A website audit gets sold as one product covering four completely different jobs — accessibility, performance, SEO, and security — and knowing which one you’re actually buying is the difference between a useful report and expensive wallpaper.
A proper website audit tests four genuinely separate things: whether disabled visitors can use your site, whether it loads fast enough to keep people around, whether search engines can find and rank it, and whether it’s running current, unpatched software. Hand you back a prioritized fix list against all four, and that’s a real audit. Hand you a single score, and you’re looking at one slice wearing a bigger name.
That confusion is the whole reason “get a website audit” turns into a frustrating shopping experience. Ask three Ontario vendors for one and you’ll get three different scopes back, priced nowhere near each other, because none of them tested the same thing. One ran a free crawler and called it a report. Another spent six hours with a keyboard and a screen reader on your actual pages. Both invoices might say “website audit” at the top.
Accessibility tests whether a keyboard-only or screen-reader user can actually complete a task on your site, measured against WCAG 2.0 Level AA — the exact standard Ontario law names. Performance looks at Core Web Vitals: how fast the largest visible content paints, how much the layout jumps around while loading, how responsive the page feels once a visitor starts tapping. SEO checks whether Google can actually crawl, index, and understand what your pages are about. Security covers outdated core software, unpatched plugins, and missing HTTPS — the boring stuff that quietly turns into a defaced homepage or a blocklisted domain.
Below is what each of those actually looks like in Ontario specifically, what the free scan on this site checks versus what it doesn’t, and how to tell a real audit quote from a repackaged crawler.
Two reasons. One is a real legal deadline most provinces don’t have. The other is two things people assume are part of “Ontario compliance” that, for most private businesses, simply aren’t.
The deadline is real and it’s close. Ontario organizations with 20 or more employees must file an accessibility compliance report by December 31, 2026, and at 50 or more employees the public website itself has to conform to WCAG 2.0 Level AA, not just get attested to on a form. That’s the piece an audit actually has to test for, and it’s covered in full detail, thresholds and worked examples included, in the website accessibility audit guide and the AODA audit checklist.
Now the two things that usually don’t apply, and get quietly bundled into audit quotes anyway. First, French-language testing. Ontario’s French Language Services Act binds government ministries and specific designated public-sector bodies. It does not impose a general bilingual-content requirement on private businesses’ websites the way Quebec’s language law does for businesses operating there, a distinction confirmed by Ontario employment and business law counsel writing on the Act’s actual scope. If your business isn’t a designated public entity, a French-language pass isn’t a legal line item, however useful it might be for a genuinely bilingual customer base.
Second, privacy. It’s real, just not what most people picture when they hear “website audit.” PIPEDA applies to virtually any commercial Ontario business that collects personal information, including a one-person shop with a contact form, per the Office of the Privacy Commissioner of Canada. You’re expected to have a clear privacy policy naming who’s accountable for that data. That’s a real obligation. It’s a separate legal question from your site’s technical accessibility, performance, and SEO scope, and most audit vendors won’t touch it unless you specifically ask.
No, not for the actual work. What changes your outcome is whether the person doing the audit names WCAG 2.0 AA specifically and shows you manual testing, not the postal code on their invoice. A website is tested the same way whether the auditor sits in a Toronto office tower or works remotely out of Cambridge.
Plenty of businesses still default to searching “website audit toronto” because that’s where the market’s concentration of agencies happens to sit. Fair enough. But an audit is a deliverable, PDF report, prioritized findings, sometimes a call to walk through it, and none of that requires physical proximity. Remote delivery has been standard practice across serious Ontario web work for years now. If the location question is really a proxy for “can I trust someone I can’t meet in person,” that’s a fair worry, and it’s the same one worth asking of any vendor regardless of the audit. The deeper version of that argument, applied to hiring a developer generally, is worth a read if it’s on your mind: does a WordPress expert need to be in your city to do the job right?
An instant, automated pass across four categories, performance, SEO, accessibility, and best practices, returned as scores out of 100 with a prioritized list of the highest-impact fixes, in seconds. That’s exactly what it is. Nothing more claimed, nothing less delivered.
Enter a URL at jbe.works/audit and the tool runs it through Google’s own PageSpeed Insights, the same engine that powers Google’s public Core Web Vitals reporting, falling back to a lighter no-quota check if PSI can’t reach the site in time. You get real, machine-verified scores back, not a marketing estimate, plus a plain-English breakdown of what’s dragging each one down. Add your email and the same report lands in your inbox.
Here’s the honest boundary. The accessibility score in that free scan is Lighthouse’s automated accessibility audit, the same class of programmatic check that catches alt-text gaps, contrast failures, and some ARIA mistakes. It’s the same automated layer described in the full accessibility audit breakdown as catching roughly 30 to 40 percent of real WCAG issues. It’s a genuinely useful first read, and it’s free. It is not a keyboard-and-screen-reader manual pass, and it doesn’t check security beyond the handful of “best practices” signals PSI itself flags, like HTTPS and known vulnerable libraries. Run it first. Decide what you actually need next from what it turns up.
A full audit adds the manual layer machines can’t do, and it treats each of these four areas as its own specialist job, not a line item on a single checklist.
| Audit area | What’s actually tested | Why it matters here |
|---|---|---|
| Accessibility | Manual keyboard-only navigation and screen-reader testing against WCAG 2.0 AA success criteria, beyond what an automated scanner flags | The website standard Ontario’s IASR names directly; mandatory in fact (not just on paper) at 50+ employees before the December 31, 2026 report |
| Performance | Core Web Vitals (LCP, CLS, TBT), image weight, hosting and caching, third-party script bloat | Google’s own mobile benchmarks found the probability of a bounce rises 123% as load time goes from 1 second to 10 seconds, per Think with Google’s mobile speed benchmarks |
| SEO | Crawlability, indexing status, metadata, structured data, broken links and redirects, content gaps | The technical layer that decides whether Google can even see what your business does; full cost-by-type detail in the website audit cost guide |
| Security | Outdated core software, unpatched plugins and themes, missing HTTPS, exposed admin paths | WordPress specifically logged 11,334 new vulnerabilities across its ecosystem in 2025, a 42% jump over 2024, with 91% found in plugins rather than core, per Patchstack’s State of WordPress Security whitepaper |
Notice that none of these four rows share a testing method. That’s precisely why one person spending twenty minutes with a crawler can’t credibly cover all four, and why a report claiming to has probably skipped at least two of them.
Ask five direct questions before you pay for anything, and the vague quotes sort themselves out from the credible ones fast.
It depends entirely on which of the four categories above you’re buying, and the spread is wide. A real WCAG accessibility audit typically runs $1,500 to $5,000 for a small-business site per published industry pricing, while most small-business SEO audits land well under $1,000. A full technical audit covering all four areas costs more again, because it bundles several specialist skill sets into one deliverable rather than one person running one extra tool.
The full type-by-type breakdown, with per-page pricing models and how to compare quotes that look nothing alike, lives in the website audit cost guide. Nothing here duplicates it; start there once you know which category you actually need priced.
Run the free scan yourself this afternoon; hire out once the stakes or the complexity outgrow what an automated pass can responsibly tell you. Both are legitimate depending on what you’re actually deciding.
The free instant scan is a genuinely useful starting point for any Ontario business, no cost, no commitment, real scores in seconds. Where it stops being enough is the moment you’re at 50+ employees staring down a compliance-report deadline, running an e-commerce site where a keyboard trap in checkout costs you real revenue, or planning a rebuild and need the full picture before committing budget. That’s where a real audit, and often the remediation to follow it, earns its price. jbe.works accessibility covers exactly that gap, and a conversation about your site is one message away at contact.
Start with the free scan right now. It takes seconds and it tells you, honestly, which of the four categories above actually needs attention on your site before you spend a cent on anything deeper.
If accessibility is what came back worst, or you already know 20+ employees puts you on the clock for December 31, 2026, go deeper with the website accessibility audit guide and the AODA audit checklist. If it’s the pricing that’s unclear, the audit cost guide breaks down what each type should actually run you. And if the honest answer is that you’d rather have someone else run the whole thing and fix what it finds, that’s what jbe.works accessibility does.
Quick, direct answers to what Ontario business owners ask most about website audits.
Audit, remediation and the compliance report, handled end to end for Ontario businesses.
AODA & WCAG Accessibility Compliance →Enter your website and get a free 60-second performance, SEO & accessibility report.
~60 seconds · No login