Skip to main content
Confirm that you have completed the required organization and target details in the correct organization. You can skip domain verification during onboarding and finish it later in Target Inventory; the target must be verified before an assessment can start.
A target is a web application, API, or available network address that you authorize MindFort to assess.
Not always, but credentials are recommended when important areas are behind login.
Yes. Create schedules directly from the New Assessment modal. Choose one-time, daily, weekly, bi-weekly, or monthly frequency. You can review or delete schedules from the Assessments page.
Yes. Open Assessments, select the run, and cancel.
Use Reporting to generate and download reports.
Settings → Billing (admin access required). Billing is also accessible directly from the sidebar.
Open Settings → Integrations. Permission to manage integrations and an upgraded plan are required to connect integrations. Once connected, you can create linked issues from findings, request patches, or launch Agents from Slack.
Balanced is designed for frequent testing, while Deep and Ultra allow more time for investigation. Coverage and run times depend on the target, available access, and execution conditions. The assessment form shows the current credit cost and estimated duration for each method. The public API values balanced, deep, and ultra map to these dashboard labels.
Use Agents to save templates, then create schedules from those templates.
Access can depend on role, subscription plan, and payment status.
Settings → WAF Configuration.
Assessments aim to limit disruptive actions, but testing can generate traffic or affect application state. The impact varies with the target and assessment scope. For sensitive targets, use a non-production environment and configure low-impact testing guidance before running an assessment. Contact support if you need help.
Settings → Status or status.mindfort.ai.

​
Where do I upload reference documents?

Open Filesystem, select the target, and upload files to its knowledge-lake folder. Agent-generated context is available as read-only material. See Filesystem.

​
Does Covered mean a target has no vulnerabilities?

No. It means the check’s latest run completed without an active linked finding. Review the scenarios tested, incomplete checks, and current findings before drawing conclusions about the target. See Coverage.

​
Why is Security Reviewer missing?

Security Reviewer is in beta and appears only when enabled for your organization. Its GitHub integration also needs repository access. See Security Reviewer.
Last modified on October 28, 2026