Features
Everything A11y Audit does
Discovery, scanning, manual review, remediation, evidence, and the public-facing pieces ADA Title II actually asks for — in one platform, instead of five tools and a spreadsheet.
Discovery and scanning
Find it all, then test it
You can't fix what you never found. A11y Audit inventories your digital estate first, then tests every part of it against the standard that fits.
Site Crawling
Start from a single URL and A11y Audit walks your site, building an inventory of every page and PDF it finds. Set crawl depth, page and document limits, rate limits, and paths to skip — then schedule it to run again on a cadence.
Web Page Scanning
Pages are scanned in a real headless browser, so what gets tested is the fully rendered page your visitors receive, including content that loads dynamically. Checks include the WCAG 2.2 additions: focus appearance, target size, consistent help, and accessible authentication.
PDF/UA Verification
PDFs are verified against PDF/UA (ISO 14289-1) — tags, structure tree, reading order, document language, alt text, headings, tables, lists, links, and form fields — using the same open verifier accessibility auditors rely on.
Mobile App Review
Register a mobile app and work a WCAG 2.1 AA checklist adapted for TalkBack and VoiceOver: touch target size, gesture alternatives, dynamic text, focus order, and orientation. This one is manual by design — no automated scanner can judge a native app.
Documents and Media
Word, Excel, PowerPoint, ePub, audio, and video files are identified during the crawl and routed to manual review checklists — accounted for in your record rather than quietly skipped because no scanner reads them.
Scan Policies
Pick a scan policy profile and decide whether strict scoring applies. Every change to policy is written to an immutable history with the before state, the after state, and who made it.
Guided manual review
The part tools skip
Automated checks reach 27 of the 55 Level A and AA criteria at most, and some of those still need a human verdict. A11y Audit guides your team through that work instead of pretending it isn't there.
Nothing Is Auto-Passed
Checks no engine can decide — keyboard operability, focus visibility, consistent help, accessible authentication — are queued for a person rather than backfilled as passes. A criterion is never recorded as conformant on the strength of a test that never ran.
Keyboard and Screen-Reader Walkthroughs
A structured protocol covers reading order, alt-text quality, forms and labels, table structure, link purpose, keyboard navigation, and a screen-reader smoke test. Each checkpoint is marked passed, failed, or waived, with notes and evidence attached.
Dispositions and Waivers
Record a real verdict per finding: needs work, passed, passed with exception, false positive, or waived. Waivers carry expiry dates so they can't quietly become permanent, and alternative-means records capture an equivalent-access remedy where one genuinely exists.
CMS-Specific Fix Guidance
Remediation steps written for the system you actually run — WordPress, CivicPlus, Granicus, Squarespace, or hand-written HTML — rather than generic advice your team has to translate before anyone can act on it.
Remediation and tracking
From found to fixed
A list of problems isn't progress. A11y Audit orders the work, tracks it to done, and shows you what actually moved.
Automated PDF Remediation
Untagged PDFs are the most common barrier on a government site and the most tedious to fix by hand. A11y Audit repairs the tagging and structure it can on its own, then hands back the remediated file with a before-and-after score and a list of every change applied.
Prioritized Fixes
Issues are ranked by a priority score — severity, multiplied by the documents affected, divided by estimated effort — so the highest impact per unit of work rises to the top and a small team knows exactly where to start.
Compliance Roadmap
A phased plan with a completion percentage for each phase and an explicit next action, so progress stays legible to the people who approve budget and will never read a scan report.
Tasks and Re-scans
Track every issue from found to fixed, assign it, and request a re-scan when you're ready. Scan diffs show the score delta against the previous run and exactly which checks changed state.
Dashboards and Trends
Readiness, documents by risk tier, at-risk documents, a risk heat map, and score trends over time — plus the specific blockers standing between you and a clean attestation, so nothing is a mystery.
Regression and Expiry Alerts
Find out when a page you already fixed regresses, when a waiver is about to lapse, or when a response deadline is slipping — by in-app notification, email, or webhook, before it becomes someone else's discovery.
Evidence and reporting
Proof that survives scrutiny
Compliance you can't demonstrate isn't worth much when someone asks. A11y Audit produces evidence built to be checked by people who don't take your word for it.
VPAT and Section 508 ACR
Generate a VPAT mapped across WCAG 2.2, or a Section 508 Accessibility Conformance Report, as a finished PDF — with criteria you haven't evaluated shown as exactly that, not padded into passes.
Signed Attestations
Attestations are cryptographically signed and append-only. They can be revoked if circumstances change, and anyone holding one can confirm it's authentic and still in force without an account or a phone call to you.
Sealed Compliance Packets
A single archive holding the scan summary, every check result, and the QA evidence snapshot, with a SHA-256 manifest of each file and hash-chained metadata — so if anything in the packet is altered after the fact, it shows.
Executive Reporting
An executive summary PDF with a deadline countdown, the top issues, and a 90-day compliance trend, plus a risk exposure report written for a go/no-go conversation rather than an engineering standup.
Exports
Per-scan CSV, PDF reports, and plain-text conformance statements; Excel exports of QA evidence; and bulk export jobs when you need filtered results across the whole estate at once.
Immutable Audit Trail
Every significant action is logged against a hash of the findings behind it, so the record of who decided what, on what evidence, and when, still holds up a year later when the details have left everyone's memory.
For public agencies
The public-facing side
ADA Title II asks for more than a clean scan. These are the parts your residents, your ADA coordinator, and your legal team actually touch.
Hosted Accessibility Statement
A public page stating your conformance status, known issues, and ADA coordinator contact — generated from your real scan data, so it stays current instead of becoming a document nobody has opened since 2023.
Compliance Badge
An embeddable badge that displays your current accessibility status on your own site and refreshes hourly, so what the public sees tracks reality rather than the day you pasted it in.
Grievance Intake
A public form for residents to report an accessibility barrier, with reference-number status lookup and tracking against the 60-day response window the rule expects you to meet.
Public Attestation Verifier
Anyone — a resident, a procurement officer, opposing counsel — can independently confirm that an attestation you issued is authentic and hasn't been withdrawn. No account, and no need to ask you.
Governance and exceptions
The awkward cases, on the record
Real compliance has exceptions. What matters is that each one is a documented decision with reasoning attached, not a gap someone hopes nobody notices.
Deadline Tracking
A11y Audit knows the ADA Title II compliance dates and which one applies to you based on the population you serve, and tracks your estate against it — including the entities already past their date.
Undue Burden Certifications
Where full conformance would impose an undue burden, record that determination with the justification the rule requires — and keep it somewhere it can be produced on request rather than reconstructed under pressure.
Third-Party Exemptions
Content you don't control carries different obligations. Register third-party and archived-content exemptions in a single exception register, each with its reasoning and scope recorded alongside it.
Platform and integrations
Built to be run by a real team
The unglamorous things that decide whether a compliance tool survives contact with an actual organization.
Roles and Isolation
Separate admin, reviewer, and agency roles, with per-agency data isolation enforced on every query and designed to fail closed — because in a platform serving many agencies at once, a leak between them is a breach, not a bug.
Account Security
Two-factor authentication through any authenticator app, optional Google and Microsoft sign-in, password reuse prevention, and lockout policy. Access tokens never touch browser storage.
Notifications
In-app and email notifications you can tune by category — waiver expiry, approaching deadlines, incoming grievances, scan failures, and regressions — so the important ones aren't buried under the routine.
REST API
Everything the interface does sits on a documented, token-secured REST API, so your own systems can pull scan results, findings, and status without a person exporting a spreadsheet.
Webhooks
HMAC-signed events for scan completion, scan failure, regression, grievance received, grievance overdue, and waiver expiry — with delivery logs and automatic retries when your endpoint has a bad day.
Optional AI Assistance
When you enable it, A11y Audit can draft remediation suggestions, triage incoming grievances by severity, and draft undue-burden certifications for a human to review. It stays off unless you turn it on, and it never decides anything on its own.
What A11y Audit doesn't do
No automated scanner covers all of WCAG, and A11y Audit is explicit about where its own coverage stops. Of the 55 Level A and AA success criteria in WCAG 2.2, 27 are evaluated automatically, through the guided manual protocol, or both — and the rest are flagged in your report as needing dedicated manual testing rather than counted as passes.
You can read the full breakdown, criterion by criterion, on the WCAG coverage page. We'd rather you see that before you talk to us than after.
See it against your own site
Start with a free scan. We'll crawl your site, show you what A11y Audit found against WCAG 2.2 Level AA, and tell you plainly what still needs a human.