Phase one of your website's cybersecurity — free in 30 seconds.
Most websites, especially the ones built fast on Shopify, Wix or an AI builder, go live with holes nobody mentions: what an attacker can see from outside, email anyone can send pretending to be you, a scam or malware blocklist listing, dead links, a missing privacy policy, and the accessibility problems ADA demand letters cite. MCProof checks all of it in plain English and hands you or your developer the exact fix. Nothing on your site is changed.
The widget you installed is a lawsuit waiting to happen.
Accessibility overlays are scripts that claim to make you WCAG-compliant — but they don't fix the underlying HTML, so they don't hold up. In January 2025 the FTC fined a leading overlay vendor $1 million for deceptive claims, and businesses that relied on these widgets have still faced ADA lawsuits. MCProof is the opposite by design: it finds the real failures, hands your developer the exact fixes, and produces a draft conformance report your qualified reviewer signs. We can't promise you'll never be sued — no honest tool can — but fixing the real code is what actually reduces your risk.
A report the director reads. A fix list the developer runs.
Most tools give you a wall of findings. MCProof gives each person exactly what they need from the same scan — and keeps them speaking the same language.
Plain-language risk report
No jargon — just whether the site is a lawsuit or audit risk, and why.
- A clear risk level, in words a non-engineer understands
- The issues an auditor or lawyer would actually cite
- What it would cost to ignore — stated honestly
Executable fix list
Every issue keyed to the exact element on the page, with the fix.
- The precise selector and the real HTML that failed
- Before/after code, plus paste-ready security-header config
- Whole-site crawl — one rollup across every page
From a corner shop to a contracting officer.
Avoid the ADA demand letter
Thousands of businesses get sued over inaccessible websites every year. Run a free check, see where you stand in plain English, and hand your developer the exact fixes.
Meet the European Accessibility Act
Since June 2025 the EAA requires accessible digital products across the EU. Regulators are clear that automated tools alone aren't enough — so MCProof automates what it can and produces a draft your qualified evaluator signs, the combination the standard expects.
Draft your VPATs in-house
The Accessibility Conformance Report a contracting officer requires — drafted in-house from an automated scan, so your evaluator spends time only on the criteria that genuinely need human judgment, not the whole engagement. Self-hosted, with an --offline mode for air-gapped networks.
Check your computers, too — free.
Security isn't only your website. The MCProof Device Security Check audits any Windows or Mac for the basics that stop most attacks — disk encryption, firewall, updates, antivirus, screen lock, remote access, backups — and hands you a plain-English report mapped to NIST / CIS controls. It reads settings only: nothing is installed, and nothing leaves the device.
Find it free. Fix it yourself, or have us fix it.
The homepage check is always free: accessibility, security, what an attacker sees, broken links, blocklists and the essentials most sites are missing. You pay to cover every page, for the fixes, for us to do the work, or for us to keep watching.
You never pay to find out whether you have a problem. The scan and the risk grade are free, need no account and no card, and the report is yours whether you buy anything or not.
If you buy the $97 report and it does not name a single issue your developer can act on, reply to the receipt and we refund it. Your Site, Fixed: every issue closed in fourteen days of access, or you pay nothing. Protect and Business carry thirty days, same deal. We would rather lose the sale than have you paying for something you cannot use.
Know business owners with a website? Send them your MCProof link and earn 20% of what they buy. Join the partner program →
What this is priced against: an outside accessibility audit alone is commonly quoted at $1,000–$7,000 with the fixing billed on top, an enterprise consultancy quotes four to five figures on a six-week clock, and website accessibility demand letters commonly settle in the five figures before anybody's legal fees.
What nothing else on that shortlist does.
508 + security, together
Accessibility and security assessed in one pass and cross-mapped to the same control frameworks — not two separate tools and two separate bills.
The conflict engine
Catches defects that are both an accessibility barrier and a security anti-pattern — the class neither an a11y nor a security scanner will find.
Honest — not an overlay
No fake "compliant" badge. Automation proves the failures; your qualified reviewer signs the pass. That's the honest model — and the opposite of what the FTC fined the overlays for faking.
The questions a skeptic asks first.
We sell honesty, so here are the honest answers — limits included.
Will MCProof guarantee I won't be sued?
No — and be wary of any tool that says it will. No automated product can promise a legal outcome. What we do is find the real accessibility and security failures on your site and give you the exact fixes, because fixing the underlying code is what actually reduces your risk.
Do you provide the "qualified reviewer" who signs the report?
No. MCProof does the automated testing and produces a complete draft conformance report. The signature belongs to you or your own qualified evaluator — a person who reviews the criteria automation can't decide. We're explicit about this so you can plan for it; we don't imply a review service we don't run.
How much can automated testing actually catch?
Roughly 30–40% of WCAG success criteria can be determined automatically. The rest — meaningful alt text, logical focus order, whether an error message makes sense — needs human judgment. MCProof marks which findings are automated and which still need review, and never reports "Supports" from automation alone.
Isn't this just a wrapper around axe-core?
We use the open-source axe-core engine for part of the accessibility testing — as most credible scanners do — and we say so plainly. On top of it we add Section 508 / VPAT mapping, a passive web-security assessment, and our accessibility-and-security conflict analysis (defects that are both a barrier and a security anti-pattern). The value is the unified report and the federal artifacts, not a claim that we reinvented accessibility testing.
What do you do with the site I scan, and my data?
The scanner reads the public page(s) you submit to generate your report and returns the result to you. We don't sell your data, and the scanner won't reach private or internal addresses. Treat the free scan as a read-only check of a page you're authorized to test.
Where do your statistics come from?
The $1 million figure is the FTC's January 2025 settlement with overlay vendor accessiBe over deceptive advertising. Statements about businesses being sued despite using overlay widgets come from published annual reports on digital-accessibility litigation. We'll share sources on request rather than print unsourced numbers.
Is any of this legal advice?
No. MCProof produces automated draft assessments to accelerate your Section 508, ADA, and security work. It is not legal advice, and its output should be reviewed by a qualified evaluator before you make any conformance representation.
See your site the way an auditor will.
It takes thirty seconds and costs nothing. Find out where you stand before someone else tells you.
Scan your site free →