Free compliance scanning for Shopify & WooCommerce stores
Find what's broken before your customers — or regulators — do. Run free scans for WCAG accessibility, SSL/TLS health, GDPR/CCPA cookie consent, security headers, and SPF/DMARC email authentication — no signup required.
No signup to see your score. Takes under two minutes.
Pick an angle
Each scanner reads only what's already public on your site — nothing to verify, nothing to connect.
Screen-reader gaps, keyboard-navigation dead ends, and contrast failures that create ADA/WCAG exposure.
WCAG 2.2 AA Run this scan →Consent banners, tracking scripts, and privacy-policy gaps under GDPR and CCPA.
GDPR / CCPA Run this scan →Checks for CSP, HSTS, X-Frame-Options and other response headers that guard against common attacks.
OWASP baseline Run this scan →Certificate expiry, outdated protocol versions, and mixed-content warnings on HTTPS pages.
TLS 1.2+ Run this scan →SPF, DKIM, and DMARC records — whether your domain can be spoofed for phishing.
SPF / DKIM / DMARC Run this scan →Confirms a privacy policy and terms page exist, are linked, and cover baseline required disclosures.
Presence & disclosure check Run this scan →Coming later
These need real access to a store — not just its public pages — so they wait for the account & site-verification system.
How a store collects, stores, and transmits card and customer data.
Requires account — later phaseSurfaces suspicious order and transaction patterns in plain language.
Requires account — later phaseTamper-evident logging for order and payment events.
Requires account — later phaseHow it works
Point it at your store. The scan runs on its own — nothing to install.
A plain-language report: what's wrong, why it matters, how urgent it is.
Keep the report, or have Elevoire resolve the flagged issues directly.
Run any of the six scans above and keep the report — or hand the flagged issues to Elevoire and we'll resolve them directly on your store.
What each scan checks
A free WCAG 2.2 AA accessibility checker that tests screen-reader compatibility, keyboard navigation, and color contrast — the same categories that drive ADA web-accessibility lawsuits against small business and Shopify/WooCommerce stores.
A free GDPR and CCPA cookie consent checker that detects whether tracking scripts (Google Analytics, Meta Pixel, TikTok Pixel) fire before a visitor consents, and whether a compliant cookie banner is present at all.
A free security headers checker (like securityheaders.com) that verifies Content-Security-Policy, HSTS, X-Frame-Options, and other headers that protect against XSS and clickjacking.
A free SSL certificate checker and TLS version scanner — confirms your certificate is trusted and not expiring soon, flags legacy TLS 1.0/1.1, and checks that HTTP actually redirects to HTTPS.
A free SPF, DKIM, and DMARC checker (email authentication lookup) that shows whether your domain is protected against email spoofing and phishing impersonation.
A free privacy policy checker that confirms your privacy policy and terms of service are linked from your homepage and disclose the baseline items regulators expect: what data is collected, a contact method, and opt-out rights.
Questions
Yes. All six scans — accessibility, cookie/consent, security headers, SSL/TLS, email authentication, and privacy policy checks — run for free with no signup or account required.
WCAG 2.2 AA is the standard most ADA web-accessibility lawsuits are measured against. Our accessibility checker tests your site for screen-reader compatibility, keyboard navigation, and color-contrast issues against that standard.
If your site sets non-essential cookies or loads tracking scripts like Google Analytics or a Meta Pixel before a visitor consents, that's a common GDPR/CCPA gap. The Cookie & Privacy Check flags exactly this.
Without SPF and DMARC, anyone can send phishing email that appears to come from your domain, and receiving mail servers have no instructions for how to handle spoofed messages. The Email Domain Security Check tests for both.
Yes — all six scans work on any public website, including Shopify and WooCommerce storefronts, since they only need your site's URL to run.
Each scan result is saved to a private, shareable report link. Scans aren't linked to an account since no login is required for the free tier.