Open Gmail in Chrome
Open the message that looks off. Nothing is read until you ask.
Chrome extension for Gmail
Fromensics: Investigate Email Senders
Open a suspicious email, click Investigate Sender, and receive a privacy-first report generated primarily on your device.
Chrome · Gmail · No account required
How it works
User-triggered, one message at a time. Fromensics does not scan your inbox in the background.
Click Investigate Sender
The button sits on the message you opened. One click starts a local investigation.
Read the evidence
A side panel report shows what the extension found — on this computer, not on our servers.
Built to stay on the device
The core product is local email investigation. Strict local mode is the default.
Email stays here
Subject, body, recipients, and private links are not uploaded to Fromensics during ordinary analysis.
Rules before AI
Authentication, domain alignment, and other checks run in code. The model interprets evidence; it does not invent technical facts.
On-device AI when Chrome provides it
Chrome’s on-device model can help with language and tactics. If it isn’t available, the rules still run.
Evidence you can inspect
Verdicts come with supporting findings. Unavailable checks are listed, not hidden.
A report, not a black box
The side panel is meant to show a verdict, evidence, and what could not be checked.
What the extension actually reads
Chrome Web Store listings should be specific. So is Fromensics.
The message you choose
After you click Investigate Sender, the extension reads the open Gmail message: sender, subject, body, and links shown in that message.
No Gmail OAuth in this version
Fromensics does not use the Gmail API and does not request Google account access for the current product.
No central email database
Fromensics does not keep a server-side archive of analyzed messages. The last investigation may stay in Chrome storage on this computer.
Questions
Does it work outside Gmail?
Not in this version. Fromensics is a Chrome extension for Gmail only.
Does my email leave this computer?
Not in strict local mode, which is the default. Optional later live checks may send only a domain or hostname — never the full message — and each lookup will be listed in the report.
Do I need an account?
No. Core investigation does not require a Fromensics account.
Is it free?
Yes for investigating senders. Optional Fromensics Pro (live lookups and extra feed coverage) is planned later and is not required for the core loop.
What does Investigate Sender read?
The open message you chose: sender address and display name, subject and visible date, body and links, and attachment names if Gmail exposes them. Analysis runs on your device after you click.