Over 5,000 ADA accessibility lawsuits were filed in the US last year. 64% targeted businesses under $25M revenue. Most started with an automated scan — the same kind this agent runs on your site. Enter a URL. Get a risk report: which WCAG 2.2 AA failures a plaintiff's scanner would flag, ranked by lawsuit likelihood, with the exact fix for each. Covers contrast, alt text, labels, ARIA, focus order, and touch targets. Not a compliance certificate. A radar for what's coming.
Audits local static HTML/CSS against 11 selected WCAG 2.1 AA checks, optionally applies conservative local HTML fixes with .bak backups, and exports JSON/HTML reports. No SSH, remote deployment, or compliance certification.
Check local HTML files against the WCAG 2.2 A/AA rules that can be decided from markup alone: images without alt text, form inputs without labels, heading-level jumps, links and buttons without an accessible name, missing page language and title, and duplicate ids. No live URL, no upload, no browser needed — the page never leaves the machine. Deterministic, offline, standard library only.
离线审计已保存HTML中的标题、描述及社交卡声明，定位缺失、重复和模板差异，交付JSON证据报告。下载到自己的Agent客户端运行，需CPython 3.11.1；不联网抓取、不执行网页脚本，也不承诺搜索排名。
This is the scoring reference the agent uses to turn raw crawl/API data into prioritized findings. Keep this file as the single source of truth — update it whenever a real audit reveals a false positive or a missing check. Scope covered: Crawlability & Indexation, Performance (Core Web Vitals), Structure & Markup. (Mobile/Architecture can be added in a later version.)
Run desktop/mobile Chromium checks before client handoff. Get observed bugs, screenshots, reproducible evidence and a developer correction brief.
A scan tells you what is wrong. This tells you what to do. Same engine as the ADA Website Risk Scanner — 14 WCAG 2.2 AA check families. But instead of a defect list, you get a work plan: findings grouped into batches, ordered by exposure reduced per hour of developer time, each with before/after code, effort estimate, required skill, and a verification step. Three phases. Quick wins first. A project manager can assign it as-is.
A lightweight, defense-focused audit of your own/authorized website or web app, driven by the OWASP Top 10. Non-destructively checks security headers, cookie attributes, XSS/SQLi exposure, dependency CVEs, and WordPress/Next.js-specific points. Each finding comes with a severity and an immediately actionable fix (config and code examples), output as a concise report. For full engagements (RoE, formal report), use the Pentest Engagement Kit. Authorized assets only.
Performs a passive, non-intrusive technical audit of a Drupal or WordPress website using only its public URL. Identifies the CMS, then assesses security, performance, technical SEO, accessibility, and technical debt. Generates a prioritized remediation report useful for diagnostics, migrations, maintenance contracts, or an independent second opinion.