Agencies8 min read

White-label accessibility monitoring for agencies: a recurring revenue model built on evidence

OverlayRiskWitness Team
Evidence engineering ·

White-label accessibility monitoring for agencies turns a one-time compliance audit into a subscription offering — with timestamped, vendor-independent evidence your clients can actually act on.

Most agencies treat accessibility as a line item on a project proposal — scoped, delivered, invoiced, done. The problem is that the web does not hold still. A site that passes a manual audit today can regress next month when the overlay vendor ships a script update, a content team swaps a hero image, or a developer redeploys a form with a missing label. And for clients running accessiBe or UserWay, there is an additional layer of exposure: the overlay is making a public compliance claim that may or may not match what an automated check actually sees on the live page.

This is the gap that makes white-label accessibility monitoring for agencies a durable service line rather than a one-time add-on. The agency that can surface exposure before a demand letter arrives — and track whether it changes over time — is a fundamentally different kind of partner than the one that shows up after the fact. What follows is a practical guide to what that monitoring offering looks like, how to structure it for recurring revenue, and where programmatic tooling fits in.

The accessibility monitoring opportunity most agencies overlook

Accessibility overlays are installed on a significant share of commercial sites. The pitch to site owners is compelling: one script tag, no code changes, automated compliance. The reality is more complicated. Overlays operate at the DOM level, injecting a toolbar and a set of runtime patches. Some rules they address; many they do not. And because the overlay is making the compliance assertion on behalf of the site, the site owner often stops monitoring the underlying page — or never started.

For agencies, this creates a specific and addressable opportunity. Your clients installed the overlay because someone told them it solved the problem. Your job is to show them, with evidence, whether it actually did — and to keep showing them as the site evolves. The agency that runs this check as a recurring service, branded under its own name, becomes the compliance watchdog rather than the vendor who handed off a PDF and moved on.

Free Witness1 page · no signupFREERisk Packet5–10 pages · full evidence$49Drift Monitorup to 20 pages · monthly cadence$99 / moAgency Watchunlimited pages · white-label$249 / mo↑ MOST COMMON
The exposure funnel for overlay-reliant sites: most start with a claim, fewer verify it, fewer still monitor for drift.

What to monitor across a client site roster

An accessibility monitoring service for clients is not the same as running a generic WCAG scanner and handing over a spreadsheet of violations. The specific value for overlay-reliant sites is the before/after comparison: what does the page look like with the overlay blocked, and what does it look like with the overlay active? That diff tells you whether the overlay is doing anything useful on each rule it claims to address.

OverlayRiskWitness runs a real browser session twice per page — once with the overlay blocked at the network layer, once with it running and given time to inject its changes. Both passes run the same axe-core WCAG rule engine. The per-rule diff surfaces three finding states: held up (the overlay's claimed fix checked out), did not hold up (the rule still fails with the overlay on), or not testable (the check could not evaluate this rule in one or both passes). The witness also captures the site's own published accessibility statement and quotes it back alongside each relevant finding.

  • Overlay vendor detected on page load (accessiBe, UserWay, or none found).
  • Axe-core violation counts per rule, overlay off versus overlay on.
  • Finding state per claim: held up, did not hold up, or not testable.
  • Accessibility statement text captured and matched to the relevant exhibit.
  • UTC timestamp and DOM snapshot hash on every capture — so you know exactly when the test ran and can verify the page state.
  • Drift alert when a finding state changes between scheduled runs.
Janheld upFebheld upMarheld upAprheld upRegressionMaydid notJundid notHeld upDid not hold up (regression)
Drift monitoring re-runs the witness on a cadence and surfaces state changes between cycles — so a regression does not stay invisible.

White-label risk packets clients can act on

The deliverable that makes an accessibility monitoring service for clients tangible is the risk packet. Not a score, not a dashboard screenshot, not a generic list of WCAG failures — a structured evidence file that a non-engineer can read and understand. Each exhibit in a risk packet follows the same shape: one public claim the site is making, one observation from the witness run, one timestamp. The claim and the observation sit side by side, so the gap between them — if there is one — is visible without cross-referencing.

At the Agency Watch tier, packets are generated under your agency's branding. Your client sees your name on the report, not a third-party tool they need to learn. The underlying methodology — dual-pass axe-core, vendor-independent, timestamped — is the same, but the presentation belongs to your agency offering. This matters when you are positioning the monitoring service as a retained line item rather than a software subscription you are passing through. If the client needs the exact exhibit anatomy behind that packet, send them to How to document website accessibility evidence that holds up.

Evidence, not a legal conclusion

Risk Packets document what an automated check observed at a specific moment, with the site's own statement quoted back alongside each finding. They are not legal opinions and do not constitute a compliance certification. The value is in having a clean, timestamped evidence record — before anything else happens.

Building a recurring accessibility revenue stream

The recurring revenue case for an agency accessibility offering rests on a simple observation: a one-time audit tells a client what was true when you ran it. Monitoring tells them what is true now, and whether something changed since the last check. That distinction justifies a subscription. The question to put to a client is not "would you like an accessibility audit?" — it is "if your overlay vendor pushes an update next month and breaks keyboard navigation on your checkout, who finds out first?"

Drift Monitor covers up to 20 pages on a scheduled cadence at $99 per month. Agency Watch extends that to multi-site coverage at $249 per month, with white-label packet delivery. At typical agency margins, a client billed at a modest retainer rate on top of the base cost generates meaningful recurring revenue per site — and the monitoring actually runs itself. Alerts fire only when a finding state changes; a stable site produces no noise.

The positioning for a mid-size agency with 20 to 50 active client sites is straightforward: bundle Drift Monitor or Agency Watch into existing maintenance retainers as an accessibility assurance line. The cost is predictable, the deliverable is concrete, and the client gets a paper trail of their overlay's actual performance over time rather than a vendor's assurance that everything is fine. When a claim does not hold up on a scheduled run, the alert comes to you first — and you bring the evidence to the client rather than waiting for them to forward a demand letter.

Programmatic integration via the MCP server

For agencies with existing internal tooling or AI-assisted workflows, OverlayRiskWitness ships as a Model Context Protocol (MCP) server. The server is read-only — it never modifies the target site — and exposes a single witness tool that accepts a public URL and returns the same payload as the REST endpoint: overlay vendor detected, findings count, the first finding in full, and a count of additional findings available in a full risk packet.

This means an agency's internal agent or automation script can trigger a witness run on any client URL without leaving its existing toolchain. You can build a client reporting pipeline that pulls fresh witness data on a schedule, feed the findings into a project management workflow, or surface accessibility drift in a broader site health dashboard — all without manually logging into a third-party interface.

AI AgentClaude, GPT, etc.tool_callMCP Serverstdio · POST /mcpstateless · guardedrun_witnesswitness tool2-pass axe-core scanBrowserbase · findingsfindings JSON returned to agent
Agency tooling calls the MCP witness tool; the server runs a dual-pass axe-core scan via Browserbase and returns structured findings the agent can reason over or route downstream.

Two transports are available: stdio for a desktop MCP client, and the hosted Streamable-HTTP endpoint at overlayrisk.com/mcp for remote or cloud-based agents. The server is listed on the official MCP registry, Glama, and npm — so discovery is handled whether your tooling pulls from a registry or you wire it manually. For agencies experimenting with agentic workflows, the witness tool is a natural fit for a site health agent that checks accessibility alongside uptime, performance, and core web vitals.

If you want the exact MCP setup and response contract before wiring it into client reporting, Using AI agents to test website accessibility over MCP shows the tool shape, transports, and a real witness payload.

Getting started as an agency

The free witness tier runs on a single page with no account required — a useful first step before committing to a multi-site offering. Run a witness on a client site that has an overlay installed and see whether the findings match what the accessibility statement claims. If there is a gap, that is the conversation opener for a monitoring engagement. The $49 risk packet covers 5 to 10 high-risk pages with the full evidence file; Agency Watch at $249 per month provides white-label, multi-site coverage with scheduled drift monitoring.

The agency accessibility offering that converts is not one that promises compliance — it is one that delivers evidence. Clients who have been told their overlay handles everything are often surprised to see the before/after diff for the first time. That surprise is the service. Your agency is the one that showed them what their own page actually does, with a timestamp attached, before anyone else had to.