Accessibility Statement

Last reviewed: May 2025

Grepsi Security is committed to making its threat modelling tool accessible to as many people as possible. This statement applies to grepsi-sec.com/threat-model.

Our Target Standard

We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standard.

Current Compliance Status

This tool is partially compliant with WCAG 2.1 Level AA. We have implemented a number of accessibility features but are aware of areas that need improvement.

What we have done:

  • Semantic HTML headings and landmarks throughout the site
  • Sufficient colour contrast in both light and dark modes
  • Keyboard-navigable site navigation and documentation pages
  • Focus-visible indicators on interactive elements
  • alt text on all informational images
  • Responsive design for desktop, tablet, and mobile viewports
  • Dark/light mode toggle to support user preference and reduced visual strain
  • No auto-playing audio or video content
  • No flashing content that could trigger photosensitive conditions

Known limitations:

  • The threat modelling wizard (the main tool at /model) is a complex React application. Full keyboard-only navigation across all wizard steps has not been independently audited.
  • Exported PDF reports are generated client-side and may not be fully accessible to screen readers. Consider the JSON export as an alternative for machine-readable output.
  • Some data visualisations (risk matrix, data flow diagram) rely on visual positioning and may not convey full meaning to screen reader users.

Technical Information

The tool is built with Astro, React, and Tailwind CSS. We use semantic HTML5 elements and ARIA attributes where appropriate.

How to Get Help or Report an Issue

If you experience any accessibility barriers while using this tool, please contact us:

Email: info@grepsi-sec.com

We aim to respond to accessibility feedback within 5 working days and will work to resolve issues as quickly as possible.

Enforcement

If you are not satisfied with our response to an accessibility complaint, you may contact the relevant enforcement body for your jurisdiction:

What We Are Working On

We plan to conduct a formal WCAG 2.1 AA audit of the threat modelling wizard and update this statement with the findings. We are also investigating options to improve the accessibility of the PDF export.