Content Disarm and Reconstruction (CDR) APIs

Remove security threats from documents by tearing them down and rebuilding them securely.

Secure Document Sanitization

Tear down and re-build documents from the ground up to preserve content without the security risks.

Wide Range of File Formats

Support for nearly 200 file formats including common PDF, Office, and image file formats.

Real-Time Processing

Fast real-time performance enables you to run secure sanitization on files as they are uploaded.

Detect, block and sanitize security threats in files, including:

‹

Scripts in PDFs

Detect and remove JavaScript and other scripts embedded in PDF files that can execute malicious code when the document is opened.

Macros in Office Documents

Block VBA macros in Word, Excel, and PowerPoint files that attackers use to deliver malware and ransomware payloads.

HTML Threats

Block embedded HTML content that can contain cross-site scripting (XSS) attacks, phishing links, and malicious iframes.

Embedded Attachments

Detect files embedded within other files, such as PDFs containing hidden executables or Office documents with attached payloads.

OLE Embedded Objects

Block OLE objects embedded in Office documents that can be used to execute arbitrary code or link to external malicious resources.

Security Threats in Archives

Scan inside ZIP, RAR, 7z, and other archive formats to detect threats hidden within compressed files, including zip bombs and nested archives. Sanitize entire archives recursively.

Executables

Block executable files such as EXE, DLL, and script files that should never appear in document uploads.

Unwanted Actions in PDFs

Block PDF actions like auto-launch, URI calls, and form submissions that can trigger without user interaction.

Encrypted Files

Detect password-protected and encrypted files that cannot be scanned for threats, preventing them from bypassing security controls.

Invalid Files

Identify malformed files that don't match their declared format, a common technique used to exploit parser vulnerabilities.

XML External Entities

Block XXE attacks that use external entity references in XML-based documents to access server files or perform server-side request forgery.

Insecure Deserialization

Detect serialized objects embedded in documents that can exploit deserialization vulnerabilities to achieve remote code execution.

›

Secure Document Sanitization

Advanced document sanitization technology tears down original file and rebuilds it to ensure security, enabling your team to work with original low-trust files.

Virus scanning with content verification ensures that files are safe to work with

Enable CDR in minutes

Integrate via API

Integrate with no code via WAF and Cloudmersive Reverse Proxy server

Integrate with no code into S3, Azure Blob, or GCS with Cloudmersive Storage Protect

Call the CDR API directly from your application using REST endpoints with client libraries available for all major languages.

Sanitize files in real time at the point of upload with a single API call. Supports nearly 200 file formats including PDF, Office, and image files.

View API Documentation

Deploy CDR inline with your web applications using a reverse proxy configuration. No code changes required.

All uploaded files are automatically sanitized before reaching your application, providing transparent protection against document-borne threats.

Contact Sales to Learn More

Protect cloud storage by automatically sanitizing files as they are uploaded to Amazon S3, Azure Blob Storage, or Google Cloud Storage.

Cloudmersive Storage Protect monitors your storage buckets and applies CDR to new files with no code changes to your application.

Contact Sales to Learn More

Enterprise Grade Performance at Scale

>1,100

Customers rely on Cloudmersive

>1 Billion

API calls consumed

99.99%

Uptime service-level agreement available

12+

Data-center regions plus on-premises and multi-cloud deployment options

Great Documentation and Client Libraries

C# / .NET / .NET Core, Java, Node.JS, Javascript, Python, PHP, Ruby, Objective-C, Drupal, C++, Go, Swift, Salesforce Apex, Postman, Zapier, Mendix, Power Automate, Azure Logic Apps client libraries available.

23 programming languages and platforms supported

Full documentation for all APIs

Example code for all APIs

Swagger/OpenAPI specifications

Interactive Docs Read Docs and Examples

Satisfied Customers

Our customers upload millions of resumes and documents to our website every year, so the virus scanning capabilities have played a crucial role in protecting both our clients and writing experts from potentially harmful content.

-Alex Palma, SVP Product Management

Fantastic products, support and management. Flutter really values the expertise Cloudmersive has to offer and looks forward to working strategically with them in the future.

-Josh Hoyle, Senior Product Manager

We been using it to validate our users details in Dynamics leveraging PowerAutomate. As we are currently migrating between two systems, the validation services have allowed us to simplify the synchronization process and ensure better quality of data to enable continued care for our users.

-Thomas Pike, ICT Manager

❮ ❯

Talk to Sales

Flexible Deployment

Use Cloudmersive APIs from the cloud, or deploy Cloudmersive APIs to the edge, a private cloud, your on-premise data center, or a custom public cloud instance when needed to enable key scenarios for latency, compliance, security and control.

Public Cloud Leverage multi-tenant public cloud