A free online tool that scans your file for malware, removes hidden macros & scripts, and strips tracking metadata. The tool enables you to choose your sanitization mode depending on your needs and your threat model.
Drop a file up to 50 MB or paste a URL from Drive, Dropbox, GitHub. No sign-up.
Light just strips metadata. Standard runs full CDR. Aggressive converts to safest format.
Get back the original format with macros, scripts, EXIF and threats removed. View a full report.
A virus scan and a clean wipe of hidden metadata. No re-encoding, no structural changes — your file comes back almost identical to what you uploaded, just without EXIF, GPS coordinates, author info, timestamps, or other metadata leakage.
Full Content Disarm & Reconstruction. Macros, scripts, embedded objects and metadata are stripped; the file is re-encoded and rebuilt from safe content only. You get the same format back, minus the threats — without converting your .docx into something else.
Standard sanitization, then the file is converted to its safest counterpart — Office to PDF, images to PNG, HTML to plain text, video to MP4. The result is harder to weaponise, but you lose the original format and most of its editability.
Every upload is checked from multiple angles before sanitization runs. None of these layers decide whether to clean your file — that always happens. They decide what the report can tell you about what was lurking.
Your file is checked against millions of known-malware fingerprints, refreshed on the hour from both the official feed and a curated set of community threat databases. The combined picture catches a much wider class of malware than any single source — phishing kits, attachment exploits, scam payloads, classic viruses.
Beyond raw signatures, every upload is pattern-matched against a curated set of thousands of named threat fingerprints — ransomware families, banking trojans, state-sponsored toolkits. A match doesn't reject your file; it shows up in the report so you know exactly what family a suspicious upload resembled.
For Word, Excel, and PowerPoint files, the macros are inspected before they get stripped — auto-open triggers, suspicious commands (download, run, network calls), embedded URLs and IP addresses, obfuscated code blocks. The report describes what the macro would have done. The macro is removed either way.
For PDFs, the active-content blocks are counted and identified before they're stripped — JavaScript, auto-trigger actions, launch commands, embedded files, hidden forms. You see exactly how many were present and what kind. The PDF still gets rebuilt from clean content regardless of what was found.
Not every threat arrives as a file. Paste a web address and we'll tell you whether it's safe to visit — without you ever having to open it yourself. Pick how deep to look: every scan ends with a clear verdict — No known threats, Suspicious, or Malicious — and a plain-language report of what we found and why.
Checks the address against threat blocklists and reputation databases, then safely loads the page on our servers — never on your device — and inspects what it's made of: where its links lead, whether its security certificate is valid, which third-party trackers it pulls in, out-of-date code with known weaknesses, and any text hidden on the page to manipulate AI assistants.
Opens the page in a locked-down, throwaway browser and watches what it actually does — every site it quietly connects to, whether it tries to fingerprint your device or ask for sensitive permissions, and whether it shows something different to real visitors than to automated checks. You get a screenshot of what the page really looks like.
It's in beta and free to use — paste any link and see what it's really doing.
No sign-up. No tracking. Drop a file and get a clean version in 60 seconds.