Skip to content

Changes

https://www.gov.uk
Compared to previous audit · 11 minutes ago View previous audit

Madrid, Spain Amsterdam, Netherlands

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

0
New issues
3
Resolved
10
score changes
CategoryPreviousCurrentChange
CompositeA (90)A (90)
PerformanceA (95)A+ (97) +2.000
SecurityB (89)B (89)
AccessibilityB (87)B (87)
SEOA (95)A (96) +1.000
InfrastructureA (90)A (90)
ComplianceC (77)C (77)
ContentC (79)C (78) -1.000
SustainabilityA (92)A (92)
MetricPreviousCurrentChange
Performance 77007700
Accessibility 1000010000
Best Practices 1000010000
SEO 1000010000
PWA 00
FCP 1.50 s1.50 s
LCP 1.86 s1.82 s -37 ms
TBT 63 ms0 ms -63 ms
CLS 0.5650.565
TTFB 10 ms24 ms +14 ms
DNS 3 ms21 ms +18 ms
TLS 5 ms2 ms -3 ms
Connect 1 ms0 ms -0 ms
Total 12 ms25 ms +13 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

No new issues found

WARNING Unattributable: 399ms CPU time performance
WARNING DNS resolution is slow (293 ms) infrastructure
WARNING https://www.gov.uk/: 609ms CPU time performance
WARNING HSTS is missing includeSubDomains security
WARNING form-action directive is missing security
WARNING No DMARC record found security
WARNING https://www.gov.uk/assets/frontend/application-1a5...: 26 KB unused (64%) performance
WARNING 4 images missing alt text content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Registrar lock is NOT enabled infrastructure
WARNING CNAME record at zone apex infrastructure
WARNING 2 images significantly larger than display size content
WARNING All 4 images use legacy formats (JPEG/PNG/GIF) content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No SPF record found security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING Title is only 6 characters — consider expanding seo
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
x-runtime
0.022980 0.034705
etag
W/"2ffb31165d05278ca7e093dcf7d48fc1" W/"2427204514f0185461a7d66a825156db"
content-security-policy
default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c... default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c...

16 headers unchanged

Technology stack unchanged

12 technologies unchanged

Looking ahead

+6 pts
A (90) Could reach A (96)
Security +11Content +10Infrastructure +8Accessibility +4Compliance +4SEO +4Performance +3

Estimate — actual results may vary (15 issues to fix)

Website improvement report — Gov

May 9, 2026 → May 9, 2026

A A 90 → 90 0 pts

3

Resolved

15

Still remaining

Financial summary

Investment delivered

£150 in development time

Investment remaining

£1,481 to complete the remaining items

Ongoing risk

£0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score90 (A)90 (A)0
Performance95 (A)97 (A+)+2
Security89 (B)89 (B)0
Accessibility87 (B)87 (B)0
SEO95 (A)96 (A)+1
Infrastructure90 (A)90 (A)0
Compliance77 (C)77 (C)0
Content79 (C)78 (C)-1
Sustainability92 (A)92 (A)0

Resolved (3)

  • Unattributable: 399ms CPU time (Performance)

    → Page loads faster for users

  • DNS resolution is slow (293 ms) (Infrastructure)

    → More reliable delivery

  • https://www.gov.uk/: 609ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (15)

  • Sprint 1

    HSTS is missing includeSubDomains (Security)

  • Sprint 1

    form-action directive is missing (Security)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 3

    https://www.gov.uk/assets/frontend/application-1a5...: 26 KB unused (64%) (Performance)

  • Sprint 2

    4 images missing alt text (Content)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 1

    CNAME record at zone apex (Infrastructure)

  • Sprint 2

    2 images significantly larger than display size (Content)

  • Sprint 2

    All 4 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 1

    1 link(s) open in new tab without warning (Accessibility)

  • Sprint 1

    Title is only 6 characters — consider expanding (SEO)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

Send Feedback