Look inside a PDF before you open it

See what a PDF contains beyond its pages: scripts and auto-run actions, attached files, fonts, images, metadata, version and security settings.

Diagnostic · runs in this tab · free
PDF inspectorRead in this tab, never run
Drop a PDF anywhere on this pageThe instant X-ray reads the raw bytes; the full inspector then parses every object in a Web Worker. Nothing is uploaded or executed.
What you’ll see
  • JavaScript and actions that run on open
  • Attached files, fonts (embedded or not), images
  • Version, encryption, incremental saves, metadata
Requests since you added a file: 0Counted by this page · check it without trusting us

What to look for

PDFs can carry JavaScript and actions that run when the file opens (an “OpenAction”), and can contain other files as attachments. Most are harmless (form calculations, a cover letter attached to a filing), but a PDF from an unknown sender that runs scripts on open or carries an executable attachment deserves suspicion.

This inspector reads the file structure with pdf-lib; it never executes the scripts it finds. It also lists fonts (and whether they are embedded), every image with its size, the PDF version, encryption, and whether the file was saved incrementally (edits appended to the end, which can leave earlier versions of content inside).

Steps

  1. Drop the PDF (it is read, never run).
  2. Check scripts, actions and attachments first.
  3. Browse fonts, images and metadata.
  4. Follow the fix links where something needs removing.

Limits, stated plainly

  • This is a structural inspection, not an antivirus scan.

Engine: pdf-lib in a Web Worker (structure only; nothing is executed). Your file is not uploaded; check it yourself.