We assess website security and accessibility against WCAG 2.1 AA and train teams to use WordPress. The audit ends with a report and fix plan; training takes place on your website.
Four things you always get with a Balance IT audit and training package.
A senior security/a11y specialist takes your brief — we come back with a specific audit scope and price.
Alongside Burp / axe / Lighthouse — real manual testing and live NVDA/JAWS tests.
Every finding with severity (Critical/High/Medium/Low) + a fix roadmap + step-by-step reproduction.
After fixes are implemented, we return and verify them — at no additional cost.
An audit should be more than an 80-page PDF gathering dust. We leave you with a CVSS-rated report, a roadmap of prioritised fixes and team training — so your team can handle future deployments without us.
OWASP Top 10 + manual penetration testing of the web application and admin panel
WCAG 2.1 AA — automated tools (axe, Lighthouse) + manual testing (NVDA / JAWS / VoiceOver / keyboard)
Hands-on training for your team + 30 days of Slack Q&A after implementation
Full Top 10 list + manual penetration testing in every Pro and Enterprise package.
Full range of Level AA criteria — readiness for EAA 2025 compliance.
Accessibility statement + roadmap to face inspections without panic.
Your team practises on your website — not a fictional course demo.
Choose the audit scope — from a quick scan to a full penetration test + WCAG + team training. Net prices. The amounts shown cover the package scope; additional work requires an agreed scope and confirmed quote. Small tasks include 1–2 days of total work, covering analysis, communication, QA and agreed revisions. We agree the delivery date; this allowance is not a delivery deadline promise.
1–2 days of total work; timing agreed
Delivery 2-3 weeks
Delivery 4-6 weeks
A proven set of tools and methods — manual + automated, security + a11y, report + training. No "AI scanner" replacing a senior specialist's work.
OWASP Top 10, server configuration, session, auth and upload verification. Burp Suite + manual testing of the web application and admin panel.
Full review of 50 Level AA criteria. Every finding with a code location and recommended fix. EAA 2025 and digital accessibility law compliance.
Thoughtful automated scans — we verify results manually to avoid false positives and find what automation misses.
Real testing with screen readers and keyboard-only navigation — essential to a reliable WCAG audit. Issue recordings included in the report.
A ready document compliant with statutory requirements: status, inaccessible elements, action plan and contact details — just sign and publish.
A hands-on workshop for your team on your website — content editing, SEO, backups and safe updates. Followed by 30 days of Slack Q&A with the trainer.
We review these questions with you before we confirm the scope and deliverables.
Scope and handover
Which systems, scenarios and people are in scope?
What access and materials do we need before starting?
How will we judge whether the audit or training is useful?
Who will act on the findings and check the result?
The Balance IT standard
Burp + ZAP + manual testing by a senior specialist. We do not rely on a single scanner.
Severity, priorities, recommended fixes — you know what to tackle first.
Manual a11y testing with a screen reader and keyboard + recordings of issues in the report.
After fixes are implemented, we return, verify them and update the statement.
Each audit has its own specialist team: penetration tester, senior a11y specialist, WP trainer. No all-purpose senior, no excuses.
Every stage ends with a demo and approval. Re-audit after fixes are implemented — included in the price.
Days 1-3 · attack surface mapping + automated tests
Weeks 1-2 · Burp + NVDA/JAWS + keyboard
After fixes are implemented · 2 days of workshops + 30 days of Slack
Loading projects...
Answers to frequently asked questions about audits and training