Protect your PDFs.
Control who reads them.
MoatGoat DRM encrypts your documents with AES-256 and issues time-limited, device-bound licenses. No Adobe plugin required — your own viewer, your own rules.
Everything you need to lock down your documents
Deploy on your own server and keep full control. Your documents never leave your infrastructure.
End-to-end encryption
Each document gets a unique AES-256 key, re-encrypted per session with an RSA ephemeral key. Captured tokens are useless without the viewer's private key.
Access policies
Set print limits, copy restrictions, watermarks, offline validity, device limits and hard expiry dates. Override per user or group.
Native viewer — all platforms
Desktop viewer for Windows, macOS and Linux. Mobile apps for iOS and Android coming soon. No Adobe dependency. Offline mode with time-limited tokens.
Multi-tenant
Serve multiple companies from a single server. Each tenant has isolated documents, users, policies and RSA key pairs.
API key validation
Your on-premises MoatGoat server validates its API key against moatgoatdrm.com on every startup. Revoke access instantly from your dashboard.
Audit trail
Every open, print, and device registration is logged with IP, user agent and metadata. Know exactly who accessed what and when.
How it works
Register & subscribe
Create your account, choose a plan and get your API key instantly.
Deploy your DRM server
Run MoatGoat.Server on your own infrastructure. Point it to your API key for license validation.
Encrypt your PDFs
Use the MoatGoat Publisher CLI to encrypt documents and assign access policies and user grants.
Distribute & control
Recipients open protected PDFs with the MoatGoat Viewer. Access is verified in real time. Revoke any time.
Ready to protect your documents?
Start your free trial today. No credit card required for the first 14 days.