WCAG 2.1 Level AA · the threat model, honestly
Lawfare: the two levers you actually have
Nothing can stop someone from filing a lawsuit. But the law firms that target small businesses run on automation — and that gives you two real moves. Here’s what they are, and the honest order to make them in.
“Lawfare” is using the courts as the weapon instead of the last resort. In web accessibility it has a specific shape: a class of law firms runs automated scanners across thousands of websites, looking for machine-detectable WCAG failures. When a scan turns up enough of them, a demand letter goes out — naming your site, listing the failures, and asking for thousands of dollars to make it go away.
It’s a volume business. The audit costs them almost nothing, and the letter is a form. You aren’t singled out for being the worst site on the internet — you’re selected for being easy to prove against. That’s the part most owners never hear: the threat isn’t your design taste, it’s how cheaply a machine can build a case from your markup.
Here’s the hard truth the overlay vendors won’t print: nothing stops a lawsuit. Even a perfectly compliant site can catch a meritless letter. What you actually control is two things — whether they can cheaply prove a case against you, and whether you have a real defense when they try. Those are your two levers.
Your two levers — and only these two
1 Get off the automated radar
The mills find you with a machine. Take away what the machine can find, and you stop being cheap to target. The failures a scanner flags — missing alt text, unlabeled buttons, low-contrast text, forms with no labels — are real WCAG violations, and they are exactly the low-cost ammunition a templated demand letter is built on. Fix them and two things happen at once: your site genuinely gets better, and you drop off the volume players’ list. This isn’t hiding — it’s removing real defects that happen to be the easiest to weaponize.
2 Actually become WCAG 2.1 Level AA compliant
Off the radar is not the same as compliant, and it is not immunity. A motivated plaintiff, a human tester, or a deeper scan can still find what automation misses — the keyboard traps, the broken reading order, the focus paths no rules engine checks. The only durable protection is the real thing: meet WCAG 2.1 Level AA across your site, and hold evidence that you did. That’s the standard the DOJ wrote into federal regulation for state and local government in 2024, the bar nearly every ADA settlement is measured against, and what the EU’s European Accessibility Act has required since June 2025.
We recommend doing them in this order
Get off the radar — fast
Audit your real site, find the machine-detectable failures a plaintiff’s scanner would flag, and fix those first. Highest leverage, lowest effort — and every fix is real progress, not a patch. This is what the free tier is for.
Then go actually legal
Immediately begin the deeper work — the human- and AI-judged criteria, every page, every state — until you genuinely meet WCAG 2.1 Level AA, and generate court-grade, third-party-verifiable proof that you did. This is what the paid tier is for.
Do them in that order, but don’t stop at the first one. Step 1 buys you time and lowers your odds. Step 2 is the one that actually protects you. Quieting things down and then never doing the real work is exactly how people get caught a year later — by a tester, a regulator, or a plaintiff who didn’t rely on a scanner.
Let’s be precise, because we sell honesty
Getting off the automated radar reduces your odds of being targeted by the volume players. It is not legal compliance, and nothing — not a fix, not a tool, not a widget — makes you immune from being sued. Anyone who promises immunity is selling the same false comfort the FTC ordered accessiBe to pay $1 million over in 2025. Real compliance, plus verifiable proof you reached it, is the only thing that holds up when someone actually tests your site.
Where wcagcheckr fits — one lever each
Free → gets you off the radar
Your lawsuit-exposure grade and the exact machine-detectable fix list a plaintiff’s scanner would hunt for — across a 35-page crawl. Fix those, drop off the volume players’ list, and pay us nothing to do it.
Paid → makes you actually legal
AI audits of the criteria scanners can’t see, whole-site coverage across every state, and court-grade, third-party-verifiable proof you reached WCAG 2.1 Level AA — the evidence your attorney puts in front of the other side.
Free diagnoses and gets you off the radar. Paid treats and proves it. Same honest model as everywhere else on this site — we test your real pages, we don’t bolt a widget over them.
Not sure this is even your problem?
Quick gut-check: do you have a public-facing website that does business with US customers — or sells into the EU? If yes, you’re in scope, and the only real question is whether you find your failures before a scanner does. The check is free, runs on your real site, and takes about ten minutes.