filetype: is a search operator that limits results to a specific file format, such as PDF, DOCX, XLSX, or TXT. Security researchers use it to locate public documents, backups, reports, or configuration files that have been indexed by search engines. In cyber security, that matters because exposed files can reveal internal names, server paths, usernames, email addresses, or sensitive business data without any direct intrusion.
Attackers use filetype: during reconnaissance to quickly map an organization’s public footprint and find documents that were left accessible by mistake. Defenders use the same operator to audit their own exposure, discover forgotten staging files or shared documents, and verify that sensitive formats are no longer reachable by crawlers. The operator does not break into systems; it simply helps surface content that is already publicly searchable.