Video surveillance is moving beyond traditional local networks and dedicated monitoring clients.
Today, users increasingly expect to access live video through a browser, connect to remote sites with minimal network configuration, receive events from distributed devices and communicate with people at the monitored location.
WebRTC is helping make this possible.
Originally designed for real-time communication between browsers and compatible devices, WebRTC provides a standardized foundation for exchanging real-time video, audio and data. It is now also becoming increasingly relevant to professional video security.
With the introduction of ONVIF Profile V, WebRTC is moving from being mainly a browser technology toward becoming part of a standardized cloud video surveillance architecture.
Why WebRTC Matters to Video Surveillance
Traditional IP surveillance systems typically send camera streams to an NVR or VMS, where operators access live and recorded video through dedicated software.
This model remains important, especially for local and high-channel-count systems. But cloud-based video introduces different requirements.
Users may want to:
view live video through a standard browser;
access distributed sites remotely;
receive alarms without maintaining local servers;
use two-way audio from a web application;
connect cameras directly with cloud VMS or VSaaS platforms;
scale storage and management across multiple locations.
WebRTC is well suited to these applications because it was designed for real-time media communication and is supported by modern web environments.
Instead of requiring a proprietary browser plug-in or converting every stream through a separate viewing layer, WebRTC can provide a more direct path between the security system and the web client.
A simplified model looks like:
Camera → Cloud Platform → WebRTC → Browser
But browser viewing is only part of the opportunity.
ONVIF Profile V Brings WebRTC into Cloud Video
ONVIF introduced the Release Candidate for Profile V in July 2026 as a new profile focused on cloud-based video surveillance and Video Surveillance as a Service, or VSaaS.
Profile V defines how devices such as IP cameras and video encoders can work with cloud-based ONVIF clients.
Its current scope includes:
secure, low-latency live video;
cloud recording;
event notifications;
remote device configuration;
bidirectional audio for devices that support audio.
A particularly important part of the current specification is the use of WebRTC for H.264 live video streaming. Devices with suitable audio hardware are also expected to support bidirectional audio over WebRTC.
This changes the role of WebRTC in the security industry.
It is no longer simply a convenient way to display a camera in a browser. It can become part of the standardized connection between an edge video device and a cloud security platform.
A New Camera-to-Cloud Architecture
Profile V also reflects a different approach to connecting remote surveillance devices.
In the current architecture, the device establishes a secure outbound Uplink connection to the cloud-based client. This can reduce the need for traditional inbound port forwarding or dedicated VPN configuration when reaching devices behind a local firewall.
The overall architecture can be simplified as:
IP Camera / Encoder
↓
Secure Cloud Connection
↓
Cloud VMS / VSaaS
↓
WebRTC Live Video & Audio
↓
Browser or Remote Client
Different functions can then use technologies suited to their specific purpose.
WebRTC handles interactive live media.
Cloud storage can handle recording.
Event mechanisms can deliver alarms.
The cloud client can manage and configure compatible devices remotely.
This is an important distinction.
Cloud surveillance does not simply mean moving an existing local VMS onto a remote server. It creates an architecture in which device connectivity, live viewing, storage, events and management can be designed specifically for cloud operation.
Browser-Native Monitoring
One of the most immediate benefits is browser-based security monitoring.
A facility manager may need to check a remote site from a laptop. A security operator may receive an alarm through a web portal. A managed service provider may need to access cameras across hundreds of customer locations.
In these environments, requiring a dedicated desktop application for every user can add complexity.
With WebRTC, the browser itself can become part of the real-time monitoring interface.
This is particularly relevant for:
multi-site retail;
offices and commercial buildings;
logistics facilities;
temporary sites;
small and medium businesses;
remote infrastructure;
managed security services.
The value is not simply convenience.
Browser-native access can also make video surveillance easier to integrate into broader web-based operational platforms.
From Live Viewing to Real-Time Interaction
WebRTC also supports something traditional browser video often lacked: real-time interaction.
For devices equipped with microphones and speakers, live video can be combined with bidirectional audio.
Consider a remote security event:
AI Detection → Cloud Alert → WebRTC Live Video → Operator Communication → Response
An operator can see what is happening and communicate directly with the monitored location through the same web-based workflow.
This can support applications such as:
video intercom;
remote entrances;
emergency help points;
remote guarding;
cameras with built-in speakers;
network audio systems.
This is where WebRTC starts to move beyond “video playback” and becomes part of an interactive security system.
Edge AI Meets Cloud Video
WebRTC also becomes more valuable when combined with edge AI.
Modern cameras can analyze scenes locally and generate events based on predefined conditions.
Instead of continuously monitoring every camera, a cloud platform can focus operator attention on events that require verification.
The workflow becomes:
Edge AI → Event → Browser Notification → WebRTC Live View → Operator Action
This creates a natural relationship between edge intelligence and cloud operations.
The camera performs detection close to the source.
The cloud distributes the event.
WebRTC provides immediate visual verification and interaction.
The operator decides what happens next.
For distributed security systems, this can help move monitoring from continuous observation toward more event-driven operations.
WebRTC, SIP and Traditional VMS Can Coexist
WebRTC does not need to replace existing surveillance technologies.
Local NVRs and VMS platforms will continue to be appropriate for many applications, and ONVIF confirms that Profile V can work alongside other ONVIF video and access-control profiles in hybrid architectures.
A future security system may therefore combine:
Local Recording + Cloud Management
Traditional VMS + Browser Access
Edge AI + Cloud Events
SIP + WebRTC
SIP and WebRTC are also complementary rather than necessarily competing technologies.
SIP is particularly useful when a security device needs to integrate with telephony, PBX or SIP communication infrastructure.
WebRTC is especially useful when live video and communication need to be delivered directly through a web or cloud application.
The choice depends on the application architecture.
Security Must Be Part of the Cloud Architecture
Cloud connectivity also makes device identity, authentication and encrypted communication increasingly important.
For this reason, ONVIF Profile V is accompanied by a mandatory Profile V Security Add-on.
The current Release Candidate uses the OAuth 2.0 framework for cloud access and configuration, including mutual TLS for identity verification and access tokens for cloud communication. It also defines requirements for protecting video and audio sent to cloud storage.
For a complete deployment, security considerations should extend beyond the video stream itself.
They include:
secure device onboarding;
device and service authentication;
credential protection;
certificate management;
encrypted communication;
access permissions;
firmware lifecycle management;
secure remote configuration.
Cloud video should make security systems easier to connect without creating unnecessary trust between devices, services and users.
From Browser Video to Cloud-Native Security
WebRTC first gained attention in video surveillance as a practical way to bring live video into a browser.
Its role is now becoming much broader.
Combined with cloud connectivity, edge AI and emerging standards such as ONVIF Profile V, WebRTC can help connect cameras directly with modern web-based security platforms.
The evolution can be summarized as:
Camera → Cloud → Browser → Event → Interaction
For the video security industry, this opens new possibilities.
Cameras can become cloud-connected security endpoints.
Browsers can become real-time monitoring and communication interfaces.
Edge AI can trigger cloud workflows.
And open standards can help different devices and platforms work together more consistently.
The future of WebRTC in video security is therefore not simply about viewing a camera without a plug-in.
It is about building a more open, interactive and cloud-ready video security architecture.
Note: ONVIF Profile V is currently at the Release Candidate stage. References to Profile V in this article are based on the specification available at the time of publication and may be subject to change before the final specification is released.