PDF Security Risk Scanner
Inspect common active-content and embedded-file signals before opening or sharing a PDF.
Review active PDF features before you trust the file
Many forms and attachments are legitimate. The goal is to make hidden document capabilities visible so you can decide what needs further review.
Active-content signals
Look for JavaScript names, script actions, document OpenAction entries and additional automatic actions.
Embedded content
Count file attachments and form fields that may carry data or trigger reader-specific behavior.
Risk without execution
Inspect the structure locally with script evaluation disabled, without executing PDF JavaScript or opening attachments.
How the PDF security check works
Setpdf loads the document with PDF.js script evaluation disabled, queries document JavaScript actions, attachments and form objects, and scans structural tokens for OpenAction, additional actions, embedded files and encryption. The PDF remains on your device.
Security-scanning limitations
A clean result is not a guarantee of safety. This browser tool does not emulate a PDF reader, detonate attachments, scan with antivirus signatures or prove that malformed objects cannot exploit a specific application. Suspicious or unexpected files should still be handled in an isolated environment.
Tools for reducing PDF risk
Depending on the detected signal, unlock the file, flatten active content or permanently remove sensitive information before redistribution.
PDF security questions
Can a PDF contain JavaScript?
Yes. PDF JavaScript is commonly used for form calculations and validation, but it can also request actions in readers that support scripting.
Does an embedded file mean the PDF is malicious?
No. Attachments are used for portfolios, invoices and archival packages. An unexpected attachment is a reason to inspect it separately, not automatic proof of malware.
Can this scanner guarantee that a PDF is safe?
No browser-based structural check can guarantee safety. This tool exposes common risk indicators and should complement updated PDF software, antivirus scanning and isolated analysis for suspicious files.