Continuous vigilance on public websites
Your websites are the only part of your company that anyone can audit.
Your customers, your competitors and the regulator look at the same pages, with the same tools, from the outside. It is up to you whether VigiWeb looks first and warns you.
Detection, score and timestamped evidence on your domains.
01The groundWhat can be seen from outside
A gap on a website cannot be hidden. It is published.
A tracker dropped before consent, a banner that collects nothing, a provider added by an agency during a release, incomplete legal notices: none of this requires access to your systems to be observed. One request is enough.
And you carry it. The agency that added the script, the firm that hosts, the marketing tool that slipped into the tag manager: none of them will answer in your place before a regulator.
The principle
The framework is the same for everyone. So is the system.
The GDPR, the ePrivacy directive and the CNIL recommendations are not negotiated sector by sector. What applies to an industrial site applies to a public body and to an online retailer. VigiWeb is therefore generic, and that is a strength: you inherit a system proven across the whole observed estate.
A website is not a state, it is a flow. Every release moves the exposed surface. An annual audit photographs one moment; VigiWeb watches it continuously.
02Getting startedNothing to install
Four steps, and nothing to install.
01
Declare your domains
You declare the sites to watch. No integration, no server access, no tag to install: observation happens from the outside, like a visitor.
02
First pass
The engine establishes the initial picture: your score, the gaps found and how serious they are. That is your documented starting point.
03
Continuous watch
The passes repeat. A script added, a consent bypassed, a notice gone: the gap surfaces when it appears, not at the next audit.
04
Alerts and evidence
Every fix is dated. You keep the history of what you saw and what you did, in the order you did it.
03The engineSixteen control points
What the system looks at on each of your pages.
Trackers and consent
What is dropped, when, and whether it precedes or follows the visitor's actual choice.
Third parties
The domains called by your pages; ad networks, measurement tools, inherited scripts; including those nobody declared.
Notices and mandatory information
Legal notice, privacy policy, information on rights: presence, accessibility and consistency.
Forms and collection
What your forms actually ask for, against what the stated purpose justifies.
VigiWeb publishes nothing and reports no one. It gives you what a third party would see if they looked today.
04The reportA score, a report
A public score, a complete report.
The base score
Four structural rules, immediately readable, that anyone can check on your site as on a competitor's. That is the free score.
The full score
Sixteen rules assessed, major gaps isolated, and the detail that lets your teams or your provider fix them.
Blocking breaches
Some breaches cap the qualification whatever the rest: an advertising tracker dropped before consent puts you in the red, even with a score of 81.
Audit complet
16 points de contrôle
16 points de contrôle
Rapport de restitution · 12 octobre 2026
shop-exemple.fr
81/100
Note pondérée sur 16 points
Qualification : rouge, plafonnée
Votre note dit un site soigné. Votre couleur dit autre chose : des traceurs publicitaires sont déposés avant tout consentement, la faute la plus sanctionnée par la CNIL, éliminatoire quelle que soit la note. Corrigez-la, et votre qualification remonte au niveau de votre note : vert.
92
Socle
4 points de base
33
Cookies
faute éliminatoire
66
Consentement
granularité
80
Transferts et tiers
hors UE déclarés
75
Badge sécurité, note à part
HTTPS complet, aucun contenu mixte. À ajouter : en-têtes HSTS et CSP. Cette note ne compte pas dans le score RGPD.
Le chantier qui change tout
Conditionner le déclenchement de vos tags publicitaires au consentement, dans votre CMP. Le rapport liste les 3 traceurs concernés, capture à l'appui. Temps estimé : 2 heures.
VigiWeb report · example domain
05The benefitsWhat the system changes
You see it before someone points it out.
Gaps surface as they appear
Not when a letter or a public complaint arrives.
An inspection finds you documented
The dated history of fixes demonstrates diligence. That is the difference between a breach and work in progress.
Your providers are accountable
The assessment is enforceable against the agency and the firm running your sites.
Your teams know what to fix
Each gap maps to a concrete action, not to a general recommendation.
06PricingPay per use
Six plans, paid per use.
The free diagnostic covers four points. From one+ onwards, all sixteen points are examined: that is the full audit. From max onwards, you get the missions and the system moves into continuous watch.
| Plans | one | one+ | max | max+ | pro | pro+ |
|---|---|---|---|---|---|---|
| One-off price, € excl. tax | FREE | €20 | €70 | €100 | €170 | €240 |
| Number of URLs or sites | 1 URL | 1 URL | 1 URL | 2 URL | 5 URL | 10 URL |
| Control points per site | 4 points | 16 points | 16 points | 16 points | 16 points | 16 points |
| Deliverables | ||||||
| Risk report: red, amber, green | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Assessment: score from 1 to 100 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Recommendations: what to fix | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Missions: detailed to-do list, with specs to act on | – | – | ✓ | ✓ | ✓ | ✓ |
| Scans | ||||||
| Total number of scans | × 1 | × 1 | × 4 | × 8 | × 20 | × 40 |
| Initial scan | × 1 | × 1 | × 1 | × 2 | × 5 | × 10 |
| Control scan, after the missions are done | – | – | × 1 | × 2 | × 5 | × 10 |
| Control scan, after the site changes | – | – | × 2 | × 4 | × 10 | × 20 |
Prices in euros excluding tax, no subscription: each plan is bought once and entitles you to the number of scans shown. one is free and commits you to nothing. A control scan is triggered once the missions are done; the remaining scans cover changes to the site. Beyond ten sites, or for scheduled monitoring: on request.