GDPR Scan — Repeatable technical privacy audits for…

Pitch

Description

Comments

About this project

GDPR-Scan is an open-source website privacy scanner for SMEs, web agencies and privacy consultants. It checks TLS, security headers, pre-consent cookies, third-party services, DNS/MX and legal pages. It produces repeatable JSON and Markdown evidence with severity and priorities, ready for technical remediation or white-label audits. It is not legal advice or a GDPR compliance certification.

Make website privacy risks visible and actionable

GDPR-Scan is an open-source CLI and professional audit service that examines a website from an external visitor's perspective. It collects repeatable technical evidence so teams can identify privacy-related issues, prioritize remediation and compare results over time.

What it checks

TLS configuration and certificates
Security and privacy-related HTTP headers
Cookies set before user consent
Third-party scripts, iframes and external services
DNS, MX and technical jurisdiction indicators
Privacy policies, legal notices and related pages

What you receive

GDPR-Scan produces deterministic JSON and Markdown reports containing evidence, severity indicators and a technical score. Through Ilion Web Solutions, these results can be converted into a readable audit report, a prioritized remediation plan and a follow-up verification after corrections.

Who it is for

SMEs that need a technical review of their website
Web agencies managing multiple client websites
Privacy consultants and DPOs requiring technical evidence
Teams preparing a launch, migration or compliance review

White-label reports are available for agencies and consultants.

Clear limitations

GDPR-Scan evaluates externally observable technical indicators. It does not certify GDPR compliance and does not replace a DPO, lawyer, DPIA, record of processing activities or legal analysis.

Explore GDPR-Scan and request an audit

View the source code

Visit GDPR-Scan Join the discussion