LogoREDACT
// v2.1.0
Privacy Audit — Live
No data stored. No account required.

What is yourCMS leakingright now?

Paste any URL. Redact scans it in real-time and returns a brutalist scorecard — tracker count, cookie categories, third-party requests, data jurisdiction flags.

redact — privacy-audit
$
↑ Paste a URL above and press Enter_
No URLs stored
No account required
Open source
Capabilities

Open the evidence locker.
Every drawer is damning.

REAL-TIME BLOCKING

Every outbound request intercepted before it leaves your server. Zero third-party calls by default.

0requests blocked this session
LIVE REQUEST INTERCEPT
Active on all Redact instances
DATA JURISDICTION

Choose exactly which legal territory processes every byte. GDPR, CCPA, PIPEDA — enforced at the infrastructure layer, not the cookie banner.

47jurisdictions mapped
CONSENT ARCHITECTURE

Cryptographically signed consent records. No dark patterns. No pre-ticked boxes. Auditable trail for every reader decision.

100%audit-ready records
READER DATA SOVEREIGNTY

Every reader event, session, and interaction is stored in infrastructure you own. Export, delete, or port — complete data portability by default.

0
external calls
∞
data retention control
1-click
GDPR deletion
The capability grid delivered its verdict.
Your current CMS is leaking. Redact isn't.
Install RedactRun Another Audit
Before / After

See the deleted lines.
That's what Redact removes.

Standard CMSRedact
cms.config.ts⚠ 47 trackers
1-import GoogleAnalytics from '@next/analytics'
2-import { MetaPixel } from 'meta-pixel-react';
3-import HotjarTracker from 'hotjar-next'
4-import Intercom from '@intercom/messenger-js-sdk'
5  
6-// 47 trackers loaded on every page
7-// Reader data sent to 12 external servers
8-// GDPR compliance: ❌ uncertain
9  
10 export default function CMSConfig() {
11 return {
12- analytics: 'google-universal', // phones home
13- tracking: 'full-session', // no consent gate
14- cookies: ['_ga', '_fbp', 'hjid'], // 23 set
15 }
16 }
Audit SnapshotLEAKING
Trackers loaded47
External requests31
Cookies set23
Data jurisdictionUNKNOWN
GDPR compliantNO
Privacy Score: 12/100
Congressional hearing risk
Field Reports

From the people who can't afford
a single leak.

"
We were leaking 61 trackers on every investigation page. After Redact, our sources trust us with sensitive tips again. That's not a feature — it's the entire value proposition.
61→0trackers eliminated
Marcus Webb — Editor-in-Chief at The Sentinel Report
Marcus Webb
Editor-in-Chief
The Sentinel Report
"
I refused to ship Google Analytics. My investors kept asking for engagement data. Redact gave me self-hosted analytics with zero third-party calls — I can show them dashboards without selling my users.
0external calls
Priya Nair — Founder & CEO at Inkwell.dev
Priya Nair
Founder & CEO
Inkwell.dev
"
One data leak from our donor portal would mean congressional testimony. Redact's cryptographic consent records and data jurisdiction enforcement is the only thing standing between us and that nightmare.
100%audit-ready records
Diane Okafor — Executive Director at Civic Data Alliance
Diane Okafor
Executive Director
Civic Data Alliance
Live — Trackers Blocked Globally
2,847,391today

The audit ran.
The verdict is in.
Install Redact.

Your readers' data belongs to them. Your platform's analytics belong to you. Zero trackers. Zero telemetry. Total control.

$docker run -p 3000:3000 redact/cms:latest
Install Redact— free foreverRead the Docs
MIT Licensed
Self-hosted or managed
No usage telemetry
GDPR / CCPA / PIPEDA ready