Check accessibility (WCAG and EAA)

Enter an address, such as your homepage or your shop checkout. A real browser loads the page and tests it with axe-core against the automatically testable rules of WCAG 2.2 at levels A and AA. You see which rules are violated, how serious that is and which elements are affected.

What the European Accessibility Act requires

Since 28 June 2025 the European Accessibility Act (EAA) applies across the EU. Businesses that offer products or services to consumers must make their digital offerings accessible. That covers online shops in particular and everything that leads to a contract online: product pages, cart, checkout, customer account, appointment booking.

Micro-enterprises with fewer than ten employees and an annual turnover of at most two million euros are exempt for services. Pure information sites without a contract usually fall outside the act, but they benefit just as much from fewer barriers.

The yardstick is the harmonised standard EN 301 549, which refers to the Web Content Accessibility Guidelines (WCAG) at level AA for websites. On top of that comes an accessibility statement describing how the offering meets the requirements.

What the check tests

A real Chromium loads the page like a visitor, with JavaScript and all stylesheets. Then axe-core, the most widely used accessibility testing library, runs against the rules of WCAG 2.0, 2.1 and 2.2 at levels A and AA. Typical findings:

  • Images without alternative text: screen readers read out the file name or nothing at all.
  • Too little contrast between text and background: normal text needs at least 4.5 : 1, large text 3 : 1.
  • Form fields without a label: a placeholder alone is not enough, it disappears while typing and is not reliably announced.
  • Links and buttons without a recognisable name, such as a cart icon without text or aria-label.
  • Missing language on the html element: screen readers then read German text with English pronunciation.
  • Misused ARIA attributes and roles, duplicate IDs, too small touch targets and an illogical heading structure.

How to read the result

Every violated rule is listed with its impact, the WCAG criteria concerned, the number of elements and an example. The impact comes from axe-core:

  • Critical: people using a screen reader or keyboard cannot continue here, for example a nameless button in the checkout.
  • Serious: the page is noticeably harder to use, typically contrast and missing labels.
  • Moderate and minor: obstacles worth fixing with the next revision.
  • Critical and serious violations count as warnings, moderate and minor ones as hints. Almost every website has some findings; what matters is starting with the serious ones.

Limits of an automated test

An automated test only finds part of the barriers, a third to a half depending on the study. Whether the page can be fully operated with the keyboard, whether texts are understandable, whether the reading order makes sense or whether an alt text really describes the image is beyond what software can judge reliably.

A result without violations therefore does not mean the page meets the European Accessibility Act. It means the machine-testable errors are fixed. Conformance also takes a manual review with keyboard and screen reader and the accessibility statement.

Fixing barriers

Most findings sit in the theme or template, not in individual content. Fix them there and they are fixed on every page.

  • WordPress: choose an accessible theme and maintain alt texts in the media library; page builders often produce nameless buttons.
  • Shopware: check the contrast of the primary colour in the theme and label icon buttons (cart, wish list, search).
  • Colours: check contrast with a contrast calculator before they make it into the corporate design.
  • New barriers appear with every deploy, plugin or banner. That is why a regular check pays off more than a one-off audit.
HTML
<html lang="en">
…
<img src="/logo.svg" alt="Example Ltd – go to homepage">
<label for="email">Email address</label>
<input id="email" type="email" autocomplete="email">
<button type="submit" aria-label="Open cart">πŸ›’</button>

Monitor accessibility continuously

On request, DomainWarn tests the homepage of every client domain daily with the same check and reports as soon as a new serious barrier appears, for example after a theme update or with a new cookie banner. The monitor is included from the Freelancer plan and is switched on per domain.

Frequently asked questions

Does my website meet the EAA if the check finds nothing?
Not automatically. The check finds the machine-testable errors. It does not test keyboard operation, understandable text, meaningful alt texts or the accessibility statement. A result without violations is a good starting point for the manual review.
Which page should I test?
The pages through which contracts are concluded: homepage, a typical product page, cart, checkout and contact form. Each address is tested on its own; one check tests exactly one page.
Why does the check find different errors than my browser extension?
Many extensions also use axe-core, but with other rule sets (best practices on top of WCAG A and AA, for example) or they test the state after clicks and input. The check tests the page as it stands after loading.
How often can I test?
Five tests per hour, because each one starts a real browser. For regular checks there is the monitor in the dashboard, which tests the homepage daily.
Monitor continuously
Monitor the websites of all client domains continuously

Website monitoring for agencies: DomainWarn checks availability, status code, response time, redirects, IPv6, headers and content of all client websites.

More about monitoring

More tools

Free tool

Domain Check

Check website, email, DNS and domain in one run: 20 checks, a score from 0 to 100 per area and overall, with recommendations. Free, no sign-up required.

Open tool β†’
Free tool

Email header analyzer

Paste email headers and read them in plain words: did SPF, DKIM and DMARC pass, does the sender domain align, which servers relayed it, how long it took?

Open tool β†’
Free tool

Privacy check

Check for free which third parties your home page loads before any consent: Google Fonts, Analytics, pixels, maps – with a note on what is legally risky.

Open tool β†’
Free tool

Mail tester

Free mail test: send an email to a one-time address and check SPF, DKIM, DMARC, reverse DNS, TLS and blacklists with a score from 0 to 100.

Open tool β†’
Free tool

security.txt Checker

Check your security.txt for free: Contact, Expires, expiry date, HTTPS and content type per RFC 9116. See whether security researchers can reach you.

Open tool β†’
Free tool

Website Check

Check a website for free: robots.txt, XML sitemap, broken pages, dead links, accidental noindex and canonical tags – up to 20 URLs in one run.

Open tool β†’
Free tool

Email Check

Check SPF, DKIM, DMARC and MX of a domain in one run, free and without sign-up. Shows whether your mail meets the Google and Yahoo sender requirements.

Open tool β†’
Free tool

SPF Checker

Free SPF record check and lookup: syntax, includes, the 10 DNS lookup limit and the closing qualifier. Shows whether your domain blocks forged senders.

Open tool β†’
Free tool

DMARC Checker

Free DMARC record check: policy (none, quarantine, reject), pct, reporting addresses and syntax errors. With recommendations for moving to p=reject.

Open tool β†’
Free tool

DNS Checker

Free DNS lookup straight from the authoritative name server: A, AAAA, CNAME, MX, TXT, NS and CAA records at a glance. No sign-up, every record explained.

Open tool β†’
Free tool

MX Checker

Free MX lookup: which mail servers receive for a domain, do they resolve, is the priority right? Detects missing and unreachable mail servers.

Open tool β†’
Free tool

SSL Checker

Free SSL certificate check: expiry date, issuer, chain, host name and TLS version, mail servers too. Detects expired, self-signed and mismatched certificates.

Open tool β†’
Free tool

HTTP Header Checker

Free HTTP header check: HSTS, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy, with fixes.

Open tool β†’
Free tool

Is the website down?

Website not loading? Check for free whether a site is down for everyone or just for you: response, status code, load time, redirects and IP addresses.

Open tool β†’
Free tool

DNS Propagation Checker

Check DNS propagation for free: which resolvers worldwide (Google, Cloudflare, Quad9 …) already return the new A, MX or TXT record, which still the old one?

Open tool β†’
Free tool

Redirect Checker

Free 301 redirect check: every hop with status code and response time, from http to https, from www to non-www. Detects redirect chains, loops and 302s.

Open tool β†’
Free tool

DKIM Checker

Free DKIM record check and lookup: selector, key type, key length, syntax and revoked keys. Leave the selector empty to try common selectors automatically.

Open tool β†’
Free tool

DNSSEC Checker

Free DNSSEC test: DS record, resolver validation and broken signature chains. Shows whether validating resolvers like Google and Cloudflare still reach you.

Open tool β†’
Free tool

Name Server Check

Free name server check: does every NS answer authoritatively, do all serve the same zone data, are they in different networks? Finds lame delegation.

Open tool β†’
Free tool

CAA Record Checker

Free CAA record check: issue, issuewild and iodef, matched against the CA of your current certificate. Shows whether the next renewal is going to fail.

Open tool β†’
Free tool

IPv6 Check

Free check of the AAAA records for the domain and www and, where the checking location has IPv6, a fetch over every IPv6 address. Finds dead records.

Open tool β†’
Free tool

HTTP/3 Check

Check for free whether your website advertises HTTP/3 via Alt-Svc and actually answers over QUIC (UDP 443). Finds blocked UDP ports and stale headers.

Open tool β†’
Free tool

MTA-STS Checker

Free MTA-STS check: DNS record, policy file, mode, max_age and whether your MX servers are covered. Shows whether inbound mail enforces TLS.

Open tool β†’
Free tool

TLS-RPT Checker

Free TLS-RPT record check: syntax, reporting addresses (rua) and common errors such as a missing record. Shows whether you get reports on TLS failures.

Open tool β†’
Free tool

BIMI Checker

Free BIMI record check: syntax, logo URL, SVG Tiny PS, VMC certificate and the DMARC prerequisite. Shows why your logo does not appear in Gmail.

Open tool β†’
Free tool

Blacklist Check

Free IP and domain blacklist check: mail server IPs, website IP and domain against Spamhaus, Spamcop, Barracuda, PSBL and SURBL. With delisting links.

Open tool β†’
Free tool

Domain Checker

Free domain check: WHOIS data via RDAP straight from the registry, expiry date, registrar, EPP status, transfer lock and name servers. Warns before expiry.

Open tool β†’