The site works with a keyboard and a screen reader and scores 100/100 on Google's accessibility check. It also sends six security protections with every page, where the old site sent one.
What we did
Accessibility — usable by everyone
- The first audit found two problems on the old site: the review carousel could not be reached with a keyboard, and parts of the page sat outside the areas a screen reader announces. The new site was built to avoid both.
- A "Skip to content" link, a visible focus outline, the Esc key closes menus and windows, every button has a name a screen reader can say.
- Text contrast kept high enough to read on the light background; respects "reduce motion".
- 100 / 100 on Google's accessibility check on every page we tested (home, a service, an area, a guide, contact, /quote).
Security — protections sent with every page
| Protection | Old site | New site |
|---|---|---|
| Only approved scripts may run (content policy) | partial | yes |
| Always use the secure connection (HSTS) | no | yes |
| Cannot be framed by another site (clickjacking) | no | yes |
| Browser may not guess file types | no | yes |
| Links do not leak full addresses to other sites | no | yes |
| Camera, microphone, location, payments switched off | no | yes |
- The CRM is private: it needs a login, is hidden from search engines, and has stricter protections of its own.
- The form has a hidden trap that catches spam bots.
Every page ──▶ 6 security protections ──▶ visitor's browser
/admin (CRM) ──▶ login + not shown to search engines
Keyboard / screen reader ──▶ skip link · focus outline · Esc · labels
Why it matters
A site that works for everyone reaches more customers — and a site that protects its visitors is one Google and browsers trust.