Free WCAG 2.2 AA scan — no signup
Find out where you stand on compliance.
Then get the evidence to prove it.
Aegis Firma scans your website for the accessibility failures that demand letters are built on, tracks the privacy and AI rules that apply to you across 169 jurisdictions, and turns all of it into reports, fix lists and records you can hand to a customer, an auditor or your lawyer.
No credit card for the scan · results in minutes · ADA plans from $79/month
60
automated accessibility checks, across 23 WCAG 2.2 A/AA criteria
169
jurisdictions in the AI & privacy regulation registry
110
CMMC Level 2 controls, 320 NIST SP 800-171A objectives
41
browser extensions, from $2.99/month each
Start with your website. It is the part that gets you sued first.
Website accessibility demand letters are filed against small businesses every day, and almost all of them begin with an automated scan of a site the owner had never scanned. Run the same kind of scan yourself, for free, and find out what is actually there.
Enter your URL
60 automated checks run against your page's HTML across 23 WCAG 2.2 A/AA success criteria. No signup, no credit card.
Read your risk score
Violations are weighted by real ADA Title III litigation patterns, so the score reflects exposure rather than a raw error count.
Work the fix list
Every violation comes with plain-English fix instructions, ordered so the highest-risk failures get remediated first.
Keep the record
From $79/month: scheduled re-scans, regression alerts when a site update reintroduces a failure, score history, and the VPAT / ACR that enterprise and government buyers ask for.
What Aegis Firma is not
Aegis Firma is not a law firm and does not answer a demand letter, a regulator or a questionnaire on your behalf. No automated scan, ours included, catches every accessibility barrier — some need human testing. What you get is a fast, honest picture of the failures a machine can find, the record that you found and fixed them, and documents your counsel can work from.
The rest of the platform
Accessibility is the door most people come through. Behind it is the same idea applied to everything else somebody can ask you to prove.
Accessibility — ADA & WCAG
From $79/month
60 automated checks across 23 WCAG 2.2 A/AA success criteria, a lawsuit-risk score weighted by ADA Title III litigation patterns, a prioritized fix list, scheduled re-scans with regression alerts, score history, and a VPAT / ACR generator.
ADA & WCAGPrivacy — data subject rights
From $179/month
A hosted request portal for your customers, identity verification before anything is disclosed, SLA clocks per jurisdiction, erasure plans that reach your vendors, and breach-notification timelines with the record of what was sent and when.
DSR portalFederal — CMMC readiness
Packages and monitoring
All 110 CMMC Level 2 controls with the 320 NIST SP 800-171A assessment objectives behind them, an SPRS score with its trend, a System Security Plan generated from your own answers, POA&M tracking with the 180-day clock, and CUI scoping.
CMMC readinessAI & privacy regulation registry
169 jurisdictions
The EU AI Act, Colorado, California, Illinois, Texas, the UK framework and the rest — each with who it applies to, what it requires, what it costs to get wrong, the in-force dates, and a deadline calendar that tells you which ones are yours.
Browse the registryBrowser extensions
41 extensions, $2.99/month each
Standalone Chrome extensions that do one job each, sold on their own, with a licence key that activates on up to five devices. They do not require an Aegis Firma subscription.
See extensionsReports anyone can verify
Included in every plan
Every report is signed with Ed25519 and carries its own hash and verification link. The person you hand it to opens that link and confirms, without an account, that the document came from us and has not been altered since.
How verification worksWe never sell your data — not anonymized, not aggregated. No third-party tracking scripts, no ad pixels, and a one-click export or delete of everything you have given us, whenever you want it.
Pricing
The scan is free. Plans start at $79/month, annual billing is two months free, and you can cancel whenever you like.
Solo
$79/mo
One seat. The compliance owner who is also everything else.
Team
$199/mo
Five seats, industry playbooks, and accessibility monitoring for a site.
Business
$499/mo
Fifteen seats, data-subject-rights manager, auditor portal, SSO.
Federal
$1,999/mo
or $4,997.50 every 3 months
Everything, plus the CMMC module for defense contractors.
Questions people ask first
What do I actually get for free?
A WCAG 2.2 AA scan of a page on your site: 60 automated checks across 23 success criteria, a lawsuit-risk score, and the fix list. No signup and no credit card. Scheduled re-scans, regression alerts, score history and the VPAT / ACR start at $79/month.
Will an auditor accept your reports?
Every report is signed and carries a verification link the recipient can open to confirm it is unaltered. Whether an auditor accepts your compliance programme depends on your operations, not on our paperwork — customers use these reports as the evidence package their counsel or assessor works from.
Do I have to buy the whole platform?
No. Accessibility, data subject rights and CMMC are each sold on their own, and the 41 browser extensions are $2.99/month each with no subscription behind them. The four plans above are for teams that want the whole record in one place.
How many regulations do you track?
169 jurisdictions, each with its scope, obligations, penalties, in-force dates and enforcement history — the EU AI Act, US state AI and privacy statutes, and the international frameworks. The registry tells you which of them apply to your business rather than handing you all 169.
Find out what is on your site.
The scan takes minutes, costs nothing, and turns a vague worry into a list you can work through.
Scan my site freeNo credit card · no signup · ADA plans from $79/month