SECURITY · CURRENT CONTROLS

Security at PdfnMore

See the security controls PdfnMore currently uses for PDF processing and the account protections that remain behind the public interface.

Current production statement · Updated September 2026

Protection around current PDF processing

Production web traffic is served over HTTPS. Public processing endpoints enforce file-size, file-count and processing limits so malformed or oversized requests fail clearly rather than consuming resources without bounds.

Tool downloads use no-store response instructions where applicable. Several processor-backed workflows use request-scoped temporary working directories that are removed when processing finishes.

Account security foundations are not public login

The backend contains non-public foundations for memory-hard password hashing, opaque hashed session tokens, session revocation, email verification and password-reset boundaries. Public sign-in is not enabled yet.

We do not claim security certifications, completed third-party audits, encryption-at-rest guarantees or compliance badges that have not been independently implemented and verified.

Responsible security reporting

Do not test by accessing another person’s data, bypassing authorization or disrupting production. The Contact page shows the current status of the public reporting channel.

If a security contact method is not yet verified, PdfnMore will not advertise an inbox as operational merely to make the site look complete.

Frequently asked questions

Is traffic to PdfnMore encrypted?

The production website is served over HTTPS, which protects data in transit between the browser and the public service.

Does PdfnMore claim encryption at rest for uploaded files?

No blanket encryption-at-rest claim is made for current processing because that statement should only be published after the complete storage path is verified.

Can I sign in and revoke sessions today?

No public sign-in exists yet. Session revocation foundations are present behind the interface for the future authenticated account system.