Dangerzone

It accepts PDFs, Office files, and common image formats, then renders each page to raw pixel data inside an isolated sandbox that has no network connectivity. By reconstructing the document solely from these pixel values, any embedded scripts, macros, or malicious code are discarded, resulting in a clean PDF that preserves the visual content while eliminating executable threats.

The tool supports more than twenty input types, including all major office‑suite formats, and works on macOS (both Intel and Apple Silicon) as well as Windows and various Linux distributions. Users invoke the conversion via a command‑line interface, which handles the sandbox creation, rendering, and PDF regeneration automatically.

Developed and maintained by the Freedom of the Press Foundation, the project is free and open source, offering a publicly auditable solution for safely handling untrusted documents without exposing the host system to network‑based attacks.