🔒 GDPR Site Auditor

Check websites for GDPR/RGPD compliance in seconds. Detects privacy issues, cookie problems, missing consent mechanisms, and tracking scripts.

🎯 What it checks

🚀 Quick Start

# Install
pip install gdpr-site-auditor

# Audit a website
gdpr-audit https://example.com

# JSON output
gdpr-audit https://example.com --json

📦 Usage as Library

import asyncio
from gdpr_auditor import SiteAuditor
from gdpr_auditor.checks import check_security_headers
from gdpr_auditor.checks.cookies import check_cookies
from gdpr_auditor.checks.privacy import check_privacy_policy
from gdpr_auditor.checks.tracking import check_tracking
from gdpr_auditor.checks.forms import check_forms

async def main():
    auditor = SiteAuditor()
    auditor.register_check(check_security_headers)
    auditor.register_check(check_cookies)
    auditor.register_check(check_privacy_policy)
    auditor.register_check(check_tracking)
    auditor.register_check(check_forms)

    result = await auditor.audit("https://example.com")

    print(f"Score: {result.score}/100")
    print(f"Critical: {result.critical_count}")
    print(f"Warnings: {result.warning_count}")

    for issue in result.issues:
        print(f"[{issue.severity.value}] {issue.title}")
        print(f"  → {issue.recommendation}")

asyncio.run(main())

📊 Example Output

============================================================
  GDPR/RGPD Site Audit Report
  URL: https://example.com
============================================================

  Score: 72/100 (⚠️  NEEDS IMPROVEMENT)
  Critical: 2 | Warnings: 3

  ISSUES FOUND:
  --------------------------------------------------
  🔴 [CRITICAL] Tracking scripts detected
     Found tracking: Google Analytics. These require explicit user consent under GDPR.
     → Ensure tracking scripts are only loaded AFTER user gives explicit consent.

  🔴 [CRITICAL] Form collects data without consent checkbox
     Form 1 collects email but has no consent mechanism.
     → Add a mandatory consent checkbox before submit.

  🟡 [WARNING] No cookie consent mechanism found
     The site sets cookies but no cookie consent banner was detected.
     → Implement a cookie consent banner.

  ✅ PASSED CHECKS (5):
     • privacy_policy_link
     • security_header_strict-transport-security
     • no_forms_detected
     • no_tracking_cookies_before_consent

============================================================

🤝 Contributing

Contributions are welcome! See CONTRIBUTING.md for guidelines.

Good first issues

• Add more tracking script detection patterns
• Add i18n for more languages (German, Spanish, Italian)
• Add checks for data export/deletion requests
• Add accessibility checks (a11y)
• Improve form detection accuracy

📜 License

MIT License - see LICENSE

🔗 Related

• GDPR Official Text
• RGPD en français
• OpenSSF Criticality Score