Usercentrics is the world’s most-installed consent management platform, powering 17% of every CMP-run cookie banner detected in a CHI 2025 study of 254,148 websites across 31 countries by Nouwens et al. CookieYes (12%) and OneTrust (8%) round out the top three by installation count, but the ranking looks different once you switch from counting installations to estimating revenue.
That gap between who runs the most banners and who earns the most money is the story behind every number below: the full installation ranking, how concentrated the market actually is, how it varies by country, and how the leaderboard has shifted in the last two years.
Which CMP has the largest market share in 2026?
Usercentrics leads with a 17% share of all detected CMP installations, the largest single vendor share found in the most recent cross-country measurement available. The figure comes from Nouwens et al.’s “A Cross-Country Analysis of GDPR Cookie Banners,” presented at CHI 2025 after scraping the top 10,000 websites in each of 31 countries with a GDPR or ePrivacy obligation, 254,148 sites in total. Of those, 113,274 consent interfaces were identified as third-party CMPs, and Usercentrics accounted for 19,549 of them.
CookieYes and OneTrust are the only other vendors in double digits or close to it, at 14,302 and 9,301 detected installations respectively. Every other CMP vendor, and researchers found 115 distinct ones in the dataset, ranks below OneTrust individually.
| Rank | CMP | Installations detected | Share of CMP market |
|---|---|---|---|
| 1 | Usercentrics | 19,549 | 17% |
| 2 | CookieYes | 14,302 | 12% |
| 3 | OneTrust | 9,301 | 8% |
| 4 to 115 | 112 other vendors | 70,122 | 62.43% |
Source: Nouwens, Kristensen, Maalt, and Bagge, CHI 2025, 113,274 CMP installations across 254,148 sites.
That fourth row is doing a lot of work. Nearly two-thirds of the market is not held by any single vendor at all, it is split across a long tail of well over a hundred competitors, which is worth remembering the next time a single CMP claims to be “the industry standard.”
How concentrated is the CMP market by installations?
Not very, once you look past the top three. The three largest CMP vendors combine for 37.57% of all detected installations, according to the same CHI 2025 dataset, leaving 62.43% spread across the other 112 vendors researchers identified. That is a fragmented market by most software-industry standards, closer to a crowded plugin ecosystem than a market with one or two dominant platforms.
Figure 1: Installation share held by the top 3 CMPs versus everyone else. Source: Nouwens et al., CHI 2025.
A site owner comparing CMPs is not really choosing between three household names. Most competitors in this market are small, regional, or CMS-specific tools, and the published cookie policy has to stay accurate regardless of which niche banner vendor a site runs.
Does installation share match revenue share?
Not closely. Mordor Intelligence’s 2026 industry report, a market-size estimate rather than a website-count measurement, names OneTrust, TrustArc, Usercentrics (which now includes Cookiebot), Crownpeak, and Quantcast as the leading vendors by revenue, describing that group as controlling roughly half of global CMP market revenue. That is a meaningfully higher concentration than the 37.57% installation share held by the top 3 vendors in the CHI 2025 dataset.
Figure 2: Concentration looks different depending on whether you count installed banners or estimated revenue. Source: Nouwens et al., CHI 2025; Mordor Intelligence, 2026 industry estimate.
| Rank | Vendor named in revenue-tier ranking (Mordor Intelligence, 2026) |
|---|---|
| 1 | OneTrust |
| 2 | TrustArc |
| 3 | Usercentrics (incl. Cookiebot) |
| 4 | Crownpeak |
| 5 | Quantcast |
Note: Mordor Intelligence discloses only the aggregate share for this group, not a per-vendor breakdown, so treat the ranking order as the report’s own vendor list rather than a precise numeric rank. It is an analyst estimate, not a measured count.
OneTrust ranks third by website installations but appears first on the analyst-named revenue list, likely reflecting its enterprise focus; the company states it is used by over half of the Fortune 500. Installation count and revenue answer two different questions: which CMP shows up on the most sites, versus which CMP captures the most enterprise budget.
How does CMP concentration vary by country?
Sharply. Top-3 CMP concentration ranges from 36% of the local market in Romania to 64% in Denmark, per the CHI 2025 study’s country-level breakdown, more than double from lowest to highest. The global average of 37.57% sits close to Romania’s figure, which means most countries cluster toward the fragmented end rather than the concentrated end.
Figure 3: How far top-3 concentration swings between the least and most concentrated national markets. Source: Nouwens et al., CHI 2025.
Denmark’s higher concentration lines up with a specific vendor overlap: Usercentrics, which bought Danish CMP Cookiebot in 2021, competes there alongside Cookie Information, another locally rooted provider, for the same national top three. That kind of vendor consolidation inside one country’s market is the exception rather than the rule across the other 30 countries studied.
Do locally developed CMPs ever beat the global leaders?
Yes, in a handful of countries. Locally developed CMPs anchor at least one country’s top three in the CHI 2025 dataset: iubenda in Italy, tarteaucitron and Didomi in France, Shoper in Poland, Usercentrics in Germany, CookieHub in Iceland, Mozello CookieBar in Latvia, and Cookie Information alongside Usercentrics in Denmark. Outside of Usercentrics, Cookie Information, and Shoptet, none of these locally rooted vendors appear in more than one country’s top three, which suggests national CMP leadership is mostly a local phenomenon rather than a sign of a vendor about to break out globally.
Figure 4: How national CMP leadership maps against the global top 3. Source: synthesized from Nouwens et al., CHI 2025, country-level results.
For a broader look at how widely any CMP, global or local, has been adopted in the first place, see our breakdown of CMP adoption across 254,148 websites. Adoption and market share answer different questions: one measures how many sites use a CMP at all, the other measures which vendor they picked.
How has CMP vendor ranking shifted recently?
The leaderboard is not static. Usercentrics’ current lead is partly acquisition-built: it bought Danish CMP Cookiebot in 2021, folding a previously independent competitor into its installation count. More recently, Didomi acquired rival CMP Sourcepoint in July 2025, months after acquiring server-side tracking company Addingwell in April 2025, consolidating two mid-tier competitors into one vendor’s product line.
Figure 5: Consolidation moves that have reshaped the CMP ranking. Sources: Nouwens et al., CHI 2025; PR Newswire; Mordor Intelligence, 2026.
None of these deals have unseated Usercentrics from the top installation spot, but they show the mid-tier of the ranking is where most of the movement happens. Installation share and consolidation activity are one part of the picture; how well a given CMP actually performs once installed, meaning what share of visitors grant consent through it, is a separate benchmark question this ranking does not attempt to answer.
The Bottom Line
Usercentrics holds the largest single share of the CMP market by installations at 17%, with CookieYes and OneTrust close behind, but the top 3 combined still cover well under half of all detected CMPs. Revenue-based estimates suggest a somewhat more concentrated picture among enterprise-focused vendors like OneTrust, TrustArc, and Crownpeak, and country-level concentration swings from 36% in Romania to 64% in Denmark. If you run a website, the practical takeaway is that CMP choice is a fragmented decision with well over 100 credible vendors to pick from, and none of them replace the need for an accurate, current cookie policy. A cookie policy generator keeps that document in sync no matter which CMP, or which future acquirer of that CMP, ends up running your consent banner. For the compliance side of that same market, see our look at how many CMPs actually pass a 2025 audit.
Frequently Asked Questions
Which CMP has the largest market share? Usercentrics is the single largest CMP by detected installations, powering 17% of all CMP-run consent banners (19,549 of 113,274), according to a CHI 2025 study of 254,148 websites across 31 countries by Nouwens et al. CookieYes ranks second at 12% and OneTrust third at 8%.
How concentrated is the CMP market? The top 3 vendors (Usercentrics, CookieYes, OneTrust) cover just 37.57% of detected installations. Researchers found 115 distinct CMP vendors in active use, so the remaining 62.43% splits across 112 other platforms. By revenue, Mordor Intelligence’s 2026 estimate puts a top-5 group at roughly half of global CMP revenue.
Do the same CMPs lead in every country? No. Top-3 CMP concentration ranges from 36% of the local market in Romania to 64% in Denmark, and locally developed CMPs anchor at least one country’s top three, including iubenda in Italy, Shoper in Poland, and tarteaucitron and Didomi in France.
Is Usercentrics’ lead durable? Part of it is acquisition-driven: Usercentrics bought the Danish CMP Cookiebot in 2021. The wider market keeps consolidating too, most notably Didomi’s July 2025 acquisition of rival CMP Sourcepoint, so today’s ranking is not fixed.
Sources and References
- Nouwens, Kristensen, Maalt, and Bagge. (2025). “A Cross-Country Analysis of GDPR Cookie Banners and Flexible Methods for Scraping Them.” CHI 2025, ACM. Analysis of 254,148 websites across 31 countries; 113,274 detected CMP installations, 115 distinct CMP vendors.
- Mordor Intelligence. “Consent Management Market Size and Share Analysis.” Updated January 13, 2026. Names OneTrust, TrustArc, Usercentrics, Crownpeak, and Quantcast as leading vendors.
- Grand View Research. “Consent Management Market Size, Share Report, 2026-2033.”
- IAB Europe. Transparency and Consent Framework, official framework page and CMP/vendor registry.
- PR Newswire. (2025). “Didomi and Sourcepoint Join Forces to Build the Future of Privacy Technology.” July 8, 2025.
- OneTrust. Company overview and self-reported customer statistics.
Note: All figures verified as of September 2026. Installation-share figures reflect a single cross-country measurement (CHI 2025, data collected 2024) and are refreshed at least twice a year as newer measurements become available. Revenue-based vendor rankings are analyst estimates from Mordor Intelligence and should be treated as directional, not a precise measured count.
