Is My File Safe?
Security checks used before processing, including extension validation, MIME checks, magic bytes, rate limits, and temporary storage.
Upload validation
Files are checked by extension, MIME type, file size, and magic bytes. Archive files and executable or script files are blocked for safety.
Temporary storage
Files are stored outside the public folder with random UUID filenames. Original filenames are sanitized and are not used as storage paths.
Abuse protection
Rate limits, suspicious upload scoring, optional Turnstile, optional ClamAV scanning, and concurrent job limits help protect the service on a VPS.
Download protection
Processed downloads use signed tokens, noindex headers, and no-store cache headers. The result screen reminds users that files are deleted after 5 minutes.