Step 4 — Audit the selected sample

Check every page in your sample against every criterion in scope. Record pass, fail, or not applicable — with evidence for each failure, because a finding nobody can reproduce will not get fixed.

4a. Check for the criteria in scope

For each page, work through the criteria for your target level. Use the testing sequence: automated scan, keyboard pass, zoom and reflow, text spacing, screen reader, error states, content review.

Three outcomes per criterion per page:

Recording an outcome
OutcomeWhenRecord
PassThe criterion is met on this pageHow you checked it
FailAt least one instance does not meet itLocation, evidence, who it affects, and the fix
Not applicableThere is nothing on the page the criterion applies toWhy — "no video on this page", not just "N/A"

Do not invent a fourth outcome. "Partially passes" is not a thing: WCAG conformance is binary per criterion per page. If one image in twenty lacks alt text, 1.1.1 fails on that page.

4b. Record what you find

A finding that cannot be reproduced will be argued with and then dropped. Every failure needs six things:

  1. The criterion — number, title and level.
  2. The location — page URL and a CSS selector or unambiguous description.
  3. What happens — the observed behaviour, not your interpretation of it.
  4. How you found it — the tool, browser, assistive technology, and steps.
  5. Who it affects, and how badly — "a screen reader user cannot complete checkout" lands very differently from "missing label".
  6. A suggested fix — usually a technique from the W3C Understanding document.

Severity

WCAG has no severity scale — every failure is equally a failure for conformance. But a report that does not prioritise is unusable, so rank the findings separately from the conformance result:

A workable severity scale for reporting
SeverityMeaningExample
BlockerA group of users cannot complete an essential task at allA keyboard trap in the checkout modal
SeriousA task can be completed, but with substantial difficulty or risk of errorErrors signalled by colour alone
ModerateNoticeable friction; workarounds existVague link text in a list of articles
MinorSmall barrier, low frequencyA decorative image with unnecessary alt text

4c. Check for accessibility support

Verify that the techniques the site relies on actually work in the baseline you defined. An ARIA pattern that works beautifully in one screen reader and is silent in another is a failure if both are in your baseline.

4d. Archive your evidence

Keep screenshots, screen reader transcripts, the scanner's raw output, and the exact URLs and dates. Sites change; six months later your report is the only record of what you saw.

Aggregate before you report

The same defect usually appears on many pages, because it lives in a shared template or component. Report it once, list the pages it affects, and fix it once. A register of 240 separate findings that are really 12 defects buries the signal and exhausts the team.

Open the audit record

Next: Step 5 — Report the findings