DeepNude: the name, the original and what carries it now
An application withdrawn by its own author in 2019, whose name outlived it as a category term.
DeepNude was a desktop application released in June 2019 and withdrawn by its author within days, with a public statement that the probability of misuse was too high. The code leaked, was reimplemented repeatedly, and the name detached from the product and became a generic term for the whole category.
Anything sold under the name today is a reimplementation, usually a web service built on general-purpose diffusion weights that have nothing to do with the original model. The name is a search term, not a lineage, and readers should treat a service advertising itself this way as making a claim about vocabulary rather than about technology.
Affiliate disclosure: some outbound links are affiliate links and may earn a commission at no cost to you. They do not change the scores, which follow the fixed weights set out in how we review and, in Spanish, in cómo evaluamos.
The highest-scoring tools
- Editor’s choice
AiNudez
Not published on the official pricing page on the date of verification
PornWorks
Generations with no stated limit on the slow queue for a registered account
DeepUndress
Courtesy trials limited to sign-up, subject to the offer in force
Undresswith AI
Yes; it works without creating an account
WaveSpeed
$1 USD of trial credit for eligible new accounts, with no card
UndressHer
1 token a day, one image, watermarked and at basic quality
What the 2019 application actually was
The original was a generative adversarial network trained on a narrow dataset, packaged as a Windows and Linux desktop application with a paid tier that removed a watermark. It worked on frontal photographs of women and failed on almost everything else, producing obvious artefacts on any pose it had not seen.
Its author withdrew it days after release, stating that the world was not ready for it. The download links were removed and the official distribution ended. Copies of the binary circulated immediately afterwards and reimplementations followed within weeks.
Technically the original is obsolete. Diffusion models replaced adversarial networks for this task, and every service in our catalogue uses the newer approach. A tool claiming continuity with the 2019 application is claiming something that is not true of its architecture.
What a service using the name is actually running
In practice it is a web front end over an inpainting pipeline, most often built on publicly available diffusion weights with a segmentation step in front. The engineering effort in these products sits in the interface, the queue and the payment flow rather than in the model.
That is why our scores separate them the way they do. When the generator is effectively common property, what remains to judge is mask control, output resolution, queue behaviour, price structure, retention policy and whether support answers. Those six things are the whole product.
It also explains why the price spread in the catalogue is so wide for such similar output. A service charging several times what its neighbour charges is not running a better model; it is running the same class of model with a different margin.
Why this name attracts the worst of the category
The term carries a history of non-consensual use, and services that lead with it tend to attract users looking for exactly that. Several of the lowest-scoring entries in our catalogue are also the ones whose marketing leans hardest on the name, and their privacy documentation is correspondingly thin.
Where a service publishes no retention period, no company details and no working support address, a user has no route to have an image removed and no counterparty to address. That combination is what pushes a mark below seven in our ranking more often than output quality does.
The takedown route in Mexico does not depend on the provider cooperating. Material can be reported regardless of where it was generated, and the report page on this site sets out how.
All fourteen, scored and dated
| # | Tool | Score | Tested |
|---|---|---|---|
| 1 | AiNudez | 9.3 / 10 | 13/08/2026 |
| 2 | PornWorks | 9.2 / 10 | 12/08/2026 |
| 3 | DeepUndress | 8.8 / 10 | 14/08/2026 |
| 4 | Undresswith AI | 8.6 / 10 | 28/08/2026 |
| 5 | WaveSpeed | 8.5 / 10 | 16/08/2026 |
| 6 | UndressHer | 8.3 / 10 | 17/08/2026 |
| 7 | Dreemy AI | 8.1 / 10 | 19/08/2026 |
| 8 | SwapFaces AI | 8.0 / 10 | 20/08/2026 |
| 9 | Deep Nude AI | 7.8 / 10 | 21/08/2026 |
| 10 | Luminar | 7.5 / 10 | 22/08/2026 |
| 11 | OpenArt AI | 7.4 / 10 | 24/08/2026 |
| 12 | MyIMG AI | 7.2 / 10 | 22/08/2026 |
| 13 | JoyFun AI | 7.0 / 10 | 23/08/2026 |
| 14 | PixaryAI | 6.8 / 10 | 23/08/2026 |
What this section is built on
- Rombach et al., High-Resolution Image Synthesis with Latent Diffusion Models — The paper behind the diffusion inpainting that every tool in this catalogue relies on.
- Kirillov et al., Segment Anything — The segmentation approach used to find a garment region automatically.
- Diario Oficial de la Federación, Ley Olimpia reforms — The Mexican text criminalising dissemination of intimate content, real or simulated, without consent.
- Regulation (EU) 2024/1689, the AI Act — Article 50 sets the disclosure duty for synthetic content that this site follows.
- StopNCII.org — The international route for having non-consensual intimate images removed.
- TAKE IT DOWN Act, S.146 — The United States takedown obligation, relevant where a provider is hosted there.
Technical claims on this page rest on the published research above; legal claims rest on the published texts. Everything else is what the desk observed in its own standardised scenarios, with the date recorded beside each figure.
Questions about deepnude
Is the original DeepNude still available?
No. The author withdrew it in 2019 and ended official distribution. Everything sold under the name since is a reimplementation.
Is a tool using this name running the original model?
No. The original used an adversarial network; current services use diffusion inpainting. There is no technical continuity.
Which tools in the catalogue trade under this name?
Several market themselves this way. Each carries its own score and date in the catalogue.
Is using one of these legal in Mexico?
On your own photographs, yes. On an identifiable person without consent, dissemination is criminalised by the Ley Olimpia reforms in most states.
What can I do if an image of me was made this way?
Report it. The route is set out on report NCII (in Spanish), and it does not depend on the provider cooperating.
Why do these services score lower on average?
Because the ones leaning hardest on the name tend to publish the least: no retention period, no company details, no working support channel.
Other guides in this section
AI clothes remover
An editor of this kind rebuilds a masked region of an existing photograph. Everything below it invents.
Read guide →Undress AI
A working label for a group of services that regenerate a masked region of a photograph.
Read guide →Nude AI
A generator starts from a text description, not from a photograph. That single difference changes everything downstream.
Read guide →Nudify
A verb invented by the market. Behind it sits the same masking and inpainting pipeline as the rest of the category.
Read guide →