5-day audit-sprint checklist

The audit deliverable, exactly as scoped. What gets touched on each of the five days, with hand-off expectations.

Day 1 · Inventory

Plugin inventory. Theme inventory. Hosting config. DNS. Content audit. Backup verification. By end of day: full inventory in a shared doc.

Day 2 · Performance

Lighthouse on 5 key pages, mobile + desktop, three runs averaged. WebPageTest filmstrip. PageSpeed Insights public URL. Critical findings ranked by user impact.

Day 3 · Accessibility

axe-core on every template. Manual NVDA pass on the primary CTA flow. Keyboard navigation test. WCAG 2.2 AA conformance documented.

Day 4 · Security

npm audit equivalent for the plugin set. CSP header check. WAF config review. Backup integrity check. Stale-user audit.

Day 5 · Deliverable

32-page report (PDF + Notion). Loom walkthrough (~20 minutes). Ranked backlog with cost estimates. One 30-min Q&A call to hand it off.

License

MIT.