Look inside a PDF — its metadata, embedded JavaScript, attachments, hidden or painted-over content, and how many times it was saved. Read in your browser with pdf.js; the file is never uploaded.
Drop a PDF here
PDF
Summary
These are structural signals, not proof of hidden secrets. Every finding shows its evidence so you can judge.
Redaction-risk text
High-confidence
Selectable text that sits under an opaque rectangle, or a full text layer behind a near-full-page image. If it was meant to be hidden, it is still in the file.
Active content & attachments
High-confidence
Structural security signals: embedded JavaScript, open actions, attached files, forms and signatures. Active content is worth inspecting before you trust a file.
Embedded images
Advisory
Every raster image the PDF draws, with an approximate visibility label. Some may not be visible on the rendered page.
Metadata & provenance
Advisory
What the file carries about who made it, when, and with which software — plus any XMP metadata block.
Previous revisions
High-confidence
How many times the file was saved. PDFs append earlier saves inside the file, so older content can remain embedded.
Links, forms, outline & layers
Advisory
Outbound URLs, form fields, the document outline, and optional-content layers — other surfaces where data can live.