Is your website really in order?
Our audit goes through dozens of checks ordered by severity — from cookies and GDPR to security and sensitive-data exposure. It shows you, simply and clearly, what is a risk, what needs fixing, and what is already fine.
No system access required · Easy-to-understand report · Clear recommendations
On average 284 sub-checks across 39 main areas
We scan even the deepest and hidden parts of your website using the most modern analysis techniques — all under the supervision of our IT specialists.
In-depth analysis
We inspect even hidden and the deepest parts of the site others miss.
State-of-the-art techniques
Continuously updated methods and tools that keep up with reality.
Overseen by IT specialists
Every result is reviewed by an expert, not just a machine.
The “Reject all” test
Automatically verifies whether your site truly respects rejecting cookies — not just whether a banner exists. A standard EU law requires.
Verifiable audit certificate
After the Complex Audit you get a certificate with a unique code, publicly verifiable at 123audit.sk — proof for clients and partners.
This preview is illustrative. The real audit analyzes your specific domain and returns verifiable results. The number of sub-checks varies with the complexity of the site.
Choose an audit by risk level and depth of review
From a fast initial website check to an individual audit for more demanding projects. Each package is designed to help you quickly understand what works on your website, where risks arise and which fixes have the highest priority.
Mini Audit
An entry-level check of your website — quickly find out where your weak spots are
The most important areas of your website — security, cookies/GDPR, SEO and mobile — explained clearly and at an affordable price.
A clear verdict on your website within 24 hours
- Website security — HTTPS, a valid SSL and protective headers
- The complete cookies & GDPR test — the same as in the Complex Audit, including a real “Reject all”
- Visibility in Google + speed and display on mobile
- We check whether ChatGPT, Perplexity and Google can see your site — some sites quietly block AI search engines without the owner knowing
- PDF report in your language with priorities + manual verification and sign-off by an IT specialist
For small companies, sole traders and new projects — quick certainty and an ideal first step.
Complex Audit
A detailed review of your entire website — from the technical layer to business risk
An in-depth check of your entire website with a manual review by a specialist — from the technical layer to business risk, with a clear fix plan.
We check your legal documents against the law — and against what your website actually does
- everything from the Mini Audit + an in-depth review of 12 more areas
- in-depth manual review of every area + a fix plan from a specialist
- GDPR in depth — valid consent across the whole website and data transfers to third parties
- 4 extra document checks against the law — cookies, GDPR and impressum always, terms & conditions for e-shops
- audit certificate with a verifiable code + a fix roadmap
- accessibility WCAG 2.2 AA (mandatory from 06/2025 for e-shops)
For small businesses and large e-shops alike — for anyone who wants certainty about their website, not guesswork.
Individual Audit
A bespoke audit for demanding, multi-layer projects
For e-shops, login-protected sections, multiple domains, APIs and custom systems — including things that aren't visible from the public website.
Physical source code review — on your site or server
- Individual modules at a fixed price — order online right away
- Physical source code review on your site or server
- A certificate that your own cookies meet the strictest EU legislation
- Legal texts reviewed by a partner law firm
- Check of login-protected areas, APIs, the e-shop and administration
- Free introductory consultation + in-person presentation of results
For larger companies and specific projects where a universal audit is not enough.
Prices shown are final prices.
* We usually deliver the Mini Audit within 24 hours of payment. During higher order volumes or unforeseen circumstances we guarantee delivery within 7 business days at the latest. ** We usually deliver the Complex Audit within 5 business days of payment. During higher order volumes or unforeseen circumstances we guarantee delivery within 10 business days at the latest.
Detail of checked areas and output
In 24 hours we look at your website through the eyes of Google, an attacker and the Data Protection Authority — and tell you clearly what to fix and in what order.
Across 6 key areas of your website — you get the result within 24 hours.
The strongest reason
We really click “Reject all”
We don't stop at whether the cookie banner exists. We actually click it and verify whether tracking cookies are really turned off. Storing cookies before consent is the most common fine from the Data Protection Authority.
No one else does this at this price levelWhat exactly we check on your website
Security & trust
HTTPS, SSL certificate validity and strength, basic security headers.
Cookies & GDPR
The whole cookie module: cookies before consent, a “Reject all” test on subpages too, GPC and dark patterns in the banner.
Visibility in Google
Title, description, H1, robots.txt, sitemap and duplicate www/non-www versions.
Mobile & speed
Display on phones and loading speed (Core Web Vitals).
Legal details
Does the site link to its legal notice, privacy policy and cookie policy? Without them, a fine can come before anyone even reads the content.
Hidden technical risks
Platform info leaks and easily accessible admin paths (e.g. WordPress).
What you get in the output
Every finding gets a clear priority
An entry-level check, not a penetration test — no vulnerability exploitation or attacks on the system.
The Complex Audit goes in depth across all 39 areas — from cookies and GDPR (the core, where the highest fines apply) to security, email, performance, SEO and legal-document compliance against the law. Our specialist manually assesses every finding and places it into business context.
Builds on the Mini Audit and adds 12 in-depth areas, 9 cookie checks and 4 legal-document checks against the law — cookies, GDPR and impressum always, terms & conditions for e-shops. Result within 5 business days.**
The main added value
Your documents checked against the law and against your website’s reality
Four specialised analyses compare your cookie notice, privacy policy, legal notice and terms and conditions with the law and with what we actually measured on your website. A specialist manually reviews every finding, places it into business context and writes a prioritized fix plan.
In-depth protection from regulator finesWhat we review in depth
Security & encryption
TLS versions and cipher suites, certificate completeness, security headers in depth.
Legal document compliance
Cookies, GDPR and impressum are always checked, terms & conditions for e-shops. We compare the text directly against the wording of the law and the site's real behaviour — not a lawyer's opinion, but we stick to the letter of the law and every finding is confirmed by a specialist.
Email & domain
SPF/DKIM/DMARC against fraudulent emails + DNS and domain lifespan.
GDPR and third parties
Whether consent holds across the website and who receives your visitors’ data.
Vulnerabilities & data leaks
Known CMS CVEs and publicly accessible sensitive files.
Performance, mobile & accessibility
Core Web Vitals, mobile usability, forms and WCAG 2.2 AA.
SEO & third parties
In-depth SEO, internal linking, language versions and external scripts.
What you get in the output
Every finding gets a clear priority and impact
This is not a penetration test — no vulnerability exploitation, login bypassing or attacks on the system.
An audit tailored to demanding projects — multiple domains, login-protected sections, APIs, e-shops and custom systems. Including things that aren't visible from the public website. We set the scope together in an introductory consultation.
Individual modules
Don't need a full audit? Pick only the areas you care about. You receive the result as a PDF report with an audit certificate.
Total: —
Select at least one module.Physical source code review
We go through the source code directly on your site or server and uncover risks that aren't visible from the public website — dangerous patterns in the code, configurations and sensitive spots.
A certificate for your own cookies
Large companies create their own technical and marketing cookies — without proper oversight these can border on unfair practices. We review them and issue a certificate that your cookies genuinely meet the strictest criteria of European legislation.
Legal texts reviewed by a partner law firm
Terms and conditions, the complaints policy and GDPR documents are assessed by our partner law firm — expert human judgement.
What we can check (by agreement)
Multiple domains and languages
Multi-domain and multilingual projects including subdomains.
Login-protected sections
Member and client zones via a test account.
E-shop and orders
Ordering process, cart and payment flow.
APIs and interfaces
Analysis of APIs and selected technical interfaces.
Administration & infrastructure
Configuration, risks, public services and the server.
Source code
Review of selected source code areas.
How it works
- Free introductory consultation
- A bespoke scope and price proposal
- Audit as agreed
- Report + certificate + in-person presentation
What you get
The audit does not include penetration testing — we do not offer vulnerability exploitation or aggressive security tests.
Compliance is not visible from outside. It lives in the setup.
A site's visual quality and its commercial performance say nothing about whether its processing of personal data meets EU legal requirements. Compliance is shown by the technical and legal state of the site.
What EU law requires
GDPR · Art. 5(2)
Accountability and proof
Regulation (EU) 2016/679 (GDPR) requires every processing of personal data to have a legal basis, to be transparent and demonstrable at any time.
ePrivacy · Art. 5(3)
Consent before cookies
Directive 2002/58/EC (as amended by 2009/136/EC), as transposed by national law, makes storing or reading information on a user's device — including marketing and analytics cookies and tracking scripts — conditional on their prior, demonstrable consent. Only strictly necessary cookies are exempt.
In practice, on many websites tracking scripts run before consent is given. Missing information notices toward data subjects are also common, as are publicly accessible documents that should never have been exposed.
These deficiencies usually do not arise intentionally — they result from configuration or an outdated setup. That has no bearing on the controller's legal liability.
The trigger need not come from the regulator
A complaint under Art. 77 GDPR can be lodged by any data subject whose data you process — a website visitor, a customer or a former employee. The supervisory authority handles the complaint and informs the complainant of its progress and outcome (Art. 77(2)), with no duty to warn you in advance.
Consequences of a breach
4%
of the company's total worldwide annual turnover — or up to €20M, whichever is higher (GDPR Art. 83(5))
These sanctions are not theoretical — regulators impose them
Scale of GDPR enforcement across the EU/EEA
Total fines imposed, by year
| Year | Count | Amount |
|---|---|---|
| 2020 | 414 | €174M |
| 2021 | 531 | €524M |
| 2022 | 607 | €844M |
| 2023 | 561 | €2.1B |
| 2024 | 320 | €1.2B |
| 2025 | 406 | €1.1B |
| 2026* | 149 | €225M |
| Total since 2020 | 2,988 | €6.2B |
* 2026 as of 16 Jun · Source: GDPR Enforcement Tracker (CMS)
The curve is falling — but not because regulators have eased off. The number of fines stays in the hundreds every year; enforcement has simply become routine. Many companies have already cleaned up their websites and stopped paying for mistakes that were avoidable.
Is your company ready for a regulator's inspection?
Really?
Non-compliance is usually first spotted by a third party or the regulator, not by the operator.
An audit lets you uncover and fix these deficiencies in time — before someone else finds them.
Suspect misuse of your personal data?
See which authority in which EU country handles data protection, cookies and misleading practices, and how to report to it.
Where to reportThe question is not if.
The question is when.
Every day without an audit is a day when your website may contain an issue you do not know about — and that issue can cost much more than discovering it.
Without audit
- ×You do not know what an attacker sees before you do
- ×GDPR fine risk up to 20 million €
- ×Cookies without consent = legal violation
- ×A lost customer who does not trust the website
With audit
- ✓A precise list of what needs to be fixed
- ✓Peace of mind for business and accounting
- ✓Website technically and legally in order
- ✓Trustworthiness visible at first glance
- Mini within 24 h · Complex within 5 working days
- Results in 6 languages
- 100% discreet