Every file,
an exhibit
to examine.

Open a suspicious PDF
without taking risks

A PDF is not a sheet of paper: it is a format with a programming language inside. A normal reader (Acrobat, Preview) runs it: it fires the JavaScript, follows the open actions and lets it contact the outside. Probatio opens it in a three-layer sandbox: the document is interpreted, not executed; the window has no network; the raw bytes are parsed outside the application. If the first layer falls, the other two remain.

• No script executed — JavaScript, OpenAction, external commands and links do not fire: the rendering engine has eval and scripting disabled.
• No connection — the window cannot reach the outside: no «phone home», nobody learns that you opened the file.
• Parsing outside the application — the PDF bytes are read by a separate helper with a memory cap, a CPU cap and a timeout: a malformed file brings down the helper, not Probatio.
• On macOS the OS enforces it — a sandbox-exec profile denies network, writes outside the work folder and spawning other processes: it is the kernel that refuses, not an in-app check.
• See what the PDF hides — hidden text and active code extracted and shown, not executed; the original is never touched.

Honesty: OS-enforced confinement is active on macOS (a sandbox-exec profile) and on Windows (a restricted-token Job object): no network, no writes outside the work folder. No sandbox makes a file harmless anyway: this is why Probatio never sanitizes silently and, when needed, offers a deep clean that rebuilds the document, discards embedded font programs and neutralizes dangerous-codec images (JBIG2/JPX).

Not just a hash:
the artefact's whole story

The Analysis module assembles a complete dossier reusing every engine in the app. It reveals what a file declares — and what it hides.

• Content Credentials C2PA — JUMBF + CBOR parser with all keys and cryptographic signature validation (COSE / X.509).
• YARA rules applied by a built-in engine, with rules from an updatable endpoint.
• Entropy, strings and executable headers PE/ELF/Mach-O, ssdeep fuzzy hash, contextual embedded signatures.