Skip to main content

Accessibility audits and VPAT export

Audits run in a real browser with axe-core against WCAG 2.0, 2.1 and 2.2 at Levels A and AA, and produce findings with the element, the rule and a remediation. Level AAA and other criteria a machine cannot judge are marked for manual review, never auto-passed. A VPAT is generated from an actual scan, not from a template, so what it claims is what was tested. A separate reference table maps the accessibility laws of 66 countries to their base WCAG version.

What automation can judge, and what it cannot

Automated checks reliably catch missing alternative text, contrast failures, missing form labels, invalid ARIA, missing document language, keyboard traps that are detectable from the DOM, and structural problems such as skipped heading levels. Industry measurement puts automated coverage at roughly half of issues by volume and a smaller share of distinct barrier types, so a clean automated scan is a floor, not a pass. Automation cannot judge whether alternative text is meaningful, whether focus order makes sense to a screen-reader user, or whether an error message is understandable. Our reports say which criteria were checked automatically and which need a human, and they never assert a conformance level that was not audited.

Running an audit

  1. Choose a recorded flow or a list of URLs. A flow is better: it audits pages that only exist after sign-in or after an action.
  2. Pick Level A or AA, the levels automation can actually check. WCAG 2.2 AA is the level most procurement teams and the European Accessibility Act expect. Level AAA criteria are recorded as needing manual review rather than tested.
  3. Run. Each finding shows the rule, the failing element, a screenshot with the element highlighted, and the fix.
  4. Optionally simulate colour-vision deficiencies to review contrast decisions visually.

VPAT export

The VPAT (Voluntary Product Accessibility Template) is the document procurement teams in the US public sector and many large companies ask for. Ours is generated from a real scan: each criterion is marked Supports, Partially Supports or Does Not Support according to what the audit observed, and criteria that need manual review are marked as such rather than assumed. Edit the remarks before you send it; the document is a starting point that is honest about its source.

Continuous auditing

Attach an audit to a pipeline gate so a release that reintroduces a contrast failure or an unlabelled control is caught before it ships. Trend reports show the count of open findings per level over time.

Questions people ask about this

Is your own site accessible?
Partially conformant, and we say so on our accessibility statement, which names the known gaps. We would rather you read the gaps than a claim.
Which regulations does this help with?
The European Accessibility Act (in force since June 2025), the UK Equality Act, Section 508 procurement in the US, and the accessibility laws of the 66 countries the reference table covers. It helps you find and fix issues; it does not certify conformance, and no automated tool can.
Can it test Level AAA?
Not automatically. axe-core has almost no AAA rules, so AAA criteria are recorded as needing manual review. Automated coverage is Levels A and AA; anything a machine cannot judge is marked, not assumed.

Source: /documentation/accessibility-audits-and-vpat, updated 2026-09-18. Answers are checked against the shipped product on that date.

Found something out of date? The people who build the module answer the contact form on the home page, and corrections to this guide are dated above. Tell us.

CI/CD and integrations

CI/CD integration: providers, quality gates and webhooks

Connect GitHub, GitLab, Jenkins, Azure DevOps or Bitbucket, trigger runs from a pipeline, and fail the pipeline on a quality gate you define…

7 min
Website analysis

Website analysis: one URL, one real page load

Paste one URL and get a single-page analysis produced from one real browser load: lab Core Web Vitals, a per-request network table, an image…

6 min
Getting started

Quick start: your first recorded test in one sitting

Create a free account, verify your email, name a workspace, point the recorder at a URL you are allowed to test, and click through one flow.…

5 min

Your choice about analytics

We use one optional analytics tool, run on our own servers, to see which pages help people. It stays off unless you turn it on. Storage needed to sign you in, keep the site secure and remember this choice is always on. Cookie Policy