Malware scanning
Scan files using maintained antivirus signatures.
Untrusted files stayoutside your appuntil they’re clean.
Safeput receives uploads into private temporary storage, verifies the actual file contents, scans for malware, and makes only clean files available for retrieval.
- Private storage
- Type verification
- Malware scan
Untrusted uploadFile enters Safeput
Private temporary storageIsolated and inaccessible
Size · Type · Malware · File rulesFail-closed inspection
CleanFile passed all checks
RejectedFile failed inspection
Available for retrievalReady for your application
DeletedPermanently removed
Private by default. Fail closed before retrieval.
What Safeput verifies
Six inspection layers for untrusted files.
Every upload is inspected against the file itself—not just what the client claims it is.
File-type verification
Determine format from the file’s contents and compare it with its extension and declared MIME type.
Upload limits
Compare declared and received byte counts and enforce the project limit.
Encrypted content
Reject encrypted archives, PDFs, and Office documents that cannot be inspected safely.
Macro detection
Detect macros in supported Office formats and apply the project’s upload rules.
Archive safety
Limit archive depth, entry count, expanded size, compression ratios, and unsafe paths.
- Fail-closed
- Private temporary storage
- Project-level rules
How Safeput protects files
Files stay isolated from upload to retrieval.
Safeput keeps untrusted files private through upload, inspection, and retrieval.
Upload
Files go directly into private temporary storage. They do not need to pass through your application server.
- Private object storage
- Short-lived signed uploads
- Existing objects cannot be overwritten
Inspect
Safeput gives the scanner temporary access to one specific object and validates it before and during inspection.
- Isolated scanner environment
- Object identity and size verified
- Unknown results fail closed
Retrieve
Only files with a clean verdict become temporarily available to your application.
- Short-lived retrieval URLs
- Rejected and failed files unavailable
- Temporary files expire automatically
Project-scoped API keysRevocable credentialsTest/live separationNo cross-project file access
Infrastructure & data protection
Built on private infrastructure by default.
Encrypted transport
API, upload, and retrieval traffic use HTTPS.
Private storage
Uploaded objects are not publicly accessible.
Isolated processing
Inspection runs separately from the public application layer.
Restricted access
Administrative and service access is limited to what is operationally required.
Security is a shared responsibility.
Malware scanning and file validation substantially reduce the risk of accepting untrusted files, but no scanner can guarantee that a file is harmless. Applications should continue to process uploaded content defensively.
Ready when you are
Stop rebuildingupload security.
Secure the files entering your application without operating the scanning infrastructure yourself.
Virus scan
Type validation
Size limits
Upload rules
Webhooks
Clean file ready
