EUComply
Open source · MIT

Compliance scanning in your terminal.

eucomply-scanner checks any URL for GDPR, NIS2, DORA and EAA technical gaps in seconds. Any CMS, any stack — one command.

Get started Try the web version

Install & run

Requires Node.js 18+. No sign-up, no API key, no tracking.

# Run without installing (recommended)
npx github:mahope/eucomply-scanner https://yourdomain.com

# Or clone & run locally
git clone https://github.com/mahope/eucomply-scanner
cd eucomply-scanner/cli && npm install
node bin/eucomply-scan.js https://yourdomain.com

Example output (real scan of webflow.com):

$ eucomply-scanner https://webflow.com
 EUComply Scan Report — webflow.com
║    HTTPS + HSTS OK                     PASS
║    No consent banner detected          CHECK MANUALLY
║    Forms present, privacy policy linked PASS
║    Legal pages linked                  PASS
║    3/4 security headers present        PASS
║  •  No DORA / resilience disclosures     CHECK MANUALLY
╚══════════════════════════════════════════════════

What it checks

Nine automated technical checks against EU requirements:

HTTPS + HSTS

TLS encryption and Strict-Transport-Security header (GDPR Art. 32).

Cookie consent

Detects 15+ consent platforms (Cookiebot, OneTrust, CookieYes…). ePrivacy Directive.

Forms & privacy link

Forms without a visible privacy-policy link are a top enforcement target (Art. 13).

Legal pages

Privacy policy, imprint, terms and EAA statement linked from the homepage.

Security headers

CSP, X-Content-Type-Options, Referrer-Policy — OWASP baseline, NIS2 Art. 21.

DORA disclosures

Operational-resilience information financial entities must publish under DORA.

Why a CLI?

  • CMS-independent — works on WordPress, Shopify, Webflow, Next.js, Squarespace, Wix or hand-written HTML. The scanner only needs a URL.
  • CI-friendly — pipe results into your build pipeline and fail deploys when compliance regressions appear.
  • Fast — sub-second scans over a public API. No agent to install on the target server.
  • Honest output — every check reports PASS, FAIL or CHECK MANUALLY. We never claim legal certainty a script can't have.

Need auditor-ready proof?

The CLI is free forever. For documented deliverables — PDF audit reports, DPA documents, NIS2 clauses and EAA statements — upgrade to EUComply Pro.

See Pro — $79/year →