DPDPA is now in force in India. Run a free privacy scan on your site. Scan now

Free tool

What is firing on your site before consent?

Run a free automated privacy scan with xScan-AI. See the trackers and cookies loading before a visitor chooses, plus a plain-English risk score, in seconds.

  • See trackers that fire before consent
  • Map them to known vendors and risks
  • Get a plain-English risk score by email

Run your free scan

Free, no account needed. We scan public pages only.

In short
The cookie scanner loads your public pages, records which trackers fire before a visitor consents, maps them to known vendors and returns a plain-English risk score. It is free, needs no account, and the full report lands in your inbox.

What the scan checks

Trackers before consent

We list cookies and scripts that fire before any choice is made.

Region exposure

Which jurisdictions your visitors likely fall under and what they require.

Risk score

A plain-English score with the top issues to fix first.

How it works

01

Enter your domain

Add the website you want to check and where to send the report.

02

We scan public pages

xScan-AI loads your site and inventories cookies, scripts and third-party calls.

03

Get a risk report

A scored report shows what fires before consent and how to fix it with ConsentX.

Found issues? Fix them in minutes

ConsentX blocks trackers before consent and gives visitors a real choice. Free to start.

Get started free

Frequently asked questions

What does the cookie scanner check?+

It loads your public pages and records which cookies and scripts fire before any consent choice is made, maps the trackers to known vendors, flags the ones that need prior consent and produces a plain-English risk score.

Is the scan free?+

Yes. The scan is free and you do not need an account. We only scan public pages, and we email you the full report.

Why does it matter what fires before consent?+

Laws like GDPR, the UK PECR rules and India's DPDPA require non-essential trackers to wait for opt-in consent. Anything that runs before a visitor chooses is a common source of fines and complaints.

How accurate is the risk score?+

The score is an indicative reading based on the trackers we detect and the consent controls present. It is a useful triage signal, not a legal opinion, and a full audit may surface more.

Can ConsentX fix the issues it finds?+

Yes. ConsentX blocks non-essential scripts until consent, gives visitors an equal-weight Reject, and keeps tamper-evident records, which closes the gaps the scan reports.