Overview
Entrusted is a document sanitizer tool that converts ”potentially suspicious files” into safe PDFs:
This is achieved by removing active content inside a “lightweight sandbox” (containerization)
Please note that this tool doesn’t provide absolute security guarantees
Unless you use the live CD, you MUST install either Docker or Podman prior launching the program. On Mac OS, you need more specifically Docker Desktop.
Features
Key features include the following:
Files are processed inside a “sandbox” (disabled internet connectivity)
The application is multilingual (English and French translations for now)
Password-protected files are supported (known Office document formats and PDF files)
The sanitization of huge documents is frictionless
Optionally, OCR can be applied to PDF results (selectable and searchable text)
Files can be converted in batch (sequentially)
PDF result quality is configurable (processing speed v.s. better looking output)
A Web server with a user interface is available and can act as an “online service”
The live CD provides both enhanced security and configuration convenience
Use-cases
Do you identify yourself in one of the situations below?
I suspect that my computer might have been infected few times after opening documents
I “acquire” documents from file sharing applications or the Dark Web
I often need to open email attachments from unfamiliar senders
I download files from “potentially non-trusted websites”
Supported files
The following file types can be processed with Entrusted:
PDF files (.pdf)
Text Documents (.rtf, .doc, .docx, .odt)
Presentations (.ppt, .pptx, .odp)
Spreadsheets (.xls, .xlsx, .ods)
Images (.jpg, .jpeg, .gif, .png, .tif, .tiff)
OpenDocument Drawing Document Format (.odg)
User interfaces
There are three user interfaces (Desktop and Command-Line, Web):
The graphical Desktop interface is recommended for most users
If you prefer the Web interface, please download the live CD for an out-of-the-box user experience:
You can run the live CD with tools such as QEMU, VirtualBox, Hyper-V, VmWare, Parallels, etc.
The Web interface can be accessed at the address
Replace localhost by the IP address of your virtual machine in the above-mentioned link
You might need to map or forward port 13000 depending on your virtualization solution network settings.
