4.2/5
G2 rating
178 reviews
Report
Should I Use Cookiebot?
Cookiebot CMP by Usercentrics is your CMP for effortless GDPR compliance. Try Cookiebot for free to manage cookies and consent preferences on your website.
Depends
DependsBuy Cookiebot if you need a Google-certified, auto-scanning CMP across multiple domains and can absorb rising prices.
Solid Google-certified CMP users like for ease of use, but 2025 price hikes are pushing buyers to cheaper alternatives.
Confidence: High
500,933
Live websites
Current installs per BuiltWith
€7/mo
Starting price
Premium Lite; free tier exists
Yes
Free tier
Up to 50 subpages
Value for money
2
Base price doubled in 2025; users complain
Ease of use
4
Users consistently praise ease of use
Feature depth
4
Comprehensive scanning; Google-certified CMP
Security posture
2
Recent WordPress plugin CVEs; credential exposure flagged
Pros
Cons
Gotchas
- highAugust 2025 hike doubled base Premium from ~€15; expect further changes²
- mediumBilled by subpages/domains, not visitors — site growth silently raises costs
- mediumWordPress plugin has had CSRF and authorization-bypass CVEs; keep it updated
- lowTrustpilot review mentions friction canceling a website subscription⁵
Best for
- Multi-domain sites needing GDPR/CCPA consent
- Teams wanting Google-certified Consent Mode support
- Set-and-forget automated cookie scanning
- Agencies managing client-site compliance
Not for
- One-page sites that only need a basic banner
- Price-sensitive buyers — base pricing doubled in 2025
- Security-first orgs wary of plugin CVEs
- Anyone needing predictable, stable annual costs
Companies that use it
- Datalemon
- Epec
Pricing
Free
$0
- Up to 50 subpages
- Basic consent banner
Premium Lite
€7/mo
- Entry paid tier
- Small sites
Premium
Varies by subpages
- Full features, multiple domains
- Doubled from ~€15 in Aug 2025
Security
Several CVEs affect the WordPress plugin (patched in updates); Hudson Rock flags exposed credentials tied to the vendor domain.
- CVE-2026-25407 — missing authorizationMedium-severity authorization bypass disclosed June 2026.⁸
- CVE-2025-1666 — CSRF in WordPress pluginCross-site request forgery in the Cookiebot WordPress banner plugin.⁹
- Exposed infostealer credentialsHudson Rock flags 6,071 stealer-log credentials tied to; high threat posture.10
What users say
Users like the ease of use and automated scanning but increasingly complain about pricing hikes.
“CookieBot keeps going crazy with pricing. I really don't like how they”
“Users consistently praise the ease of use and effective compliance features”
“I switched away from Cookiebot for the same reason and ended up using Comp”
Alternatives
Compare Cookiebot with each alternative.
CookieYes
Strong budget-friendly Cookiebot alternative for small businesses
Cookiebot vs CookieYesiubenda
All-in-one privacy and cookie compliance suite
Cookiebot vs iubendaCookieFirst
Direct CMP competitor marketing itself as the Cookiebot alternative
Cookiebot vs CookieFirstKetch
Enterprise-leaning CMP positioned against Cookiebot on G2 numbers
Cookiebot vs KetchFull analysis
Based on 20+ public sources
Sources
- Cookiebot pricing planscookiebot.comofficial
news
- Cookiebot Review 2026 — Consentlyconsently.netreview
review
- Cookiebot Reviews — Trustpilottrustpilot.comreview
review
- Cookiebot CMP Review — Stylefactorystylefactoryproductions.comreview
security
- CVE-2025-1666 — NVDnvd.nist.govsecurity
- Cookiebot infostealer credentials — Hudson Rockhudsonrock.comsecurity
- Cookiebot WordPress plugin (Google-certified)es.wordpress.orgofficial
Rate this review
Anonymous. You can change your vote.
Loading votes…
Ask a follow-up
Ask if a use case fits. Answers stay inside this report and its sources.
Comments
One queue. No replies. Give a display name first. Limit: 7 comments per day.
No comments yet.