An audit tells you what’s broken. Remediation is the separate, slower job of actually going into the code and fixing it — and how that project gets scoped is what separates a punch list that gets acted on from one that sits in an inbox.
An audit tells you what’s wrong. Remediation is the separate work of going into your actual code and correcting it. They get talked about as one phase, “get audited,” but they’re two different jobs with two different deliverables, and mixing them up is how a business ends up with a punch list and nobody assigned to act on it.
The audit is diagnostic: a tester, using an automated scanner plus a manual keyboard and screen-reader pass, works through your site and produces a prioritized report tied to specific WCAG 2.0 AA success criteria. That process, and what a good report actually looks like, is covered in full in the website accessibility audit guide and the AODA audit checklist. Neither of those pieces goes deep on what happens after the report lands. This one does.
Remediation is where that report turns into shipped code. Alt text gets written, per image, by someone who looked at it. Contrast gets corrected in the CSS. A keyboard trap in a mega menu gets rebuilt with real focus management. It’s development work, billed and scheduled like development work, and it’s the part an audit alone never touches.
By severity first, then by how many pages a single fix actually touches, not by the raw count of line items an audit turned up. A 200-issue report sounds enormous until you notice 140 of those issues are the same broken dropdown menu, repeated across every page that uses it.
A workable severity framework, laid out clearly in accessible.org’s guide to building a remediation plan, sorts every finding into four tiers.
| Severity | What it means | Example |
|---|---|---|
| Critical | Blocks task completion for assistive-technology users entirely | A keyboard trap in checkout; a required form field with no accessible name |
| High | Causes real difficulty, but a workaround exists | A broken or skipped heading hierarchy that makes navigation confusing but not impossible |
| Medium | Degrades the experience without preventing the task | A missing skip-navigation link |
| Low | Minor or cosmetic, mostly affecting edge cases | A decorative image carrying redundant alt text |
Layer that against your site’s actual templates, not its page count. A header, a footer, a shared form component, and a navigation menu usually appear on every single page. Fix the component once, correctly, and every page inheriting it is fixed with it. That’s the leverage a good remediation scope is built around: critical issues first, shared components before one-off page fixes, then the medium and low-priority cleanup once the parts that block real people are handled.
It means going into the template, the theme’s components, and the media library, not a plugin’s settings panel. WordPress remediation touches four areas specifically, and each one needs its own pass.
WordPress remediation and a WordPress migration or redesign are frequently the same project in disguise, because both already touch every template. If you’re weighing a rebuild anyway, folding WCAG work into it, rather than doing it twice, is worth reading up on in the WordPress-specific guide linked above.
No. An overlay runs a script on top of your existing markup; remediation rewrites the markup itself. They’re not two versions of the same fix, one cheap and one expensive. Only one of them touches the code a screen reader or keyboard actually interacts with.
The FTC’s 2025 order against overlay vendor accessiBe, a $1,000,000 penalty for falsely claiming its widget could make any website WCAG-compliant, is about as official a confirmation of that distinction as exists. The full case, the lawsuit data, and why a bolted-on script can make a page actively worse, not just insufficient, is in does an accessibility overlay make your website AODA compliant? If a vendor is pitching a widget as your remediation, that pitch is the thing to push back on.
Anywhere from a few weeks to several months, and the site’s size and complexity, not the number of issues an audit lists, is what actually drives that range. A published phased approach from accessible.org puts critical issues, the ones blocking a real task for assistive-technology users, inside the first 30 days, high-priority issues by day 60, and medium/low-priority cleanup wrapped up by day 90.
Scaled against overall site size, TestParty’s published remediation timeline data puts a small site under 50 pages at roughly 4 to 8 weeks, a mid-size site in the 50-to-500-page range at 2 to 4 months, and a large or highly interactive site at 4 months or considerably more. A brochure site built on three templates and a component-heavy e-commerce catalogue simply aren’t the same job, even if they both get called “a website.”
Whatever the total, don’t compress it into a scramble against December 31, 2026. The step that gets skipped under time pressure is almost always the retest, and that’s exactly the step that catches a fix that looked right in code but didn’t actually work with a real screen reader.
It’s priced off what the audit finds, not off a flat rate, because a report full of critical keyboard traps in custom components costs more developer time to fix than one full of missing alt text. Expect remediation to be quoted as its own line item, after the audit scopes the actual work, rather than bundled sight-unseen into the audit fee.
One comparison worth sitting with regardless of the exact number: a remediation project is a one-time cost. An overlay subscription is a recurring one that, over a year or two, adds up to roughly the same range as real remediation, except the subscription never actually fixes anything. The math behind that comparison is in the audit cost breakdown.
Line up the three things people conflate under “getting AODA compliant” and the distinction stops being abstract.
| Factor | Audit | Remediation | Overlay / widget |
|---|---|---|---|
| What it actually does | Finds and documents WCAG failures | Fixes those failures in the actual code | Adds a script layer on top of unchanged code |
| Deliverable | A prioritized findings report | Shipped, tested code changes | An on-page widget menu |
| Who does it | An accessibility tester | A developer | A vendor’s script, self-installed |
| Moves you toward WCAG 2.0 AA? | No, it only measures the gap | Yes, when tested and verified | No — the FTC fined a major vendor $1M for claiming otherwise |
| Cost pattern | One-time, scoped to site size | One-time, scoped to what the audit found | Recurring subscription, indefinitely |
Only the middle column changes what a screen reader or a keyboard actually encounters. The other two either measure the problem or paper over it.
A handful of fixable issues on a simple, template-light site is genuinely a DIY job if a developer on your team is willing to work through the list properly. Anything built on a heavy page builder, carrying custom interactive components, or serving as the compliance evidence behind a 50+ employee report is a different calculation.
Piecemeal fixes on a live site, module by module, whenever someone gets around to it, tend to cost more over time than scoping the whole remediation once and doing it properly. If you’re already planning a redesign or a platform move this year, that’s the cheapest point to fold this work in, since the project already touches every template anyway.
On any serious build, accessibility gets tested and signed off before launch, not patched in afterward when someone complains. That’s the bar I bring to a small Ontario business site too, the standard doesn’t change with the size of the client, only the scope of the work does. If you’d rather have someone scope and run the whole remediation, that’s what jbe.works accessibility does, code-level fixes, not a widget in the quote.
Get a real audit first, if you haven’t already, since remediation without one is just guessing at priorities. The AODA audit checklist walks through exactly what to test. Once you have findings in hand, group them by severity and template using the framework above before a single line of code changes.
If you’re on WordPress specifically, read the AODA and WordPress guide next for the builder-specific detail this piece deliberately didn’t repeat. And if a vendor’s already pitched you an overlay as the fix, this is why it isn’t one. Ready to have someone scope and run the actual remediation? jbe.works accessibility is built around exactly that, and a free scan is one message away at contact.
Quick answers to what comes up most once an Ontario business moves from “we got audited” to “now what.”
Audit, remediation and the compliance report, handled end to end for Ontario businesses.
AODA & WCAG Accessibility Compliance →Enter your website and get a free 60-second performance, SEO & accessibility report.
~60 seconds · No login