Privacy3 moments
Third parties before and after the banner
Before interaction, after accept and after refuse, each in a clean browser. Third parties that keep loading after refusal are the most serious finding.
Resilience scan · passive · white-label
Know what a website shares.
Before the client asks.
Vebrix looks at a website the way every visitor does: which parties the site loads before and after the cookie banner, which country they come from, which cookies are set, whether the certificate is valid. The report carries your agency's branding, in plain language, with the legal basis and a fix for every finding.
Sample · 254 websites of businesses and institutions in one Dutch municipality · 2026-11-03
Outside the EU84%load parties with a parent company outside the EU before any consent
Cookies before consent31%set third-party cookies before the visitor has chosen anything
Refusing doesn't help5sites keep loading third parties after the visitor refused (only measurable with a recognised banner)
Google Fonts49%fetch fonts from Google, sending every visitor's IP address along
01 / What we measure
Only what every visitor sees.
Passive: the scan never logs in, fills in nothing and probes no hidden paths. Never a verdict on compliance, always an indication with its limits stated.
Privacyper moment
Cookies counted
Total and third-party, per moment. Names and domains only, never the content. No recognised banner does not mean no cookies.
Sovereigntyparent · country
Vendors with country
Every third-party domain is manually mapped to service, parent company and country, with a source link. Sovereignty is scored on jurisdiction, never on server location.
Sovereigntyeu / eea
European alternatives
A European alternative with every finding, only when the service itself states where the data lives and the parent company is in the EU. Self-hosting is always the first advice.
Securitycertificate
Certificate as the visitor sees it
Valid, expired, wrong name, untrusted issuer or no https at all.
Securityforms
Forms
Password, e-mail and phone fields, and whether they are sent over an unencrypted connection.
02 / How it works
Site in, report out.
A scan takes half a minute to two minutes. A site Vebrix scanned recently is available right away.
Add your sites
Log in with an e-mail link, no password. Paste your clients' sites and choose how often to rescan: weekly, monthly or quarterly.
Vebrix scans passively
Three moments, cookies per moment, vendors with country, certificate and forms. Own user agent with contact address, at most two requests per second.
Report in your branding
HTML and PDF, Dutch and English, with your agency's name, logo and colour. Every scan keeps a version, so you see what changed since the last one.
03 / For web agencies
White-label, no fuss.
Built for agencies that want to show their SME clients what their site shares, before a client, a regulator or a competitor does.
- Own login per agency. Invite colleagues by e-mail address; agencies only see their own sites.
- Shared scans. One scan per site for everyone, so it's fast and doesn't burden the site.
- Scheduler. Every site rescanned on its own interval, with history.
- Dashboard across your whole portfolio: most common finding, countries, third parties.
- What it is not. No score, no "compliant" stamp. Only findings with severity, impact, legal basis and fix.
- No active checks. No vulnerability testing until there is domain verification; that would be unauthorised access.
- No US model in a report about sovereignty. A model never changes a finding; everything AI writes is labelled.
- Clean ourselves. Vebrix sets only a login and language cookie, hosts its own fonts and uses no tracking. Read how.
04 / Pilot
Ten agencies, three months.
We set the price together with the pilot agencies. Before the pilot we don't name one.
We are looking for ten Dutch web agencies willing to have their client portfolio scanned by Vebrix for three months. You get reports in your own branding and a dashboard across your portfolio; we learn what your clients do with it and what it is worth to you.