In my web application we are accepting use uploaded documents (mostly PDF). The web application is backed by a Kubernetes/Docker based API platform.

We are doing the file extension check but that may not be enough. I would like to introduce a that would be a Document Scanner as a Service. It would be helpful if it had following characteristics:

1. Document scanner to check if it is an executable and can harm Linux envionments.

2. Scanner to check if the document has any malicious code that could be executed on user machines if they download the document later.

3. Anything that I may have missed.

It would help if it's an API that could be integrated in a Microservices ecosystem.