Drop a PDF and it identifies every element that could be dangerous — embedded JavaScript and auto-run actions, launch/remote/submit actions, attached files, decompression bombs, forms, rich media, external references, structural evasion tricks, and prompt-injection / hidden-Unicode text. Everything runs locally in your browser; the file is never uploaded and the page makes no network requests.
Drop a PDF here, or click to choose
parsed entirely in this tab · nothing leaves your machine