Vitki / forge · website legal-risk audits

Find your legal exposure. Then fix it. Quick scan · paid audit · human remediation — one room, one engineer

ADA web-accessibility filings hit 3,117 in 2025, up 27% year-over-year. California Unruh stacks $4,000 per violation with 3× actual damages. CIPA pixel suits add $5,000 each. The trade press calls these "the new wave"; the demand letters call them "settle within 30 days." Most small businesses don't know they're exposed until the certified mail arrives.

Forge runs the audit, ships you a PDF with every finding tied to the exact statute it implicates, and — if you want — fixes what we find. The audit fee credits toward remediation if you engage within 60 days, so you're never paying twice for the same work.

3,117
federal ADA web suits 2025 (Seyfarth Shaw)
$4K
minimum statutory damages per California Unruh violation
$5K
CIPA pixel-suit damages per violation per visitor
14
statutes cited in the full audit, with primary-source URLs
— pick your audit

Three tiers. Self-serve. Stripe checkout.

Same scanner, same statute mapping, same disclaimer. Difference is crawl depth and how many pages you want covered.

SINGLE

Single page

$149

Report in 24 hours

One page, all four lenses, full statute mapping. Right when you need certainty before launch or before the next round of marketing.

  • WCAG 2.x A/AA audit (axe-core)
  • Privacy-link disclosure check (CalOPPA / CCPA / state laws)
  • Tracker inventory (CIPA / VPPA / HIPAA pixel)
  • Cookie consent + GDPR Art. 7 check
  • Lighthouse + TLS / DNS / security headers
  • 1 rescan within 90 days
  • PDF attached to delivery email
PRO

Pro

$499

Report in 72 hours

Up to 25 pages with sitemap-driven page selection. Right for growing e-commerce, agency clients, or sites preparing for funded growth.

  • Everything in Multi-page
  • Up to 25 pages crawled
  • Sitemap-driven page selection
  • 5 rescans within 90 days
  • PDF attached to delivery email
— after the audit

When the audit shows real exposure, Forge fixes it.

The audit is automated; remediation is not. Forge does the human work: alt-text passes, banner implementation, code-level WCAG fixes, header configuration. Audit fee credits toward any of these tiers within 60 days.

Critical fixes

from $1,500

2-week sprint

The lawsuit-track findings only. Alt text, viewport, label gaps, the worst color-contrast pairs, the consent-banner-or-no-banner decision. Targeted, scoped, fast.

Full compliance sprint

from $3,500

4–6 week engagement

Everything in critical, plus the medium and regulatory-track findings. Schema fixes, structured data, sitemap, robots, headers. Site exits the demand-letter zone end-to-end.

Compliance + Care

from $3,500 + $99–$499/mo

Sprint + monthly

Full compliance sprint plus an ongoing Forge Care plan that monitors uptime, performance, SSL, security headers, and reruns the audit on a cadence. New regression — you hear from us before the customer.

Frequently asked

Is the scan or the audit legal advice?

No. Both are automated reads of your site against the statutes most active in 2025 web litigation. Neither is legal advice and neither establishes an attorney-client relationship. Forge can connect you to counsel for specific exposure questions; the audit gives you the facts to bring to that conversation.

What's the difference between Forge audits and Forge website builds?

An audit tells you what's wrong. A build (or a remediation engagement) fixes it. You can buy them independently — many customers run an audit, hand it to their existing developer, and never come back. Others use the audit as the scope-of-work for a remediation engagement with Forge.

How does the audit-credit toward remediation work?

If you engage Forge for a remediation package within 60 days of an audit purchase, the audit fee is credited dollar-for-dollar against the remediation invoice. Honored manually — mention your audit purchase in the quote conversation and we'll apply the credit before the engagement starts.

Can I run the scan against my own site without buying anything?

Yes — that's exactly what it's for. Run a scan, get the grade and the top issues by email, decide from there. No phone call, no marketing list.

If I get an A grade, am I lawsuit-proof?

No automated scan can guarantee that. Automated tools detect roughly 30–40% of accessibility issues by criteria coverage. An A grade means no lawsuit-track issues were detected by the scan; manual review by a qualified human tester (Forge, your counsel's accessibility consultant, or one you contract directly) is still required for full compliance assurance.

How are rescans handled?

Each tier includes a number of rescan coupons valid for 90 days from the original audit. After your developer fixes findings, request a rescan to verify the grade improved. Rescans use the same tier you originally purchased.