Accessibility
· 13 checks — Landmarks, headings, alt text, forms, and link quality rolled into one auditable list.FHeading HierarchyAction41 headings, 8 skip(s)FIX
- H1 CERT Division
- H2 Leadership
- H4 Greg Touhill skipped
- H4 William R. Wilson
- H4 Chris Inacio
- H2 What We Do
- H4 Autonomy Security and Resilience skipped
- H4 Cybersecurity Center Development
- H4 Cybersecurity Engineering
- H4 Cyber Workforce Development
- H4 Enterprise Risk and Resilience Management
- H4 Insider Threat
- H4 Reverse Engineering for Malware Analysis
- H4 Situational Awareness
- H4 Secure Development
- H4 System and Platform Evaluation
- H4 Security Vulnerabilities
- H2 Careers in the CERT Division
- H4 Associate Cybersecurity Operations Researcher skipped
- H4 Cybersecurity Operations Researcher
- H4 AI Security Researcher
- H4 Assistant AI Security Researcher
- H4 Technical Manager - Cyber Risk Management
- H4 Senior Reverse Engineer Researcher
- H4 Associate AI Security Researcher
- H4 Senior AI Security Researcher
- H4 Reverse Engineer Researcher
- H2 Recently Published Vulnerabilities
- H4 VU#518910: Ollama GGUF Quantization Remote Memory Leak skipped
- H6 April 22, 2026 skipped
- H4 VU#890999: Radware Alteon has a reflected XSS vulnerability that can execute JavaScript in the host browser
- H6 April 21, 2026 skipped
- H4 VU#414811: Terrarium contains a vulnerability that allows arbitrary code execution
- H6 April 21, 2026 skipped
- H2 Case Studies
- H4 Cyber Lightning Case Study skipped
- H4 SEI Hosts Crisis Simulation Exercise for Cyber Intelligence Research Consortium
- H4 USPS Case Study
- H2 History
- H2 Former Director Richard Pethia
- H2 Related Links
Skipping heading levels breaks the document outline. Screen readers may interpret missing levels as structural errors.
Skipping heading levels breaks the document outline — screen-reader users lose track of section nesting.
Learn more ▾ ▴
Screen reader users navigate by jumping between headings (H1 → H2 → H3). Skipping (H1 → H3) breaks the sense of hierarchy. Use sequential levels even if you don't like the default styling — restyle with CSS instead. WCAG 1.3.1 (Info and Relationships) treats this as an A failure.
Source: WCAG 2.1 SC 1.3.1 / W3C WAI
Skipping heading levels breaks the document outline. Screen readers may interpret missing levels as structural errors.
Skipping heading levels breaks the document outline — screen-reader users lose track of section nesting.
Learn more ▾ ▴
Screen reader users navigate by jumping between headings (H1 → H2 → H3). Skipping (H1 → H3) breaks the sense of hierarchy. Use sequential levels even if you don't like the default styling — restyle with CSS instead. WCAG 1.3.1 (Info and Relationships) treats this as an A failure.
Source: WCAG 2.1 SC 1.3.1 / W3C WAI
Skipping heading levels breaks the document outline. Screen readers may interpret missing levels as structural errors.
Skipping heading levels breaks the document outline — screen-reader users lose track of section nesting.
Learn more ▾ ▴
Screen reader users navigate by jumping between headings (H1 → H2 → H3). Skipping (H1 → H3) breaks the sense of hierarchy. Use sequential levels even if you don't like the default styling — restyle with CSS instead. WCAG 1.3.1 (Info and Relationships) treats this as an A failure.
Source: WCAG 2.1 SC 1.3.1 / W3C WAI
Skipping heading levels breaks the document outline. Screen readers may interpret missing levels as structural errors.
Skipping heading levels breaks the document outline — screen-reader users lose track of section nesting.
Learn more ▾ ▴
Screen reader users navigate by jumping between headings (H1 → H2 → H3). Skipping (H1 → H3) breaks the sense of hierarchy. Use sequential levels even if you don't like the default styling — restyle with CSS instead. WCAG 1.3.1 (Info and Relationships) treats this as an A failure.
Source: WCAG 2.1 SC 1.3.1 / W3C WAI
Skipping heading levels breaks the document outline. Screen readers may interpret missing levels as structural errors.
Skipping heading levels breaks the document outline — screen-reader users lose track of section nesting.
Learn more ▾ ▴
Screen reader users navigate by jumping between headings (H1 → H2 → H3). Skipping (H1 → H3) breaks the sense of hierarchy. Use sequential levels even if you don't like the default styling — restyle with CSS instead. WCAG 1.3.1 (Info and Relationships) treats this as an A failure.
Source: WCAG 2.1 SC 1.3.1 / W3C WAI
Skipping heading levels breaks the document outline. Screen readers may interpret missing levels as structural errors.
Skipping heading levels breaks the document outline — screen-reader users lose track of section nesting.
Learn more ▾ ▴
Screen reader users navigate by jumping between headings (H1 → H2 → H3). Skipping (H1 → H3) breaks the sense of hierarchy. Use sequential levels even if you don't like the default styling — restyle with CSS instead. WCAG 1.3.1 (Info and Relationships) treats this as an A failure.
Source: WCAG 2.1 SC 1.3.1 / W3C WAI
Skipping heading levels breaks the document outline. Screen readers may interpret missing levels as structural errors.
Skipping heading levels breaks the document outline — screen-reader users lose track of section nesting.
Learn more ▾ ▴
Screen reader users navigate by jumping between headings (H1 → H2 → H3). Skipping (H1 → H3) breaks the sense of hierarchy. Use sequential levels even if you don't like the default styling — restyle with CSS instead. WCAG 1.3.1 (Info and Relationships) treats this as an A failure.
Source: WCAG 2.1 SC 1.3.1 / W3C WAI
Skipping heading levels breaks the document outline. Screen readers may interpret missing levels as structural errors.
Skipping heading levels breaks the document outline — screen-reader users lose track of section nesting.
Learn more ▾ ▴
Screen reader users navigate by jumping between headings (H1 → H2 → H3). Skipping (H1 → H3) breaks the sense of hierarchy. Use sequential levels even if you don't like the default styling — restyle with CSS instead. WCAG 1.3.1 (Info and Relationships) treats this as an A failure.
Source: WCAG 2.1 SC 1.3.1 / W3C WAI
FLink & Button QualityAction10 issue(s) across 82 links and 8 buttonsFIX
| Element | Text | Issue | Suggested Fix |
|---|---|---|---|
| https://www.cmu.edu | Carnegie Mellon University … | new tab | Add '(opens in new tab)' to text |
| (empty) | empty | Add link text or aria-label | |
| (empty) | empty | Add link text or aria-label | |
| (empty) | empty | Add link text or aria-label | |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | Associate Cybersecurity Operat… | new tab | Add '(opens in new tab)' to text |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | Cybersecurity Operations Resea… | new tab | Add '(opens in new tab)' to text |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | AI Security Researcher | new tab | Add '(opens in new tab)' to text |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | Assistant AI Security Research… | new tab | Add '(opens in new tab)' to text |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | Technical Manager - Cyber Risk… | new tab | Add '(opens in new tab)' to text |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | Senior Reverse Engineer Resear… | new tab | Add '(opens in new tab)' to text |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | Associate AI Security Research… | new tab | Add '(opens in new tab)' to text |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | Senior AI Security Researcher | new tab | Add '(opens in new tab)' to text |
| https://cmu.wd5.myworkdayjobs.com/SEI/jo… | Reverse Engineer Researcher | new tab | Add '(opens in new tab)' to text |
| (empty) | empty | Add link text or aria-label | |
| https://kb.cert.org/vuls/id/518910 | VU#518910: Ollama GGUF Quantiz… | new tab | Add '(opens in new tab)' to text |
| https://kb.cert.org/vuls/id/890999 | VU#890999: Radware Alteon has … | new tab | Add '(opens in new tab)' to text |
| https://kb.cert.org/vuls/id/414811 | VU#414811: Terrarium contains … | new tab | Add '(opens in new tab)' to text |
| (empty) | empty | Add link text or aria-label | |
| https://www.sei.cmu.edu/projects/cyber-l… | LEARN MORE | generic text | Replace with descriptive text |
Before: LEARN MORE Suggested: Cyber Lightning Case Study | |||
| https://www.sei.cmu.edu/projects/sei-hos… | LEARN MORE | generic text | Replace with descriptive text |
Before: LEARN MORE Suggested: Sei Hosts Crisis Simulation Exercise For Cyber Intelligence Research Consortium | |||
| https://www.sei.cmu.edu/projects/usps-ca… | Learn More | generic text | Replace with descriptive text |
Before: Learn More Suggested: Usps Case Study | |||
| (empty) | empty | Add link text or aria-label | |
| https://www.facebook.com/SEICMU/ | new tab | Add '(opens in new tab)' to text | |
| https://www.linkedin.com/company/softwar… | new tab | Add '(opens in new tab)' to text | |
| https://x.com/SEI_CMU | X | new tab | Add '(opens in new tab)' to text |
| https://www.youtube.com/user/TheSEICMU | YouTube | new tab | Add '(opens in new tab)' to text |
| https://www.cmu.edu | www.cmu.edu | new tab | Add '(opens in new tab)' to text |
| <button> | (empty) | empty | Add button text or aria-label |
Links without text are announced as raw URLs by screen readers.
a#leadership; a#wwd; a#jobs; a#vuls; a#case_studies; a#history
Links with no accessible text (empty <a></a>, image-only no alt, icon-only no aria-label) are unidentifiable to screen readers.
Source: WCAG 2.1 SC 2.4.4
Generic link text like 'click here' doesn't describe the destination.
https://www.sei.cmu.edu/projects/cyber-lightning-case-study/ ("LEARN MORE"); https://www.sei.cmu.edu/projects/sei-hosts-crisis-simulation-exercise-for-cyb… ("LEARN MORE"); https://www.sei.cmu.edu/projects/usps-case-study/ ("Learn More")
Generic anchor text ('click here', 'read more', 'learn more') tells screen readers and search engines nothing about the destination.
Learn more ▾ ▴
Out-of-context lists of links read by AT (one navigation pattern) become useless when every link says 'click here'. Use the destination's title or topic as anchor text. Doubles as SEO win — Google passes anchor-text relevance to the destination.
Source: WCAG 2.4.4 / Google Search Central
Add '(opens in new tab)' to link text or aria-label.
https://www.cmu.edu; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Associate-Cybersecuri…; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Cybersecurity-Operati…; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/AI-Security-Researche…; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Assistant-AI-Security…; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Technical-Manager---C…; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Senior-Reverse-Engine…; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Associate-AI-Security…; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Senior-AI-Security-Re…; https://cmu.wd5.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Reverse-Engineer-Rese… (+8 more)
Links with target="_blank" without rel="noopener" leak the originating page's window context — security and UX issue.
Learn more ▾ ▴
Without rel="noopener", the new tab can navigate the original tab via window.opener (tab-nabbing attack). Modern browsers default to noopener for target=_blank but only since recent versions. Always set rel="noopener noreferrer" explicitly.
Source: MDN target / OWASP
Icon-only buttons need an aria-label so screen readers can announce them.
button.scroll-to-top (#589 on page)
Buttons with no accessible text (icon-only, no aria-label) can't be activated by voice control or understood by screen readers.
Source: WCAG 2.1 SC 4.1.2
DFavicon & BrandingAction3 icon(s) detectedFIX
DWeb ManifestActionNot foundFIX
No web manifest found.
DDark Mode SupportActionNo dark mode signalsFIX
Detection limited to meta tags and inline styles.
DPrint StylesheetActionNo print stylesFIX
BLandmark Structure5 landmarksREVIEW
Multiple navigations need aria-label to distinguish them for screen readers.
Some <nav> elements lack aria-label — screen-reader users hear 'navigation' multiple times with no way to distinguish them.
Learn more ▾ ▴
When a page has multiple <nav> regions (primary, footer, breadcrumb), each needs aria-label or aria-labelledby. AT users navigate by landmark; identical 'navigation' announcements force them to enter each one to discover purpose.
Source: WAI-ARIA Authoring Practices
Add a skip link as the first focusable element so keyboard users can bypass repeated navigation.
Without a skip-nav link, keyboard users tab through every nav item before reaching content — every page, every visit.
Learn more ▾ ▴
WCAG 2.4.1 (Bypass Blocks) requires a mechanism to skip past repeated content. The standard implementation is a 'Skip to main content' link that's the first focusable element, visually hidden until focused. Three lines of HTML + four of CSS.
Source: WCAG 2.1 SC 2.4.1
CForm AccessibilityAction3 of 6 controls have issuesREVIEW
| Control | Type | Label | Method |
|---|---|---|---|
| #footer-dropdown-1 | checkbox | SEI | for/id |
| #footer-dropdown-2 | checkbox | Helpful links | for/id |
| #footer-dropdown-3 | checkbox | Connect | for/id |
| #carousel-0-88e87e53-7c22-4a3d-a3f9-5217c6775d76 | radio | (none) | none |
| #carousel-1-88e87e53-7c22-4a3d-a3f9-5217c6775d76 | radio | (none) | none |
| #carousel-2-88e87e53-7c22-4a3d-a3f9-5217c6775d76 | radio | (none) | none |
Form controls need a <label>, aria-label, or aria-labelledby for screen readers.
<input type="radio" name="88e87e53-7c22-4a3d-a3f9-5217c6775d76" id="carousel-0-88e87e53-7c22-4a3d-a3f9-5217c6775d76">; <input type="radio" name="88e87e53-7c22-4a3d-a3f9-5217c6775d76" id="carousel-1-88e87e53-7c22-4a3d-a3f9-5217c6775d76">; <input type="radio" name="88e87e53-7c22-4a3d-a3f9-5217c6775d76" id="carousel-2-88e87e53-7c22-4a3d-a3f9-5217c6775d76">
Form controls without labels — assistive tech announces 'edit text' with no context; users can't complete forms.
Source: WCAG 2.1 SC 3.3.2
B404 Error PageHTTP 404, custom pageREVIEW
CColor Contrast (Screenshot)Action20 text elements analyzed, 10 fail WCAG AAREVIEW
Analyzes text contrast against the actual rendered page, including background images, gradients, and overlays that CSS-based tools cannot detect.
4 contrast failures on background images/gradients
These failures are invisible to CSS-based accessibility tools like Lighthouse. The text may be fine on a solid background, but fails when rendered over an image or gradient.
Show all checked elements (20)
| Element | Ratio | Required | FG | BG | Result |
|---|---|---|---|---|---|
| h1 CERT Division | 2.09:1 | 3.0:1 | #000000 | #462F93 | Fail |
| h2 Leadership | 21.00:1 | 3.0:1 | #000000 | #FFFFFF | Pass |
| h2 What We Do | 21.00:1 | 3.0:1 | #000000 | #FFFFFF | Pass |
| h2 Careers in the CERT … | 21.00:1 | 3.0:1 | #000000 | #FFFFFF | Pass |
| h2 Recently Published V… | 21.00:1 | 3.0:1 | #000000 | #FFFFFF | Pass |
| h2 Case Studies | 21.00:1 | 3.0:1 | #000000 | #FFFFFF | Pass |
| h2 History | 21.00:1 | 3.0:1 | #000000 | #FFFFFF | Pass |
| h2 Former Director Rich… | 21.00:1 | 3.0:1 | #000000 | #FFFFFF | Pass |
| h2 Related Links | 21.00:1 | 3.0:1 | #000000 | #FFFFFF | Pass |
| title CERT | 3.48:1 | 4.5:1 | #000000 | #C41230 | Fail |
| span Carnegie Mellon Univ… | 10.02:1 | 4.5:1 | #000000 | #E7A0AC | Pass |
| span Home | 19.09:1 | 4.5:1 | #000000 | #F4F4F4 | Pass |
| span About | 1.12:1 | 4.5:1 | #000000 | #1D082A | Fail |
| span Research and Develop… | 1.72:1 | 4.5:1 | #000000 | #47285A | Fail |
| span Publications and Med… | 2.41:1 | 4.5:1 | #000000 | #6C3672 | Fail |
| span Education | 2.42:1 | 4.5:1 | #000000 | #7C2B6D | Fail |
| span Careers | 1.50:1 | 4.5:1 | #000000 | #45135D | Fail |
| span Search | 1.63:1 | 4.5:1 | #000000 | #421181 | Fail |
| span Mobile Menu | 1.61:1 | 4.5:1 | #000000 | #510471 | Fail |
| a Home | 3.20:1 | 4.5:1 | #000000 | #6B49AF | Fail |
Methodology: The top 20 text elements by font size were checked. Background color was sampled from the desktop screenshot using a 5-point pattern. WCAG 2.1 AA requires 4.5:1 for normal text and 3:1 for large text.
A+Alt Text QualityAll 9 images OKPASS
ALighthouse Accessibility AuditsScore 94/100 — 2 failing, 22 passedPASS
Accessibility
These checks highlight opportunities to improve the accessibility of your web app. Automatic detection can only detect a subset of issues and does not guarantee the accessibility of your web app, so manual testing is also encouraged.
Navigation
Properly ordered headings that do not skip levels convey the semantic structure of the page, making it easier to navigate and understand when using assistive technologies. Learn more about heading order.
Performance issues directly impact user engagement and conversion rates.
| Failing Elements |
|---|
Greg Touhill div.grid > div.flex > a > h4.text-2xl |
Autonomy Security and Resilience div.max-container > div.grid > div.col-span-1 > h4 |
Associate Cybersecurity Operations Researcher div.carousel-item > div.bg-white > a > h4.text-xl |
VU#518910: Ollama GGUF Quantization Remote Memory Leak div.flex > div > div.pb-6 > h4 |
APRIL 22, 2026 div.flex > div > div.pb-6 > h6 |
APRIL 21, 2026 div.flex > div > div.pb-6 > h6 |
APRIL 21, 2026 div.flex > div > div.pb-6 > h6 |
Cyber Lightning Case Study div.max-container > div.grid > div.col-span-1 > h4 |
These are opportunities to improve keyboard navigation in your application.
Contrast
Low-contrast text is difficult or impossible for many users to read. Link text that is discernible improves the experience for users with low vision. Learn how to make links distinguishable.
Performance issues directly impact user engagement and conversion rates.
| Failing Elements |
|---|
Carnegie Mellon University div.flex > div.flex > p > a |
Richard Pethia div.grid > div.flex > p > a |
These are opportunities to improve the legibility of your content.