How Safe Is OxnaPDF?
OxnaPDF opens documents from anywhere, so we test it the way an attacker would look at it. Here is what we checked, how, and what passed.
Checked With Cloudflare'S Security-Audit Method
Cloudflare publishes the method its security teams use to audit code: https://github.com/cloudflare/security-audit-skill. We ran it on every part of OxnaPDF.
| Part | When | Depth | Result |
|---|---|---|---|
| PartAI connector for ChatGPT, Claude and Gemini | When5 Nov 2026 | DepthWhole code base | ResultNo confirmed issues |
| PartHosted sign-in and accounts on Cloudflare | When5 Nov 2026 | DepthThe hosting code | ResultOne low-risk issue, fixed the same day |
Reviewed by Several AI Models, Independently
Each model worked alone and could not see the others' answers. We fixed what they found, then had the fixes checked again.
- Mistral: security and privacy review of every change in version 1.11.18.
- Grok: code structure and mistakes the redesign might have introduced.
- Qwen: ran the engine, redaction and security tests, and checked every translation.
- Claude: coordinated the work, checked every finding against the code and ran the final tests.
Tested Before Every Release
- Every release is installed and opened on macOS (Apple silicon and Intel), Windows 11 and Linux (x64 and ARM64) before it is published.
- Every download has a published SHA-256 checksum, so you can check that the file is exactly the one we built.
How the App Protects You
- PDFs cannot run code. OxnaPDF never runs JavaScript inside a PDF.
- Each part is sealed off. The app's window cannot reach your files or your system except through a short list of checked actions (Electron's context isolation and sandbox are on for every window).
- Nothing is sent without you. No document text leaves your computer until you ask an AI a question.
- Your original stays as it was. Edits are saved as a new copy.
- Redaction removes, not covers. Redacted text and images are deleted from the file, and we test that nothing under a redaction can be recovered.
- Opened web pages are fenced in. When you open a web page as a PDF, it loads in a separate session with no sign-ins, and it cannot reach other computers on your network.
What We Are Still Working On
- Signed apps. We are applying for Apple and Windows code-signing certificates. Until then, macOS asks you once to confirm that you want to open OxnaPDF.