NOTHING IS UPLOADED — OPEN YOUR NETWORK TAB AND WATCH

What is hiding
inside this PDF

Annotations, embedded JavaScript, attached files and launch actions — all reported before you open it.

Drop a file here

Or choose one — it is read directly from your disk and never leaves this tab.

Choose a file

JPEG · PNG · HEIC · WEBP · PDF · DOCX · XLSX · PPTX

PDFs can contain more than pages

The format allows embedded JavaScript that runs when the document opens, complete files attached inside it, and actions that ask to launch an external program. All of these are legitimate features and all of them are used by attackers. Knowing they are present before you open the document is useful in itself.

Comments survive being collapsed

Annotations added during review stay in the file whether or not your viewer displays them. Forwarding a reviewed PDF often forwards the review with it.

Reading a file is not opening it

This page inspects the bytes of the document rather than rendering it, so nothing inside it executes. If the report shows embedded JavaScript in a PDF you were not expecting, that is a good reason not to open it at all.

Common questions

Can a PDF contain a virus?

A PDF can carry embedded JavaScript and attached files, both of which have been used to deliver malware. Inspecting the file is safer than opening it.

Does this page run the JavaScript in a PDF?

No. It reads the file as data and reports what it finds. Nothing inside the document is executed.

Are PDF comments visible to everyone?

Yes, to anyone whose viewer displays annotations, which is most of them.

What a PDF remembersA PDF stores an author field, the software that made it, timestamps, and often earlier drafts of itself.Strip metadata from a PDFBlanks the author, title, producer and timestamps in place, so the document structure stays valid.Before it leaves the firmDocument metadata has produced real disclosures in real filings.