Skip to content

Enterprise control

PDF X-Ray

X-ray gives security, compliance, and operations teams a structured view of what is inside a PDF.

Request accessContact supportView capability
ToolboxBrowse the capability directoryWorkflowBrowse pathsAPIRoutes, scopes, and recipesProofRedaction verification

Problem

A PDF can look harmless while containing attachments, scripts, suspicious object graphs, or metadata that change its risk profile.

Use

Run a read-only inspection that groups structural, active-content, metadata, and embedded-object findings.

Evidence plan

What this unlocks

  • Forensic analysis of PDF structure
  • Inspect without modifying the source document
  • Best package access keeps the path explicit

Workflow

Explore the workflow
Simple pathForm W-9

Quick OCR and field check

Turn a scanned form into a searchable PDF and verify the obvious fields before routing it.

  1. 1Upload the W-9
  2. 2Run OCR
  3. 3Inspect detected text and form regions
  4. 4Save a searchable copy

Tool chain

OCRForms Ops StudioSet Metadata Studio
Searchable PDFField review notesClean source metadata
Explore the workflow

Inputs & outputs

Accepted formats
pdf
Produced formats
report

Common use cases

  • Investigate suspicious PDFs
  • Count embedded files, images, fonts, and links
  • Collect evidence before sanitization

Workflow steps

  1. 1Select a document or batch
  2. 2Run the read-only inspection
  3. 3Review grouped findings and export evidence

Outputs

  • X-ray findings report
  • Object and metadata inventory
  • Evidence export

Review checks

  • Review high-severity findings first
  • Route active content to sanitize or JavaScript controls
  • Retain the report before mutating the file

API

Endpoint family: /v1/forensics, /v1/preflight, /v1/reports
POST/v1/documents/uploadPOST/v1/ocr/{document_id}GET/v1/jobs/{job_id}/downloadGET/v1/forensics/{document_id}/standards-preflightPOST/v1/forensics/{document_id}GET/v1/forensics/{document_id}/evidence-bundle
  • Use forensics endpoints for read-only evidence collection.
  • X-ray pairs well with sanitize, parser diff, and trust-chain validation.
Integration overview

Limits

Availability
Enterprise control
Readiness
private preview
Automation
Single-document workflow

Confirm entitlement, input requirements, and deployment fit in the package and API documentation before you automate this capability.

Integration overview

Evidence

Browse proof

Evidence

Redaction verification

3 API

Evidence that sensitive text was removed from the generated PDF rather than covered by a visual overlay.

View proof

Public example workflows

Integration overview
Simple

Quick OCR and field check

Form W-9

Turn a scanned form into a searchable PDF and verify the obvious fields before routing it.

Proof artifacts

Searchable PDF, Field review notes

Complex

Compliance evidence pack

NIST Cybersecurity Framework 2.0

Preflight a standards PDF, inspect hidden structure, validate trust signals, route findings, and export an evidence bundle.

Proof artifacts

Preflight report, Trust verdict

Roles and use cases

Governance and compliance teams

Compliance / Audit

Validate standards, signatures, audit trails, and retention posture.

Connected tools

Standards Preflight, Trust Chain Validation, Retention + Redaction

Preflight report: Standards preflight reportVerification result: Trust-chain verdict

Security teams

Security / IT

Control self-hosted processing, active content, and data paths.

Connected tools

Sanitize, JavaScript Control, Codec Policy

Review report: X-ray reportGenerated artifact: Parser diff scan

Legal and review teams

Legal Ops

Prepare evidence-ready PDFs and review packages.

Connected tools

Compare PDFs, Signature Center, Redact & Remove

Decision history: Compare review decisionsAudit record: Provenance ledger