Every copy you send is different, so a leak points back to one.
Mark each copy with its own pattern, remove what should not travel, and match a leaked file back against everything you issued. All of it runs on your machine, on the file in front of you.
Synthetic sample
Drag and drop a PNG, JPEG or WebP here
It stays on your device. Nothing is uploaded — there is nowhere to upload it to.
- Watermark
- Redaction
- Signature
- Verification code
- QR
Images are free. PDFs, batches, issuer signing and more come with Pro, Team and Standalone.
The part you cannot take back
A document you have sent is a document you no longer control. If you send contracts, filings or discovery, three things go wrong from there — and none of them announce themselves.
You blacked it out. The words are still underneath.
A rectangle drawn on top of a PDF leaves the text exactly where it was: selectable, searchable, and recoverable by anyone who thinks to try. Opposing counsel can do it by copying the text out of the file you sent them. Here the pixels are gone before the file is written, and the result is tested against three separate extractors.
Someone changes one number and it still looks like your document.
Whoever receives it can check it in their own browser — free, nothing to install — and see whether it is the file you issued or something edited after it left you.
It went to twelve people. Now it is somewhere it should not be.
Every copy you send is a different file, and your registry records which went to whom. Drop the one that got out into the comparator and it is ranked against everything you issued. That is a lead rather than proof of who shared it — and a lead is what you did not have before.
Mark, hide, sign, trace. One tool, on your machine.
Plenty of products do one of these. Doing all four on your own machine, with no route that accepts a document, is the combination that does not exist elsewhere.
Most confidential documents go out with a password that gets forwarded alongside them, a CONFIDENTIAL stamp that names nobody, and an agreement that only helps once the damage is done. When a copy surfaces, there is nothing to compare it against. That is the part that was missing.
No route accepts a document.
Not “we delete it after processing” and not “we promise not to look”. There is no upload endpoint in this service and nothing server-side that could receive a file even by misconfiguration. Your document is read into a canvas in your own browser and handed straight back to you. The absence is checked on every build, not maintained by good intentions.
- Watch the network
- Open your browser's developer tools and protect a document. Your file is never among the requests — there is nowhere for it to go.
- Pull the plug
- Standalone is three HTML files. Disconnect from the internet and they keep working — watermarking, redaction, signing and verification, all offline.
- Verify without us
- A protected document carries everything needed to check it. The verifier runs on your machine, with no account and no connection to anything of ours.
- We cannot read your registry
- Hosted entries are sealed in your browser under a key we never receive. Not a promise about our staff — a property of where the key is.
Pricing
One price, whatever you issue. Ten documents this month or ten thousand — the bill is the same, and there is no meter to read.
Free
To anyone. The tool is on this page — no subscription, always free.
- Advanced watermarking pattern
- Editable watermark text for tracking and identification
- Destructive redaction keeps sensitive information private
- Identifier and QR code for verification
- Watermark PNG, JPEG and WebP — the file never leaves your browser
- Full verifier for images and PDFs, always free
- No usage limit
Pro
Individual professional. A registry of what you issued.
Paying yearly saves 16%.
- Everything in Free, plus:
- Protect and record PDFs alongside PNG, JPEG and WebP
- Hosted registry with every issuance recorded and linked
- Batch processing — many files in one pass, each with its own identifier, pattern and record
- Withdraw a document you issued — anyone checking it is told it was superseded
- The record is sealed in your browser — this server cannot read what is in it
Team
Small to mid-size teams and firms. Priced per seat, five minimum — the whole team's issuances in one registry.
5 seats minimum — from $30 a month. Paying yearly saves 16%.
- Everything in Pro, plus:
- Leak comparator — match a leaked copy against the copies you issued
- Shared team registry — every member's issuances in the same record
- Co-branded verification page
- Invisible watermark — a second mark the comparator can read when recompression has faded the visible one
- Roles, an audit trail of who issued what, and attribution per member
The watermark deters and enables tracing — it does not prevent copying. The signature proves authorship only if the recipient anchors the key. The comparator yields clues, not identifications — we never sell deterrence as a guarantee.
Standalone
The full set of tools for you to keep. No account, no server, no network — bought once, kept for ever.
- Issuer signing — sign what you issue with a key generated and kept on your own machine
- Fully offline use — self-contained HTML files
- White-label — your colors, logo and product name on all three tools
Standalone is bought once and delivered as a single downloadable package; there is no subscription and nothing to renew. Ask for a quote and we will arrange it — including by contract, if your procurement needs one.
Questions people ask
Short answers, including the parts that are less flattering.
- A copy has got out. What do I actually do?
- Drop it into the comparator. It is ranked against every copy you issued and comes back with the one it most closely resembles. That is a lead, not proof — the person a copy went to is not always the person who passed it on. Nothing here stops a document being copied; it makes a copy traceable.
- Does the person I send it to need an account, or to install anything?
- Neither. They open the checker in their own browser, drop the file in, and read the result — no sign-up, nothing to download, no charge. It works the same whether or not they have ever heard of us.
- What if they crop it, or photograph the screen?
- Cropping and re-saving usually leave enough to work with. A photograph taken at an angle often does not, because the comparison does not correct for perspective. And a page whose light and dark areas average out to mid-grey cannot be matched at all — we write our limits up rather than let you find them.
- What can I protect?
- Anything that reaches the reader as a page: contracts and agreements, ID and passport scans, price lists, manuals and guides, lab and assay reports, internal memos, board packs, drawings. The free tool on this page marks images — a photo or a scan — and the paid plans take PDFs as well. What the mark does is the same either way: every recipient gets a copy that looks identical and is not. A copy that turns up where it should not be can be traced back to the one you issued.
- Does my document get uploaded anywhere?
- No. The work happens in your browser. When you record a document, what reaches us is a set of fingerprints and a record sealed with a key we never receive — never the document. There is no address on our servers that accepts a document, and a test in our source refuses to let one be added.
- Can I try it before paying?
- The tool at the top of this page marks an image right now — no account, no card, and no cap on how many. The paid plans take PDFs as well, and add the registry that makes a copy traceable months later.
- Will the mark ruin how the document looks?
- You decide how heavy it is. Set light, it reads as a faint texture rather than a stamp across the page. Set it so light that a copy which got out could no longer be traced, and the tool tells you before you send it.
- Does the signature prove who issued the document?
- It proves the document was signed with a particular key. It proves that key is yours only once the recipient has your key code from you directly — from a website, a letterhead, an email they already trust. A key that arrives inside the document proves only that somebody signed it.
- The free tool watermarks images — what do I get with Pro?
- PDFs, for a start. Control over how the mark looks: how dense it is, how dark, its angle, and what the footer says. Covering up fields on a PDF, with what was under the black box gone rather than hidden — select the text in the finished file and there is none to select. A signature a recipient can check. And a registry, so a copy that turns up later has something to be compared against.
- How does this work for a firm, or a department?
- Everybody works from one shared registry, and each document is recorded against the person who issued it. Each member holds their own key, so nobody is sharing one. And the comparator reaches across all of it: a copy that has got out is matched against everything the team issued, not only your own.
- What happens to my documents if I stop paying?
- Documents you have already issued keep verifying, with no account and no lookup of any kind — that does not depend on your subscription. And you can export your account data, including your registry, at any time.
Mark it before you need to trace it.
The protector runs in your browser and the document never leaves it. The free tier needs no account.