Changes
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | A (90) | A (90) | — |
| Performance | A+ (97) | A+ (97) | — |
| Security | B (89) | B (89) | — |
| Accessibility | B (87) | B (87) | — |
| SEO | A (96) | A (94) | -2.000 |
| Infrastructure | A (90) | B (89) | -1.000 |
| Compliance | C (77) | C (77) | — |
| Content | C (78) | C (78) | — |
| Sustainability | A (92) | A (92) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 9800 | 9800 | — |
| Accessibility | 10000 | 10000 | — |
| Best Practices | 10000 | 10000 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 10000 | 10000 | — |
| Desktop Accessibility | 10000 | 10000 | — |
| Desktop Best Practices | 10000 | 10000 | — |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 1.80 s | 1.80 s | — |
| LCP | 1.85 s | 1.84 s | — |
| TBT | 22 ms | 14 ms | -8 ms |
| CLS | 0.000 | 0.000 | — |
| Desktop FCP | 401 ms | 402 ms | — |
| Desktop LCP | 415 ms | 414 ms | — |
| Desktop TBT | 0 ms | 0 ms | — |
| Desktop CLS | 0.000 | 0.000 | — |
| TTFB † | 55 ms | 194 ms | +139 ms |
| DNS | 51 ms | 52 ms | — |
| TLS † | 2 ms | 2 ms | +1 ms |
| Connect † | 0 ms | 0 ms | -0 ms |
| Total † | 55 ms | 195 ms | +140 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
content-security-policy default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c... → default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c...x-runtime 0.034705 → 0.020972etag W/"2427204514f0185461a7d66a825156db" → W/"f57ae06f2750cd7aa44df3f136876a87"16 headers unchanged
Technology stack unchanged
12 technologies unchanged
Looking ahead
+6 ptsEstimate — actual results may vary (16 issues to fix)
Website improvement report — Gov
May 9, 2026 → May 9, 2026
2
Resolved
2
New issues
14
Still remaining
Financial summary
Investment delivered
£150 in development time
Investment remaining
£1,519 to complete the remaining items
Ongoing risk
£0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 90 (A) | 90 (A) | 0 |
| Performance | 97 (A+) | 97 (A+) | 0 |
| Security | 89 (B) | 89 (B) | 0 |
| Accessibility | 87 (B) | 87 (B) | 0 |
| SEO | 96 (A) | 94 (A) | -2 |
| Infrastructure | 90 (A) | 89 (B) | -1 |
| Compliance | 77 (C) | 77 (C) | 0 |
| Content | 78 (C) | 78 (C) | 0 |
| Sustainability | 92 (A) | 92 (A) | 0 |
Resolved (2)
2 images significantly larger than display size (Content)
→ Stronger social sharing and on-page quality
Domain expires in 74 days (Infrastructure)
→ More reliable delivery
Recommended next steps (16)
- Sprint 1
Missing or non-HTML5 doctype (SEO)
- Sprint 2
4 images significantly larger than display size (Content)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)
- Sprint 2
Cross-Origin-Embedder-Policy header is missing (Security)
- Sprint 1
Title is only 6 characters — consider expanding (SEO)
- Sprint 2
GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)
- Sprint 1
Cross-Origin-Opener-Policy header is missing (Security)
- Sprint 2
No DMARC record found (Security)
- Sprint 1
1 link(s) open in new tab without warning (Accessibility)
- Sprint 3
https://www.gov.uk/assets/frontend/application-1a5...: 26 KB unused (64%) (Performance)
- Sprint 1
HSTS is missing includeSubDomains (Security)
- Sprint 1
form-action directive is missing (Security)
- Sprint 1
No SPF record found (Security)
- Sprint 1
CNAME record at zone apex (Infrastructure)
- Sprint 2
All 4 images use legacy formats (JPEG/PNG/GIF) (Content)
…and 1 more recommended item(s)