AllyProof Documentation
AllyProof is a WCAG 2.2 AA accessibility scanning platform for web agencies. It combines three scanning engines, AI-powered fix suggestions, and draft VPAT generation into one dashboard for managing client sites at scale.
Guides
Quick Start
Add a site, verify ownership, and run your first scan in under 5 minutes.
Scanning Engines
How axe-core, HTML_CodeSniffer, and APCA work together for ~70% coverage.
CI/CD Integration
Add accessibility checks to GitHub Actions, GitLab CI, or Jenkins pipelines.
API Reference
Complete REST API documentation for all endpoints.
Notifications
Email alerts for scan results, critical violations, and weekly digests.
VPAT Reports
Generate VPAT 2.5 documents covering all 56 WCAG 2.2 AA criteria.
Litigation Risk
Understand risk scoring based on violations cited in ADA lawsuits.
Architecture
Tech stack, scan pipeline, multi-tenancy model, and authentication layers.
Key Concepts
Multi-Engine Scanning
AllyProof runs three engines on every page: axe-core (91 rules, zero false positives), HTML_CodeSniffer (~200 rules, catches additional issues), and APCA (WCAG 3.0 draft contrast analysis). Results are deduplicated and merged into a single violation list with source attribution.
Accessibility Score
Each site gets a 0-100 score based on open violation counts. Critical issues deduct up to 50 points, serious up to 30, moderate up to 15, and minor up to 5. A score of 100 means no automated violations found (57-70% of total WCAG issues are automatable).
VPAT Generation
AllyProof generates VPAT 2.5 documents covering all 56 WCAG 2.2 AA criteria. Criteria are automatically classified as Supports, Partially Supports, Does Not Support, or Not Evaluated based on scan results. All VPATs are labeled DRAFT — manual expert review is required for final conformance assessment.
Litigation Risk
The litigation risk scorer maps violations against the 7 axe-core rules cited in 89% of ADA website accessibility lawsuits (missing alt text, form labels, color contrast, link purpose, language, bypass blocks, name-role-value). Sites with these violations get a High/Medium/Low risk rating.