Skip to content

PDF inspector

Inspect a PDF without opening it: page count, PDF version, sizes, encryption, metadata and whether it carries scripts, forms or attachments.

PDFmetadatasecurity

Upload

Files (1–1)
One PDF up to 50 MB. It is read, never run: no page is rendered and no embedded code is executed.
Questions people ask
Does it open or run my PDF?
No. It reads the document's structure (its table of objects) and nothing else. It never renders a page, never executes any JavaScript the file contains, never follows a link or action, and never launches an attachment. It is a report, not a viewer.
What do "Not present" and "Unable to determine" mean?
"Not present" means the inspection actually established that the feature is absent. "Unable to determine" means it could not look, for example because a page's data could not be decoded or its permission bits are locked behind a password. We never turn "we could not check" into "it is definitely not there".
Can it tell me if a PDF has a virus?
No, and it would be dishonest to claim otherwise. It reports the structural facts a security check might use as one input, such as whether there is JavaScript, whether there are attachments and whether the document is encrypted. It does not scan for malware and does not judge whether a feature is dangerous.
What about an encrypted PDF?
It reports that the file is encrypted. If the file opens without a password (the common "restricted but readable" case), it also reads the permission bits (printing, changing, copying, annotating). If a real password is required, the contents stay sealed and those details are reported as unable to determine; Tooley never guesses or cracks passwords.
What is XFA?
A live-cycle form format some PDFs declare, mostly in older Adobe workflows. The inspector reports whether the document says it has one; it does not render or run the form.
What happens to my file?
The PDF is removed as soon as processing finishes; your report is available for about 10 minutes, then it is automatically deleted.