Changes
Madrid, Spain → Amsterdam, Netherlands
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | A (90) | A (90) | — |
| Performance | A (95) | A+ (97) | +2.000 |
| Security | B (89) | B (89) | — |
| Accessibility | B (87) | B (87) | — |
| SEO | A (95) | A (96) | +1.000 |
| Infrastructure | A (90) | A (90) | — |
| Compliance | C (77) | C (77) | — |
| Content | C (79) | C (78) | -1.000 |
| Sustainability | A (92) | A (92) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 7700 | 7700 | — |
| Accessibility | 10000 | 10000 | — |
| Best Practices | 10000 | 10000 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| FCP | 1.50 s | 1.50 s | — |
| LCP | 1.86 s | 1.82 s | -37 ms |
| TBT | 63 ms | 0 ms | -63 ms |
| CLS | 0.565 | 0.565 | — |
| TTFB † | 10 ms | 24 ms | +14 ms |
| DNS † | 3 ms | 21 ms | +18 ms |
| TLS † | 5 ms | 2 ms | -3 ms |
| Connect † | 1 ms | 0 ms | -0 ms |
| Total † | 12 ms | 25 ms | +13 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
No new issues found
x-runtime 0.022980 → 0.034705content-security-policy default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c... → default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c...etag W/"2ffb31165d05278ca7e093dcf7d48fc1" → W/"2427204514f0185461a7d66a825156db"16 headers unchanged
Technology stack unchanged
12 technologies unchanged
Looking ahead
+6 ptsEstimate — actual results may vary (15 issues to fix)
Website improvement report — Gov
May 9, 2026 → May 9, 2026
4
Resolved
15
Still remaining
Financial summary
Investment delivered
£156 in development time
Investment remaining
£1,481 to complete the remaining items
Ongoing risk
£0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 90 (A) | 90 (A) | 0 |
| Performance | 95 (A) | 97 (A+) | +2 |
| Security | 89 (B) | 89 (B) | 0 |
| Accessibility | 87 (B) | 87 (B) | 0 |
| SEO | 95 (A) | 96 (A) | +1 |
| Infrastructure | 90 (A) | 90 (A) | 0 |
| Compliance | 77 (C) | 77 (C) | 0 |
| Content | 79 (C) | 78 (C) | -1 |
| Sustainability | 92 (A) | 92 (A) | 0 |
Resolved (4)
Domain has EXPIRED (Infrastructure)
→ More reliable delivery
DNS resolution is slow (293 ms) (Infrastructure)
→ More reliable delivery
Unattributable: 399ms CPU time (Performance)
→ Page loads faster for users
https://www.gov.uk/: 609ms CPU time (Performance)
→ Page loads faster for users
Recommended next steps (15)
- Sprint 2
Cross-Origin-Embedder-Policy header is missing (Security)
- Sprint 1
form-action directive is missing (Security)
- Sprint 1
No SPF record found (Security)
- Sprint 3
https://www.gov.uk/assets/frontend/application-1a5...: 26 KB unused (64%) (Performance)
- Sprint 1
Cross-Origin-Opener-Policy header is missing (Security)
- Sprint 1
CNAME record at zone apex (Infrastructure)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)
- Sprint 2
GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)
- Sprint 2
2 images significantly larger than display size (Content)
- Sprint 2
All 4 images use legacy formats (JPEG/PNG/GIF) (Content)
- Sprint 2
No DMARC record found (Security)
- Sprint 1
1 link(s) open in new tab without warning (Accessibility)
- Sprint 1
Title is only 6 characters — consider expanding (SEO)
- Sprint 2
4 images missing alt text (Content)
- Sprint 1
HSTS is missing includeSubDomains (Security)