Apache PDFBox

Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Apache PDFBox | Open-source Java library · Apache License 2.0 | Free |
As pdfbox.apache.org lists them, read 5 Oct 2026. The maker's own page has the final word.
Facts from Apache PDFBox's own pages
- Command-line tools
- The project provides Java command-line utilities, including tools for encryption and decryption, image and text export, merging, splitting, rendering, printing, and PDF inspection. · pdfbox.apache.org, 5 Oct 2026
- Dependencies
- PDFBox uses Commons Logging, with Java Util Logging available as a fallback, and its fontbox and xmpbox components provide font handling and XMP metadata support. · pdfbox.apache.org, 5 Oct 2026
- Encryption
- PDFBox uses the Java Cryptography Architecture and Bouncy Castle libraries for handling PDF encryption. · pdfbox.apache.org, 5 Oct 2026
- Founded
- 2002 · pdfbox.apache.org, 28 Sept 2026
- Integration
- PDFBox can be added to an application as a Maven dependency using groupId org.apache.pdfbox and artifactId pdfbox. · pdfbox.apache.org, 5 Oct 2026
- Java requirement
- The current PDFBox 3.0 release requires Java 8; the 2.0 release requires Java 6. · pdfbox.apache.org, 5 Oct 2026
- Maker
- Apache PDFBox is an Apache Software Foundation project; the foundation describes itself as a U.S. 501(c)(3) charitable organization. · apache.org, 5 Oct 2026
- PDF/A validation
- Its Preflight feature validates PDF files against the PDF/A-1b standard. · pdfbox.apache.org, 5 Oct 2026
- PDF operations
- PDFBox can split or merge PDFs, fill forms, print PDFs, convert pages to images, create PDFs, and digitally sign PDFs. · pdfbox.apache.org, 5 Oct 2026
- Purpose
- Apache PDFBox is an open-source Java tool for creating and manipulating PDF documents and extracting content from them. · pdfbox.apache.org, 5 Oct 2026
- Release verification
- The download page provides PGP signatures and SHA512 checksums and says downloaded files should be verified for integrity. · pdfbox.apache.org, 5 Oct 2026
- Security limitation
- The policy excludes denial-of-service conditions limited to excessive CPU, memory, recursion, or processing time, and recommends controls such as timeouts and sandboxing for applications processing untrusted documents at scale. · pdfbox.apache.org, 5 Oct 2026
- Security scope
- The security policy treats untrusted-PDF processing issues as vulnerabilities when they cause remote code execution, security-boundary escape, or unauthorized data access. · pdfbox.apache.org, 5 Oct 2026
- Support
- Users can ask usage questions on the community mailing list, while confirmed bugs and enhancement requests can be reported through the JIRA issue tracker. · pdfbox.apache.org, 5 Oct 2026
- Text extraction
- PDFBox can extract Unicode text from PDF files. · pdfbox.apache.org, 5 Oct 2026
- Validation limitation
- PDFBox does not automatically validate signatures, permissions, PDF/A, or other document properties unless an application explicitly invokes the relevant verification API. · pdfbox.apache.org, 5 Oct 2026
Where Apache PDFBox stands on Freedom251
- PDF SDKs#1 of 31