Initializing secure environment…
Initializing secure environment…
See what a PDF reveals about you before you send it. The scanner reports document metadata, GPS coordinates if present, tracked changes, comments, annotations, form field values, embedded files, attached layers, invisible text and JavaScript — then strips what you select. Most people have never seen the author name, the editing software and the creation timestamp their own PDF has been carrying since the first draft. Everything runs locally, and nothing is uploaded.
To scan a PDF for hidden data free, add the file and it reports metadata, tracked changes, comments, annotations, embedded files, invisible text and scripts. Choose what to strip and download the clean version. Nothing is uploaded.
Author, creator, producer, and the exact timestamps tell you the application used, the organisation, the person, and the moment. A Word document exported on a work laptop carries a producer string with a company name in it. Two minutes with the scanner tells you exactly what you are about to hand over.
Accepting all changes makes the document look final and leaves the entire edit history in the file, including the deleted text and who deleted it. This is a genuinely nasty case in contract review: the visible document says one thing and the file contains the negotiation. Stripping the revision data is the only fix.
Text set to white, or a point in size, on a visible page is invisible in a reader and perfectly readable to a text extractor or a search engine. It has been used to add contract clauses and to stuff résumés with keywords. The scanner flags it because it is a real technique, not a hypothetical.
Scan, strip the metadata and any tracked changes, redact the identifiers with Auto Redact PII, then re-scan the output. Four tools and one tab, and the document now says only what you intended it to say. This is the same routine that makes the difference between sharing a draft and leaking a draft.
More than people expect. Author, title, subject, keywords, the software that created it, the software that last modified it, and exact creation and modification timestamps. Then comments, form field values, tracked insertions and deletions with their authors, annotations, invisible text under a visible layer, embedded files, and sometimes GPS coordinates from a phone or a scanner.
Yes, and it is the kind of risk that only matters until it does. An author name identifies a person. A timestamp locates them in time. A software string identifies the organisation they work for. Combined with a filename, that is a surprisingly complete profile of who produced a document you thought was anonymous.
Tracked changes record every edit made while revision tracking was on, with the author and the time. A document shared with them accepted still carries the full edit history underneath. Accepting all changes does not remove it — stripping it does, and that is what this tool does.
Yes. Each metadata field is a separate control, so you can set a professional title and clear the author, or keep the keywords and drop the creator. Taking everything at once is also fine, and is the right default when the document is going outside your organisation.
Sometimes, meaningfully. An embedded font set or an unused resource can dwarf the metadata itself, and those go when the document is rewritten. Often the change is small, and that is fine — the point is what is no longer readable, not how many bytes were saved.
There is a choice. Strip comment text while keeping the mark visible, or remove the annotation entirely. Most people sending a document want the first for proofreading and the second for anything final.
Yes, and this is a real pattern rather than a hypothetical. White text on a white background, or a font size of one, is used to smuggle content past a reader — into a contract to add a clause, into a résumé to add a keyword. The scanner flags text that renders with no visible result.
Yes. Free, no account, no watermark, and no upload. A tool that reports what a document reveals is the last thing that should be sending the document somewhere.
More security & privacy — all free, no upload.