A highly optimized, natively compiled metadata auditing engine. Detect OSINT leakage, GPS tracking, and compliance violations across 10+ file formats with dynamic canary generation and stealth network rotation.
Engine Specifications
Files are not just content. They are containers for hidden data that can compromise your organization's security, privacy, and regulatory compliance.
Unsanitized GPS coordinates in images (JPG, HEIC) expose exact user locations, creating severe liability and physical safety threats.
Storing unnecessary metadata (authors, edit history, original filenames) violates the "Data Minimization" principle, risking massive regulatory fines.
ZIP archives and Office docs leak local file paths (e.g., C:\Users\Admin\), revealing internal network structures and real employee names.
MetaEyeSec deeply parses the internal structure of 10+ file formats to ensure complete sanitization, going far beyond basic image EXIF checks.
Extracts Author, Creator, Subject. Detects hidden /Annots and /JS payloads.
Parses internal core.xml to find original creators, last modified by, and historical edit timestamps.
Robust validation and metadata extraction for older Microsoft Office binary formats still widely used in enterprise.
Full EXIF/GPS extraction. Specialized parser for PNG text chunks and modern HEIC formats from mobile devices.
Extracts hidden ID3 comments (e.g., passwords), recording software, and GPS coordinates from video files.
Heuristic detection of "Path Leakage" exposing victim OS environments, usernames, and internal directory structures.
Instantly scan any file on your local disk without network transmission. Perfect for pre-upload validation.
Provide a URL. MetaEyeSec will concurrently crawl, extract all linked assets, and audit them silently for compliance.
Dynamically generate a crafted canary (PDF/DOCX) in memory, upload it, download the processed result, and verify sanitization.
Tailored for individual security researchers or compliance teams requiring strict, auditable trails.
For Developers & Red Teams
For Blue Teams, DPOs & SaaS Providers
MetaEyeSec operates as a closed-source, natively compiled binary. We engineer the network footprint to be indistinguishable from legitimate enterprise traffic, utilizing advanced evasion techniques to bypass modern security perimeters.
Dynamically mutates TLS handshakes and JA3/JA4 fingerprints at the packet level. Evades advanced WAFs and heuristic analysis by mimicking legitimate, diverse browser environments.
Enterprise executions utilize secure token validation and anti-tamper mechanisms, ensuring zero unauthorized redistribution and absolute integrity of the audit trail.
Asynchronous, non-blocking I/O architecture with entropy-based request pacing. Guarantees maximum extraction throughput while remaining entirely invisible to rate-limiting and behavioral detection systems.
MetaEyeSec is a natively compiled binary that runs entirely on your infrastructure. No file data ever leaves your environment unless you explicitly configure centralized reporting.
Supreme editions utilize a secure, centralized API-key validation system hosted on the edge. Each execution performs a pre-flight check. Invalid or revoked keys will instantly halt the tool.
MetaEyeSec's Polymorphic Request Engine is specifically designed to mimic legitimate enterprise browser traffic. All network requests can be routed through your designated proxy infrastructure.
Yes. MetaEyeSec outputs structured JSON reports and returns standard exit codes, making it fully compatible with Jenkins, GitHub Actions, and custom automation workflows.
Get a live demonstration or inquire about Enterprise licensing with centralized API validation and secure reporting.
Compliance & Standards Alignment