diff --git a/apps/web/src/app/(portal)/modules/[category]/[moduleSlug]/module-shell.tsx b/apps/web/src/app/(portal)/modules/[category]/[moduleSlug]/module-shell.tsx
index cf58834..a9e9fb6 100644
--- a/apps/web/src/app/(portal)/modules/[category]/[moduleSlug]/module-shell.tsx
+++ b/apps/web/src/app/(portal)/modules/[category]/[moduleSlug]/module-shell.tsx
@@ -40,6 +40,7 @@ export function ModuleShell({ category, moduleSlug }: ModuleShellProps) {
         <div className="flex flex-col items-center justify-center py-16 text-center">
           <div className="rounded-lg bg-muted p-4 mb-4">
             <svg
+              aria-hidden="true"
               xmlns="http://www.w3.org/2000/svg"
               width="48"
               height="48"
@@ -81,6 +82,7 @@ export function ModuleShell({ category, moduleSlug }: ModuleShellProps) {
           className="inline-flex items-center gap-1.5 text-sm font-medium text-muted-foreground hover:text-foreground transition-colors"
         >
           <svg
+            aria-hidden="true"
             xmlns="http://www.w3.org/2000/svg"
             width="16"
             height="16"
diff --git a/apps/web/src/app/(portal)/modules/[category]/components/ModuleCard.tsx b/apps/web/src/app/(portal)/modules/[category]/components/ModuleCard.tsx
index d270fef..72807b7 100644
--- a/apps/web/src/app/(portal)/modules/[category]/components/ModuleCard.tsx
+++ b/apps/web/src/app/(portal)/modules/[category]/components/ModuleCard.tsx
@@ -23,6 +23,7 @@ function ModuleIcon({ icon }: { icon?: string }) {
   if (icon === 'Globe') {
     return (
       <svg
+        aria-hidden="true"
         xmlns="http://www.w3.org/2000/svg"
         width="24"
         height="24"
@@ -44,6 +45,7 @@ function ModuleIcon({ icon }: { icon?: string }) {
   // Default puzzle-piece icon for generic modules
   return (
     <svg
+      aria-hidden="true"
       xmlns="http://www.w3.org/2000/svg"
       width="24"
       height="24"
diff --git a/apps/web/src/app/(portal)/modules/[category]/page.tsx b/apps/web/src/app/(portal)/modules/[category]/page.tsx
index 697d0f9..a5c1743 100644
--- a/apps/web/src/app/(portal)/modules/[category]/page.tsx
+++ b/apps/web/src/app/(portal)/modules/[category]/page.tsx
@@ -121,6 +121,7 @@ export default function CategoryPage() {
         <div className="flex flex-col items-center justify-center py-16 text-center">
           <div className="rounded-lg bg-muted p-4 mb-4">
             <svg
+              aria-hidden="true"
               xmlns="http://www.w3.org/2000/svg"
               width="48"
               height="48"
diff --git a/apps/web/src/app/(portal)/modules/cert-manager/components/ConvertTab.tsx b/apps/web/src/app/(portal)/modules/cert-manager/components/ConvertTab.tsx
index 15e0954..68e2cd7 100644
--- a/apps/web/src/app/(portal)/modules/cert-manager/components/ConvertTab.tsx
+++ b/apps/web/src/app/(portal)/modules/cert-manager/components/ConvertTab.tsx
@@ -73,6 +73,7 @@ export function ConvertTab({ file, pemText, password, onTargetFormatChange }: Co
 
       {/* Primary action button */}
       <button
+        type="button"
         onClick={handleConvert}
         disabled={loading || !canConvert}
         className="bg-primary text-primary-foreground px-4 py-2 rounded text-sm font-medium disabled:opacity-50 hover:opacity-90 transition-opacity"
diff --git a/apps/web/src/app/(portal)/modules/cert-manager/components/InspectTab.tsx b/apps/web/src/app/(portal)/modules/cert-manager/components/InspectTab.tsx
index 699e17a..942a4c9 100644
--- a/apps/web/src/app/(portal)/modules/cert-manager/components/InspectTab.tsx
+++ b/apps/web/src/app/(portal)/modules/cert-manager/components/InspectTab.tsx
@@ -43,6 +43,7 @@ export function InspectTab({ file, pemText, password }: InspectTabProps) {
     <div className="space-y-4">
       {/* Primary action button */}
       <button
+        type="button"
         onClick={handleInspect}
         disabled={loading || !canInspect}
         className="bg-primary text-primary-foreground px-4 py-2 rounded text-sm font-medium disabled:opacity-50 hover:opacity-90 transition-opacity"
diff --git a/apps/web/src/app/(portal)/modules/cert-manager/components/PasswordField.tsx b/apps/web/src/app/(portal)/modules/cert-manager/components/PasswordField.tsx
index f31b07d..9f8e534 100644
--- a/apps/web/src/app/(portal)/modules/cert-manager/components/PasswordField.tsx
+++ b/apps/web/src/app/(portal)/modules/cert-manager/components/PasswordField.tsx
@@ -38,6 +38,7 @@ export function PasswordField({ value, onChange, show }: PasswordFieldProps) {
           {revealed ? (
             /* Eye-off inline SVG */
             <svg
+              aria-hidden="true"
               xmlns="http://www.w3.org/2000/svg"
               width="16"
               height="16"
@@ -55,6 +56,7 @@ export function PasswordField({ value, onChange, show }: PasswordFieldProps) {
           ) : (
             /* Eye inline SVG */
             <svg
+              aria-hidden="true"
               xmlns="http://www.w3.org/2000/svg"
               width="16"
               height="16"
diff --git a/apps/web/src/app/(portal)/modules/cert-manager/components/SplitTab.tsx b/apps/web/src/app/(portal)/modules/cert-manager/components/SplitTab.tsx
index f35d235..0d3e9b3 100644
--- a/apps/web/src/app/(portal)/modules/cert-manager/components/SplitTab.tsx
+++ b/apps/web/src/app/(portal)/modules/cert-manager/components/SplitTab.tsx
@@ -70,6 +70,7 @@ export function SplitTab({ file, pemText: _pemText, password: _password }: Split
     <div className="space-y-4">
       <div className="flex items-center gap-3">
         <button
+          type="button"
           onClick={handleSplit}
           disabled={loading || !file}
           className="bg-primary text-primary-foreground px-4 py-2 rounded text-sm font-medium disabled:opacity-50 hover:opacity-90 transition-opacity"
@@ -79,6 +80,7 @@ export function SplitTab({ file, pemText: _pemText, password: _password }: Split
 
         {result && result.certs.length > 1 && (
           <button
+            type="button"
             onClick={() => downloadAllAsZip(result.certs)}
             className="border border-border px-4 py-2 rounded text-sm font-medium hover:bg-secondary transition-colors"
           >
@@ -117,6 +119,7 @@ export function SplitTab({ file, pemText: _pemText, password: _password }: Split
                 </span>
               </div>
               <button
+                type="button"
                 onClick={() =>
                   downloadBase64(cert.filename, cert.content, 'application/x-pem-file')
                 }
diff --git a/apps/web/src/components/modules/module-access-denied.tsx b/apps/web/src/components/modules/module-access-denied.tsx
index 3d89a04..52a23fb 100644
--- a/apps/web/src/components/modules/module-access-denied.tsx
+++ b/apps/web/src/components/modules/module-access-denied.tsx
@@ -22,6 +22,7 @@ export function ModuleAccessDenied({ title, body, backToDashboard }: ModuleAcces
       <div className="flex flex-col items-center justify-center py-16 text-center">
         <div className="rounded-lg bg-muted p-4 mb-4">
           <svg
+            aria-hidden="true"
             xmlns="http://www.w3.org/2000/svg"
             width="48"
             height="48"