Remediation Roadmap – Deal212 Audit

Fixed items first, then the work that buys the most over a quarter. Each checklist is yours to work through; check items off as they land and assign an owner for anything that is not yet done.

Immediate

0 to 7 days

Fix the things that break crawling, expose the lead endpoint, or mislead visitors today.

0 of 6 complete

Serve a real robots.txt and sitemap.xml as text/XML and return a true 404 for unknown routes (CR-01).
Add rate limiting, an origin check, a zod validation schema, durable storage, and notifications to POST /api/lead (HI-01).
Fix the & double-escape and remove the 'Document ×' residue on /check (MD-01, MD-02).
Reconcile the two headers into one shared component with a current-page indicator (MD-03).
Add the required disclaimers to Property Check results (HI-04).
Qualify the 'nationwide' claims and state the property check is NYC-only (HI-03).

Short term

2 to 4 weeks

Harden the remaining interactions and make the content and metadata consistent.

0 of 6 complete

Hide the honeypot from assistive technology: aria-hidden, tabindex -1, autocomplete off (HI-02).
Fix mobile menu behavior: aria-expanded/aria-controls, Escape to close, no horizontal overflow (MD-04).
Reconcile the source count and publish one attributed source list across pages (MD-05).
Set unique titles, descriptions, Open Graph, Twitter card, and canonical per page (HI-05, HI-06).
Tune CDN caching: immutable hashed assets, no-cache HTML, never cache POST /api/lead (MD-06).
Fix the 'Click to Call / Email' button copy to 'Call', 'Email', 'Text' (PL-01).

Longer term

1 to 3 months

Invest in speed, privacy, structured data, and a repeatable accessibility baseline.

0 of 4 complete

Optimize assets: WebP/AVIF, width and height, font-display swap, route code splitting (MD-07).
Publish a privacy notice for lead capture and property lookups (collection and retention) (recommendation).
Add Organization and WebSite JSON-LD structured data (LW-01).
Re-audit accessibility: heading hierarchy, form labels, keyboard flows (MD-08).

Ownership note

Add an owner placeholder for each item your team will carry, and pick a verification step per checkbox so nothing closes without being confirmed on the live site. Re-run this audit after the immediate batch to confirm CR-01, HI-01, MD-01, and MD-02 are actually resolved.

Prioritized remediation roadmap

Immediate

Short term

Longer term

Ownership note