Do you know what is happening on your website?
The world's top 100 English-language sites don't... In our forensic audits, the mean number of privacy events per site before consent, across the top 100 English-language content websites globally, was ~5,200. That is 5,200 risks your privacy team are probably unaware of - and OneTrust and TrustArc do not show them, because they are focused on cookies. Most privacy teams do not know what is happening on their websites, leaving them exposed to litigation and enforcement. Don't get fined, get WebSentinel.
WebSentinel captures every privacy-relevant event a website fires - trackers, fingerprinting, sensor access, consent bypass - and turns it into signed, timestamped evidence built to stand up in court and in front of a regulator.
- Class-action litigators
- Regulators
- Privacy counsel
- Data protection officers
- Security and compliance teams
The evidence
Every event recorded, attributed and signed.
A WebSentinel capture records what the page does to the visitor from the first byte, before any consent is given, with each event tied to the script responsible and its full call stack - then seals the record so nobody, including us, can alter it afterwards without it showing.
- CRITAd pixel fired before consent - /checkout
- HIGHCanvas fingerprint read by vendor.js
- HIGHCNAME-cloaked tracker on metrics.example.com
- MEDForm keystrokes sent via sendBeacon
- CRITCookie rewritten after Reject clicked
- INFOScript hash drift since last capture - tag.js
- MEDSensor API probed - DeviceMotion
The complete privacy vector landscape
Network traffic, storage writes, fingerprinting reads, sensor probes, CNAME cloaking, worker-side requests and consent behaviour, recorded in a real browser session from the jurisdiction that matters.
Chain of custody from the first event
Each record is hashed into a chain and signed as it is written, then the chain head is timestamped by an independent authority and anchored to the Bitcoin blockchain.
Findings mapped to the law
Evidence is mapped to GDPR, ePrivacy, CIPA, the Environmental Crimes Directive and consumer-protection law, with an expert witness statement available where the matter needs one.
Interactive audit environment
Walk through an audit in three dimensions.
Every capture can be explored as a live environment - each request, cookie and fingerprinting call placed where it happened, replayed in order, and opened up to the evidence behind it.
Open full screenDownload the sample audit report (PDF)Replay of a signed WebSentinel capture of DPOffice, our synthetic test site, and the forensic audit report built from the same evidence.
Event replay
Step through the capture in the order the browser saw it.
Severity view
Recolour the environment by legal severity in one click.
CNAME cloaking
See first-party hostnames resolve to the trackers behind them.
Evidence dossier
Open any event to its signed record, call stack and provision.
Products
One detection engine, six ways to use the evidence.
Every product runs on the same forensic core - what changes is who needs the evidence, the legal regime in play and how quickly it has to arrive.
Evidence bundles for litigation and enforcement
For class-action litigators, regulators, legislators and individuals who need court-grade evidence to file claims, drive enforcement, or close legislative gaps.
Details and pricing
Point-in-time forensic audit, no commitment
For organisations that want an independent, third-party snapshot of a specific property or campaign without taking on a subscription.
Details and pricing
Continuous independent ground truth for privacy teams
For in-house privacy and compliance teams (CPOs, DPOs, GCs, CISOs) at regulated organisations who cannot rely on stakeholder self-attestation.
Details and pricing
Rapid forensic response for active CIPA exposure
For defendants and their counsel facing active or imminent CIPA claims who need court-grade evidence on an urgent timeline.
Details and pricing
Environmental-crime exposure from unlawful data processing
For claimants, class-action firms and defendants under the EU Environmental Crimes Directive, where unlawful pre-consent data processing carries a measurable environmental impact at scale.
Details and pricing PatentPendingWorld First
Real consent enforcement for third-party cookies
For publishers, brands and platforms that need the reject button on their cookie banner to do what visitors believe it does, blocking new third-party cookies and removing the ones already set on the browser.
Details and pricingCoverage
Depth the consent-management vendors were never built for.
The incumbent compliance vendors grew out of cookie-banner deployment, and a cookie-jar scrape sees roughly 5-10% of what a modern page does to its visitors. Runtime fingerprinting, sensor access, timing side channels, worker-side traffic and silent supply-chain changes stay invisible to them.
WebSentinel covers the full landscape and adds a supply-chain integrity layer that catches scripts changing after deployment - so when a regulator, opposing counsel or the board asks what a site does, the answer comes from evidence the auditor controls.
Privacy vector coverage
Patent pending - world first
Your cookie banner has been lying for twenty years.
Guard is the first product that gives a publisher real control over the third-party cookies already written to a visitor's browser - removing them the moment consent is withdrawn and blocking new ones at write time. That is the consent state every visitor assumed they had when they clicked Reject.
Provenance
Built by the person who put cookie consent into EU law.
The consent requirement the whole Consent Management Platform industry was built around traces back to the campaign Alexander Hanff led against Phorm, the deep-packet-inspection programme that intercepted subscriber browsing without consent. WebSentinel is the tool he built after a decade and a half of watching the industry fail to honour it.
Since 2009, Article 5(3) of the ePrivacy Directive has required consent, with narrow exceptions, before information is stored on or read from a user's device. WebSentinel measures whether that ever actually happens.The legal basis behind every capture
Next step
Tell us what you need to prove.
An enforcement matter, urgent CIPA exposure, continuous monitoring, a point-in-time assessment or Environmental Crimes Directive work - describe the scope and we will come back with the right product and a way forward.