I built an image CDR API after discovering why metadata stripping isn't enough

Hey all,

I'm sharing Zero Trust API — the world's first Content Disarm & Reconstruction

API for images.

The problem I solved:

Most apps that accept user-uploaded images just strip EXIF metadata and call it

"sanitized." But sophisticated attacks survive:

- Steganographic payloads (data hidden in pixel values)

- Polyglot files (valid as both image AND executable)

- Image bombs (1x50000 pixel files that crash processors)

My approach:

Instead of trying to detect threats, I destroy the original file entirely and

rebuild a clean PNG from raw pixels. If it's not visible pixel data, it doesn't

survive.

Stack: Rust core → WebAssembly sandbox → Cloudflare Workers edge deployment

Would love feedback on the messaging — is "Content Disarm & Reconstruction"

clear or too jargon-y?