This runs the same detection engine as the live product — CTI/threat-intelligence matching, redirect-chain resolution, domain age, device-code detection — against files you upload, entirely in your browser session. Nothing is stored, and nothing you upload here affects any live client's protection.