Every file rebuilt to a known-good standard, in under a second

Glasswall treats every file as untrusted, then validates it against the file-type specification and rebuilds it to a safe, standards-conformant copy. Unlike antivirus, sandboxing and EDR, it does not wait to detect a known threat. Glasswall reports 100% of malicious files neutralised across 8.27 million tested. The same patented four-step CDR engine runs on the model your trust boundary requires: Genesis, Halo or Meteor, with Foresight scoring risk alongside. Glasswall builds the engine; Safeware delivers and supports it across APAC.

Deterministic Content Disarm and Reconstruction, every file rebuilt to a known-good standard, no detection required.

Decision Framework

Match the deployment model to your trust boundary

Cloud and hybrid

High-volume file flows → Halo

Files move through portals, email, web gateways and Microsoft 365 at scale, integrated over API and ICAP.

Local and isolated

On the desktop, or air-gapped → Meteor

Files are cleaned on the endpoint or inside a disconnected, classified or in-country network. No internet dependency, no telemetry egress.

Product integration

CDR inside your own product → Genesis

The CDR engine runs inside your application, platform or processing pipeline, integrated by command line, HTTP or REST API.

Glasswall Genesis

One self-contained binary for application-level integration, embedding CDR directly into your own products, pipelines and workflows. Integrate once by command line, HTTP or REST API, and run it as a binary or in a container on Windows, Linux or macOS. Up to 2x faster processing on a memory-safe architecture, with coverage for specialist formats including geospatial, CAD and DICOM. Built for OEMs, CI/CD, tactical edge, cross-domain and air-gapped deployments.
Glasswall Halo

Cloud CDR at portal, email and web-gateway scale on Kubernetes. Integrates over API, ICAP and Storage Monitor for Microsoft 365, with ReversingLabs multiscanning and real-time threat intelligence alongside the rebuild.
Glasswall Meteor

Automated file cleaning on the desktop and across local and cloud storage. Runs online, offline or fully air-gapped, so files can be cleaned inside controlled, disconnected, classified or in-country networks without leaving the boundary.

Deployment Comparison

Genesis, Halo and Meteor side by side

Capability	Genesis	Halo	Meteor
Deployment model	Self-contained binary or container	Cloud / hybrid (K8s)	Desktop / on-premises / air-gapped
Best for	CDR inside your own application or pipeline	Portal, email and gateway file flows at scale	Desktop, local and air-gapped file cleaning
Integration	Command line, HTTP or REST API	API, ICAP, Storage Monitor for M365	Desktop agent, folder sync, batch, inline
Connectivity	Windows, Linux or macOS; cloud, on-premises or fully offline	Online (cloud / hybrid)	Online, offline or air-gapped
Key differentiator	Specialist formats and up to 2x faster processing, memory-safe	Inline CDR plus ReversingLabs multiscanning at gateway and M365 scale	No data leaves the boundary, no telemetry egress, no cloud callback
Safeware role (APAC)	SDK advisory and integration QA	Architecture, integration and production support	Deployment hardening and governance

Alongside the rebuild

Foresight risk-scores files before they are opened

Foresight is a capability rather than a deployment model, so it runs with any of the three above rather than instead of them.

Glasswall Foresight

AI-powered threat prediction. Machine-learning models trained on the deep file structural telemetry from CDR score whether a file is malicious, identifying unknown and zero-day threats before a file is opened, for triage and SOC automation. Glasswall reports a 0.015% false-positive rate for PDFs. Best for file-risk scoring and SOC triage, it ships as a CLI, Docker image or library with Python and C++ bindings, runs offline and air-gapped, and Safeware provides deployment and operational support for it in APAC.

Shared Capabilities

What every deployment includes

Zero Trust by default: every file is treated as untrusted, then validated and rebuilt to a safe, compliant standard, unlike antivirus, sandboxing and EDR, which wait to detect a known threat
Patented four-step CDR, Inspect, Remediate, Rebuild, Deliver, that rebuilds each file against its file-type specification to a known-good copy in under a second
No signatures and no threat feeds in the CDR path, so it works the same offline and air-gapped as it does online
140+ file extensions, including Office, PDF, images and archives
Policy-driven processing with configurable rules; active content such as macros, scripts and embedded objects is removed by default unless policy permits it
Rebuilding to a known-good template strips out the spare space that steganography and hidden data exploit, rather than trying to detect them after the fact
JSON and XML analysis output for audit trails and SOC automation
Delivered and supported by Safeware across APAC: local-timezone support, in-region deployment engineers, architecture, integration and localisation

Deeper product documentation

API references, specifications and release notes are published by Glasswall. For scoping, integration and an APAC proof of concept, Safeware is your point of contact.

glasswall.com →

Product documentation →

Book a Demo

Plan your Glasswall deployment with Safeware.

Share your operating context and file workflows. We'll map an implementation path for cloud, on-premises, and isolated environments with clear delivery milestones.

Book a Demo Talk to an Architect

Every file rebuilt to a known-good standard, in under a second

Match the deployment model to your trust boundary

High-volume file flows → Halo

On the desktop, or air-gapped → Meteor

CDR inside your own product → Genesis

Glasswall Genesis

Glasswall Halo

Glasswall Meteor

Genesis, Halo and Meteor side by side

Foresight risk-scores files before they are opened

Glasswall Foresight

What every deployment includes

Deeper product documentation

Plan your Glasswall deployment with Safeware.