Syrcha continuously audits your sites for GDPR, CCPA, WCAG and AI Act issues. Real browser checks, signed reports, no marketing theatre.
Public beta: 50% off your first 3 months.
Overall
86/100
GDPR
91/100
CCPA
74/100
/ capabilities
Real Chrome, real DOM, real network. We don't grep your HTML; we interact with consent banners, reject tracking, and verify what still fires the way an auditor would.
01 - interact
A real Chrome instance loads the site, clicks reject on the consent banner, and watches what still gets stored, sent, or set after you decline. Static crawlers can't see this. Auditors do.
02 - stamp
Every report carries an HMAC-SHA256 signature over the page state and rule set. Replayable, attributable, audit-ready.
03 - diff
See exactly what changed between Tuesday's deploy and today's. Regressions surface before legal does.
04 - fix
Network and cookie violations link to the offending request and the responsible script, alongside a worked example of remediation. Engineers fix in minutes, not meetings.
/ coverage
Every framework below carries its real status (live, beta, or not yet shipped) with the coverage it has today and the tier that unlocks it. We would rather show you the gaps than average them away.
GDPR
EU · EEA · UK
General Data Protection Regulation
Full ruleset live. Consent, lawful basis, DSAR routes, transfer notices.
WCAG
WCAG 2.1 / 2.2 · Section 508
Web Content Accessibility Guidelines
axe-core accessibility scanning live. 64 rules. Free covers 2.1 A; AA and 2.2 unlock on higher tiers, and each plan is scanned against the standards it includes. Section 508 conformance is reported from the WCAG 2.0 A+AA criteria it incorporates.
CCPA
California · USA
California Consumer Privacy Act / CPRA
Core ruleset in beta. "Do Not Sell" detection, consumer rights, sale disclosures.
AI Act
EU · phased through 2026
EU Artificial Intelligence Act
Transparency checks shipping Q3 2026. Chatbot disclosure, system docs, risk tier.
/ how it works
Add a URL, verify DNS ownership, set a cadence. Free plan covers your first domain, no card needed.
Headless Chromium loads, clicks reject on consent banners, captures every request and storage write before and after, typically under a minute on a normal page.
Findings, suggested fixes, diffs against the last run, and an HMAC-SHA256 signature over the rule set used. PDF, HTML, or webhook.
Overall
86 /100
GDPR
91 /100
CCPA
74 /100
WCAG
88 /100
no card · 1 domain · weekly scans
/ pricing
Start free, no card. 50% off your first three months when you upgrade, while we finish the AI Act ruleset. Cancel any time. No "contact sales" tier hiding the real price.
Kick the tyres, no card
Free while you need it
Solo sites & freelancers
$29 · first 3 months
Product teams shipping weekly
$99 · first 3 months
Agencies & consultancies
$249 · first 3 months
Beta discount holds for three months from sign-up. After that, list price. Cancel from settings without sending an email.
/ ready
First scan in under a minute. No card. No call. You'll know what's broken before you finish your coffee.