Free VPAT readiness check

Enter up to three public pages of your product. We load each one in a real browser, run axe-core (a widely used open-source accessibility checker), and lay the results out against the 56 WCAG 2.x Level A and AA rows of the VPAT® 2.5 WCAG edition. Free, no email needed, results on this page.

Read this first: a scan is not a VPAT

Automated checks find only part of the accessibility problems on a page. When the UK Government Digital Service built a page with 143 known barriers, the best single tool's errors and warnings caught 37% of them (41% counting its prompts to check by hand), and 29% were missed by every tool they tried (GDS, 2017). Deque, which makes axe-core, found that its automated tests covered 57% of the issues by count in over 2,000 of its own audits (Deque, 2021). Many WCAG criteria have no automated test at all.

So "no automated problems found" does not mean a row is met, and this result is not a report procurement will accept. In our paid report a person tests the product by keyboard and with a screen reader and reviews every row.

Public pages only, for example your home, sign-up and pricing pages. Pages behind a login can't be checked.

We don't keep the addresses or the results. See what we keep.

What the check does

It checks the pages as they looked at that moment, to a visitor who isn't signed in. If a page shows a cookie banner, a login wall or a bot check, that is what gets checked.

What it can't tell you

Whether your product can be used with a keyboard alone, whether a screen reader announces things in a way that makes sense, whether error messages help, whether videos have accurate captions, and most of the other criteria. Those need a person. That is also why a scan can't be turned into honest VPAT answers ("Supports", "Partially Supports" and so on), and why we don't show any.

If you want to fill in the VPAT yourself, start from our VPAT template guide and free blank form. If you want it done, see how our VPAT audit works: 1,490 USD for the WCAG edition, delivered in 5 business days.

What we keep

Nothing about the pages you check: not the addresses, the page content or the results. They are shown to you and then discarded. To stop the tool being misused we keep a one-way hashed code made from your IP address (not the address itself) and how many checks it has run that day; a cleanup job deletes these after the day ends (UTC). We also keep a daily total of checks run and pages checked, with nothing about who ran them. The spam check is Cloudflare Turnstile. More on our privacy page.

Limits

Up to three pages per check and five checks per visitor per day. The tool runs on a small daily allowance, so on a busy day it may ask you to come back tomorrow.