Vigilo scans your site for the technical issues behind EU web rules (security headers, email spoofing, trackers before consent, cookie banner, accessibility and webshop info), tells you how to fix each one, then keeps watching. No sales calls. No access to your systems.
hdr.https_redirectHTTP redirects to HTTPSPass
mail.dmarc_presentNo DMARC policy is publishedFail
Anyone can send email that looks like yours. Gmail and Yahoo can reject bulk mail from domains without one.
trk.scripts_staticAnalytics loads before consentFail
The tracker starts before the visitor has chosen. Load it after they accept.
hdr.hstsHSTS max-age is shorter than 6 monthsWarning
a11y.img_alt3 images lack a text alternativeWarning
shop.detectedLooking for a webshopRunning
Each finding names the published standard it was checked against, so your developer knows exactly what to change and why.
Is your site's front door locked? HTTPS, HSTS, Content-Security-Policy and the headers that stop clickjacking and content sniffing.
OWASP Secure Headers, GDPR Art. 32
Can anyone send email as you? SPF, DKIM and DMARC, checked against the Google, Yahoo and Microsoft rules for bulk senders.
RFC 7208, RFC 6376, RFC 7489
What loads before visitors say yes? Analytics, ad pixels, tracking cookies and Google Fonts on the first page load.
ePrivacy, Dutch Telecommunications Act 11.7a
Can visitors say no as easily as yes? Whether a banner appears, offers a visible reject button, and is respected.
EDPB Cookie Banner Taskforce (2023)
Can everyone use your site? Automated WCAG 2.2 signals, plus whether you publish an accessibility statement.
European Accessibility Act, EN 301 549
Does your checkout tell buyers what it must? Company identity, right of withdrawal, prices with VAT and terms.
Consumer Rights Directive 2011/83/EU
How fast does it feel? Server response, page weight, compression and Core Web Vitals on key pages.
LCP, INP and CLS thresholds
Do your links go somewhere? Internal and external links, redirect chains and whether your legal pages are reachable.
HTTP status codes
Dutch regulators are actively checking websites. These are the facts we build on, each with its source.
Free scanners are everywhere. What you get here is the whole picture, put in order, with a fixed price to fix it.
Not eight tools. Security, email, consent, accessibility, webshop rules, speed and links in one prioritised list.
Reports are reviewed, not only generated. A person puts the ten fixes that matter most at the top.
No hourly billing, no quotes. Fix packages deliver exact records and config at a price you see upfront.
A plugin update shouldn’t silently undo your work. Monitor re-checks and emails you when something slips.
Receiving mail servers can’t tell real email from your domain apart from forgeries.
_dmarc.demo-webshop.nl: no TXT record
_dmarc.demo-webshop.nl with v=DMARC1; p=none; rua=mailto:dmarc@demo-webshop.nlp=quarantine.Relevant to: Google & Yahoo bulk-sender requirements, RFC 7489.
Technical observations against published standards. Not a legal assessment of compliance; doesn't replace a lawyer or a full WCAG-EM audit.
From a 10-second scan to continuous monitoring. Everything happens by email and in your browser.
We read your public homepage and DNS records. No login, no install.
We crawl up to 25 pages (50 for webshops) with real browsers and test your cookie banner’s reject path. A person puts the ten findings that matter most at the top.
Do it yourself with our steps, hand it to your developer, or buy a fixed-price fix package. We send exact records and config; you apply them; we verify.
Monitor re-checks weekly and emails you when something regresses.
Pay with iDEAL or card. All prices exclude 21% VAT. No calls, no quotes.
A clear, prioritised picture of one site.
From €195one-offexcl. VAT · Webshop €345
Keep it fixed.
€29per site per monthexcl. VAT · or €290 per site per year
Your brand, our engine.
€149per month, 10 sitesexcl. VAT · €12 per extra site per month
Add Vigilo’s checks to your maintenance plans under your own brand. Report pages and PDFs carry your logo, name and colour.
Vigilo works entirely by form and email. You never need to schedule a call, and nobody will call you. Questions? Write to hello@vigiloweb.com. We answer within 2 working days.
No. Vigilo reports technical observations against published standards and guidelines, such as WCAG, email authentication specs and the EDPB’s cookie banner findings. Whether your site meets a particular law depends on facts we can’t see. Use our report as input for your lawyer or privacy officer, not as a substitute.
No. We look at what any visitor sees: your public pages, response headers and DNS records. We never ask for passwords, CMS or DNS access. Fix packages come as instructions and config you (or your developer) apply.
Because you don’t need one to buy a scan, and we’d rather spend the time on your report. Everything is priced upfront and works by form and email. If you have a question, write to us at hello@vigiloweb.com. We reply within 2 working days.
No. A good grade means our automated and reviewed checks found few technical issues. Some requirements can only be judged by people, for example whether your accessibility statement is accurate or whether your privacy texts match your actual processing.
Yes. We send normal page requests at a gentle rate, never submit forms, never log in and never place orders. Free scans and quick checks identify themselves as VigiloBot; deep audits load your pages in a standard browser on our audit provider’s cloud infrastructure.
Technical observations against published standards. Not a legal assessment of compliance; doesn't replace a lawyer or a full WCAG-EM audit.