Scope
What CDR does and does not do
Where CDR fits next to antivirus, EDR and sandboxing, and what it is not designed to do.
What it does
What klearis does
IDENTIFY Confirms the true file type From the binary structure, not the extension.
DISARM Removes active content Macros, scripts and embedded objects that do not belong in a document.
REBUILD Builds a new, clean file Visually and functionally identical to the original.
PRESERVE Keeps what you trust Whitelisted macros and URLs are preserved.
What it does not do
CDR complements your security stack.It does not replace it.
CDR makes the files that move through your organization clean. Antivirus, EDR and sandboxing do different jobs, and they still matter.
Layered defense
Use each control for what it does best.
ANTIVIRUS Finds known malware quickly.
SANDBOX Shows how a suspicious file behaves.
EDR Watches devices for suspicious activity.
CDR Makes sure the file that arrives is clean.
FAQ
Questions about What CDR does and does not do
CDR does not rely on detection. klearis can also run antivirus and YARA rules alongside the rebuild when you want a verdict.
Active links inside files can be removed as part of the rebuild, and trusted URLs can be whitelisted through policy management.
Next step
Let's run it on your files.
Process real files, see what gets removed, and verify that document fidelity is preserved.