Features
Everything you need to find, fix and track accessibility issues.
From the first scan to the report everyone on your team can actually read, here's what TrustScans does.
See how TrustScans compares with overlays and other scanners
Scanning
A crawl that finds what your site actually is.
Point TrustScans at a URL and it does the rest. No page list or crawl rules to configure.
Automatic full-site crawling
TrustScans follows links from your homepage and uses your sitemap automatically when you publish or provide one, up to your plan’s page limit. Each scan shows exactly how its pages were found.
Real browser rendering
Every page loads in an actual browser, the way your visitors see it. React, Angular, and other JavaScript-heavy sites are scanned as rendered, not as raw HTML.
WCAG 2.0, 2.1 and 2.2 at A, AA or AAA
Choose the version and level you are held to, and every scan checks against exactly that scope.
Thorough mode
Adds a mobile-viewport pass, a 320px reflow check and focus-indicator contrast, for the problems that only show up on small screens and keyboards.
Checks beyond automated rules
TrustScans adds its own checks for common failures rule engines miss, such as menus whose expanded state never updates and links used as buttons.
Honest coverage
Error pages, bot-protection challenges and anything off your site are reported for what they are, never scored as clean. If most pages can’t be reached, the scan says so instead of giving a grade.
Reporting
One report, read differently by everyone who opens it.
A score leadership can track, and page-level detail your developers can act on.
A score that counts real failures
The accessibility score and grade count confirmed WCAG failures only. Items that need a person to check, and best-practice recommendations, are shown separately and never lower the number.
Page-level fix detail
Every finding names the page, the element’s CSS selector and HTML, the WCAG success criterion it violates, and plain-language guidance on why it matters and how to fix it, written for each rule we test.
Screenshots of the problem
The first occurrences of each issue on a page come with a screenshot of the failing element, highlighted in place, so nobody has to hunt for it.
Sitewide issue grouping
When the same markup fails on three or more pages, TrustScans groups it with “appears on N pages” as a likely shared component, so you fix it once.
Reports for every role
Seven views across all your sites: an executive overview, site comparison, WCAG criteria, rules, pages, remediation and usage. Filter by date, site and severity.
Explore ReportsVPAT-ready evidence
Findings are tagged with their WCAG success criterion and timestamped, with screenshots, ready to support a VPAT or ACR.
PDF and CSV exports
A clean PDF report that puts the summary first, a complete CSV of every finding or page, or both in one ZIP, to share with a client, a board or an engineering queue. Team and Enterprise.
Monitoring
Compliance drifts. TrustScans catches it before you find out the hard way.
Scan on a schedule, see the trend, and hear about it when something slips.
Recurring scans
Set scans to run weekly or monthly and TrustScans keeps a history of every result. Basic and above.
Score trends and scan comparison
Track each site’s score over time and compare any two scans to see what was fixed and what is new.
Regression alerts
An email when a site’s score drops compared with its last comparable scan, instead of finding out at your next audit. On every plan.
Email updates and digests
Know when a scan finishes or fails, get a warning before you run out of pages, and a weekly or monthly digest of your lowest-scoring sites.
Scan history retention
Every completed scan is kept for your plan’s retention window, so you can always pull up what changed and when.
Remediation
From a list of problems to a list of fixes.
TrustScans never changes your site. It helps your team, or your coding agent, fix the source and proves it with the next scan.
Remediation progress
Tick issues off as your team addresses them and watch the confirmed backlog shrink. It is labelled as your team’s report, because only a new scan verifies a fix and updates the score.
Fix issues with an AI coding agent
Connect Claude Code or another MCP client. The agent pulls the work queue with screenshots and code context, fixes the code, marks each issue resolved with a note, and starts a scan to verify. Team and Enterprise.
How agent remediation worksNothing injected into your site
No overlay, no widget, no script. Visitors get exactly what you publish, and every fix lives in your code.
Why we don’t build overlaysWorkflow
Built to fit into how your team already works.
TrustScans is designed to plug into the tools and processes your team already uses, not replace them.
API & MCP access
Pull scores, findings and trends into your own dashboards with the REST API, or connect an AI assistant over MCP to build summaries and remediation plans. A Developers area in the app holds the API reference, keys and MCP setup. Team and Enterprise.
See the API and MCP serverNotion integration
Send a scan report to a Notion page or database, with scores, top issues and fix guidance, so it lives next to the rest of your project notes. Team and Enterprise.
Project management tool syncComing soon
Sync findings into your project management tool so remediation work shows up where your team already tracks it.
Team seats and roles
Invite your team as owners, admins or members. Team and Enterprise include unlimited seats.
Refer an organization
Invite another organization from your settings and earn bonus plan time or pages when it qualifies, such as a free month of Basic for accounts on Free. The current rewards are listed in the app.
Up to five scans at once
On Team and Enterprise, up to five sites scan at the same time rather than waiting in a queue, so a large portfolio doesn’t mean a slow one.
Security
Built on infrastructure that takes data isolation seriously.
Your scans and your clients’ data stay yours.
SOC 2 Type II infrastructure
Hosted on Vercel with data in Supabase (Postgres), both operating under independently audited SOC 2 Type II controls.
Row-level data isolation
Every row is scoped to an organization via Postgres Row-Level Security. One customer’s scans cannot be read by another.
Single sign-on (SSO)Coming soon
Enterprise plans can authenticate through your organization’s identity provider.