Skip to content

Changes

https://www.gov.uk
Compared to previous audit · 10 minutes ago View previous audit
2
New issues
1
Resolved
7
score changes
CategoryPreviousCurrentChange
CompositeA (90)A (90)
PerformanceA+ (97)A+ (97)
SecurityB (89)B (89)
AccessibilityB (87)B (87)
SEOA (96)A (94) -2.000
InfrastructureA (90)B (89) -1.000
ComplianceC (77)C (77)
ContentC (78)C (78)
SustainabilityA (92)A (92)
MetricPreviousCurrentChange
Performance 98009800
Accessibility 1000010000
Best Practices 1000010000
SEO 1000010000
PWA 00
Desktop Performance 1000010000
Desktop Accessibility 1000010000
Desktop Best Practices 1000010000
Desktop SEO 1000010000
FCP 1.80 s1.80 s
LCP 1.85 s1.84 s
TBT 22 ms14 ms -8 ms
CLS 0.0000.000
Desktop FCP 401 ms402 ms
Desktop LCP 415 ms414 ms
Desktop TBT 0 ms0 ms
Desktop CLS 0.0000.000
TTFB 55 ms194 ms +139 ms
DNS 51 ms52 ms
TLS 2 ms2 ms +1 ms
Connect 0 ms0 ms -0 ms
Total 55 ms195 ms +140 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING 4 images significantly larger than display size content
WARNING Missing or non-HTML5 doctype seo
WARNING 2 images significantly larger than display size content
WARNING Registrar lock is NOT enabled infrastructure
WARNING HSTS is missing includeSubDomains security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING form-action directive is missing security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING No DMARC record found security
WARNING https://www.gov.uk/assets/frontend/application-1a5...: 26 KB unused (64%) performance
WARNING CNAME record at zone apex infrastructure
WARNING All 4 images use legacy formats (JPEG/PNG/GIF) content
WARNING 4 images missing alt text content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No SPF record found security
WARNING Title is only 6 characters — consider expanding seo
etag
W/"2427204514f0185461a7d66a825156db" W/"f57ae06f2750cd7aa44df3f136876a87"
content-security-policy
default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c... default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c...
x-runtime
0.034705 0.020972

16 headers unchanged

Technology stack unchanged

12 technologies unchanged

Looking ahead

+6 pts
A (90) Could reach A (96)
Security +11Content +10Infrastructure +8SEO +6Accessibility +4Compliance +4Performance +3

Estimate — actual results may vary (16 issues to fix)

Website improvement report — Gov

May 9, 2026 → May 9, 2026

A A 90 → 90 0 pts

1

Resolved

2

New issues

14

Still remaining

Financial summary

Investment delivered

£113 in development time

Investment remaining

£1,519 to complete the remaining items

Ongoing risk

£0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score90 (A)90 (A)0
Performance97 (A+)97 (A+)0
Security89 (B)89 (B)0
Accessibility87 (B)87 (B)0
SEO96 (A)94 (A)-2
Infrastructure90 (A)89 (B)-1
Compliance77 (C)77 (C)0
Content78 (C)78 (C)0
Sustainability92 (A)92 (A)0

Resolved (1)

  • 2 images significantly larger than display size (Content)

    → Stronger social sharing and on-page quality

Recommended next steps (16)

  • Sprint 2

    4 images significantly larger than display size (Content)

  • Sprint 1

    Missing or non-HTML5 doctype (SEO)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 1

    HSTS is missing includeSubDomains (Security)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    form-action directive is missing (Security)

  • Sprint 1

    1 link(s) open in new tab without warning (Accessibility)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 3

    https://www.gov.uk/assets/frontend/application-1a5...: 26 KB unused (64%) (Performance)

  • Sprint 1

    CNAME record at zone apex (Infrastructure)

  • Sprint 2

    All 4 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 2

    4 images missing alt text (Content)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    No SPF record found (Security)

…and 1 more recommended item(s)

Send Feedback