What it checks

Each check is a small rule mapped to a WCAG 2.2 success criterion and its EN 301 549 clause, with Joomla-specific fix guidance.

Accessibility checks (Free)

• Images: missing or misused alt text.
• Structure: headings, landmarks and skip link, tables, page title, document language, RTL and lang/dir.
• Controls: link names, button and control names, form labels, ARIA misuse.
• Zoom: a viewport that disables pinch-zoom.
• Contrast: a static estimate, always labelled "estimated".
• Media: video captions, audio description, transcripts, autoplay with sound, unnamed embeds.
• WCAG 2.2: accessible authentication (paste-blocking, CAPTCHA, memorable questions) and estimated target size.

Risk advisories (Free)

These are not WCAG failures but legal or privacy exposure signals: overlay widgets (with the FTC order cited), accessibility statement presence and age, legal pages, linked documents, tracking pixels and session replay, third-party fonts/maps/video, a consent banner with no Reject button, a missing "Do Not Sell or Share" link, and a Google Consent Mode teaser.

What static analysis cannot see

Computed colours, keyboard traps, focus order, JavaScript-injected content and tag-manager behaviour need a real browser. Findings that depend on these say so, and criteria with no evidence appear as Not Evaluated in the VPAT, never as passing.