Content Disarm and Reconstruction (CDR) for inbound files and email threats
SHIELDEX
No file arriving through generative AI or SaaS is trusted. SHIELDEX removes latent threats from files coming in through AI, cloud, email, and web paths using CDR (Content Disarm & Reconstruction), delivering Zero Trust file security.
The first CDR developed in Korea — extracting and rebuilding only the safe visible content
Disarm inbound files and respond to email threats. Only the safe visible content is extracted from untrusted external files and mail and then reconstructed, delivering Zero Trust security against latent threats.
CDR (Content Disarm & Reconstruction) technology rebuilds documents from safe visual content alone, neutralizing malicious behavior hidden inside the file format before it can run.
First developed in Korea in 2013, SHIELDEX has the largest number of deployments in the country, including tier-1 financial institutions. Unlike conventional approaches that rely on signature (static) or behavior (dynamic) analysis such as antivirus and sandboxes, it trusts no file and extracts and rebuilds only safe content — a Zero Trust security model that pre-empts constantly changing malware, zero-day attacks, and sandbox evasion.
SHIELDEX key features
Key features
SHIELDEX File — disarming inbound files
- Trusts no file arriving from outside, and rebuilds it as a safe file through Zero Trust-based CDR before it enters
- Applies CDR to files coming in through network interconnection, strengthening network separation security
- Configured as an all-in-one system with the in-house network interconnection module, keeping internet separation intact
- Integrates with document import approval systems so files enter only after administrator approval
SHIELDEX Mail — responding to email threats
- Applies CDR to email content, the number one distribution path for malware, removing every latent threat in the message body and attachments
- Inspects and disarms scripts, hyperlinks, and linked images inside the HTML body
- Wraps attached files in HTML and provides a separate viewer when the file is opened
- Checks URL reputation inside mail and opens links through a remote browser
The first CDR developed in Korea
- First developed in Korea in 2013, with the largest number of deployments in the country including tier-1 financial institutions
Pre-emptive response to zero-day and other threats
- Built on a Zero Trust security model rather than the static/dynamic analysis of antivirus and sandboxes, countering advanced threats such as zero-day attacks and sandbox evasion
Available both on-premises and in the cloud
- Can be deployed on-premises or chosen as a cloud-based subscription
Designed for both administrators and users
- Keeps business macros working in Excel files — a format favored in the financial sector — even after macro disarming
Disarming every type of file embedded in a document
- Disarms every type of file embedded in a document, including images and archives
- Differentiated from vendors that simply delete every embedded file
- Broadens the scope of disarming while keeping the result faithful to the original
About three times faster disarming
- 4.4 seconds to 1.7 seconds, measured in-house
- Average disarming time reduced by roughly three times
Analysis and detection of malicious macros in Excel files
- Analyzes malicious macros in Excel files before disarming
- Normal macros are disarmed and reassembled; malicious macros are deleted and the risk removed
- Avoids the inconvenience of the blanket macro removal used by other vendors
Prevention index for zero-day attacks
- Provides an intuitive figure for the risks that have been disarmed
- Makes the qualitative and quantitative effect of adoption measurable through the prevention index
Broader file format coverage for disarming
- Provides disarming for the widest range of image file formats in Korea
- Disarms more than 56 image formats in addition to bmp, png, and jpg
Detecting and removing image threats hidden by steganography
- Detects threats hidden inside images, then disarms and removes them
- Continues to broaden the range of image formats that can be disarmed
Considering SHIELDEX?
Leave your inquiry online and the right specialist will get back to you.
Frequently asked questions
We already have antivirus and a sandbox. Why do we need CDR?
Antivirus and sandboxes detect known signatures or behavior, which leaves them limited against zero-day attacks and sandbox evasion techniques. CDR does not detect — it extracts only the safe content and rebuilds the file, blocking even unknown threats before they arrive.
Does disarming break documents or change their content?
Unlike approaches that simply delete every embedded file, SHIELDEX reconstructs safe content so the result stays faithful to the original.
Solutions you may also want to see
Get started with SHIELDEX
From technical questions to adoption and quotes, the right specialist will guide you.