A repeatable process for testing website accessibility: what to automate, what a person must check by hand, how to sample pages, who signs off, how to log and fix issues, and a release gate that stops new problems going live.
Most web teams have run an accessibility audit at least once. A consultant tested 40 pages, produced a 90-page report, and six months later half the fixes were done and twice as many new problems had shipped. The audit was not the failure. The missing piece was a process: a way of testing that happens every time something changes, run by people who are already on the team. This guide sets one out, in the order you would introduce it.
The W3C's Web Accessibility Initiative is plain about it: evaluation tools help, but no tool alone can determine whether a site meets accessibility standards. A sensible process therefore has three layers.
| Layer | Catches | Misses | When it runs |
|---|---|---|---|
| Automated checks | Missing alt attributes, low colour contrast in plain text, missing form labels, empty links, duplicate IDs, missing page language | Whether alt text is meaningful, whether focus order makes sense, whether a custom widget works with a screen reader, whether instructions rely on colour or shape | On every page change, ideally automatically |
| Manual checks by the team | Keyboard traps, invisible focus, confusing headings, unclear link text, broken zoom and reflow, poor error messages | Real-world friction for people who use assistive technology every day | Before each release and on new templates |
| Testing with disabled users | Whether the task can really be completed: paying a bill, booking a room, applying for a permit | Full coverage of the standard | Once or twice a year on the most important tasks |
Teams that rely on one layer get predictable results. Automated-only teams pass the scanner and fail real users. Manual-only teams cannot keep up with the volume of change. Teams that only do user testing find big problems and miss hundreds of small ones.
Decide which standard you test against and put it in your policy. Many organisations use WCAG 2.1 Level AA because it is the standard in the Department of Justice rule for state and local governments under ADA Title II. WCAG 2.2 is the current W3C Recommendation; it adds criteria (for example on focus not being hidden and on target size) and removes 4.1.1 Parsing as obsolete. Testing against 2.2 AA also covers 2.1 AA apart from Parsing, so many teams test to 2.2 and report against whatever their legal obligation names. See Section 508 vs ADA Title II vs WCAG for which applies to whom.
You cannot test every page by hand on every release. Use a sample that represents the site, an idea taken from the W3C's evaluation methodology (WCAG-EM).
Write the sample into a short table and keep it under version control. Add to it when a new template or component appears.
This is the core of the process. It takes 15 to 30 minutes a page once people are practised, and it needs no special software beyond a browser and the free screen reader for the operating system.
| # | Check | How | Fail looks like |
|---|---|---|---|
| 1 | Keyboard only | Put the mouse away. Tab through the whole page, use Enter, Space, arrows and Escape | Something cannot be reached or operated; focus gets stuck; a menu cannot be closed |
| 2 | Visible focus | While tabbing, can you always see where you are? | Focus disappears, or is hidden behind a sticky header |
| 3 | Focus order | Does focus move in a sensible order? | Jumps from header to footer and back; modal opens but focus stays behind it |
| 4 | Zoom and reflow | Zoom to 200% and 400%; set a narrow window | Text cut off, horizontal scrolling for body text, overlapping elements |
| 5 | Headings | View the heading outline with a browser extension or screen reader | No H1, skipped levels used for styling, headings that are just bold text |
| 6 | Images | Read the alt text out of context | "image1.jpg", "photo", or a description of a decorative swirl; informative charts with no text equivalent |
| 7 | Links and buttons | List all links; do they make sense alone? | Ten links that say "Click here" or "Learn more" |
| 8 | Forms | Submit empty, then submit wrong values | Errors shown only in red, not announced, or not tied to the field; labels that vanish when typing |
| 9 | Screen reader pass | Turn on the screen reader and complete the page's main task | Unlabelled buttons, content announced twice, dynamic changes not announced |
| 10 | Motion and media | Play videos, watch animations | No captions, autoplaying motion with no pause, flashing |
| 11 | Colour reliance | Would the page still make sense in greyscale? | Required fields or statuses shown only by colour |
| 12 | Documents | Open every linked PDF or office file in the sample | Scanned images of text, no tags, no reading order |
Our website accessibility checklist goes criterion by criterion if you want the long version. The table above is the version people will actually run each week.
A good issue is one a developer or editor can fix without asking a question. Use one template for every issue.
| Field | Example |
|---|---|
| Where | Template: event page. URL: /events/summer-concert |
| What happens | The "Add to calendar" menu opens on Enter but cannot be closed with Escape; focus stays inside it |
| Who it affects | Keyboard and screen reader users |
| Criterion | WCAG 2.1.2 No Keyboard Trap |
| Severity | Blocker / Major / Minor (definitions below) |
| How to reproduce | Tab to "Add to calendar", press Enter, press Escape |
| Suggested fix | Close the menu on Escape and return focus to the trigger button |
| Owner | Front-end developer (template) or Content editor (content) |
Severity definitions keep arguments short:
Split issues by owner. Template and component bugs go to developers and are fixed once. Content issues (alt text, headings, link text, documents) go to the department that owns the page. Mixing them in one queue is how content issues sit unfixed for a year.
Testing after publication only measures the damage. The cheapest fix is the one made before a page goes live. Three gates, from lightest to strongest:
For organisations that run many sites, the third gate is where platforms differ. On We.Inc, an organisation can set any site so that publishing needs a single-step approval before the site goes live, and the request lands in an approval queue. It does not test accessibility for you; it gives your reviewer a fixed moment to do it.
| How often | What | Who |
|---|---|---|
| Every change | Automated scan; editor self-check | Editors, pipeline |
| Every release | Manual 12-point check on changed templates and components | Web team tester |
| Monthly | Manual check on the sample; count open issues by severity | Accessibility lead |
| Twice a year | Task-based testing with disabled users on top tasks | Accessibility lead, paid participants |
| Yearly | Independent audit against your chosen standard; review the sample; update the accessibility statement | External auditor |
Report two numbers to leadership each month: open blockers and open majors. Not a score. Scores from automated tools go up and down for reasons that have nothing to do with users, and they invite gaming.
If you run many sites and want a review step in front of every one of them, book a demo and we will show you the approval and permission settings on a real brand.
Last checked 2026-10-25.
This guide is general information, not legal advice.
No. The W3C says no tool alone can determine whether a site meets accessibility standards. Automated checks catch a share of issues quickly; manual checks and testing with disabled users catch the rest.
Test a representative sample rather than every page: every template, every component, the top five to ten tasks, plus a few random pages. Add to the sample when new templates appear.
Test against the version your obligation names; ADA Title II uses WCAG 2.1 AA. Many teams test to WCAG 2.2 AA, which also covers 2.1 AA except the removed Parsing criterion.
Use three severities: blockers stop a task and are fixed before release, majors make a task much harder and are fixed next release, minors are fixed when the page is next touched.
No. We.Inc can require a single-step approval before a site goes live, which gives your reviewer a fixed moment to test, but your team must still test every site.
We.Inc is an AI-powered website builder you can resell under your own brand. Launch a branded client dashboard, bill on Stripe Connect, and deliver AI-generated websites in minutes. White-label pricing is tailored to your volume and setup: book a 30-minute demo for a quote.