Skip to main content
MONITOR. DETECT. PROTECT.

Monitor your website for
trust-breaking issues.

PolicyGen scans for missing policy links, broken legal pages, tracking disclosure gaps, SSL/security signals, and trust-breaking website changes so you can review and fix trust-breaking issues before customers notice.

Websites break quietly. PolicyGen checks again automatically when monitoring is enabled.

Trust signals monitored
LINK
Policy links
Privacy, terms, cookie, refund, shipping, and contact paths.
PIXEL
Tracking signals
Analytics, pixels, tag managers, and obvious disclosure signals.
SSL
Security-lite
HTTPS, SSL status, security headers, and risky public endpoints.
PATH
Customer paths
Contact forms, visible email addresses, cart/checkout page presence, and console errors.
FIX
Plain-English fixes
Severity, evidence, and recommended next steps.

What you can do

Start with a trust scan, then use monitoring records and reports to track your website's trust signals over time.


About this project

Built for small teams trying to maintain website trust signals

PolicyGen is built for founders, operators, agencies, and small teams that need a practical way to find website trust gaps before they become customer-facing problems.

Automated checks are not a legal review, but they can help you spot missing links, broken pages, tracking disclosures, and basic security signals that deserve attention.

Plain language
Priority issues explained in terms that non-lawyers can act on.
No dark patterns
No manufactured urgency and no claims that an automated scan certifies your website.
Best-effort monitoring
Websites change. Run checks again when you ship new pages, scripts, or customer paths.
Your data is yours
Monitoring records and scan history belong to you. Export at any time, no lock-in.

Going deeper

When one scan is not enough

Trust monitoring needs continuity — tracking changes, storing scan history, and reviewing findings across a team or multiple client websites over time.

Create an account →
Review records

Keep website scan history, notes, and monitoring findings together.

Continuous scanning

Scheduled scans of your web properties with change detection alerts.

Multi-site monitoring

Monitor multiple websites from one dashboard and catch trust-breaking issues before customers notice.

Evidence snapshots

Keep dated scan records so changes can be reviewed against previous website signals.

Trust & transparency signals monitored

PolicyGen checks visible, publicly observable signals on your website. Built around common privacy and transparency expectations — not regulatory certification.

Privacy & transparency
Policy page presence
Checks whether privacy policy, terms of service, cookie policy, refund, and contact pages are present and reachable from the homepage.
Tracking disclosures
Analytics & pixel detection
Detects Google Analytics, Tag Manager, advertising pixels, and other tracking scripts — then checks whether a corresponding cookie or tracking disclosure is visible.
Security-lite signals
HTTPS & header checks
Checks HTTPS redirect, SSL certificate validity and expiry, and the presence of basic security response headers. No exploitation or penetration testing.
Customer trust paths
Contact & checkout visibility
Checks whether contact forms, visible email addresses, and cart or checkout links appear reachable. Surface-level only — no forms are submitted and no payments are processed.
Change detection
Monitoring & drift alerts
Scheduled re-scans compare current signals against previous results. Flags when policy pages disappear, tracking scripts change, or new trust issues appear. Monitoring plans only.
Plain-English findings
Prioritised issue summaries
Each finding includes what was detected, why it may matter, and a practical next step — written for operators, not lawyers.
What PolicyGen does not do
  • Certify regulatory compliance
  • Replace legal review or counsel
  • Determine whether a regulation applies to your business
  • Submit forms, process transactions, or access authenticated pages
  • Scan internal systems, APIs, or data storage

What signals do popular sites publish?

View signal index →
E-commerce
1 Squarespace 90%
2 Shopify 89%
3 WooCommerce 86%
SaaS
1 Calendly 94%
2 Airtable 86%
3 Notion 83%
Fintech
1 Wise 90%
2 Square 83%
3 Stripe 83%

What gets caught

These are the kinds of issues monitoring surfaces automatically — things that break quietly after a site update, a redesign, or a third-party change.

Detected
Privacy policy link disappeared after redesign.
Homepage no longer links to /privacy. Flagged on the next scheduled scan.
Detected
New tracking script added without a matching disclosure.
A Meta pixel was added to the site. No cookie notice references it.
Detected
Cookie banner no longer visible on the homepage.
Previously present. Missing after a theme update. Tracking scripts still active.
Detected
Checkout page terms link became inaccessible.
The linked terms page returns a 404. Visible on cart and checkout pages.
Detected
SSL certificate approaching expiry.
Certificate expires in 12 days. Site currently accessible but renewal is overdue.
Detected
Contact page no longer reachable from the homepage.
No visible email address or contact link found. Link in footer now broken.