Visual First · Privacy First

Document Digital Forensics

Examine document history, authorship metadata, internal structure, embedded objects, and security indicators in one local workspace.

Processed in your browser
  1. 1Document
  2. 2Purpose
  3. 3Analysis
  4. 4Report
This is a preliminary technical examination. Metadata can be changed, and active-content indicators do not by themselves prove that a document is malicious.
01 · UPLOAD

Choose a document

PDF, DOCX, XLSX, PPTX, ODT, or ZIP. Maximum 50 MB.

  • The document is not uploaded.
  • Active content is never executed.
  • Results are held only for this page session.

Your document stays on this device

Analysis and report generation use browser memory and a local Web Worker. There is no document upload endpoint and no file content is stored by Toolora Labs.

FAQ

Can metadata prove who created or edited a document?

No. Metadata can be removed, copied, or modified. Treat it as one technical clue and corroborate it with source records.

Does finding a macro mean the document is malicious?

No. Macros have legitimate uses. The tool only records their presence and never executes them.

Why can some fields be unavailable?

The source application may omit metadata, encryption may hide it, or the browser parser may intentionally limit extraction for safety.