Consent management platforms run from free to more than $10,000 a year. Where you land depends less on the sticker price and more on how each one bills: per domain, per pageview, per session, per visitor, or a custom enterprise quote. Two tools with similar headline prices can cost wildly different amounts once you plug in your real number of sites and your real traffic. Here's what the major CMPs actually charge in 2026, and how to compare them fairly.
Key Takeaways
- 01CMP pricing runs from free to more than $10,000/yr; most self-serve tools start at $10-30/mo, enterprise suites are sales-gated.
- 02The billing unit matters as much as the price: per domain, per pageview, per session, and per visitor scale very differently.
- 03Per-domain pricing (Cookiebot, CookieYes) compounds fast across sites; flat visitor-based pricing stays predictable.
- 04Enterprise CMPs (OneTrust, TrustArc) don't publish prices and start around $10,000-15,000/yr plus implementation.
- 05ConsentStack anchors the transparent end: $29/mo flat for 2 domains, billed by unique visitors.
The short answer
Most self-serve CMPs have a free tier and paid plans that start around $10 to $30 a month, climbing to $50 to $200 for higher volumes or unlocked features. The big enterprise privacy suites, OneTrust and TrustArc, don't publish prices at all and typically start around $10,000 to $15,000 a year plus implementation. The table below shows where each one begins.
What CMPs cost at a glance
Prices verified against each vendor's public pricing, or for the sales-gated tools against third-party transaction data from Vendr, in July and August 2026.
| Platform | Free tier | Entry paid plan | Billed by | Notes |
|---|---|---|---|---|
| ConsentStack | Yes (1k visitors, 1 domain) | $29/mo (30k visitors, 2 domains) | Unique visitors | +$5/extra domain; Business $79/mo covers 1M visitors |
| Cookiebot | Yes (50 subpages) | ~EUR30/mo per domain | Subpages, per domain | Base price doubled Aug 2025; EUR |
| CookieYes | Yes (5k pageviews) | $10/mo per domain | Pageviews, per domain | Geo-targeting needs Pro ($25) |
| iubenda | Yes (limits not published) | $6.99/mo (25k pageviews) | Pageviews, per site | Overage EUR0.05 per 1,000 pageviews |
| Termly | Yes (10k views) | $14/mo per site | Banner views | Pro+ $20/mo, unlimited views |
| Axeptio | No | $7/mo (2.5k pageviews) | Pageviews, 1 domain | Small $29/mo covers 5k pageviews |
| Usercentrics | Yes (1k sessions) | $8/mo | Sessions | Owns Cookiebot |
| consentmanager | No (14-day trial) | EUR23/mo (100k views) | Pageviews | Essential EUR59/mo covers 1M views |
| Osano | Yes (5k visitors) | $199/mo | Visitors | Large free-to-paid jump |
| Ketch | Yes (5k users) | $150/mo | Visitors | Plus tier $499/mo (annual) |
| Complianz | Yes (WordPress) | ~EUR59/yr per site | Per site, annual | WordPress plugin only |
| Didomi | No | Sales quote | Sales quote | Essential, Advanced and Premium all quote-only |
| Transcend | No | Sales quote | Sales quote | Consent sits inside its Privacy Rights product |
| OneTrust | No | ~$10,514/yr (Vendr) | Sales quote | $10k annual minimum (2026) |
| TrustArc | No | ~$15,000/yr (Vendr) | Sales quote | Consent module of a suite |
A few of these numbers deserve a second look, because the billing unit changes what they actually mean.
Why the billing unit matters more than the price
The headline price is only half the story. What you're charged per is the other half:
- Per domain (Cookiebot, CookieYes). Each site is a separate subscription. Cheap for one site, expensive for ten.
- Per pageview (CookieYes). One visitor who reads five pages counts as five. The meter runs faster than your visitor count.
- Per session (Usercentrics). A returning visitor starts a new session each time, so sessions pile up faster than unique visitors.
- Per visitor (ConsentStack, Osano, Ketch). Each person counts once a month. The most predictable unit, and usually the smallest number.
- Sales quote (OneTrust, TrustArc). No public number; you get a custom price after a procurement process.
A $25-per-domain plan and a $29 flat plan look identical at one site. At ten sites, the per-domain plan is $250 a month and the flat plan is closer to $70. Before you compare headline prices, multiply by your real number of sites and convert to your real traffic unit.
The hidden costs to check
Beyond the plan price, these are the line items that surprise people:
- Gated features. Geo-targeting, branding removal, and consent logs are often reserved for higher tiers, so the plan you actually need may be two steps up from the entry price.
- Overage and suspension. Some tools charge per extra 1,000 pageviews; others suspend your banner entirely when you hit a limit, which means trackers can fire without consent at your busiest moment.
- Implementation fees. Enterprise suites add one-time setup fees, commonly $10,000 to $50,000, on top of the subscription.
- Renewal increases. Sales-gated contracts commonly rise 20 to 40 percent at renewal.
What about "one-time payment" cookie banners?
It's a common search, and the honest answer is that consent management isn't really a one-time purchase. Regulations change, tracker and cookie lists need updating, and consent records have to be stored and kept current. A genuine CMP is an ongoing service, which is why the real ones are subscriptions. A one-time-payment "cookie banner" script is usually a static banner that displays a message but doesn't maintain compliance as the rules or your trackers change. It can be worse than nothing, because it looks handled when it isn't.
The transparent end of the market
If predictable pricing is what you're after, ConsentStack sits at the flat, public end: $29 a month on Pro for two domains, $5 per additional domain, billed by unique monthly visitors, with a free tier that actually blocks scripts. Geo-detection and all 195+ regulations are on every tier, not gated behind an upgrade. No sales call, no per-pageview meter, no per-domain stacking.
Check the visitor allowance before you pick a tier, because that is what decides the plan, not the headline price. The free plan covers 1,000 unique monthly visitors, Pro at $29 covers 30,000, and Business at $79 covers 1 million, with extra capacity sold in $25 packs of 500,000. Domains work the same way: two are included on Pro, three on Business, and each additional domain is $5. So a site doing 500,000 visitors a month across five domains is on Business at $79 plus two extra domains, which is $89 a month, not Pro with add-ons.
That doesn't make it the right tool for everyone. If you need a full enterprise privacy program with data mapping and DSAR automation, OneTrust or TrustArc is the category. If you live entirely inside WordPress, Complianz is cheap per site. But for most sites that need website consent handled correctly at a price they can predict, the flat model is hard to beat.
Full pricing breakdowns
For a deeper look at the four most-searched, see the individual teardowns: Cookiebot pricing, CookieYes pricing, OneTrust pricing, and TrustArc pricing.
Five more platforms come up often enough to be worth a short answer, even without a full teardown.
How much does iubenda cost?
iubenda starts at $6.99 a month (EUR5.99) for Essentials, which covers 25,000 pageviews on one site. Advanced is $27.99 for 50,000 pageviews and Ultimate is $119.99 for 150,000. Pricing is per site and metered by pageviews, with overage at EUR0.05 per 1,000. There is a free plan, but iubenda does not publish its limits.
How much does Axeptio cost?
Axeptio has no free plan. The cheapest tier, Extra Small, is $7 a month for 2,500 pageviews on one domain. Small is $29 for 5,000, Medium $69 for 100,000 and Large $129 for 500,000. Paying annually saves about 10 percent on the larger tiers. Everything is metered by pageviews, so a content-heavy site climbs tiers quickly.
How much does consentmanager cost?
consentmanager starts at EUR23 a month (about $25) on Starter, which includes 100,000 pageviews, with extra views at EUR0.11 per 1,000. Essential is EUR59 a month for 1 million views and drops overage to EUR0.05. Enterprise is quoted. The pricing page lists no free plan, only a trial, and everything is metered by pageviews.
How much does Didomi cost?
Didomi does not publish prices. Its three CMP tiers, Essential, Advanced and Premium, all say contact us, and the buying motion is a demo request rather than a signup. There is no free CMP plan. The free tier shown on its pricing page belongs to Addingwell, its server-side tagging product, not to the consent platform.
How much does Transcend cost?
Transcend does not publish prices either. Every package is quoted by sales and there is no free tier. Consent management is not sold on its own: it sits inside the Privacy Rights product alongside data subject requests, so you are buying a broader privacy platform rather than a cookie banner.
Check what you're actually paying for
Whatever you're paying, it's worth confirming your banner actually blocks trackers before consent, because a banner that doesn't isn't buying you compliance at any price. Run your site through our free compliance scanner to see what fires before and after someone clicks Reject. About a minute, no email.
CMP pricing FAQ
CMP pricing ranges from free to more than $10,000 a year. Most self-serve platforms have a free tier and paid plans from about $10 to $30 a month, rising to $50 to $200 for higher volumes. Enterprise suites like OneTrust and TrustArc are sales-gated and typically start around $10,000 to $15,000 a year plus implementation.
Several CMPs have a free tier, including ConsentStack, CookieYes, Termly, Osano, and Usercentrics. Among paid plans, CookieYes ($10/mo per domain) and Termly ($14/mo per site) have among the lowest entry prices, though features like geo-targeting are often gated to higher tiers. ConsentStack includes geo-detection and all regulations on its free tier.
Yes. ConsentStack, CookieYes, Termly, Osano, Usercentrics, and Ketch all offer free tiers, though the limits and included features vary widely. Some free tiers show a banner but don't block trackers or store consent, so check that the free plan actually manages consent rather than just displaying a notice.
OneTrust is a broad enterprise privacy platform, and cookie consent is one module among many (data mapping, DSAR automation, AI governance). Its pricing is built for that scope, with a $10,000 annual minimum as of 2026 plus implementation fees, even if you only need the banner.
Usually not. Compliance is ongoing: regulations change, tracker lists update, and consent records must be stored and maintained. One-time-payment banner scripts tend to be static and don't keep up, so they can leave you exposed while looking handled.
See what your cookie banner actually does
Run a free compliance scan against EU and US rules and find out what fires before consent. No signup.
Related Posts
Cookiebot Pricing Explained (2026): What You Actually Pay
What Cookiebot really costs in 2026: the per-subpage tiers, the August 2025 price increase, and the per-domain math, with a flat-priced alternative from $29/mo.
CookieYes Pricing Explained (2026): What You Actually Pay
What CookieYes really costs in 2026: the per-domain tiers, the features gated behind Pro and Ultimate, the pageview-limit banner suspension, and a flat-priced alternative from $29/mo.
OneTrust Pricing Explained (2026): What It Actually Costs
OneTrust doesn't publish pricing. What real buyers pay in 2026 (Vendr median $10,514/yr), the $10k minimum, implementation fees, and renewal hikes, with a flat $29/mo alternative for website consent.
Complianz Pricing Explained (2026): Free vs Premium, Decoded
What Complianz really costs in 2026: the free plugin's real limits, Premium from $59 to $399 a year, the per-site tiers, and when a WordPress plugin stops being enough.