Most websites leak data before anyone clicks accept.
Tracking cookies fire the moment a page loads. Anyone can check yours. See what they’d find, free.
Sample result
F
acme-health.ie
10 non-essential cookies fired before consent
6 third-party vendors received data
After Reject: 4 trackers kept firing
_gaGoogle Analytics 4
_fbpMeta Pixel
_gcl_auGoogle Ads
IDEGoogle DoubleClick
+ 6 more
Typical thresholdsFull methodology →
A · 0 cookies
B · 1–2 cookies
C · 3–4 cookies
D · 5–6 cookies
E · 7–9 cookies
F · 10+ cookies
Reject ignored → F
Who else can see this
- A prospect running due diligence
- An enterprise buyer with a security questionnaire
- A competitor
- An auditor
- A regulator
See it in action
See it in 30 seconds
What a scan finds, from the first cookie to the final grade, including the reject-state failure most tools miss.
Cycubix — Dublin cybersecurity & GRC consultancy
Most sites we scan fail.
It is rarely negligence — usually a consent platform that was installed but never configured to actually block the tags.
We run ISO 27001, GDPR and security programmes for regulated companies. ConsentScan started as a check we ran during those engagements — free because we kept finding the same gap on sites that were otherwise well run. Scanning is done from EU infrastructure; we store the minimum needed to send you the report.