BleachPDF vs LocalRedact

BleachPDF is a free desktop utility for Linux and macOS that redacts sensitive information from PDF files, including scanned pages. It converts each page into an image, applies OCR to locate text you specify, covers matches with black boxes, and writes a new PDF. The resulting file contains images only, so it has no hidden text layer that could reveal redacted wording through copying and pasting. Matching can use exact text or more complex patterns, including case-insensitive rules and digit patterns. Its command line accepts a folder or file pattern for batch processing. After redaction, BleachPDF rescans the output; if matching text is still exposed, verification fails and processing stops. It runs locally without uploading documents. Installation uses pip and requires Tesseract, with OCR language selection such as eng or eng+kor. Handwriting, unusual fonts, poor scans, and tiny dense text can cause recognition errors, so manual checking is advised.

LocalRedact is a free, open-source PDF redaction tool that follows plain-English instructions using deterministic rules. It removes text beneath redacted areas and blanks image pixels where those areas overlap. Detection can target personal, financial, government, health, and credential data, as well as quoted values and selected page or layout instructions. Processing happens locally: the project says it uses no LLM, cloud API, telemetry, or model download, and reads text and coordinates with PyMuPDF. By default, it removes common PDF extras such as metadata, embedded files, JavaScript, links, and saved form state. After saving, it reopens the document and checks whether detected values remain extractable. Interfaces include a Python API, two command-line tools, and an optional HTTP service. Scanned PDFs can use locally installed Tesseract; image-only pages fail closed without OCR by default. The package requires Python 3.10 or later and is available for Windows, macOS, and Linux. The project calls the software alpha and warns that detection is best effort, not a compliance certification. It recommends visually reviewing high-stakes output.