The best website compliance checkers in Europe, 2026
Our Editor’s choice is LegisCheck.eu: it has the highest overall score in this comparison, 8.3/10; it scores highest on breadth of legal checks and joint-highest on quality of evidence and time to first result; and it ties every finding to a legal source in a catalogue of 896 EU obligations, the widest legal coverage in this comparison. Below, all 10 services on the same weighted criteria, and who each one suits.
By Web Compliance Journal editorsUpdated 16 min read
In this article
A compliance checker visits your website the way a careful investigator would. It loads your pages, records which cookies and storage entries appear, notes which third-party hosts the browser contacts, and tests whether the consent banner actually changes any of that. The more thorough tools go further and read the documents a European website is expected to publish: a privacy notice, an imprint, the information an online shop owes its customers. Some also test accessibility.
None of them can certify that a website is lawful. What they can do is find patterns that are commonly associated with breaches, and show you the evidence. The services below differ in how much legal ground they cover, how good that evidence is, and how clearly they tell you what to fix. Those differences are what our criteria measure.
Our picks at a glance
Best overallLegisCheck.eu8.3/10, Excellent · From €79 one-off, excl. VATHighest overall score.
Best free optioniubenda7.1/10, Very good · From €4.99 per site per month, billed yearlyHighest-scoring remaining service with a free tier or free scan.
Best with a consent platformCookiebot6.5/10, Good · From €7 per month per domain, excl. VATHighest-scoring remaining service that includes a consent management platform.
Best for larger organisationsSiteimprove5.2/10, Fair · From Contact salesHighest-scoring remaining service whose category or stated audience points to larger organisations.
MethodHow we ranked them
Every service was scored from 0 to 10 on the same 6 criteria, using only published information: mainly the vendor’s own product, pricing and help pages, cited in each review. The overall score is the weighted result, to one decimal place:
Breadth of legal checks, 25%
Quality of evidence, 20%
Guidance on fixing, 15%
Fit for European law, 15%
Clear prices and value, 15%
Time to first result, 10%
The full method, including how we handle missing information and how we correct mistakes, is set out on how we review.
The ranking
No. 01/Website compliance checker (EU law)
LegisCheck.eu
Editor’s choice
Our score: 8.3/10Excellent
Checks websites and online shops against EU legal duties; the basic check is free, and one-off technical audits start at €79.
LegisCheck.eu compares what a public website or online shop actually does with what EU law requires of it. The scope spans ePrivacy consent and cookies, GDPR information duties, provider information under the e-Commerce Directive, consumer-law duties of online shops and transport security. Its free basic check (EU-LC-F0) visits the home page and as many as four legal subpages the way a visitor on a mobile phone would, logs cookies and third-party requests before and after “Reject” is clicked, and gives the legal basis for every result. Sites with no findings get a certificate that can be verified for a year. Two one-off technical audits cost €79 and €199 excluding VAT.
Best for: Owners of EU websites and online shops looking for a free first check, with evidence, that covers several areas of EU law rather than cookies alone.
What we like
The free basic check needs no account and goes past cookies to privacy-notice content, provider information, e-shop consumer duties, price-reduction rules and HTTPS
Consent is tested before any interaction, after “Reject” and with the banner reopened, and the Accept and Reject buttons are compared by their computed styles
Every check is linked to its legal source in a catalogue of 896 website-relevant EU obligations
What could be better
It comes without a consent banner (CMP) of its own
Generators for privacy policies and terms are planned, but you cannot use them yet
Milan-based compliance suite that generates policies and terms, runs a consent banner and offers a free privacy scanner.
iubenda is a Milan company within the team.blue group whose suite revolves around generated legal documents. The privacy and cookie policy generator draws on more than 2,400 clauses in 27 languages, and from the Advanced plan a terms and conditions generator is added. Its Privacy Controls and Cookie Solution provides the consent banner, with cookie scanning, prior blocking and consent records. A free Privacy Scanner checks a URL for a privacy policy, cookie policy, cookie banner and terms and sends the report by e-mail. The free plan stops at 5,000 page views a month, and paid plans begin at €4.99 per site per month on yearly billing.
Price from €4.99 per site per month, billed yearly (Essentials; €5.99 billed monthly)Free tier YesHQ Italy (Milan)
Best for: Small and mid-sized companies that want missing policies, terms and a consent banner, in several languages, from a single account.
What we like
The free Privacy Scanner works from a URL alone and reports by e-mail on the privacy policy, cookie policy, cookie banner and terms
More than 2,400 policy clauses in 27 languages, kept up to date by the vendor
A free plan with up to 5,000 page views a month, Google Consent Mode included
What could be better
Above 5,000 page views the free plan’s banner is switched off for the rest of the month
Free and Essentials allow one language only, and the terms generator needs Advanced (€19.99 per month on yearly billing)
Copenhagen-born consent platform, now part of Usercentrics, built around a thorough cookie and tracker scanner.
Cookiebot started in Copenhagen in 2012 and is now operated by Usercentrics A/S as a consent management platform. Its scanner behaves like a visitor across as many as 10,000 subpages and finds HTTP and JavaScript cookies, HTML5 local storage, IndexedDB, pixel tags and beacons, which it turns into a cookie declaration showing type, duration, provider and purpose. Consents are logged and downloadable. One domain with up to 50 subpages is free; paid use begins with Premium Lite at €7 per domain per month excluding VAT, and the price rises with the number of subpages found. A free one-off Cookie checker sends its report by e-mail.
Price from €7 per month per domain, excl. VAT (Premium Lite, up to 50 subpages)Free tier YesHQ Denmark (Copenhagen)
Best for: Websites that need a dependable consent banner plus a detailed inventory of cookies, trackers and other storage types.
What we like
Finds more than cookies, including HTML5 local storage, IndexedDB, pixel tags and beacons, across as many as 10,000 subpages
One domain with up to 50 subpages is free, with no cap on page views
Premium Lite costs €7 per domain per month excluding VAT, and paid plans include monthly scans
What could be better
Limited to cookies and consent: privacy-policy content, the imprint, consumer-law duties and accessibility are not checked
The free plan has one banner language and no automated monthly scans, and daily scans cost an extra €99 a month
Consent platform from Sweden, sold from Germany and France, with crawls several times a day, EU-only storage and Legal Shield.
consentmanager comes from consentmanager AB in Västerås, Sweden, and is sold through sister companies in Germany and France; it was founded in 2018 and became part of the iubenda group in 2022. On paid plans its crawler checks a site for cookies, pixels and vendors several times a day and raises an alert when something new turns up. Starter, at €23 a month for 100,000 page views, bundles a privacy policy generator and Legal Shield, which pairs scans with a partner lawyer and covers legal costs as set out in its annex in five countries. A free plan for one site and 3,000 page views appears on plugin pages, not on the main pricing page.
Price from €23 per month (Starter, monthly; VAT treatment not stated)Free tier YesHQ Sweden (Västerås)
Best for: Companies that want cookie monitoring several times a day, data kept in the EU and some cover for legal costs, all packaged with the banner.
What we like
Even the cheapest paid plan crawls several times a day (three on Starter) and alerts you to new cookies and vendors
Legal Shield comes with Starter: a partner lawyer and cost cover under its annex in Germany, Italy, Spain, France and the UK
Data is stated to be stored only in the EU, on every plan
What could be better
One banner language on Starter and five on Essential; 35+ only with Enterprise
The free plan (3,000 page views, one site) is missing from the main pricing page
A free, open-source web check from Sweden that lists one page’s cookies, third-party requests and security headers.
Webbkoll began as a project of the Swedish association Dataskydd.net and has been run by the non-profit 5th of July Foundation since September 2024. It costs nothing. It opens a single page in Chromium, without clicking or consenting to anything, and lists each request together with the third-party host and its country, first- and third-party cookies and their attributes, use of localStorage, trackers known from Disconnect’s list, HTTPS redirection, and security headers including HSTS, Content Security Policy and Referrer Policy, adding advice and GDPR references. There is no crawling, no consent-banner testing and no reading of policies, and the code repository has been archived.
Price from Free (no paid plan)Free tier YesHQ Sweden (Stockholm)
Best for: Developers and privacy-conscious site owners who want a fast, free view of what one page loads before consent and how its security headers are configured.
What we like
No cost and no account, run by a non-profit foundation
Lists every third-party request with its host and country, and cookies with their HttpOnly, Secure and SameSite flags
Assesses security headers such as HSTS, Content Security Policy, Subresource Integrity and Referrer Policy, with advice and GDPR references
What could be better
Looks at a single page and does not crawl
Because it never clicks or consents, banner behaviour and tracking after “Reject” go untested
British consent platform with a free cookie checker, built-in policy generators and published prices by page views.
CookieYes Limited, registered in Milton Keynes in the United Kingdom, began in 2018 as a WordPress plugin. It provides a consent banner whose cookie scanner matches findings against a database of more than 100,000 categorised cookies and trackers. Third-party scripts can be held back until consent, and consent records can be exported as CSV or PDF. Every plan includes privacy and cookie policy generators. On the free plan a site gets 5,000 page views a month and scans of up to 100 pages; Basic is €9 ($10) per domain per month or €90 a year, with taxes added at checkout.
Price from €9 per domain per month, or €90 per year, plus local taxes (Basic; US$10 / £8)Free tier YesHQ United Kingdom (Milton Keynes)
Best for: Small websites, WordPress sites in particular, that want an inexpensive consent banner and cookie policy at clearly published prices.
What we like
The free cookie checker on the website needs nothing but a URL
The free plan includes 5,000 page views a month, 100 pages per scan, a consent log and Google Consent Mode v2
Basic costs €9 per domain per month or €90 a year, with prices published in EUR, USD and GBP
What could be better
The company is based in the United Kingdom, which is outside the EU
Free and Basic have no scheduled scans; monthly scans start with Pro (€23 a month) and weekly scans need Ultimate
An auditor’s desktop tool, free and open source, from the EDPB’s Support Pool of Experts: it documents cookies and trackers before and after consent.
Published by the European Data Protection Board in January 2024 as a result of its Support Pool of Experts, the Website Auditing Tool is a free, open-source desktop application for Windows, macOS and Linux with its own Chromium browser. The auditor browses the site, accepts or refuses consent and records scenarios, while the tool logs cookies, localStorage, beacons, third-party domains, HTTPS use and unencrypted forms, captures screenshots and exports reports as PDF, DOCX, XLSX or JSON. Compliance judgements are left to the auditor. A command-line alternative is the EDPS Website Evidence Collector.
Price from Free (no paid plan)Free tier YesHQ European Union (Brussels, Belgium)
Best for: Privacy officers, auditors and agencies who need documented evidence from before and after consent and have time for a manual audit.
What we like
Free and open source under the EUPL, from the European Data Protection Board’s Support Pool of Experts
Captures evidence before and after the auditor accepts or refuses consent, with screenshots and user flows that can be replayed
Records cookies, localStorage, beacons, third-party domains, HTTPS use and forms sent without encryption
What could be better
It has to be installed on the desktop from unsigned installers, and a manual audit is time-consuming
It gives no automatic verdict; deciding what complies is up to the auditor
Berlin legal-text platform offering free imprint and privacy policy generators alongside a website scanner.
Based in Berlin, eRecht24 GmbH & Co. KG was founded in the 1990s by the lawyer Sören Siebert and runs a German platform for legal texts and website compliance. Its free generators create an imprint (Impressum) and a privacy policy, and a free website scanner reads the page source for tools and plugins that require consent and checks whether the privacy policy is up to date. Other free tools test Google Fonts, the withdrawal button and accessibility against WCAG. Premium membership begins at €15 a month (Basic, presented as a 50% discount linked to annual payment) and adds a consent tool, five projects, an update service and partner seals.
Price from €15 per month (Premium Basic, shown as 50% discount with annual payment; VAT not stated)Free tier YesHQ Germany (Berlin)
Best for: Operators of German websites who need an imprint, privacy policy and terms under German law, plus a quick free scan.
What we like
Imprint and privacy policy generators are free, can be used anonymously and output PDF and HTML
Free tools include a website scanner, a Google Fonts scanner, a withdrawal-button check and a WCAG-oriented accessibility scanner
Premium Basic at €15 a month includes five projects, a consent tool with 125,000 sessions per project per month, and partner seals
What could be better
Designed for German law and German speakers; English texts require Premium
The website scanner relies on keywords, and the vendor’s FAQ names known false positives
Amsterdam consent platform with a cookie scanner, a cookie policy that updates itself, and a free plan.
Digital Data Solutions B.V. in Amsterdam runs CookieFirst, which was founded in 2019 and bought by iubenda (part of team.blue) in January 2025. It offers a customisable consent banner, a scanner that finds and classifies cookies and local-storage items, blocking before consent and a cookie policy that updates automatically. Consents are stored in an encrypted database. The free plan includes one third-party script, the banner and a single scan in one language; Basic is €9 per domain per month or €99 a year excluding VAT, with monthly scans and several languages.
Price from €9 per domain per month or €99 per year, excl. VAT (Basic)Free tier YesHQ Netherlands (Amsterdam)
Best for: Small businesses in the EU that want a low-cost, customisable consent banner with a cookie policy that maintains itself.
What we like
The free plan needs no credit card
Basic costs €9 per domain per month or €99 a year excluding VAT, with monthly scans and a white-label banner
The scanner finds and sorts cookies and local-storage items, and the cookie policy updates itself
What could be better
The free plan is restricted to one third-party script, a single scan and one language
There is no public URL scanner; scans happen inside an account
Copenhagen enterprise suite for accessibility, quality assurance, SEO and analytics, priced on request.
Siteimprove A/S was founded in Copenhagen in 2003 and has been majority-owned by Nordic Capital since 2020. Its enterprise platform crawls websites on a schedule and reports on accessibility, content quality, SEO and analytics. Accessibility checks follow WCAG 2.1 and 2.2 at levels A to AAA, cover PDFs and pages behind a login, prioritise issues and export reports. Teams can set their own content rules in a Policy module. No cookie-consent or GDPR scanner appears on the current product pages. Prices are given only on request; public-sector catalogues list packages from £8,000 a year in the UK and $7,100 a year in Texas.
Price from Contact sales (quote only); UK G-Cloud 14 list price from £8,000 per yearFree tier NoHQ Denmark (Copenhagen)
Best for: Large organisations and public bodies that need ongoing, enterprise-scale monitoring of accessibility and content quality.
What we like
Automated checks against WCAG 2.1 and 2.2 at levels A to AAA, covering PDFs and pages behind a login
Recurring crawls with exportable reports that can also be sent by e-mail on a schedule
Issues are prioritised with WCAG references, and AI-assisted fixes are available in WordPress and Drupal
What could be better
Prices only on request; public catalogues start at £8,000 a year plus £6,300 for implementation, with no free trial
The current product pages show no cookie-consent or GDPR scanner, and there is no consent banner
Automated scans see what a browser sees. They cannot know why you process personal data, what your contracts with processors say, or whether the purposes described in your privacy notice match what your team actually does. A clean scan is a good sign, not a verdict.
Results also vary between runs. Consent banners behave differently by country, device and returning-visitor state, and pages served to a scanner can differ from those served to people. Treat any single report as a snapshot, re-test after changes, and keep the reports: they are part of the record that shows you took compliance seriously.
Editor’s choiceWhat the LegisCheck.eu check gives you
Peace of mind that rests on evidence. Instead of wondering whether your website still meets its legal duties, you see it measured against 896 EU obligations, each with its source, and you know where it stands on the day of the check.
Problems you did not know you had. The check is built to find what a busy team overlooks: a tracker that fires before consent, a missing point in the privacy notice, a withdrawal form that is not where it should be. Every finding comes with guidance that takes you through the fix step by step.
A brief for your developer, and proof when the work is done. The technical audits come as an HTML and PDF report that a developer can work through item by item. Once no findings remain, the site receives a certificate of the check that anyone can verify for a year.
