OWASP AND WCAG GUIDELINES SCANNER

home page

WASP + WCAG Guidelines Scanner A unified tool for making your apps secure and accessible — with one click.

Inspiration In today’s development lifecycle, security and accessibility are critical — but handled separately. Developers often juggle tools like OWASP ZAP for security and Pa11y or axe-core for accessibility, each with their own setup, workflows, and learning curves. We asked: "Why can’t we combine both into one powerful, developer-friendly scanner?"

What It Does Scans websites or codebases for:

OWASP Top 10 vulnerabilities (e.g., SQLi, XSS, Broken Auth)

WCAG 2.1 accessibility issues (e.g., keyboard traps, contrast, labels)

Powered by trusted tools like Pa11y, Wapiti, and more — integrated into a clean UI

Outputs human-readable results, with:

Categorized issues

Actionable remediation tips

Optional downloadable reports (TXT, PDF, HTML)

How We Built It Frontend: ReactJS with dynamic UI, filterable scan results, file upload, and export options

Backend: Spring Boot to orchestrate scan jobs via CLI tools like Pa11y and Wapiti

Scanners: Integrated CLI commands and file handling for security & accessibility audit tools

Challenges We Ran Into Making CLI tools like Wapiti run cross-platform

Handling large file outputs and error cases gracefully

Mapping scan outputs into a clean, developer-friendly UI

Accomplishments We're Proud Of Delivered a one-click scan experience

Bridged security and accessibility into a single report

Built a full-stack, modular architecture that’s easy to extend

What We Learned How to integrate multiple CLI-based tools into a real-time frontend

Importance of making results readable and actionable for devs and PMs

That many developers overlook accessibility — and this tool helps fix that

What's Next Add remediation links and severity scores

Generate interactive dashboards or visualizations

Support uploading code snippets for static scanning (Semgrep/ESLint rules)

Why this matters: "A secure app that’s not accessible still excludes users. An accessible app that’s not secure puts them at risk. We built this tool to fix both — because real quality means everyone is safe and included."