Make website privacy risks visible and actionable

GDPR-Scan is an open-source CLI and professional audit service that examines a website from an external visitor's perspective. It collects repeatable technical evidence so teams can identify privacy-related issues, prioritize remediation and compare results over time.

What it checks

• TLS configuration and certificates
• Security and privacy-related HTTP headers
• Cookies set before user consent
• Third-party scripts, iframes and external services
• DNS, MX and technical jurisdiction indicators
• Privacy policies, legal notices and related pages

What you receive

GDPR-Scan produces deterministic JSON and Markdown reports containing evidence, severity indicators and a technical score. Through Ilion Web Solutions, these results can be converted into a readable audit report, a prioritized remediation plan and a follow-up verification after corrections.

Who it is for

• SMEs that need a technical review of their website
• Web agencies managing multiple client websites
• Privacy consultants and DPOs requiring technical evidence
• Teams preparing a launch, migration or compliance review

White-label reports are available for agencies and consultants.

Clear limitations

GDPR-Scan evaluates externally observable technical indicators. It does not certify GDPR compliance and does not replace a DPO, lawyer, DPIA, record of processing activities or legal analysis.

Explore GDPR-Scan and request an audit

View the source code