CIPA · ECPA · ADA · WCAG 2.2 AA · CCPA-aware
Scan any website in minutes to see exactly what personal data it transmits — before and after consent — and turn it into evidence for the CIPA, ECPA, VPPA, and ADA claims plaintiffs bring, so you can prioritize what to review with your team and counsel.
LawsuitGuardgoes beyond cataloging cookies. Enter a URL and it loads your site in a real browser, runs a controlled three-state consent experiment (No action, Reject All, Accept All), and performs request-level forensics on the actual network traffic — query strings and POST bodies — to document the pre-consent pixel firing, post-Reject leakage, undisclosed analytics, and WCAG/ADA barriers that plaintiffs' firms target. The result is a single Lawsuit Exposure Index with the exact payload, recipient, timing, and consent state behind every finding, plus step-by-step guidance to review with your team and counsel. It highlights potential exposure and does not determine legal compliance.
One scan covers the privacy, wiretapping, accessibility, and contractual risks that drive website litigation — each finding mapped to the law behind it.
Inspects the actual network requests your pages make — query strings and POST bodies — and records exactly what personal data leaves the browser and to whom: plaintext or hashed emails, phone numbers, advertising click IDs, and full-URL leakage. Seeing the data on the wire is the evidence behind pixel-wiretapping (CIPA/ECPA) claims, not just a list of trackers.
Runs a controlled experiment across three explicit consent states — No action, Reject All, and Accept All — and measures what fires and what data transmits in each. This isolates whether your banner actually gates tracking, flagging pre-consent firing and trackers that keep firing after Reject: the difference between a legal defense and a liability.
Runs an automated WCAG 2.2 Level AA audit with the industry-standard axe-core engine and folds it into the same exposure model as privacy — surfacing the missing labels, contrast failures, and keyboard traps behind ADA demand letters. One tool spans both statutory families that drive website litigation.
Maps observed transmissions to the elements of specific causes of action — CIPA §631 wiretapping, VPPA, ECPA, GDPR lawful-basis failure, and ADA — so each finding reads as point-in-time, reproducible evidence for demand-letter defense, with the exact payload, recipient, timing, and consent state that supports it.
Export any scan as a hash-sealed, statute-mapped Evidence Package: numbered exhibits each carrying a SHA-256 seal, a FRE 902(13)/(14) certification, a chain-of-custody log, and an optional cryptographic signature — independently re-verifiable and tamper-evident, from a quick Snapshot to a Litigation-Ready tier. It supports authentication of what your site actually did; admissibility remains your counsel's call.
Returns one Lawsuit Exposure Index (0–100 with a Low/Moderate/High/Severe grade) computed purely from observed transmission events and accessibility barriers — not questionnaires — with each issue tied to the specific law and a suggested fix to review, so engineering and counsel can prioritize what to look at first. It flags potential exposure and does not determine legal compliance.
Paste any URL. No code, tags, or installation required.
LawsuitGuard loads your pages in a real Chromium browser and repeats them under No action, Reject All, and Accept All — capturing every network request and the personal data in each.
The scanner performs request-level PII forensics, checks whether tracking is truly gated by consent, runs a WCAG 2.2 AA accessibility audit, and reviews your privacy policy and terms for disclosure gaps.
Receive a Lawsuit Exposure Index with each finding mapped to the relevant law (CIPA, ECPA, VPPA, ADA, GDPR), the exact evidence, and a suggested, prioritized step to review with your team and counsel — and export a hash-sealed, FRE 902-certified Evidence Package (JSON or certified PDF) when you need court-ready documentation.
Hero deliverable
Turn any scan into a hash-sealed, statute-mapped forensic record you can hand to counsel. Every exhibit is sealed with a SHA-256 hash and a certification written to support authentication under Federal Rules of Evidence 901 and 902(13)/(14) — so an independent party can re-verify it and any tampering is detectable.
Consent-state transmission matrix, request-level forensics, and claim-theory packets as citeable, SHA-256-sealed exhibits.
A qualified-custodian certification and 902(11) notice language built to self-authenticate the electronic record.
A contemporaneous integrity log and an optional Ed25519 signature; reproducible and independently verifiable.
From a quick Snapshot to a Litigation-Ready package — exportable as JSON or a certified PDF.
Honest scope: an Evidence Package supports authentication— establishing the record is what it claims to be. It does not by itself determine admissibility, relevance, or legal compliance, which remain for the court and your counsel.
Pre-consent tracking pixels, session-replay, and chat tools that capture visitor activity before consent are the core fact pattern in California Invasion of Privacy Act and ECPA class actions.
Missing form labels, low color contrast, and keyboard traps are the violations behind ADA website demand letters. We audit against WCAG 2.2 Level AA automatically.
Meta Pixel, Google Ads, TikTok, Microsoft Clarity, Hotjar, FullStory and 55+ more are used to locate egress — then we inspect the actual query strings and POST bodies to document what personal data leaves the page and to whom.
We repeat each page under No action, Reject, and Accept to prove whether your banner actually gates tracking — flagging pre-consent firing and trackers that keep firing after Reject.
We verify your disclosures match the trackers on your site and detect arbitration and class-action-waiver language that reduces predatory class-action exposure.
An automated lawsuit-risk scan and a manual legal/accessibility audit are complementary: scan to capture the evidence and prioritize exposure fast, then route the highest-severity findings to counsel.
| LawsuitGuard | Manual audit | |
|---|---|---|
| Time to first evidence | Minutes | Days to weeks |
| Cost | Free scan; low subscription | Thousands per audit |
| Consent-state & PII-transmission forensics | Automated three-state experiment | Manual, sampled |
| WCAG 2.2 AA coverage | Automated (axe-core) | Manual, thorough |
| Reproducible evidence | Point-in-time snapshot, re-run anytime | Re-engage each time |
| Court-ready evidence package | Hash-sealed, FRE 902-certified, re-verifiable | Bespoke expert declaration |
| Best used for | Find & prioritize exposure fast | Deep counsel review of top risks |
ADA-related website accessibility lawsuits are filed in the U.S. each year, the majority citing WCAG failures.
of CIPA / pixel-wiretapping demand letters and filings now target websites running pre-consent trackers.
to a prioritized risk report — versus days or weeks for a manual review.
Figures are directional; verify current filing statistics with sources such as UsableNet's annual accessibility lawsuit report and legal-industry CIPA trackers before relying on them.
It's a tool that loads your site in a real browser and shows the lawsuit exposure hiding in its behavior. LawsuitGuard goes further than a cookie scanner: it runs a controlled three-state consent experiment (No action / Reject / Accept) and inspects the actual network requests — including POST bodies — to document exactly what personal data leaves the page, then maps that evidence to CIPA/wiretapping, ADA, VPPA, and privacy-law theories with suggested fixes to review, in minutes.
Most CIPA (California Invasion of Privacy Act) and ECPA claims target websites that run tracking pixels, session-replay, or chat tools that capture visitor activity before consent and share it with third parties. LawsuitGuard flags pre-consent tracking and session recording specifically.
The Meta Pixel can create legal risk when it fires before consent, runs on sensitive pages like health or finance, or transmits data that isn't disclosed in your privacy policy. Our scanner detects the pixel, checks when it fires, and shows whether your disclosures match.
ADA web compliance is generally measured against WCAG 2.2 Level AA. LawsuitGuard runs an automated WCAG 2.2 AA audit (via axe-core) to surface the violations — missing labels, low contrast, keyboard traps — that most often lead to ADA demand letters, ranked by severity. Automated testing surfaces many issues but cannot confirm full ADA compliance; manual review is still needed.
No tool can guarantee you won't be sued, but finding and fixing pre-consent trackers, weak consent banners, and disclosure gaps removes the exact evidence plaintiffs rely on, which can lower your risk. LawsuitGuard surfaces and prioritizes those issues so you and your counsel can address them.
A manual audit is thorough but slow and expensive, often taking weeks and thousands of dollars. LawsuitGuard delivers an evidence-backed exposure report in minutes, and each run is a self-contained, point-in-time evidence snapshot you can re-run anytime. The two are complementary — scan first, then send the highest-exposure findings to counsel.
An Evidence Package is a hash-sealed, court-oriented record of what your site actually transmitted, to whom, and under which consent state — with numbered exhibits, a chain-of-custody log, and a certification written to support authentication under Federal Rules of Evidence 901 and 902(13)/(14). Each exhibit and the package as a whole are sealed with SHA-256 hashes (and an optional cryptographic signature), so any alteration is detectable and an independent party can re-verify it. Honestly: it supports authentication — establishing the record is what it claims to be — but it does not by itself decide admissibility, relevance, or hearsay, which remain for the court and your counsel. Export it as JSON or a certified PDF in tiers from Snapshot to Litigation-Ready.
It surfaces indicators relevant to CIPA, ECPA, the ADA, WCAG 2.2 AA, VPPA, CCPA/CPRA-style opt-outs, COPPA, and TCPA, plus baseline web-security headers. It identifies risk indicators; it does not provide legal advice.
LawsuitGuard keeps your scan report so you can revisit it, but it does not retain the underlying content of scanned pages beyond what's needed to generate the report.
Most scans complete in a few minutes, depending on how many pages you choose to scan.
Re-scan after any marketing-tag, consent, or design change — new pixels and A/B tests routinely reintroduce risk. Each scan is an independent, point-in-time evidence snapshot, so you can run a fresh one whenever you need current documentation.
See the personal data your pages transmit, the consent gaps, and the accessibility issues plaintiffs look for — before they do.
Start your free lawsuit-risk scan