Complianz
👤 Rogier Lankhorst (Built Really Simple SSL first (6M+ installs, top-10 WP plugin), so Complianz launched into a captive audience the day GDPR bit.)🌐 sitereally-simple-ssl.com𝕏LinkedIn
GDPR made a cookie banner mandatory overnight. Complianz shipped one into an audience of millions it already had.
Will it work? · our read
Distribution first. A commodity GDPR banner won because it shipped into 6M+ existing installs the moment the law bit. Ordinary product, rare funnel — audience was the moat, not a feature.
01How the money moves
GDPR (May 2018) makes cookie consent + a policy mandatory for every EU-facing site
→
Owner installs the free Complianz plugin; it auto-scans cookies and builds a region-aware banner
→
Owner upgrades to Premium ($59-399/yr) for multi-region, consent records + integrations
02The numbers
1M+
active installs
WP.org
6M+
sibling SSL plugin base
team.blue
$5-27M
'23 team.blue sale, est.
dealmaker
No first-party revenue disclosed; freemium at $59-399/yr on 1M+ installs. WordPress.org
Private freemium plugin; only public money figure is the '23 team.blue sale (third-party est.).
03Weight class — CENTStap an axis
Control Mid
Rides the WordPress.org listing + the SSL funnel, but is 100% dependent on WordPress staying dominant.
04The key move
Reuse your audience
Rogier already ran Really Simple SSL — a top-10 WP plugin, millions of installs. When GDPR hit May 2018 he shipped Complianz weeks later into that base. Distribution: solved before any marketing.
fact
The counter-intuitive move
The banner was a commodity dozens of devs also built. What almost none of them had was a million-install plugin already aimed at the exact same buyers.
our read
05Where the moat is
The banner is copyable in a weekend. The funnel took a decade.
WordPress.org free listing = organic install funnelPiggybacked Really Simple SSL's 6M+ baseAuto cookie-scan + region-aware policy engineShipped weeks after GDPR bit (May 2018)
06How it diesmedium confidence
Same plugin, no audience = dead. Dozens of identical GDPR banner plugins launched and never crossed a few hundred installs. The product was never the moat — distribution was, and they lacked it. our read
Show evidence · counter
Evidence: WordPress.org lists 900+ cookie/consent plugins; the long tail sits near zero installs while a handful with distribution dominate.
Counter: Bull case: the law isn't going away and Complianz keeps shipping across 7 regions — but a WordPress-native or browser-native consent standard would gut the need.
07Against rivals
Cookie consent is a crowded commodity. Complianz won its slice through the SSL plugin's funnel, not a better banner. our read
08Who uses it
WordPress site ownersEU-facing bloggersWooCommerce storesWeb agenciesShopify merchants
★Would it work for you?
If a new law spiked demand tomorrow, whose audience could you ship the fix into on day one?
Its edge wasn't the banner — it was an existing plugin's audience. Where's yours? We don't score you — you answer.
🚀Use it as a launchpada prompt for your own AI
Copy → paste into your AI → then develop it freely in the conversation.
You are a sharp, honest startup strategist. Use the proven case below as a launchpad for MY idea — help me find my own angle, not copy it.
<my_profile>
Domain I know: [your domain]
My unfair advantage (access/audience): [your edge]
Interests: [your interests]
Resources & goal: [your resources] · [your goal]
</my_profile>
<case name="Complianz" model="saas">
What it does: A WordPress plugin that auto-generates a GDPR/CCPA cookie-consent banner + policy, free with $59-399/yr premium tiers.
Why it won (moat): Distribution: launched into Really Simple SSL's 6M+ installs the moment GDPR made consent mandatory in May 2018.
Weakest axis (CENTS): The banner is a commodity (900+ clones) and the whole business lives inside WordPress.org + the SSL funnel.
How it could die: A copycat with no audience dies unseen; a WordPress- or browser-native consent standard would erode the need.
</case>
<task>
Be a skeptical operator, not a cheerleader. No generic startup platitudes. If my angle is weak, say so plainly.
First, a reality check: markets like this mostly fail. State the honest base rate (how crowded/hard is this?) and the ONE specific thing that would have to be true for ME to be the exception — grounded in my profile above.
Then a compact table:
- Fit — does this pattern suit my edge, or fight my gap?
- Angle — my sharpest differentiation vs Complianz (concrete, not "better UX")
- Distribution — exactly where my first 100 users come from (this is the hardest part — be specific, not "content marketing")
- Risk — its "how it dies" (above) in MY situation
Finish with one line: "The single thing to do next."
Use only the facts above; if data is thin, say so — never invent numbers.
Then stay with me and go deeper on whatever I ask — tech stack, rough cost & time, the smallest MVP to test, pricing, or timing.
</task>
✓ Copied — paste into your AI
👤Placeholders like [your domain] auto-fill from your profile — example values for now.Set up profile →
Sourcesupdated · daily
WordPress.org — 1M+ active installs, 4.7 stars (1,645 reviews), updated Jun 2026team.blue newsroom — Dec 2023 acquisition; Really Simple SSL 6M+ installs, top-10 WP plugincomplianz.io/pricing — free + Personal $59 / Professional $179 / Agency $399 per yearRogier Lankhorst bio — built Really Simple SSL (2015), co-founded Complianz (2018) after GDPRdealmaker.nl — third-party estimate of the team.blue deal at EUR 5-25M (both plugins)
No first-party revenue is disclosed. Complianz is a private freemium plugin; the only public money figure is dealmaker.nl's third-party estimate (EUR 5-25M / about $5-27M) for the Dec 2023 team.blue deal — which covered BOTH Really Simple SSL and Complianz, so it is NOT Complianz revenue. Marked EST / unverified. Hard facts: 1M+ active installs and 4.7 stars (WordPress.org), free + $59-399/yr pricing (complianz.io), founded June 2018 by Rogier Lankhorst with Aert Hulsebos and Leon Wimmenhoeve, in direct response to GDPR. The distribution-moat framing is [our read], but the sequence (Really Simple SSL first, Complianz weeks after GDPR enforcement) is factual and confirmed. We never score you.