Every file is treated as untrusted, taken apart, validated against its published specification, and rebuilt into a known-good, policy-compliant version. Glasswall Genesis delivers up to 2x faster processing, support for specialist file formats, granular policy control and a memory-safe architecture, built for high-assurance environments.
.png)
Every file is treated as untrusted. Anything that doesn't belong never makes it through.
Set exactly how different file types and risk levels get handled, so protection matches your organization's own risk tolerance.
Integrate once using the command line, HTTP or REST API. Deploy in the cloud, on premises or fully offline.
More than 45 formats, including geospatial intelligence, CAD drawings and DICOM medical imagery.
.png)
.png)
Attackers don't need to force their way in. They hide inside the file types your team already trusts: documents, PDFs, images, email attachments, technical drawings.
Detection tools look for indicators of malicious behavior. But a threat that's new, disguised, or deliberately built to evade detection can still look completely legitimate. A clean verdict can still leave security teams asking the same question: can we actually trust this file?
When you can't afford uncertainty, detection isn't enough.
Rather than trying to determine whether a file looks malicious, Genesis takes it apart and rebuilds it to a known-good standard before it reaches users or crosses a trust boundary.
Every structure inside the file is validated against its published specification. Only content that conforms and that your policy permits is rebuilt into the output.
The result is a new file built only from what belongs. This approach is known as Content Disarm and Reconstruction (CDR).
One self-contained binary for adding directly into your own products and workflows. Built for OEMs, CI/CD, tactical edge, cross-domain and air-gapped deployments.
Scalable deployment with policy management, dashboards, authentication, REST and ICAP interfaces, plus Microsoft 365 and cloud storage integrations.
Desktop file protection for Windows. Drag in a file, receive a safe version back. Ideal for post-breach remediation and tactical edge environments.
Define exactly how every file-security finding should be handled. Establish an organization-wide posture, then apply more precise controls by file format, content type, workflow or individual rule.
Choose whether findings are reported, revealed, replaced, removed, rejected or omitted.
Apply one consistent security posture across the organization, then refine it by file type, content type, workflow or individual rule.
Rules can be traced to published file-format specifications, NSA Inspection and Sanitization Guidance, CVEs, security advisories and Glasswall research.
More than 45 formats, covering more than 140 file extensions. From Office documents and PDFs to geospatial intelligence, engineering drawings and DICOM medical imagery, Genesis rebuilds files in their native formats using the same deterministic engine. There is no separate tool for specialist file types and no need to flatten files into PDF to process them safely.
PDF · OOXML · Legacy Office · ODF · RTF
PE · ELF · Mach-O · LNK
EML · MSG · Nested attachment processing
NITF, including MIL-STD-2500C and TRE analysis · SIDD · GPX · KML · GeoJSON · SHP · DWG · DXF · STEP AP242
H.264 · H.265 · MPEG-2 · MP4 · MP3 · WAV
JSON · CSV · SVG · HTML · CSS
JPEG · PNG · TIFF · GIF · BMP · HEIF · JPEG 2000 · WebP · WSQ · DICOM
CMYK-accurate images. Embedded fonts intact. Coordinates untouched. A rebuilt file nobody has to ask about.
Genesis is built in managed .NET and compiled as a self-contained Native AOT application. Its architecture is designed to eliminate common memory-corruption vulnerability classes, including buffer overflows and use-after-free errors.
Resource limits, processing timeouts and post-reconstruction validation provide additional safeguards when handling malformed or adversarial files.
Deploy a self-contained engine across Windows, Linux and macOS on x64 and arm64, or through a hardened non-root container.
Run Genesis in the cloud, on premises, embedded, at the edge or fully offline, with offline licensing and no requirement for signature updates.
Find and Redact identifies sensitive information across file content, metadata, comments and properties, including personally identifiable information, secrets and cloud credentials.
Strengthen conventional Data Loss Prevention by finding and redacting information hidden in metadata, non-visible structures and structurally complex file content that other controls may not inspect.
Genesis supports deployment in FIPS-enabled and SELinux-enforcing environments, with signed provenance, Software Bills of Materials, hardened non-root containers and offline licensing.
Rules can be traced to published specifications, security guidance, CVEs, security advisories and Glasswall research, supporting assurance and accreditation activities.
Deterministic security across trust boundaries. Files inspected before they cross the diode and rebuilt on the far side, with a complete record of every decision on both sides. FIPS-enabled and SELinux-enforcing deployments, offline licensing, air-gapped from first principles, with no signature updates required to stay protected.
Less exposure, no new friction. Cut file-borne risk in the paths files already travel, upload portals, email gateways, partner exchanges, without another endpoint agent or another queue for the SOC.
Files arrive clean and open normally. For a managed platform with dashboards, policy management and Microsoft 365 connectors,
One binary to embed. Ship proven file security inside your own product with no separate runtime, no native libraries and no per-platform variation. The same processing contract your customers get from Halo, in something you can put in your own installer.
A tailored walkthrough of how Glasswall rebuilds files to a known-good state, removes hidden threats, and provides the intelligence you need to understand file risk.
What's in the demo
“
Beazley's security is paramount, and this integration has significantly reinforced our cybersecurity framework.
