How to use - your Risk Audit
Run an audit, read the results, and act on what you find. An end-to-end guide.
Running a risk audit takes about 60 seconds and requires no account or software installation. The output scores each digital fundamental from A to E, covering accessibility, privacy, experience, integrity, visibility, performance, and environmental impact. This guide walks through how to run an audit, how to read the Value and Risk scores, and who in your organization should receive and act on the results.
"An audit is only useful if the people who need to act on it can understand it. The scoring system is designed for decision-makers, not technicians."
Running the audit
Navigate to the Risk Audit page and enter any web page URL into the /confirm tool. The audit runs in approximately 60 seconds and assesses the page across multiple digital fundamentals: accessibility, privacy, experience, integrity, visibility, performance, and environmental impact.
No account is required. No software needs to be installed. The audit operates independently and does not require cooperation from the website being assessed. You can audit your own site, a competitor's site, or a vendor's site with the same tool.
Understanding the scores
Each fundamental receives two scores: Value and Risk, graded from A (strongest) to E (weakest). Value measures how well a page performs in creating a positive outcome for visitors and the organization. Risk measures the level of exposure, whether through accessibility failures, privacy gaps, or structural weaknesses.
An A score indicates that the fundamental is well-managed with minimal exposure. A C score indicates moderate issues that warrant attention. An E score indicates significant failures that create measurable liability or loss of value. The combination of Value and Risk scores across all fundamentals provides the complete picture.
To see examples of what each report section looks like, visit the RCP screenshots page.
Who should use the results
The audit is designed for decision-makers, not technical staff alone. Executives need to understand organizational exposure. Risk managers need documented evidence for insurance and compliance reporting. IT and digital teams need prioritized findings to guide remediation. Legal counsel needs a record of what was known and when.
The scoring format (A through E) is deliberately non-technical. It allows a board member to assess the organization's digital posture in the same way they would review a financial rating. Detailed technical findings sit behind the scores for teams that need to act on specific issues.
Risk Audit
Independent assessment of any web page
The audit scores each page across seven digital fundamentals: accessibility, privacy, experience, integrity, visibility, performance, and environmental impact. Each receives a Value and Risk grade from A to E. No account required, no software to install. Enter a URL and receive scored results in approximately 60 seconds.