FmindFrequently asked questions
A few answers before you start.
Can I see a report before signing up?
Yes. Enter your domain to see its grade and issue counts. To open the findings, use a private link sent to an email at that domain, or verify a DNS record. The sample report is also available without an account.
What does a website check look at?
The homepage, its secure connection and public domain settings, including published email policies. The report separates what was observed from what could not be checked.
I use Gmail, not an address at my domain. Can I still open my report?
Yes. On your check's page, choose “No email address at this domain? Verify another way.” Sign in with any email address, then add the record we show at the company that manages your domain; we name that company when we can and link to its guide. If someone else manages your domain, send them the two values to copy.
Will you change my website or read my emails?
No. Checks read public information; they do not sign in to your website, open your mailbox or change your settings. You choose which fixes to make and when.
I am not technical. Who can make the fixes?
Each finding explains what matters, who can act, what to change and how to verify it. Some fixes belong to your web developer, hosting provider or email administrator. Share the relevant instructions with them.
How does the AI analysis work?
After you unlock your report, tell us whether you are technical and what your role is. From an isolated sandbox, an AI agent then reads your report's evidence, explores your site's public pages (sign-in, contact and checkout pages, scripts, forms and headers) and writes an action plan, the risks that matter for your business and an email you can send to your provider. Basic analyses use Gemini 3.8 Flash and the Pro plan adds premium deep analyses by Gemini 4 Argon that explore more pages, both on Google Cloud.
Can I ask questions about my report?
Yes. The assistant on your private report answers in the language of the page, adapts to your profile and cites the checks it relies on. It cannot see your accounts or test anything new; never share passwords or codes with it.
Is the AI always right?
No. The grade and checks are deterministic, but AI-written explanations can contain mistakes. Check a change with whoever manages your website before applying it, then run a recheck to confirm the fix.
Who can see my report?
Your reports are private to the members of your organization who can access that website. The public sample contains fictional data.
What happens after the first check?
On Business and Pro, we repeat the same passive check on a schedule and email you only when something needs action: a Google listing, a certificate or domain about to expire, a protection that disappeared or a published flaw matching software seen on your homepage. You choose which emails you receive in your account, and every email has a one-click unsubscribe link.
How do I send fixes to my provider?
Copy or download the instructions from your report for anyone. On Business and Pro you can also create a private link with only the fixes you choose: your provider sees the steps for your platform and a button to check again, and you get an email when a fix is confirmed. The link works for 14 days and you can revoke it.
Can I show an insurer or a client that I take care of security?
On Business and Pro, share a dated proof summary: the checks run, the status of each, the fixes confirmed with their dates and the limits of the method. It describes observations, not a certification or a guarantee, and you can revoke the link.
My site was hacked or Google warns visitors. What now?
Act today: call whoever manages your website, change the important passwords from a clean computer, update the site, then ask Google for a review. The incident page lists the steps in order, free help and the 72-hour data breach notice.
Do I need a payment card?
No. The check, the private report and the Free plan never need a card. Payments for Business and Pro are not open yet: a few local businesses use them as free pilots, and you can join the waitlist from your private report.
What if a check cannot finish?
An incomplete check stays visible as unknown, rather than passing. Read its explanation to see what could not be verified before deciding on a fix or another check.
How do I get back to my report?
Choose Sign in, enter the email address where you received your report link and click the link we send you, or use your passkey. Your reports are under My websites. You stay signed in for 30 days on that device unless you untick “Keep me signed in”.
How do I protect my account?
Add a passkey under Account security: you then sign in with your fingerprint, your face or your phone's screen lock, and someone who gets into your mailbox still cannot open your reports. A free authenticator app such as Google Authenticator works too.
How can I ask for help?
Use the contact page for questions about the service or a report. Include the check name and the problem you are trying to solve, without passwords or customer data.