Image Forensics
Inspect metadata and run tamper-detection analysis passes without sending the image anywhere.
Drop an image here
or click to browse from your device
Choose imageDisplay controls
Tune the preview
These controls stay ready before upload and apply to the analysis canvas as soon as an image is loaded.
Hover over the analysis output to inspect pixels up close.
Idle.
JPEG Ghost
Re-compress at a chosen quality and reveal regions that respond differently.
Bright, warm contours indicate stronger differences after re-compression. Treat them as clues, not proof.
Frequency Spectrum
View the image’s spatial frequency energy to spot repeating patterns and resampling artifacts.
The center represents broad, low-frequency structure; outer areas represent fine detail and texture.
Block-grid analysis is coming soon.
Understanding Image Forensics
What is ELA?
Error Level Analysis re-compresses a JPEG at a known quality level and highlights the difference against the original. Regions that were edited after the last save tend to compress differently than the rest of the image, showing up as brighter patches in the ELA output.
Metadata & GPS
Most cameras and phones embed EXIF metadata directly in a photo: camera make and model, capture settings, and sometimes precise GPS coordinates. This tool extracts and displays that metadata, including any embedded thumbnail or XMP data, so you can see exactly what a file reveals about its origin.
Clone Detection
Copy-move forgeries duplicate a region of a photo elsewhere in the same frame, for example to hide an object or extend a background. Clone detection scans overlapping blocks of the image for near-identical matches at a different offset, flagging clusters that suggest a duplicated region.
100% Private, In-Browser
Every analysis pass runs locally on your device using the Canvas API. Your photo is never uploaded to a server, so sensitive images stay on your machine from start to finish.
Indicators, Not Proof
Every technique on this page — ELA, noise analysis, PCA projections, clone detection, and the rest — surfaces statistical anomalies that are consistent with editing. None of them can, on their own, prove that an image has been tampered with. Re-saving a photo, resizing it, converting formats, or normal in-camera processing can all produce similar-looking artifacts even when nothing was maliciously altered. Conversely, a careful edit made with tools aware of these techniques can sometimes leave few visible traces. Treat every result here as a lead to investigate further — cross-reference multiple passes, examine the metadata, and where the stakes are high (legal, journalistic, or safety-critical contexts) corroborate findings with a trained forensic examiner rather than relying on any single automated signal.
Key Takeaways
- Analysis passes: Metadata, string extraction, magnifier, level sweep, luminance gradient, ELA, noise, PCA, clone detection, JPEG Ghost, and frequency-domain analysis are available now; block-grid analysis is still in development.
- Results are indicators, not verdicts: anomalies flagged by any single pass warrant further scrutiny, not an automatic conclusion of tampering.
- Nothing leaves your device: every pixel operation runs client-side in your browser; your photo is never uploaded anywhere.