Keep your originals. Ship the right image.
PicSoar sits in front of images you already host. It converts them to WebP at the edge, serves the original to anything that cannot decode it, and never writes to your storage.
What "safe" means here: the delivery pipeline is read-only against your origin. There is no import step, no bulk rewrite, and no way for a transformation failure to remove an image from your site — the worst case is that a visitor receives the original file.
Three ways to use it
Web Studio
Drop images into the browser, compare before and after, and download WebP. No account needed to try it. Uploads are deleted within 24 hours.
Managed image CDN
Point a URL at your verified origin and get an optimized derivative back. Your files stay where they are; we only ever read them.
Plugins and SDKs
A typed SDK, a URL builder, and an Astro component that generates responsive markup from server-owned presets.
What actually happens on a request
- The request names your project and a preset — never a width or a quality.
- We read the client's
Acceptheader. No user-agent guessing: if the browser did not say it can decode WebP, it does not get WebP. - We fetch the source from your one verified origin. There is no URL parameter to point us elsewhere.
- The derivative is cached at the edge, keyed by preset version and output format, so a repeat request costs nothing.
- If the transformation fails, we serve your original file rather than a broken image — unless you explicitly configure otherwise.
Every one of those steps is a documented, tested behaviour. Thedelivery page spells out the failure modes, including the ones where we serve you a larger file on purpose.
Limitations worth knowing before you sign up
JPEG and PNG only, for now
Those are the formats we have tested end to end. GIF, AVIF, and WebP sources pass through untouched. SVG is never parsed — it is a scriptable document format and we treat it as one.
AVIF is not in the free plan
It is available on Pro and above, and it is off by default even there until you enable it per project. We would rather ship it deliberately than surprise you with a new derivative count.
One verified origin per environment
You prove control of the hostname with a DNS TXT record. We refuse private addresses, IP literals, and anything that resolves inside a network boundary.