Skip to main content
← Back to writing
Web design

What an Accessibility Audit Actually Checks

10 September 2026·8 min read·Ben Adams
Accessibility Audit
What an Accessibility Audit Actually Checks | Marzipan
Marzipan · Sydney

What an accessibility audit actually checks

Most organisations that ask for an accessibility audit have already run their site through a free scanner and come back with a clean report. That report is a start, not an answer. Here’s what a proper audit actually looks at, and why the gap between the two matters.

Ben Adams, Marzipan · 8 min read

Why a clean scanner report isn’t the same as accessible

Automated scanners are useful and worth running, but they only catch what can be tested mechanically: missing alt text, insufficient colour contrast, missing form labels, and a handful of other structural markers. Depending on the tool, that’s roughly a third of the actual WCAG 2.1 success criteria. The rest, whether a screen reader user can actually complete a donation, whether keyboard focus moves somewhere sensible after a modal closes, whether an error message is announced at all, needs a person to actually use the site the way someone with a disability would.

I’ve reviewed sites with a spotless automated score that were genuinely unusable with a screen reader. The scanner isn’t wrong about what it checks. It’s just checking a small part of the picture.


A walkthrough of what actually gets tested

Keyboard navigation

Can every interactive element, menus, forms, modals, be reached and operated using only a keyboard, in a logical order, with a visible focus indicator at every step? This alone surfaces a large share of real-world issues, because it’s exactly how many assistive technology users navigate.

Screen reader behaviour

Does the page make sense read aloud, in the order it’s read? Are images given meaningful alt text rather than filenames or nothing at all? Are form fields properly labelled so a screen reader user knows what they’re filling in, and are error messages actually announced rather than just appearing visually?

Colour and contrast

Beyond the basic contrast ratio check a scanner runs, does the site rely on colour alone to convey information, a red error state with no icon or text, for instance, that a colourblind user would miss entirely?

Heading structure and page semantics

Do headings follow a logical hierarchy that a screen reader user can navigate by jumping between them, or is the visual heading style applied to text that isn’t actually marked up as a heading?

Forms and error handling

This is where donation and contact forms most often fail. Labels, instructions, and error messages all need to be programmatically associated with their fields, not just placed nearby visually.

A scanner tells you what’s broken in the code. A proper audit tells you what breaks for the person trying to use the site.

The failures that show up again and again

  • Donation forms where an error appears visually but is never announced to a screen reader
  • Modals and pop-ups that trap keyboard focus, or don’t return focus anywhere sensible on close
  • Decorative images given verbose alt text, and meaningful images given none
  • Colour-only indicators, required fields marked in red text alone, with no icon or label
  • Custom-styled buttons and menus built from generic elements with no keyboard or screen reader support

What a useful audit report actually looks like

A report that lists every WCAG success criterion with a pass or fail mark is comprehensive and largely useless to a board. A useful report groups findings by the actual user impact, keyboard access, screen reader access, cognitive load, and ranks them by how many people they affect and how hard they are to fix. It should read as a prioritised plan a non-technical board member can approve, not a specification only a developer can parse.

Worth knowing

WCAG 2.1 AA is the standard most funders, government contracts and the Disability Discrimination Act reference in practice, even where it isn’t a strict legal mandate for every organisation. It’s a sensible target regardless of your specific compliance obligations.


What happens after the audit

The audit itself doesn’t fix anything. What it should give you is a sequenced list: what to fix immediately because it blocks people from using the site, what to fix soon because it degrades the experience significantly, and what to monitor because it’s a smaller issue or affects fewer people. Most organisations don’t need to fix everything at once. They need to know what actually matters first.

Not sure where your site actually stands?

A Digital Capacity Diagnosis includes a genuine WCAG 2.1 AA accessibility review, alongside security, performance and search visibility, prioritised in plain English for your board. $1,500 + GST.

Book a Diagnosis →

Frequently asked questions

What does an accessibility audit actually check on a website?
A proper accessibility audit checks keyboard navigation, screen reader behaviour, colour contrast, form labelling, heading structure, image alt text, and how the site handles focus and error states, tested against WCAG 2.1 AA. Automated scanners catch a portion of this. The rest needs a person to actually use the site without a mouse or with a screen reader.
Is passing an automated accessibility scanner the same as being WCAG compliant?
No. Automated scanners typically catch around a third of WCAG success criteria, mostly structural issues like missing alt text or contrast ratios. They cannot judge whether a screen reader user can actually complete a task, whether keyboard focus behaves sensibly, or whether an interaction genuinely makes sense without a mouse.
Why does website accessibility matter for a nonprofit’s Google Ad Grant?
Google Ad Grant policy expects landing pages to meet a reasonable standard of usability and quality, and accessibility failures are a common contributor to poor user experience signals. Beyond Ad Grant compliance, many funders and grant assessors also treat accessibility as a proxy for organisational governance.
← Back to web design for nonprofits
B
Ben Adams Ben is the founder of Marzipan, a Sydney-based digital practice specialising in digital stewardship for community legal centres, not-for-profits, and regulated organisations.
© 2026 Marzipan · Digital Stewardship for High-Trust Organisations · Sydney · ABN 61 181 193 114
Charity Web DesignNonProfits
Begin

Need more than a document?Start with a Diagnosis.

The Digital Capacity Diagnosis gives your organisation a full digital risk assessment with a clear, prioritised action plan.