A safe, private runtime for autonomous AI agents that enforces file, system call, and network policies per sandbox.
freedomofpress/dangerzone
Converts untrusted PDFs, office documents and images into safe PDFs by rasterizing them inside a sandbox.
- Stars
- 5,789
- Forks
- 274
- Open issues
- 195
- Last commit
- 5 hours ago
What is it?
Dangerzone takes files you don't trust, such as email attachments, and turns them into PDFs that are safe to open. It accepts PDFs, office documents and images as input.
Conversion happens in two stages. Inside a sandbox, the original document is first converted to PDF if needed, then each page is rendered into raw RGB pixel data. Outside the sandbox, that pixel data is rebuilt into a new PDF, so no active content from the original file carries over.
The project provides a desktop application and installation guides for macOS, Windows, several Linux distributions, Qubes OS and Tails.
Key features
- 01Converts PDFs, office documents and images into a new PDF.
- 02Runs the conversion step inside a sandbox, separate from the rebuild step.
- 03Rebuilds output from raw pixel data, dropping embedded active content.
- 04Provides a desktop application with installers for major platforms.
Use cases
- Opening email attachments from unknown senders without risk.
- Sanitizing documents received from untrusted sources before sharing them.
- Handling suspicious files in journalism or security-sensitive workflows.
Topics
FAQ
- What is dangerzone?
- Converts untrusted PDFs, office documents and images into safe PDFs by rasterizing them inside a sandbox. Dangerzone takes files you don't trust, such as email attachments, and turns them into PDFs that are safe to open. It accepts PDFs, office documents and images as input.
- Is dangerzone free to use? What license does it have?
- dangerzone is open source under the AGPL-3.0 license. Check the license terms before using it in commercial products.
- Is dangerzone still maintained?
- Actively maintained. The last commit to dangerzone was on Oct 19, 2026.
- What can I use dangerzone for?
- Opening email attachments from unknown senders without risk. Sanitizing documents received from untrusted sources before sharing them. Handling suspicious files in journalism or security-sensitive workflows.
- Where can I get dangerzone?
- The source code and installation instructions are on GitHub: https://github.com/freedomofpress/dangerzone
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Self-hosted, open-source PDF editing platform for editing, signing, redacting, converting and automating PDFs in the browser, desktop or via API.
A Rust library and CLI that converts Word, PowerPoint, Excel, OpenDocument, RTF, EPUB, CSV and PDF files into clean GitHub-Flavored Markdown.
A self-hosted online file converter supporting over a thousand formats, built with TypeScript, Bun and Elysia.
Open-source AI coworker for your desktop that completes everyday tasks and security reviews, using your own model keys and approval-gated actions.
A desktop app for translating books and long-form writing with whole-book context, a live glossary, and evidence-based review.