BentoPDF

BentoPDF is a free, open-source PDF toolkit that runs entirely in your browser. Every operation, from merging and splitting to compression, OCR and conversion, happens on your own machine, and the files never leave it. There's no upload, no account, no file size limit and no watermark, and the project states plainly that it intends to stay free.

The reason it exists is the quiet privacy problem behind every free online PDF tool. Most of them work by uploading your document to a server, processing it there and handing back a result, which means your contract, medical record or payslip has just been copied to a machine you don't control. BentoPDF removes that step by doing the work client-side, so the privacy claim isn't a policy, it's an architecture.

Under the hood it's a web app built with TypeScript, and it leans on a set of established libraries compiled to run in the browser. PDF.js and pdf-lib handle reading and editing, a WebAssembly build of LibreOffice covers Office document conversion, and heavier jobs pull in PyMuPDF, Ghostscript and CoherentPDF, also running locally. Two engines get special billing. Hyper Compress is the project's own open-source compression engine, described as lossless, and Kura is a preflight engine that checks and converts documents against PDF/A, PDF/UA and PDF/X standards, which is the sort of capability that usually lives in expensive desktop software.

The tool list is long, over a hundred by the site's own count. Merge, split, reorder and rotate are the basics, and beyond them sit OCR for scanned documents, editing and annotation, form creation, digital signatures, encryption, watermarking, and conversion to and from Office formats and images. Because everything runs in the browser, an offline or air-gapped deployment is possible, and self-hosting is a first-class option with Docker images, static hosting on services like Netlify or GitHub Pages, custom branding and deployment under a subdirectory. Using it is as plain as it sounds. Open bentopdf.com, pick a tool, drop in a file, and download the result. The first time a heavier tool loads it fetches the library it needs, after which it runs locally. For a team deployment, the Docker image or a static build behind your own domain gives everyone the same toolkit with your branding, and the air-gapped option means it can live on a network with no internet at all once the libraries are in place.

It's for anyone who handles documents they'd rather not upload, which covers a lot of people. Individuals get a no-signup tool that just works. Legal, healthcare, finance and public-sector teams get a way to offer PDF tooling internally without a data-processing conversation. Developers and IT teams get an AGPL codebase they can run on their own infrastructure and, if they need it, a paid commercial licence for closed-source deployments.

What makes it different is the combination of scope and licence. There are other privacy-minded PDF tools, but few offer this many operations, ship preflight and standards conversion, and publish the whole thing under AGPL-3.0 with a working self-host path. The project has a large community behind it, with more than fifteen thousand stars on GitHub and an active Discord, and it's at version 2.8 with a visible changelog rather than a one-off demo. Compared with the alternatives, the trade is clear. The upload-based free tools are convenient and cost you your privacy. Desktop suites keep files local but cost real money per seat and take a licence conversation for every new person. BentoPDF is free, keeps files local, and the AGPL licence is the only thing you have to think about, and only if you're embedding it in a product of your own. For a business that just wants staff to stop uploading contracts to random websites, self-hosting it is close to a no-brainer.

The trade-offs follow from the design. Running everything in the browser means large files and heavy jobs like OCR depend on your device's memory and processor, and some of the advanced libraries load from a CDN on first use, so a fully offline setup takes a little preparation. The interface is a general toolkit rather than a polished single-purpose editor, and the AGPL licence is something to read before embedding it in a proprietary product. Browser support matters too, since the WebAssembly pieces need a modern browser. Access is open source. The hosted version at bentopdf.com is free with no limits, the code is on GitHub under AGPL-3.0, and a one-time $79 commercial licence covers organisations that want to deploy it without the copyleft obligations. Documentation, an FAQ, GitHub issues and Discord are the support channels.