Changelog

A focused improvement release based on early user feedback. Better accuracy across the board.

• Consent Mode v2 verification — checks that your CMP is signalling correctly to Google Tag Manager
• Improved WAF bypass success rate: Cloudflare, Akamai, and DataDome challenges now resolved in under 4 seconds on average
• 12 new marketing tool detectors added: Klaviyo, Braze, Iterable, Heap, June, PostHog (server-side), Koala, Qualified, Salesloft, Gong, Mutiny, and Sprig
• Fixed false-positive on Next.js static exports being scored as AI-generated code
• Performance: the lookup pipeline is now 18% faster on average

The first public release. Everything we built to make compliance auditing faster, deeper, and accessible without installation.

• 500K+ technology detection across CMS, marketing, analytics, security, and infrastructure
• AI code detection with LLM attribution (Claude, ChatGPT, Copilot, Gemini, v0, Cursor, Bolt) — 20 weighted heuristics
• AI content detection — 17 linguistic heuristics covering vocabulary, structure, and stylistic patterns
• GDPR consent compliance audit across 9 CMP platforms (OneTrust, Cookiebot, Osano, Axeptio, TrustArc, and more)
• Pre/post consent delta analysis: see exactly which trackers fire before and after consent is given
• 208 subprocessor mappings with GDPR/CCPA data types, purposes, and processing regions
• Infrastructure mapping: MX, TXT, NS, DMARC, 30+ subdomain probes, WAF fingerprinting
• Dynamic runtime profiling with real browser automation: captures scripts, cookies, JS globals, and iframes loaded by a real browser
• PDF report generation for audit trails and regulator submissions
• Stripe billing integration with per-lookup and monthly subscription options

Features in active development. No ETAs, but these are the things on the board right now.

• Continuous monitoring and drift alerts — get notified when a new tracker appears or a consent violation is introduced
• Privacy policy gap analysis — cross-reference detected subprocessors against what your privacy policy actually discloses
• Dark pattern detection — flag deceptive consent UI patterns: pre-ticked boxes, asymmetric button styling, hidden reject options
• CCPA / GPC opt-out verification — confirm that Global Privacy Control signals are honoured correctly
• White-label PDF reports — your logo, your colours, sent directly to your clients