Accessibility: WCAG & RGAA
Rendered audits on every scheduled crawl, contrast cards with a suggested fix, screenshots of the failing elements, and an exportable conformance report.
- WCAG 2.2 AA reference
- RGAA 4.1 reference
Compliance and data residency, documented
An enterprise buyer is not buying a feature. They are buying evidence they can hand to someone else: a conformance report, a subprocessor list, and a signed, revocable authorisation for anything that touches their infrastructure.
Access opens in waves: we email you when yours is ready.
Documented WCAG compliance, logs that stay with you
01
WCAG and VPAT, exportable
The European Accessibility Act is in force. The conformance report is generated from the measurements, criterion by criterion, with nothing re-typed.
02
De-risk a replatforming
Diffs between two crawls, continuous regression monitoring, and a cross-check against the logs to confirm that what used to be crawled still is.
03
Your logs stay where they are
No IP address is stored or passed to a model. And our full subprocessor list is annexed to your contract, with the triggering condition of every transfer: data residency is something you verify, not something we assert.
04
Nothing touches a site without authorisation
Any check that sends requests to a client’s infrastructure requires a signed, versioned authorisation, revocable at any time.
The security signals that put your visibility at risk
Passive, non-intrusive detection: exposed sensitive files, end-of-life technologies, TLS and header configuration, unencrypted resources on a secure page, Safe Browsing status. Each finding is translated into plain business language, with its impact on search.
No run happens without a signed, versioned, revocable authorisation. Frequency follows the plan, and every signature is retained as evidence.
Website security and SEOThis module is neither a security audit nor a penetration test. It reports publicly observable signals and translates them into visibility impact.
How it starts
Scope first, measurement second
Nothing is sent to a client’s infrastructure before the scope is written down and the authorisation signed.
-
01
Write down the scope
The project carries the site, its campaigns and the authorisation covering them, versioned and revocable.
-
02
Upload the logs, connect Search Console
The analysis runs without storing or forwarding a single IP address.
-
03
Export the evidence
A WCAG and VPAT conformance report, generated from the measurements, criterion by criterion.
The modules an enterprise buyer asks to see
Enterprise IT is not buying a score: it is buying a dated measurement, its method, and the right to run it again.
Sovereign log analysis & Search Console
The parser streams your server logs at a measured throughput, separates human traffic from crawlers, and surfaces the pages engines never request. No IP address is stored, and none is sent to a model.
- 52,000 log lines per second measured
Security signals
Passive, non-intrusive detection of the signals that put your visibility at risk: exposed sensitive files, end-of-life technologies, TLS and header configuration, unencrypted resources on a secure page, Safe Browsing status. Every finding is translated into plain business language with its impact on search.
- 12 security finding families measured
- 7 check families never performed measured
Technical audit & JavaScript crawling
Multi-threaded crawling with real JavaScript rendering: your pages are explored the way an engine sees them, not the way the initial HTML describes them. PageSpeed, scheduled crawls, and diffs between two runs.
AI visibility & GEO
Answer engines cite sources. We check which of their crawlers can actually read your site, validate your llms.txt, and capture your share of citations from real answers, with the denominator shown next to it.
- 19 AI crawlers audited measured
- 11 operators covered measured
Further reading
01
Accessibility audit
EAA, WCAG, VPAT: what the module measures on every run, and what no tool can decide in your place.
Read 02SEO log file analysis
What your client’s servers already know, and nobody has shown them yet; without storing a single IP address.
Read 03EAA, WCAG, VPAT: what accessibility compliance actually asks of a web team
The cornerstone guide on accessibility compliance: what the texts actually require of a web team.
Read 04NessFlow vs Botify & Oncrawl
Against an enterprise platform: what overlaps, what does not, and at what price.
ReadDocument conformance before you are asked for it
Ask for a demo: we walk through the scope, the authorisation and the report on a site you already run.
Access opens in waves: we email you when yours is ready.