Lokker

Lokker is a privacy intelligence platform that documents what a website actually does at the network layer and enforces data-handling rules in real time, built with particular emphasis on the evidentiary needs of defense counsel, law firms, and legal and compliance teams.

Key features and functions include:

Litigation-ready evidence of network behavior
When a privacy complaint or regulatory inquiry arrives, Lokker documents which third-party scripts ran on which pages, what data they sent and to whom, and how consent behavior compared to what the client's privacy policy represented, giving defense counsel a point-in-time factual record rather than assumptions about what a consent dashboard displayed.

Consent and GPC validation for defense strategy
Runs automated browser flows across accept, reject, and Global Privacy Control (GPC) states to confirm whether a client's consent management platform actually stopped data collection or merely displayed a banner, which is critical when the underlying allegation is that consent controls failed.

Remediation verification through rescanning
After a client removes a tracking pixel, reconfigures a consent management platform, or patches a consent gap, Lokker rescans the site and documents that the behavior changed. Closing an internal support ticket is not proof the data stopped moving; a rescan is.

Reason codes mapped to legal exposure
Privacy Edge scores privacy risk from 0 to 1000 across seven categories (cookies, form data, session replay, trackers, consent, geo, and perimeter security) and maps findings to reason codes tied to specific laws and documented enforcement or litigation patterns, including GDPR, CCPA/CPRA, HIPAA, and VPPA.

Discovery-formatted exports
Produces a Payload Explorer export detailing every payload sent to every third party (query parameters, cookies, event data, and POST body keys), built for litigation discovery and technical forensics, alongside PDF risk-and-remediation and GPC compliance reports formatted for privacy teams, legal counsel, and insurance underwriters.

Continuous monitoring after a claim
Supports ongoing monitoring following a complaint or engagement so that counsel and clients can stay ahead of the next issue rather than relying on a single point-in-time scan.

Guardian runtime enforcement
Uses a single JavaScript snippet to intercept outbound scripts, pixels, fetch calls, and XHR requests before they leave the browser, blocking requests that violate configured trust rules.

Portfolio-scale engagement
Used across single-site engagements and large, multi-property portfolios, supporting firms and in-house legal teams building a repeatable web-privacy practice rather than a one-time review.