Support & FAQ
Everything you need to know about using Guardr.
Getting Started
How do I scan a website?
Enter any domain on the homepage and click Scan. No account required. You will see your health score, grade and a breakdown of issues in under 2 seconds.
How do I add a site to my dashboard?
Sign in, go to your dashboard and click "Add Site." Enter your domain - we will run an initial scan immediately, then check uptime every minute and re-scan every 6 hours.
Do I need to install anything?
No. Guardr scans externally - no agents, no code changes, no server access needed. We only see what is publicly visible, the same as any visitor or search engine.
Scanning & Monitoring
What does Guardr scan?
We check five categories: TLS/SSL configuration (HTTPS, HSTS, redirects), Security Headers (CSP, X-Frame-Options, Referrer-Policy and more), DNS (DNSSEC, CAA records), Exposure (sensitive files and paths) and Cookies (Secure, HttpOnly and SameSite flags).
Is this a code audit or penetration test?
No. Guardr monitors your public-facing configuration and uptime. We do not do penetration testing, code analysis or access your servers. We report the misconfigurations that change how browsers and search engines treat your site.
How often does Guardr run a scan?
Every 6 hours, on both plans. Each scan produces an updated score and grade. You can also trigger a manual scan anytime, up to 75 an hour on both plans.
How does uptime monitoring work?
We run a health check on your site every minute, on both plans. If your site goes down, you will receive an email alert. When it recovers, you will get a recovery notification with the approximate downtime duration.
My site shows "Up (WAF)" - what does that mean?
Some sites use Web Application Firewalls that return HTTP 403, 429 or 503 to automated requests. We treat these as "up but blocked by WAF" rather than downtime, shown as an amber status in your dashboard.
AI Agents & MCP
Can I use Guardr from an AI agent or a coding assistant?
Yes. Guardr speaks MCP at https://api.guardr.io/mcp and exposes three tools: check_site, list_sites and get_site. It takes the same API key as the REST API, so a client such as Claude Code or Cursor connects once and then calls Guardr as tools. The setup steps are in the MCP guide.
Where do I read what Guardr offers AI agents?
The Agents page covers what an agent can do with Guardr, which tools it gets and how to point a client at the endpoint. The reference for each tool and its fields lives in the MCP guide.
Account & Data
Can I see who changed what on my account?
Yes. The Audit Log in your dashboard records every change made to the account, with who made it and how it reached us: the dashboard, the API, a WordPress plugin key, an enrollment token, billing or a Guardr operator. Sign-ins are recorded too. You can filter it, search it and export the result as CSV. Guardr keeps 90 days of history on every plan. See the Audit Log guide at /docs/audit-log/ for what is recorded and what is not.
How do I change my password?
Go to Dashboard → Settings → Password and click "Change." You will need your current password and must meet the same complexity requirements as signup.
How do I export my data?
Go to Dashboard → Settings → Data & Privacy and click "Download." You will receive a JSON file containing your profile, sites, scan results, uptime checks and notification preferences.
How do I delete my account?
Go to Dashboard → Settings → Delete Account. You will need to check an acknowledgment box, type "DELETE MY ACCOUNT," and enter your password. All data is permanently and immediately removed.
What data does Guardr store?
Your account info (name, email), the domains you add, scan results, uptime check records, alert history and notification preferences. Passwords are hashed - we never store them in plain text.
Billing
Is the Free plan really free?
Yes. One site, free forever, with no credit card required. The free site gets exactly what a paid site gets: a scan every 6 hours, an uptime check every minute and 90 days of history.
What does the free plan include?
One site at $0, with no credit card. That site gets the full grade and every finding, API access with up to 2 keys and up to 3 status pages. Every site you add after the first one is $3.00 per site per month. See /pricing/ for the worked total.
Can I cancel anytime?
Yes. No contracts, no commitments. Cancel with one click from your billing page. You keep access until the end of your current billing period.
Do you offer refunds?
We do not offer automatic refunds, but if you experience a technical issue that prevents you from using the service, contact support@guardr.io and we will work with you to find a fair resolution.
Who processes payments?
LemonSqueezy is our Merchant of Record. They handle all payment processing, tax collection and VAT globally. We never see your card details.
Troubleshooting
My scan shows a lower score than expected
Scan results reflect what is publicly visible at the time of scanning. Common reasons for lower scores include missing security headers, HSTS not being enabled or cookies without Secure/HttpOnly flags. Each issue includes a description and guidance to help you fix it.
I am not receiving alert emails
Check your spam/junk folder. Alert emails come from alerts@guardr.io. Make sure your notification preferences are enabled in Dashboard → Site Detail → Notifications.
My site is up but Guardr shows downtime
Some hosting providers or CDNs may block automated requests. If your site uses aggressive WAF rules, our uptime probes may be blocked. Check if the dashboard shows "Up (WAF)" status - this indicates your site is reachable but returning a block response to our checks.