The ADA Web Audit Process: What a Good Audit Looks Like (2026)

Automated scan vs full WCAG 2.1 AA audit — what each costs, what each finds, and what you actually need

Grow Wild AgencyMay 11, 2026Updated May 11, 202612 min readIntermediate

What ‘ADA audit’ actually means

The ADA itself does not specify an audit format. In practice, ‘ADA web audit’ means an evaluation of a website against WCAG 2.1 Level AA — the technical standard the DOJ codified for ADA Title II and the standard federal courts apply for Title III. An audit produces a report listing every detected non-conformance with a WCAG criterion ID, location, severity, and recommended fix.

Three layers of audit coverage

Layer 1: Automated scanning

Tools: axe-core, WAVE, Lighthouse, Pa11y, Tenon.

  • Detects roughly 30-40% of WCAG failures.
  • Strong on: color contrast, missing alt, missing labels, empty buttons/links, missing lang.
  • Weak on: keyboard usability, focus management, screen reader output, semantic meaning, error recovery, multi-step flows.

Useful as a baseline, not as a conformance attestation.

Layer 2: Manual structural review

A qualified accessibility engineer evaluates:

  • Heading hierarchy — one h1, no skipped levels, headings describe content.
  • Landmark regions — proper use of header/nav/main/footer/aside; main is one per page.
  • Form semantics — every input has a <label>, errors are programmatically associated.
  • Link and button text — every link/button has accessible text that makes sense out of context.
  • ARIA usage — only where native HTML cannot express semantics; valid role/state/property combinations.
  • Color and motion — contrast, reduced-motion respect, no flash >3Hz.

Layer 3: Assistive-technology testing

This is the layer that catches what gets you sued.

  • Screen reader passes with NVDA + Windows/Chrome, VoiceOver + macOS/Safari, and JAWS + Windows/Chrome. Test every critical user flow: navigation, search, product page, checkout, account, contact.
  • Keyboard-only navigation — disconnect the mouse and complete every critical task with Tab, Shift+Tab, Enter, Space, Escape, Arrow keys.
  • Voice control — Dragon, macOS Voice Control, Windows Speech Recognition.
  • Switch / single-button access — for users who navigate the web with one input device.
  • Zoom + reflow at 200% on 1280×1024 viewport.
  • Color-blindness simulation for the major types.

What a good audit deliverable looks like

A useful audit produces a remediation roadmap, not a static PDF of axe-core output. Demand:

  • Findings by page + by component — both views (so devs can fix a component once)
  • WCAG criterion ID per finding — 1.4.3, 1.1.1, etc.
  • Severity rating — critical, serious, moderate, minor
  • Location — URL, DOM selector, source-code reference
  • Recommended fix — actual code or content guidance, not just ‘fix this’
  • Reproduction steps — what the auditor did to surface the issue
  • Screenshots / screen recordings for visual and AT-output evidence
  • Priority ordering — what to fix first based on user impact + legal exposure
  • Estimated effort — small/medium/large per issue or rough hour estimate
  • Re-test plan — what gets re-tested after remediation

Need help with ADA compliance?

Use our free accessibility tools to check your website for common issues.

Red flags from accessibility vendors

  • ‘100% ADA compliant in 24 hours with our widget’ — that is an overlay, not compliance. The FTC fined accessiBe $1 million in April 2025 for that exact marketing claim.
  • Audits that consist of an axe-core PDF with no manual review.
  • Quotes that do not specify WCAG version, level, or scope (number of pages, components, user flows).
  • Vendors who refuse to share auditor credentials (IAAP CPACC/WAS/CPWA, DHS Section 508, GSA, etc.).
  • Sites that recommend you keep the overlay AND pay them to remediate. The 2025 EcomBack data shows 22.64% of sued sites had an overlay installed at time of suit. Overlays do not protect you.

What Grow Wild Agency delivers

A full audit from Grow Wild includes layers 1, 2, and 3 above; a remediation roadmap with WCAG criterion IDs, severity, location, and recommended fix; and a re-test cycle after your team ships fixes. We hold 8 DHS Section 508 certifications and 10 GSA accessibility certifications, and we are pursuing IAAP CPACC → WAS → CPWA accreditation. We do not install overlays.

Frequently Asked Questions

How much should an ADA audit cost?
For a small marketing site (10-25 pages), expect $1,500-$5,000 for an automated + sampled manual audit. Mid-size sites (100-500 pages) typically run $5,000-$20,000. Large e-commerce or media sites can exceed $50,000 for a comprehensive audit including manual assistive-technology testing on all critical user paths. Anyone quoting $99 for ‘full ADA compliance’ is selling an overlay widget, not an audit.
How long does an audit take?
Automated baseline: hours. Manual review of critical user paths: 1-2 weeks. Comprehensive WCAG 2.1 AA audit with full assistive-technology testing: 3-6 weeks for a mid-size site.
Should I do my own audit or hire someone?
Run automated scans yourself first — axe-core, WAVE, Lighthouse, and our free Compliance Checker. That gives you a baseline. For final conformance attestation, hire a qualified third party — automated tools cannot evaluate the screen reader experience, keyboard usability, focus management, or the things plaintiffs actually file lawsuits over.

Sources

  1. WebAIM Million 2026
  2. DOJ Title II Final Rule
  3. FTC v. accessiBe Final Consent Order