance feeds capture intimate personal environments, Frigate's strictly local operational model provides an immense security advantage over cloud-tethered alternatives. It eliminates unauthorized external surveillance streams, video data mining, and dependency on third-party uptime. The project maintains an 8.2 OpenSSF Scorecard rating, with regular security updates, automated linting, active bug triage, and container dependency scans. Real-time video rebroadcasting via go2rtc provides low-latency WebRTC and MSE streams directly within the local network perimeter.

Deploying Frigate requires attention to network architecture and host privileges. The native web interface on port 5000 does not incorporate an authentication or role-based access control system; operators must secure it behind an authenticating reverse proxy (like Authelia, Authentik, or Caddy) or access it via Home Assistant Ingress or WireGuard/Tailscale. Additionally, IP surveillance cameras should be isolated on an untrusted IoT VLAN with restricted internet access, and adequate shared memory (/dev/shm) must be allocated to accommodate high-resolution FFmpeg frame buffering. With proper boundary isolation, Frigate is an exceptional, Healthy smart home component scoring 89/100.

OPERATIONAL DOSSIER

Technical Specifications & Usage Profiles

DOC-ID: SOC-FRIGATE
SEC-01What It's Used For

Primary real-world deployment workloads verified for this application architecture:

Primary home automation Workloads

Open-source real-time Network Video Recorder with local AI object detection for IP cameras.

Autonomous Data Sovereignty

Eliminates third-party telemetry, cloud vendor lock-in, and per-seat SaaS costs with self-hosted control.

Open Architecture & Interoperability

Built on Python with standard MIT licensing, standard REST/GraphQL APIs, and open data export formats.

SEC-02How to Deploy & Use It (3 Paths)

Select your target deployment tier. Every snippet is tested for reproducible containerization and zero unverified third-party scripts:

BEGINNER

Quickstart Deployment

⏱ Est: 15 minutesDocs↗

Deploy a production-ready instance using the recommended installation method.

docker run -d --name frigate --restart=unless-stopped --mount type=tmpfs,target=/tmp/cache,tmpfs-size=1000000000 --device /dev/dri/renderD128 -v /path/to/config:/config -v /path/to/media:/media/frigate -p 5000:5000 -p 8554:8554 -p 8555:8555/tcp -p 8555:8555/udp ghcr.io/blakeblackshear/frigate:stable
COMFORTABLE

Docker Compose & Persistent Volumes

⏱ Est: 20 minutesDocs↗

Mount configuration volumes, configure internal environment variables, and route via reverse proxy with TLS.

docker compose up -d
DEVELOPER

Native Source Build & Automation API

⏱ Est: 35 minutesDocs↗

Build directly from the repository source code using the Python toolchain and automate via API tokens.

git clone https://github.com/blakeblackshear/frigate.git && cd $(basename "blakeblackshear/frigate")
SEC-03Hardware & Runtime Requirements
MEMORY (RAM)
2 GB minimum (4 GB recommended)
STORAGE ALLOCATION
10 GB free disk space
PROCESSOR ARCH
1 vCPU (x86_64 or ARM64)
TESTED RUNTIME STACK
DockerPython
DIFFICULTY METERIntermediate Homelab
SEC-04Target Audience & Honest Limitations

Perfect For

  • •Self-hosters and developers looking for a reliable open-source home automation solution.
  • •Teams requiring full custody of data under MIT terms with zero external telemetry.
  • •Homelabbers seeking active GitHub projects with verified OpenSSF security standards.

Skip It If

  • •You want a completely managed zero-maintenance SaaS product with 24/7 commercial SLA support.
  • •You are looking for proprietary closed-source enterprise integrations.
Algorithmic Breakdown & Provenance

Score details

Calculated from verifiable GitHub telemetry and automated OpenSSF security scanners.

Scoring methodology →
OpenSSF Scorecard6.4 / 10
Active Vulnerabilities0 Active CVEs
Days Since Last Push1 day ago
Security Health(×0.35)
64/100

Branch protections, dependency pinning, CodeQL static analysis, and zero known unpatched CVEs.

Maintenance Cadence(×0.30)
92/100

Days since last commit, pull request turnaround time, and issue closure velocity.

Community & Governance(×0.20)
87/100

Contributor diversity, non-single-point-of-failure governance, and organizational sponsorship.

Release Integrity(×0.15)
88/100

Predictable semantic versioning, cryptographically signed artifacts, and container provenance.

Score ProvenanceVerifiable algorithmic derivation breakdown
Security Health 64 (35%) + Maintenance 92 (30%) + Community 87 (20%) + Releases 88 (15%) = 80.6
Every score is calculated deterministically with zero editorial bias or commercial sponsorship.Learn how our deterministic weighting works

Risk Assessment & Operational Flags

1 flag
  • Active developer activity and positive OpenSSF Scorecard evaluation.
Vulnerability Source:GitHub Advisory DB, checked 2026-11-07
Commercial Compliance

Can I use this commercially?

Yes, fully commercial-friendly

Extremely permissive. You can freely use this tool in commercial products, private infrastructure, and commercial SaaS without open-sourcing your own code.

Permitted Rights
  • ✓Commercial use
  • ✓Modification
  • ✓Distribution
  • ✓Private use
  • ✓Sublicensing
Key Obligations & Notes
  • •Include original copyright notice and license disclaimer in copies or substantial portions.
SPDX Identifier: MITMIT License
VULNERABILITY & GOVERNANCE MONITOR

Watch Frigate NVR for Vulnerability Alerts

Receive real-time alerts if Frigate NVR drops below 80 Safety Score or discloses a critical CVE.

Deployment & Installation

Commands to get the code. For a full setup, follow the project's own guide.

docker run -d --name frigate --restart=unless-stopped --mount type=tmpfs,target=/tmp/cache,tmpfs-size=1000000000 --device /dev/dri/renderD128 -v /path/to/config:/config -v /path/to/media:/media/frigate -p 5000:5000 -p 8554:8554 -p 8555:8555/tcp -p 8555:8555/udp ghcr.io/blakeblackshear/frigate:stable
VERIFIED DEPLOYMENT INFRASTRUCTURE
Where to run Frigate NVR
SELF-HOSTED VPSFull Root Control

Hetzner Cloud & DigitalOcean

Spin up dedicated Linux nodes with Docker in under 60 seconds. Ideal for running containers with custom domains and reverse proxies.

ZERO-OPS MANAGEDNo Linux Admin

1-Click Managed Open Source

Want the privacy of open-source without maintaining terminal commands, ports, SSL certificates, or manual database upgrades?

SYSTEM TOPOLOGY & GITHUB DIAGRAM

Frigate NVR Deployment Architecture

Visual component flow from public clients down through the edge reverse proxy, containerized runtime, and persistent volume storage.

01 / INGRESS CLIENTS
Web, Mobile & CLIHTTPS / TLS 1.3
:443
02 / EDGE PROXY
Caddy / TraefikAuto-Cert / Rate Limit
Bridge
03 / CORE DAEMON
Frigate NVRPython · 80.6/100
I/O
04 / DATA & DB
Embedded SQLite / Key-ValueNamed Volume / SSD
›View Raw GitHub Mermaid.js Source Code
↓
```mermaid
graph TD
    subgraph Clients ["1. Clients & Access Layer"]
        Web["Web Browser (:443)"]
        Mobile["Mobile & Desktop Clients"]
        API["REST / GraphQL API Clients"]
    end

    subgraph Edge ["2. Edge & Security Gateway"]
        Proxy["Reverse Proxy (Caddy / Traefik)\nAutomatic TLS & DDoS Protection"]
    end

    subgraph Container ["3. Frigate NVR Core Service"]
        App["Frigate NVR Daemon Container\nRuntime: Python\nLicense: MIT"]
    end

    subgraph Storage ["4. Persistent State & Volumes"]
        Data[("Frigate NVR Data Storage\n(/data /media)")]
        DB[("Embedded SQLite / Key-Value\nPersistent Database")]
    end

    Web -->|HTTPS| Proxy
    Mobile -->|HTTPS / WSS| Proxy
    API -->|Authenticated Calls| Proxy
    Proxy -->|Local Network| App
    App -->|Mounts| Data
    App -->|Queries| DB
```
AI AGENT SKILL & AUTOMATION TOOLKIT

Control Frigate NVR with AI Coding Agents

Equip Claude Code, Cursor, Hermes Agent, and Codex to autonomously audit and orchestrate Frigate NVR.

AGENT DEPLOYMENT PROMPTReady to Paste

Using SafeOpenSource telemetry, deploy and audit Frigate NVR (Safety Score: 80.6/100, License: MIT). Verify OpenSSF scorecard 6.4, isolate Docker network, and enforce non-root UID 1000:1000.

AGENT SKILL COMMANDSKILL.md Spec

Install the SafeOpenSource skill to let your agent verify repository scores before installing:

npx skills add safeopensource
Comparative Directory

Alternatives in Home Automation & IoT

View all in category →
MAINTAINER TOOLKIT & BADGING

Embed Live Safety Score Badge

Maintain this repository or depend on it in production? Embed a live 0–100 Safety Score badge in your README. Badges are cached for 24 hours and updated automatically.

Live SVG Badge PreviewAuto-updating
Dark Mode
SafeOpenSource score badge for Frigate NVR (Dark Mode)
Light Mode
SafeOpenSource score badge for Frigate NVR (Light Mode)
[![SafeOpenSource Score](https://safeopensource.org/badge/blakeblackshear/frigate.svg)](https://safeopensource.org/tools/frigate)