PQ PDF

What it does

Upload any PDF, get a full forensic report in seconds. PQ PDF runs 44 engines: behavioral sandbox (six PDF renderers), YARA, ClamAV, ML anomaly detection, JavaScript AST deobfuscation, XFA analysis, CVE exploit pattern matching, PDF signature forgery detection, and offline threat intel across 6.4M+ indicators. Results include MITRE ATT&CK mapping and an AI forensic report. No account needed. Files deleted immediately.

Free PDF forensics scanner — 47 engines, multi-axis verdict: malware/exploit (behavioral sandbox, YARA, ClamAV, ML+SHAP), document-integrity tampering, and content-integrity / AI-ingestion attacks (V/AP divergence, glyph remapping, OCR poisoning, /Alt & /ActualText injection). Offline threat intel, MITRE ATT&CK, AI forensic report. No data retained.

Forensic analysis of PDF files across 47 independent engines — covering categories of semantic, integrity, and parser-level analysis that most PDF scanners and malware tools don't attempt. Including: PDF name token obfuscation decoder (hex-escaped /J#61vaScript bypass), XFA FormCalc parser, PDF action dependency graph, OCG layer cloaking, Unicode/invisible text (RLO U+202E, rendering mode 3/7), trailer chain forensics (Shadow Attack), codec exploit parameters (JBIG2Globals CVE-2009-0658), physical entropy topology, image steganography (LSB chi-square), PDF/A compliance fraud, JS behavioral emulation (Acrobat API stub), font CharString emulator, XRef integrity graph, accessibility tree…from pqpdf.com

• 
  0xAuditFeb 2026 · 0-x-audit.com · ▲110

  The security layer for AI agents to scan, fix verify via MCP

• 
  PwnScan2025 · pwnscan.com · ▲8

  For at least a few years (since before COVID), in my circle everbody wants an AI tool that finds vulnerabilities in binaries. I have my reservations about such a tool because of my perception that AI is overhyped, so I decided to build one myself to see how useful it could be (or not). I was actually kinda surprised how well it worked for my collection of binaries with known CVEs. It definitely has false positives and negatives, as any static analysis tool would, but I think its actually somewhat usable. I dont think the results are super actionable, but interesting nonetheless. I still…

• 
  ASL V6Jul 2026 · github.com · ▲3

  Open-source AI vulnerability assessment and red-teaming engine using AST analysis and Docker runtime verification. - sivaadityacoder/asl-v6

• 
  Mythos 0X ForgeMay 2026 · mythos0x.com · ▲1

  Forensic AI image auth, court-format PDF reports

• 
  GitHubJun 2026 · github.com · ▲2

  Local PDF security toolkit fix, protect, forensics & ollama

• 
  nukon-pi-detectApr 2026 · github.com · ▲4

  Tiny, offline prompt-injection scanner for CI pipelines

• 
  /dev/null▲486

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Brew ▲900

  Like Claude design for email marketing

  AI · May 2026 · brew.new

• 
  Kilo Code for VS Code▲896

  Parallel agents, diff reviewer, and multi-model comparisons

  Dev tools · May 2026 · kilo.ai

• 
  StoreClaw▲806

  Grow your store profits with agents that know how to sell

  AI · May 2026 · storeclaw.ai

• 
  PollyReach▲795

  Give your agent a real number and voice to make calls.

  AI · May 2026 · pollyreach.ai

• 
  Needle: We Distilled Gemini Tool Calling into a 26M Model▲776

  Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…

  Life & fun · May 2026 · github.com

• 
  Files.md – Open-source alternative to Obsidian▲730

  🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md

  Dev tools · May 2026 · github.com