Skip to the main content.

Scope

What CDR does and does not do

Where CDR fits next to antivirus, EDR and sandboxing, and what it is not designed to do.

A car seat with a seatbelt and an airbag, two separate layers of protection

What it does

What klearis does

IDENTIFY Confirms the true file type From the binary structure, not the extension.
DISARM Removes active content Macros, scripts and embedded objects that do not belong in a document.
REBUILD Builds a new, clean file Visually and functionally identical to the original.
PRESERVE Keeps what you trust Whitelisted macros and URLs are preserved.

What it does not do

CDR complements your security stack.It does not replace it.

CDR makes the files that move through your organization clean. Antivirus, EDR and sandboxing do different jobs, and they still matter.

ANTIVIRUS Still finds known malware Antivirus identifies known threats. CDR removes active content whether a threat is known or not. Use both.
EDR Still watches the endpoint EDR monitors devices for suspicious activity. CDR makes sure the files reaching those devices are clean.
SANDBOX Still serves analysis A sandbox observes how a file behaves. CDR delivers a clean file without waiting for a verdict.

Layered defense

Use each control for what it does best.

ANTIVIRUS Finds known malware quickly.
SANDBOX Shows how a suspicious file behaves.
EDR Watches devices for suspicious activity.
CDR Makes sure the file that arrives is clean.

FAQ

Questions about What CDR does and does not do

CDR does not rely on detection. klearis can also run antivirus and YARA rules alongside the rebuild when you want a verdict.

Next step

Let's run it on your files.

Process real files, see what gets removed, and verify that document fidelity is preserved.