Sorrel

Website audits and monitoring

Everything about your website, in one Trust Score.

Sorrel checks your website in 60 seconds for compliance, security, vendor risk, accessibility and availability, and rolls it all up into one Trust Score. Every finding comes with a severity, a legal source and instructions for fixing it.

Free scan without an account, from €19 per month

Open Sorrel View pricing

What it's about

Cookie banners tell you that cookies are being set. Sorrel checks whether that is even allowed. For many mid-sized companies, their own website is an unknown risk: trackers firing before consent, missing security headers, US services without a data processing agreement, images without alt text.

A scan goes through your site like an auditor would: first visit, banner, rejecting, privacy policy, legal notice (Impressum), score. What you get is a prioritized list with the location of each finding, the legal norm and a code snippet to fix it, ready to print for your lawyer or data protection officer.

Sorrel fetches your website, not your audience: no visitor data from the scanned sites is stored. The servers are in Germany.

How it works

Enter a domain
Free scan without an account and without a credit card, result in about 60 seconds.
Read the findings
Every finding with severity, legal norm and fix snippet, sorted by impact.
Fix and monitor
Work through the tasks, get daily re-scans on the Pro plan and a heads-up when things slip.

Sorrel: risk score with findings and legal sources

What Sorrel can do

MCP server for Claude and Cursor, REST API from the Pro plan, white-label reports for agencies.

Compliance and privacy

Cookies, trackers, consent, legal notice and privacy policy, with the legal source such as § 25 TDDDG.

Security

Security headers, TLS, DNS, email authentication and exposed secrets.

Vendor risk

Over 1,000 detected services with risk class, DPA status and third-country transfers.

Accessibility

Alt text, headings, form labels and ARIA, based on WCAG.

Uptime

Synthetic monitoring, incidents, status page and a performance baseline.

AI compliance

Transparency obligations under Art. 50 of the EU AI Act, an AI bill of materials and a check for prohibited practices.

Trust Score

One value across all areas, comparable, shareable and trackable over time. Methodology openly documented.

Fixes with a recipe

For each finding, a code snippet, an effort estimate and the legal source.

Vendor directory

Automatic inventory of all providers with risk class, DPA status and transfers.

MCP and API

Scan and query from Claude, Cursor or your pipeline.

Privacy and security

Servers: in Germany
Visitor data: not stored
Checks: over 180
Detected services: over 1,000
Reports: print-ready, with norm and date
Documents: DPA, subprocessors, privacy

Pricing

As of October 2026. Current prices at usesorrel.io.

Free

€0

instant scan

No account
Up to 3 scans a day

Starter

€19

per month

5 domains
Weekly monitoring
Vendor inventory, fix snippets

Pro

€49

per month

25 domains
Daily monitoring
Trust Score, API access

Agency

€149

per month

Unlimited domains
White-label report
Team seats, SSO

Who Sorrel is for

Agencies
Reusable white-label reports for every client.
In-house teams
Compliance without calling the lawyer for every step, as tickets instead of PDFs.
Website owners
One scan, one to-do list, less risk of a cease-and-desist letter.
Data protection officers
Audit log with section number and date.