Site Punchlist

About

A testing service, not a compliance vendor

Site Punchlist crawls a website, tests every page it can reach with an open-source rule engine, and returns one prioritised list of defects with the code change that fixes each one.

Why this exists

The tools in this market fall into two groups. There are free single-page checkers, which are excellent and which stop being useful the moment you have more than a handful of pages. And there are monthly subscriptions — overlays, widgets, enterprise platforms — priced from about $41 to $199 a month and up, most of which want to be part of your site forever.

There was nothing in between: no way to pay once, find out what is actually broken across a whole site, and get a list you can hand to a developer. That is the entire product.

What we will not do

  • We will not certify anything. Automated testing cannot establish WCAG conformance or legal compliance. Our reports say what was tested, when, and what failed — nothing more.
  • We will not sell you fear. No risk scores, no lawsuit countdowns, no implying that a scan result means you are breaking the law. Whether any rule applies to you depends on facts about your organisation that a scanner cannot see.
  • We will not add anything to your site. No script, no overlay, no widget. Overlays are a live controversy in this field and we have no stake in it, because we do not sell one. The fixes go in your code.
  • We will not invent social proof. There are no testimonials, customer logos, user counts, or case studies on this site, because this is a new business and inventing them would be a lie.

Who runs it

One person, working alone. There is no sales team and no call to book. The product is designed so that buying it, running it, and delivering the report all happen without anybody being available — which is the only way a business this small can answer at three in the morning.

Support is a real email address that reaches a real person: support@sitepunchlist.com.

How it works underneath

Pages are loaded in headless Chromium, given time to render, and tested with axe-core, the open-source engine Deque publishes under MPL-2.0. We run it unmodified. It is the same engine behind a great many accessibility tools, including free ones — we are not claiming a secret detector, and you should be suspicious of anyone who does.

What we add is everything after the raw findings: crawling a whole site, spreading a limited page budget across page templates so each kind of page is represented, collapsing thousands of repeats into a short ordered list, working out which defects live in shared components, and writing the fix.

What this does not tell you

Automated testing cannot establish WCAG conformance, and it cannot establish legal compliance. Nothing here is a certification or a legal opinion.

The rules we run reach 23 of the 55 WCAG 2.2 Level A and AA success criteria. 32 have no automated rule at all — keyboard traps, focus order, focus visibility, error identification and consistent navigation among them. Those need a person. See the full table of what we can and cannot check.