BleachPDF vs Excise

BleachPDF is a free desktop utility for Linux and macOS that redacts sensitive information from PDF files, including scanned pages. It converts each page into an image, applies OCR to locate text you specify, covers matches with black boxes, and writes a new PDF. The resulting file contains images only, so it has no hidden text layer that could reveal redacted wording through copying and pasting. Matching can use exact text or more complex patterns, including case-insensitive rules and digit patterns. Its command line accepts a folder or file pattern for batch processing. After redaction, BleachPDF rescans the output; if matching text is still exposed, verification fails and processing stops. It runs locally without uploading documents. Installation uses pip and requires Tesseract, with OCR language selection such as eng or eng+kor. Handwriting, unusual fonts, poor scans, and tiny dense text can cause recognition errors, so manual checking is advised.

Excise is a free, open-source PDF editor for Windows, macOS, and Linux. Its central feature is permanent redaction: it removes text, images, and vector graphics from PDF content rather than placing a visible cover over them. By default, the cleanup also removes metadata, attachments, JavaScript, thumbnails, and hidden layers, and reports those removals. The app handles search, text selection and copying, annotations, page organization, Bates numbering, file-size reduction, and AcroForm filling, flattening, and creation. Its command-line tools support batch work and stable JSON output; `unredact` checks for leaked redacted text, while `audit` looks for text beneath opaque overlays. Excise reads and writes AES-128 and AES-256 encryption and inspects digital signatures against the operating system trust store. Signature inspection does not check revocation or evaluate timestamp and long-term validation material. Dynamic XFA layouts are experimental and cannot be filled. Downloads include packages for Apple Silicon macOS, Windows 10/11 x64, Ubuntu/Debian, and x64 or ARM64 Linux; builds are unsigned, not notarized, and lack auto-update.