self-hostedagent-firstGDPR-by-design

Redact faces & plates.
Keep nothing else.

blurd is a single-binary redaction service. POST an image, get back a job id, poll or fetch by code. The original is decoded, detected, redacted and discarded — never written to disk. Only the redacted output, a SHA-256 and metadata persist.

Get the OSS binary → Buy Pro — €249
130 msmedian, 2 cores
0 bytesoriginals on disk
160+conformance checks
original_stored: false
POST /v1/images · street-0412.jpgdetecting…
face 0.97
face 0.91
plate 0.99
{"ok":true,"data":{"job_id":"j_01J8Q…","status":"queued"}}
01  / the admin dashboard

Review what the model flagged. Add masks. Never reveal.

blurd admin dashboard
02  / properties

Built to hold as little as possible.

01

Never stores the original

Source bytes are dropped right after decode. Queues are in-memory and byte-bounded — no spool files, ever. If it's not redacted, it's not on disk.

02

Human review loop

Low-confidence results are flagged needs_review. The dashboard's editor lets an operator draw extra black boxes on top — additive masks only, never reveal.

03

Agent-first API

JSON envelope everywhere, typed errors with exit codes, --help-json for discovery, scoped keys as tenants, portable key export between instances.

04

Runs anywhere

SQLite, Postgres or MongoDB metadata. Local FS or S3 blobs. Compose profiles, a Helm chart that refuses unsafe configs, multi-replica job leases. ~750 MB RSS.

05

Bounded by design

Per-request TTL on blobs, a hard storage.max_bytes cap with expired-first reclaim, per-IP rate limits, 30-day audit retention. Safe to demo on a 4 GB box.

06

Measured, not estimated

130 ms median detect+redact on 2 cores. 160+ black-box conformance checks run identically against all three metadata backends.

03  / quickstart

Sixty seconds to a redacted image.

$ blurd init && blurd models pull && blurd serve
$ curl -X POST http://127.0.0.1:8770/v1/images \
    -H "X-Api-Key: blk_..." --data-binary @photo.jpg
{"ok":true,"data":{"job_id":"j_01J..."}}          # 202 — async
$ curl "http://127.0.0.1:8770/v1/blobs/by-code/order-4421" \
    -H "X-Api-Key: blk_..." -o redacted.jpg
04  / licensing

Open source core. Pro for companies.

MIT · self-hosted forever

Open source

The full pipeline: detection, redaction, dashboard, three metadata backends, Helm chart.

  • Face + plate detection, mosaic/blur/solid modes
  • Manual redaction editor in the dashboard
  • Scoped API keys, unique codes, TTL storage
  • MIT-licensed, self-hosted forever
Clone on GitHub →
licensed tarball · source-available

blurd pro

Everything in OSS, plus the company-facing layer, delivered as a licensed tarball.

  • SSO / OpenID Connect login for the dashboard (v1.1, included)
  • Per-company license, unlimited instances & users
  • Priority support, direct line to the author
  • Source-available — audit what you deploy
€249one-time, per company
Buy blurd pro →

Download link emailed instantly after payment, valid 24 h.