Changes
Sao Paulo, Brazil → Madrid, Spain
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | A (90) | A (91) | +1.000 |
| Performance | A (96) | A (96) | — |
| Security | B (89) | A+ (97) | +8.000 |
| Accessibility | B (87) | B (87) | — |
| SEO | A (94) | A (94) | — |
| Infrastructure | A (94) | B (86) | -8.000 |
| Compliance | C (73) | C (73) | — |
| Content | B (85) | B (85) | — |
| Sustainability | A+ (98) | A+ (98) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 9600 | 8100 | -1500 |
| Accessibility | 10000 | 10000 | — |
| Best Practices | 10000 | 10000 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9900 | 9900 | — |
| Desktop Accessibility | 10000 | 10000 | — |
| Desktop Best Practices | 10000 | 10000 | — |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 1.20 s | 2.94 s | +1.74 s |
| LCP | 2.32 s | 3.94 s | +1.62 s |
| TBT | 180 ms | 133 ms | -46 ms |
| CLS | 0.000 | 0.000 | — |
| Desktop FCP | 545 ms | 726 ms | +180 ms |
| Desktop LCP | 792 ms | 906 ms | +114 ms |
| Desktop TBT | 4 ms | 18 ms | +14 ms |
| Desktop CLS | 0.000 | 0.000 | — |
| TTFB † | 398 ms | 327 ms | -71 ms |
| DNS † | 43 ms | 7 ms | -36 ms |
| TLS † | 25 ms | 9 ms | -16 ms |
| Connect † | 17 ms | 1 ms | -16 ms |
| Total † | 404 ms | 328 ms | -76 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
strict-transport-security max-age=31536000; includeSubDomainscontent-security-policy default-src 'self'; connect-src 'self' https://umami.gotakk.com; font-src 'se...permissions-policy geolocation=(), camera=(), microphone=() → geolocation=(), camera=(), microphone=(), payment=(), usb=(), serial=(), midi...x-nf-request-id 01KYR0D9RXXKATGYK7YZHAJG7X → 01KYR2QTCDBZCE240WC47RQVT412 headers unchanged
15 technologies unchanged
Looking ahead
+6 ptsEstimate — actual results may vary (13 issues to fix)
Website improvement report — Tahri
July 29, 2026 → July 29, 2026
8
Resolved
4
New issues
9
Still remaining
Financial summary
Investment delivered
$675 in development time
Investment remaining
$750 to complete the remaining items
Ongoing risk
$0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 90 (A) | 91 (A) | +1 |
| Performance | 96 (A) | 96 (A) | 0 |
| Security | 89 (B) | 97 (A+) | +8 |
| Accessibility | 87 (B) | 87 (B) | 0 |
| SEO | 94 (A) | 94 (A) | 0 |
| Infrastructure | 94 (A) | 86 (B) | -8 |
| Compliance | 73 (C) | 73 (C) | 0 |
| Content | 85 (B) | 85 (B) | 0 |
| Sustainability | 98 (A+) | 98 (A+) | 0 |
Resolved (8)
https://tahri.technology/: 400ms CPU time (Performance)
→ Page loads faster for users
Content-Security-Policy header is missing (Security)
→ Reduced attack surface for visitors
No Content-Security-Policy header found (Security)
→ Reduced attack surface for visitors
Permissions-Policy covers 3/10 high-risk features (30%) (Security)
→ Reduced attack surface for visitors
DMARC policy is none — monitoring only (Security)
→ Reduced attack surface for visitors
https://tahri.technology/_app/immutable/chunks/Nj6...: 445ms CPU time (Performance)
→ Page loads faster for users
Unattributable: 271ms CPU time (Performance)
→ Page loads faster for users
HSTS header is missing (Security)
→ Reduced attack surface for visitors
Recommended next steps (13)
- Sprint 1
https://tahri.technology/_app/immutable/chunks/Nj6...: 627ms CPU time (Performance)
- Sprint 1
https://tahri.technology/: 491ms CPU time (Performance)
- Sprint 1
Unattributable: 402ms CPU time (Performance)
- Sprint 2
IPv6 DNS records exist but server is not reachable (Infrastructure)
- Sprint 1
No accessibility statement detected (Compliance)
- Sprint 2
4 images significantly larger than display size (Content)
- Sprint 2
Cross-Origin-Embedder-Policy header is missing (Security)
- Sprint 1
Skip navigation link is missing (WCAG 2.4.1) (Accessibility)
- Sprint 2
GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)
- Sprint 1
Terms of Service not detected (Compliance)
- Sprint 1
No 192x192 icon (Accessibility)
- Sprint 1
Title is only 16 characters — consider expanding (SEO)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)