DPDP Website Compliance Scanner
Point it at a public website. It reads up to ten pages and grades what it finds against the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 — 56 automated checks across 10 weighted domains, scored out of 100.
Running a scan is free and needs a ProtectComply account. The score summary is yours straight away; the full itemised report is a paid unlock.
What the scan gives you
A 0-100 compliance score, the band it falls in, every finding ranked by severity, and a remediation roadmap ordered in phases so the work has somewhere to start.
How it treats the site it scans
It obeys your robots.txt
If your robots.txt disallows automated crawling, the scan stops and tells you so rather than working around it.
It crawls slowly
One page every two seconds, up to ten pages. It is a compliance check, not a load test.
Public pages only
It never touches private networks or anything behind a login, so it sees your site the way a regulator or a search engine would.
You confirm you are authorised
Every scan requires you to tick that you are entitled to scan the domain you entered.
What it is not
The scan assesses publicly observable technical signals. It is not a legal audit, not legal advice, and not a guarantee of compliance or non-compliance — plenty of DPDP obligations leave no trace on a public page. Treat the result as a starting map, and have a qualified Data Protection Officer or privacy counsel review it. For the obligations a scan cannot see, the DPDP Act section guide is the better place to begin.
See where your site stands
Most teams find the gaps are in consent capture and the privacy notice, not in the places they expected.