Free & Paid Plans · 100+ checks

Your website has compliance gaps. Find them before a regulator does.

Run a free audit in 20 seconds — 100+ checks across GDPR, Security, Accessibility, Technical SEO, and AI Search visibility.

Tick categories to limit the scan, or leave blank to run all:

Security Catches the misconfigurations behind most of the OWASP Top 10 — fixable in an afternoon.
GDPR / Privacy Matches the visible posture an EU regulator or buyer looks for first.
AEO / GEO — AI search readiness Higher chance of being cited by ChatGPT, Perplexity, and Google AI Overviews.
SEO — Technical Crawler-readable and preview-clean across Google, Bing, LinkedIn, X, Slack.
WCAG — Accessibility Wider audience plus European Accessibility Act compliance for non-exempt businesses.

198 websites audited

14,881 checks performed

5 sites scored 90+ in 7 days

Plans

Free scans stay free. Paid plans for professionals.

All paid plans include multi-site dashboards, white-label report options, and per-site scan history.

Starter

€19 /mo ex-VAT

5 client sites
25 scans / month
Branded PDFs
Read-only client shares

Pro

€39 /mo ex-VAT

20 client sites
50 scans / month
Branded PDFs & client shares
Bulk scan scheduling

Founder

€79 /mo ex-VAT

50 client sites
150 scans / month
Full white-label PDFs
White-label client portal

See the full comparison → · Prices ex-VAT · VAT applied at checkout · Cancel anytime

How it works

Three steps. About 20 seconds.

Paste a URL

Any public site. We fetch the homepage and a handful of well-known paths: /robots.txt, /sitemap.xml, /security.txt, /llms.txt, /privacy-policy, /cookie-policy.

100+ checks run

Security headers, privacy signals, technical SEO, AI-search readiness, and WCAG accessibility. Each check is pass / warn / fail with a weight.

Get a score + fixes

One score per category, an overall score, and a why this matters + how to fix paragraph on every finding. Premium Compliance PDF for handover.

100+ signals, every scan

A representative slice of what we check.

Open standards, vendor-neutral. Every check maps to an EU directive, RFC, W3C spec, OWASP entry, or documented vendor guidance.

HSTS CSP security.txt X-Frame-Options Referrer-Policy Permissions-Policy Mixed content Privacy policy Cookie consent Data controller Subject rights Retention SRI robots.txt Canonical URL Sitemap.xml Schema.org JSON-LD Open Graph noindex correctness HTTPS enforcement llms.txt Schema FAQ / HowTo Direct-answer Image alt text ARIA landmarks Heading hierarchy Form labels Skip-nav Focus indicators Colour contrast

Why this matters

Three reasons the audit isn't optional.

Breaches start with basics

Most incidents trace back to a missed header, an exposed endpoint, or a misconfigured cookie — not the exotic exploit in the headlines. Routine audits catch them before they get used.

Regulation now reaches SMEs

GDPR enforcement is no longer just headline fines — DPCs across the EU run routine investigations against small operators. The EAA (in force from 28 June 2025) put WCAG conformance on the same compliance footing as data protection.

An audit is your posture

A clean, current report is what you hand to a regulator, buyer, or external auditor when they ask. Without one, you're answering questions from a blank page.

Most findings are fixable in an afternoon — once you know what's missing.

Run your first audit now.

Single URL. Full 100+ checks. Per-finding fix guides + a Premium Compliance PDF for hand-over.

Audit your site →