Scanning Your Site for Trackers (Cookies & Scripts)

This guide explains how to configure and use Concord's tracker scanning features to automatically detect trackers (cookies, scripts, iframes, images, etc.) on your websites. Our tracker scanning helps you easily maintain visibility into the tracker technologies across your domains.

This document includes information on how to:

• Schedule a recurring scan of a website for new trackers including cookies and scripts
• Manually scan a website for new trackers
• Understand scan frequency options
• View and set tracker scan settings
• View Scan History
• View Scan Results

‍

Scheduling a Recurring Scan for Trackers on a Website

Configure your scan schedule settings to enable automatic scans.

1. In the Admin UI, go to Consent → Cookies & Scripts → Settings tab.
2. In the Scan Schedule section you can:
   • Enable Scheduled Scans
   • Set the scan Frequency
   • Set the Hour the scan will start (All times are in UTC)
   • Set the Day of Week the scan will run (Quarterly scans will run on the x day of the month)
3. Click Save Settings to save your settings. Your scan results will automatically display in the Scan History section of this page once the scan has completed.

‍

Understanding Scan Frequency Options

Your subscription tier will determine which frequencies are available to you. Please refer to the tier breakdown: https://www.concord.tech/pricing.

Free Plan: No Scheduled Scans (Manual Scans Only)

• 5 manual scans per month
• Works well for small personal sites that rarely change

Lite Plan: Quarterly Scans

• Run once per quarter on the specified day and hour
• Suitable for basic compliance monitoring of sites with infrequent changes

Essentials Plan: Monthly Scans

• Run once per month on the specified day and hour
• Appropriate for stable websites with less frequent changes

Pro Plan: Weekly Scans

• Run once per week on the specified day and hour
• Suitable for most production websites

Premium Plan: Daily Scans

• Run every 24 hours at the specified hour
• Best for high-traffic sites with frequent changes
• Provides most up-to-date tracker visibility

‍

Manually Scan Website for New Trackers

You can manually trigger a scan for new trackers on your website by using the following steps:

1. Navigate to Consent → Cookies & Scripts → Scan History tab and click the Start Scan button in the Most Recent Scan Results section.
2. Confirm the scan initiation in the dialog that appears.
3. Monitor scan progress in the Scan History section.

Once the scan completes, the Most Recent Scan Results window will display a summary of the scan results.

‍

Tracker Scan Settings

The Tracker Scan settings provide advanced options for extra compliance coverage, beyond the standard manual and scheduled scans that most projects use. These settings allow you to expand detection and classification when you need continuous monitoring or maximum visibility.

To view and adjust these settings:

1. In the Admin UI, go to Consent → Cookies & Scripts → Settings tab.
2. In the Tracker Scan Settings section, you can enable or disable the following options:
   • Enable Deep Scan: Activates the Deep Scan feature for your project. This mode is designed to uncover hidden or less common potential trackers (such as scripts, iframes, links, and images) that may not appear in a standard scan. Deep Scan provides broader visibility by surfacing a much larger set of items, but it usually requires extra review since many detected elements won’t need classification. Most can safely be ignored, but anything that interacts with or stores customer data should be reviewed and classified. This option is best used when maximum coverage is needed, such as during audits or stricter compliance checks.
   • Enable Real-Time Scan: Continuously monitors your site for new or changed cookies and scripts as users interact with it. Unlike manual or scheduled scans, which provide a snapshot, Real-Time Scanning helps keep your tracker inventory up to date automatically, while also allowing for detection of certain trackers that may not be detected by backend scans alone.

‍

If you make any changes to the scanner settings, make sure to click the blue “Save” button to commit any changes.

‍

View Scan History

To view your scan history, navigate to the Consent → Cookies & Scripts → Scan History tab. On this screen, you will find the scan history for real-time scans (if enabled), manual and scheduled scan history, and an overview of your most recent scan results.

‍

The Real-time Scanning section displays the following information:

• Status: Enabled (trackers will be detected in real-time) or Disabled (tracker changes will not be detected in real-time).

Note: If real-time scans are enabled, and any recent changes have been detected, that will also be shown here.

The Manual & Scheduled Scans section displays the following scan information:

• Date: When the scan was initiated.
• Status: Current scan status (Running, Completed, Failed).
• Type: Manual or Scheduled scan.
• Domains Count: Number of domains scanned.
• Results Summary: Count of trackers found by category.

Note: You can expand any of the completed scan history reports to view detailed results for a given scan.

‍

The Most Recent Scan Results section shows the following information for the most recent manual or scheduled scan:

• Total Trackers: Overall count of detected trackers.
• New Trackers: Previously undetected trackers found.
• Global Matched: Known trackers that match global database.
• Tracker Category Breakdown: Distribution across privacy categories including:
  • Analytics
  • Marketing
  • Functional
  • Strictly Necessary
  • Unclassified

‍

View Scan Results

To view your detailed scan results navigate to the Consent → Cookies & Scripts → Scan Results tab. On this screen, you will find a detailed summary of trackers that were found during your latest scan.

Note that the data here is different from the data on the Cookies & Scripts tab. The data on the Cookies & Scripts tab is your final production ready list that you can adjust over time. It determines which trackers are blocked and shown to users on your production website. The Scan Results on the other hand, is showing you the results of the latest scan activity and will show different information based on the latest scan and your particular scan settings. Each detected tracker will include one of the following matched values:

• Project: This tracker was already in your production Cookies & Scripts list.
• Global: This tracker matched a tracker in the Concord global library and was automatically added to your production Cookies & Scripts list.
• New: This tracker didn’t have a known match. You can choose to add it to your production Cookies & Scripts list here.

When viewing the Scan Results report, you can add discovered trackers to your production Cookies & Scripts list by clicking the Add button for a given tracker. Deletions are optional and will simply clean up this report if desired. For more details on how to categorize Unclassified or Ignored trackers, refer to the following article:

Discovery and Classification of Trackers (Cookies & Scripts)

You can also sort, filter, and export the list to CSV if needed.