ScanAble Research

Section 508 in 2026: How accessible are America's biggest .gov sites?

Published · Data refreshed

ADA Title II’s deadline for state and local government websites took effect April 24, 2026. Section 508 has required accessibility from federal procurement for over two decades. We picked a curated set of 67 government websites — cabinet departments, regulatory agencies, healthcare portals, citizen-service flagships, large state government homepages, and major city portals — and ran the same automated WCAG 2.0/2.1/2.2 AA audit on each that we sell to private-sector buyers. 55 scanned successfully.

The headline numbers are roughly what you’d guess (mid-tier average score, half the set below 70). The individual results are not. The Supreme Court of the United States ships its homepage at a compliance score of 7 out of 100. weather.gov — one of the most-visited federal sites in existence — scores 8. The FDA, the federal agency in charge of medical-device accessibility regulation, scores 11. Meanwhile va.gov, consumerfinance.gov, epa.gov, cbp.gov, and secretservice.gov all score a perfect 100. This is mostly a story about which agencies have shipped a modern frontend workflow and which haven’t.

Average score

61.1

Median score

61

% scoring below 70

53%

Worse than expected

% with a critical issue

22%

The headline

Across the 55 sites we audited, the average compliance score is 61.1 out of 100, and 22% ship at least one critical accessibility violation. 53% score below 70.

Government websites are arguably the most accessibility- regulated category of public-facing software in existence: Section 508 of the Rehabilitation Act has required it since 1998, ADA Title II now mandates it for state and local governments, and the federal procurement process has required VPATs for years. The automated baseline still isn’t close to clean.

The leaderboard

Best 5
  • epa.gov100
  • consumerfinance.gov100
  • va.gov100
  • cbp.gov100
  • secretservice.gov100
Worst 5
  • supremecourt.gov7
  • weather.gov8
  • usps.com10
  • boston.gov11
  • fda.gov11
Score distribution

Where these 55 sites land

90-100
10 (18%)
70-89
16 (29%)
50-69
8 (15%)
30-49
14 (25%)
0-29
7 (13%)
The repeat offenders

Top 10 violations across the audit set

RuleSeverity% of sites failing
region

Ensure all page content is contained by landmarks

moderate49%
landmark-one-main

Ensure the document has a main landmark

moderate31%
html-has-lang

Ensure every HTML document has a lang attribute

serious24%
landmark-unique

Ensure landmarks are unique

moderate24%
target-size

Ensure touch targets have sufficient size and space

serious15%
page-has-heading-one

Ensure that the page, or at least one of its frames contains a level-one heading

moderate13%
image-alt

Ensure <img> elements have alternative text or a role of none or presentation

critical13%
heading-order

Ensure the order of headings is semantically correct

moderate11%
landmark-no-duplicate-banner

Ensure the document has at most one banner landmark

moderate11%
link-name

Ensure links have discernible text

serious11%

What it means for the public sector

The fail-pattern is the same one we see in the private sector: missing landmarks, color contrast, missing alt text, missing heading-one. Nothing exotic. Nothing that requires an accessibility specialist to identify. These are entry-level WCAG 2.0 violations from rules published in 2008.

The difference is procurement leverage. Private companies fix accessibility when a demand letter arrives or a compliance officer flags it. Federal agencies have had a statutory obligation since 1998. State and local governments now have a court-enforceable obligation under ADA Title II. The numbers above suggest the obligation alone hasn’t been enough — the workflow that catches this on every deploy hasn’t shipped yet.

For procurement teams: a VPAT that claims clean Section 508 conformance against a homepage scoring under 50 in an automated audit isn’t worth the paper it’s printed on. Before signing a contract, run the vendor's homepage through any free tool (ours, Lighthouse, axe DevTools) and check the gap between their claim and the automated reality.

Methodology

How we generated these numbers

  • Source list: a curated set of 67 federal cabinet departments, major federal agencies, large state government homepages, and major city portals. Curated rather than traffic-ranked because the article angle is Section 508 enforcement, not popularity. Full list lives in scripts/fetch-gov-domains.ts.
  • What we scanned: the homepage of each domain (https://<domain>/), loaded in headless Chrome via Puppeteer, no authentication.
  • Engine: axe-core with WCAG 2.0, 2.1, and 2.2 Level AA tags enabled. Same engine ScanAble uses for every paid audit, same engine the federal accessibility tooling guidance recommends.
  • Score formula: passes / (passes + Σ(violation_nodes × severity_weight)) × 100. Full breakdown at /methodology.
  • Caveat: automated tools (including ours) catch ~30–40% of WCAG issues per Deque’s research. The numbers above are a floor, not a ceiling. A clean automated score does not certify Section 508 conformance.

Find out where your site lands

Same scanner, same engine, same scoring. Vendor selling into government? Put your homepage through it before submitting your VPAT.

Run a free previewSee the global pieceMethodology