The code reveals more than you think.
Prove fraud. Document privacy violations. First findings in seconds — full report forensically signed.
Free Light-Check — operator identity, blacklists, GDPR trackers, cookies, TLS, dark pattern indicators. No registration.
Technical first assessment. Forensically signed. In minutes.
Ed25519-signed forensic reports for investigations. Fake shop suspicion, GDPR enforcement, phishing documentation. Invoice payment for public authorities.
Authority AccessEvidence for the case file.
Dark pattern evidence (unfair competition law), reject-leak forensics, privacy policy completeness check, GDPR article matrix. One report — everything included. Forensically signed.
Forensic Report — €249Stay clean. Permanently.
Monthly full audit + daily tripwire alert. Instant email on new tracker, consent bypass, or SSL expiry. White-label reports for clients.
Monitoring PlansMerchant Due Diligence. Automated.
Operator verification, sanctions screening, fake shop detection at merchant onboarding. Compliant with MaRisk §25h and AML requirements.
KYC ScreeningUncover networks. Prove fraud.
Batch-scan suspicious domains, uncover operator identities, cross-check sanctions and blacklists. Digitally signed reports your editors and lawyers can verify.
Forensic ReportWhat we check
Fraud and privacy — two sides of the same forensics.
Uncover fraud
Fake shop detection
37,000+ blacklists, payment SDK verification, domain age analysis, trust indicators.
Operator identification
Imprint ↔ commercial register cross-referencing. VAT/VIES validation. Ownership structure (first level).
Phishing & typosquatting
Domain similarity analysis, SSL certificate chains, hosting infrastructure comparison.
Serial offender tracking
Operator networking via commercial register, DNS and hosting. Risk inheritance from blacklisted domains.
Document privacy
Reject-leak forensics
Separate browser session: tracking despite cookie banner rejection? 6-phase proof with network evidence.
Dark pattern detection
EDPB taxonomy, 26 patterns, AI screenshot analysis. Evidence of deceptive design (unfair competition and fraud law).
GDPR compliance matrix
Art. 5–45 GDPR, ePrivacy transposition, CJEU references. Privacy policy completeness check (14 mandatory disclosures Art. 13).
Consent Mode v2 deception
Google Consent Mode: identical payloads before/after consent? Server-side tracking detection (CNAME, GTM SS).
Trust through technology
KO System
A single reject-leak or illegal third-country data transfer immediately results in grade F.
20+ CMP Drivers
Automatic detection and control of 20 CMPs + 3 fallbacks (incl. Usercentrics, OneTrust, Cookiebot, Sourcepoint) — for a realistic check of how users actually experience the website.
228 Trackers + EasyPrivacy
Custom database with 240+ curated trackers + 100 cookie profiles + 45 CNAME cloaking targets, supplemented by EasyPrivacy + DuckDuckGo Tracker Radar (~57,000 domains). Also detects hidden and novel tracking methods.
Open Methodology
All test rules, thresholds and scoring formulas are publicly documented. No black box — fully transparent.