PDF Forensics, right inside Outlook
Scan PDF email attachments for malware, exploits, document tampering, and AI-ingestion attacks — without downloading them or leaving your inbox. The same full forensic engine that powers the PQ PDF scanner, one click from any message.
What it is
A lightweight Office add-in that adds a Scan PDF button to the Outlook reading pane. When you open a message, it lists the PDF attachments and scans the one you pick against PQ PDF's full forensic engine — returning a clear verdict in seconds.
What it does
One scan runs the complete PQ PDF forensic stack against each attachment.
Malware & exploits
Behavioral sandbox, YARA, ClamAV, ML + SHAP, JavaScript deobfuscation, and 6.4M+ offline threat-intel indicators — catching known and zero-day payloads.
Document tampering
Signature forensics, incremental-update and shadow-attack detection, six-parser differential analysis, and XRef integrity checks.
AI-ingestion attacks
V/AP divergence, font glyph remapping, OCR text-layer poisoning, and /Alt & /ActualText prompt-injection — content that fools a parser or AI pipeline, not just a human.
Phishing & QR
Credential-harvesting forms, brand impersonation, and malicious QR codes embedded in the document.
Clear verdict
A multi-axis risk score (threat / deception / structural), top findings, MITRE ATT&CK mapping, and an AI forensic summary.
Zero retention
Only the attachment you choose is analyzed over an encrypted channel and discarded after scanning. Message bodies are never read.
How it works
Activate once per install with your license key, then scan from any message.
Open a message
Click Scan PDF in the PQ PDF group. The task pane lists every PDF attached to that email.
Scan an attachment
Hit Scan on any file (or Scan all). The PDF is streamed to the forensic engine and analyzed in seconds.
Read the verdict
See the risk level, score, key findings, and AI summary inline — with a link to the full report if you want to dig deeper.
Install & download
It's an Office web add-in — you add it from a manifest URL (no executable to download).
⚠ Custom add-ins require a Microsoft 365 work or school account. Personal
Outlook.com accounts (outlook.live.com, @outlook.com,
@hotmail.com) cannot install custom add-ins — they only support
add-ins from the Office Store. If you're on a personal account you won't see an
"Add custom add-in" option.
- Outlook on the web (work/school): sign in at
outlook.office.com→ toolbar Apps (orGet Add-ins) →My add-ins → Custom add-ins → Add a custom add-in → Add from URL, then paste the manifest URL above. (If your admin has locked down add-ins, use org-wide deployment below.) - Classic Outlook (desktop, work/school):
Home → Get Add-ins → My add-ins → Custom Addins → Add from URL, then paste the manifest URL. - Org-wide deployment (recommended): a Microsoft 365 admin opens the admin center →
Settings → Integrated apps → Upload custom apps→ Provide link to the manifest file, then assigns it to users or groups. This is the most reliable method and works even when user sideloading is disabled.
- Open any message and click Scan PDF in the PQ PDF ribbon group.
- Paste your license key (starts with
pqlic_) when prompted. The install activates and is ready to scan.
Need a license key? Contact us or talk to your PQ PDF administrator. Each license includes a set number of seats (5 by default); every install uses one seat and can be deactivated to free it.
At a glance
| Add-in type | Office.js web add-in (manifest-based) — no per-machine installer |
|---|---|
| Hosts | New Outlook (Windows & Mac), classic Outlook desktop, Outlook on the web |
| Account required | Microsoft 365 work or school account (personal Outlook.com accounts can't install custom add-ins) |
| Permission | Read the current message's attachments (ReadItem) |
| Seats per license | 5 by default (configurable) |
| File size limit | 10 MB per PDF by default (larger limits available per license) |
| Data handling | Only the chosen attachment is analyzed over TLS and not retained |
| Manifest | /outlook/manifest.xml |