Section 508 compliance checker and checklist for websites
Updated October 14, 2026 · 5 min read
Section 508 of the Rehabilitation Act requires US federal agencies to make the information and communication technology (ICT) they develop, procure, maintain or use accessible. For web content the rule is short: the Revised 508 Standards require conformance to WCAG 2.0 Level A and Level AA. If you build sites or sell software to federal agencies, that is the bar. Our free check tests a page automatically; this page explains the standard and gives a checklist for the rest. It is general information, not legal advice.
What the Revised 508 Standards say
The standards are published by the U.S. Access Board. The key provisions:
- E205.4 (electronic content): electronic content shall conform to Level A and Level AA success criteria and conformance requirements in WCAG 2.0.
- E207.2 (software): user interface components and platform and application content must meet the same WCAG 2.0 A and AA criteria.
- 702.10.1: incorporates WCAG 2.0 (W3C Recommendation, 11 December 2008) by reference.
- Non-web documents and software: WCAG applies with "document" or "software" in place of "web page"; four criteria — 2.4.1, 2.4.5, 3.2.3 and 3.2.4 — are excepted for them.
The Access Board issued the final rule on 18 January 2017; "existing ICT" in the standards refers to ICT procured, maintained or used on or before 18 January 2018. The standards also cover hardware, support documentation and services, which a website scan does not touch.
Section 508 vs WCAG
| WCAG | Section 508 | |
|---|---|---|
| What it is | W3C guideline, versions 2.0, 2.1, 2.2 | US federal law and standards for ICT |
| Who it applies to | Anyone who adopts it, or laws that point to it | Federal agencies; vendors meet it through procurement |
| Web content | Success criteria at levels A, AA, AAA | WCAG 2.0 A and AA by reference |
| Beyond the web | Web content only | Also hardware, software, documents, support |
In short, for a website "508 compliance" and "WCAG 2.0 AA conformance" test the same criteria. WCAG 2.1 and 2.2 add criteria such as reflow, non-text contrast and target size; meeting WCAG 2.2 AA covers all WCAG 2.0 AA criteria except 4.1.1 Parsing, which WCAG 2.2 removed. For state and local governments, the separate ADA Title II rule asks for WCAG 2.1 AA — see ADA website compliance.
What a 508 compliance checker can test
A 508 compliance testing tool tests the part of WCAG that a machine can detect. Our free check and the WCAG checker run axe-core against WCAG 2.2 A and AA in a real browser; every finding shows its WCAG criterion number, so you can read the result against WCAG 2.0 AA. Typical findings:
- images and image links without a text alternative (1.1.1);
- text with too little contrast (1.4.3) — single colour pairs in the contrast checker;
- form fields without labels and buttons without names (1.3.1, 4.1.2);
- missing page language and page title (3.1.1, 2.4.2);
- link text that gives no purpose (2.4.4).
For pages behind a login, use the free browser extension. The scan is an automated check, not a full audit: no tool can confirm 508 conformance on its own.
Section 508 compliance checklist for websites
Use the scan for the automated part, then work through these by hand.
Structure and content
- [ ] Headings, lists and tables are marked up as such, not just styled (1.3.1).
- [ ] Reading order in the code matches the visual order (1.3.2).
- [ ] Instructions do not rely only on shape, colour or position (1.3.3, 1.4.1).
- [ ] Every page has a descriptive title (2.4.2) and headings and labels describe their purpose (2.4.6).
Keyboard and navigation
- [ ] Every function works with the keyboard alone, without traps (2.1.1, 2.1.2).
- [ ] Focus is visible and moves in a logical order (2.4.7, 2.4.3).
- [ ] A skip link or landmarks let users bypass repeated blocks (2.4.1).
- [ ] There is more than one way to find a page, such as a menu and search (2.4.5).
Media and time
- [ ] Prerecorded video has captions and audio description or a text alternative (1.2.2, 1.2.3, 1.2.5).
- [ ] Live video has captions (1.2.4).
- [ ] Moving or auto-updating content can be paused, and time limits can be extended (2.2.2, 2.2.1).
- [ ] Nothing flashes more than three times per second (2.3.1).
Forms
- [ ] Errors are identified in text and suggestions are given (3.3.1, 3.3.3).
- [ ] Legal and financial submissions can be reviewed, corrected or reversed (3.3.4).
- [ ] Changing a field does not unexpectedly submit or move the user (3.2.2).
Documents
- [ ] PDFs and Office files linked from the site meet the same criteria — see how to check PDF accessibility.
A longer, area-by-area list for US sites is in our ADA website compliance checklist; for WCAG 2.2 there is the WCAG 2.2 checklist.
Selling to federal agencies
Agencies often ask vendors for an Accessibility Conformance Report built on the VPAT 508 edition. Automated results feed that report but do not replace manual evaluation — see VPAT and ACR explained.
With a plan, Pandus scans every page of your site each week and keeps dated reports, so you can show what was found and fixed over time.
Sources
- U.S. Access Board, Revised 508 Standards and 255 Guidelines (E205.4, E207.2, 702.10.1): https://www.access-board.gov/ict/
- ADA.gov, Guidance on Web Accessibility and the ADA: https://www.ada.gov/resources/web-guidance/
- W3C, WCAG 2.2: https://www.w3.org/TR/WCAG22/
Frequently asked questions
What does Section 508 require for websites?
The Revised 508 Standards require electronic content, including web pages, to conform to WCAG 2.0 Level A and Level AA success criteria and conformance requirements, which they incorporate by reference.
What is the difference between Section 508 and WCAG?
WCAG is a W3C guideline; Section 508 is US federal law for the information and communication technology federal agencies develop, buy, maintain or use. For web content the 508 Standards adopt WCAG 2.0 AA rather than writing their own web rules.
Is there a free 508 compliance checker?
Yes. Our free check tests one page against WCAG 2.2 A and AA, which include the WCAG 2.0 AA criteria except the removed 4.1.1 Parsing. It is an automated check, not a full audit, and no tool can certify 508 conformance.
Does Section 508 require WCAG 2.1 or 2.2?
The Revised 508 Standards published by the US Access Board incorporate WCAG 2.0. Meeting WCAG 2.1 or 2.2 AA goes beyond that and includes nearly all of the 2.0 AA criteria.
Does Section 508 apply to documents and software?
Yes. The same WCAG 2.0 criteria apply to non-web documents and software, with a few criteria excepted and "document" or "software" read in place of "web page".