Changes
Madrid, Spain → New York, United Stated
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | B (88) | B (86) | -2.000 |
| Performance | A+ (97) | A+ (98) | +1.000 |
| Security | B (84) | C (79) | -5.000 |
| Accessibility | B (81) | B (84) | +3.000 |
| SEO | A (91) | B (85) | -6.000 |
| Infrastructure | A (94) | A (93) | -1.000 |
| Compliance | D (63) | C (70) | +7.000 |
| Content | A+ (98) | C (76) | -22.000 |
| Sustainability | A (95) | A+ (98) | +3.000 |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 8900 | 9100 | +200 |
| Accessibility | 9500 | 9500 | — |
| Best Practices | 7300 | 7300 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9000 | 9800 | +800 |
| Desktop Accessibility | 9500 | 9500 | — |
| Desktop Best Practices | 7300 | 7300 | — |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 1.21 s | 924 ms | -289 ms |
| LCP | 1.81 s | 1.55 s | -255 ms |
| TBT | 78 ms | 42 ms | -36 ms |
| CLS | 0.000 | 0.000 | — |
| Desktop FCP | 382 ms | 325 ms | -57 ms |
| Desktop LCP | 530 ms | 446 ms | -84 ms |
| Desktop TBT | 0 ms | 0 ms | — |
| Desktop CLS | 0.000 | 0.000 | — |
| TTFB † | 26 ms | 170 ms | +145 ms |
| DNS † | 3 ms | 31 ms | +28 ms |
| TLS † | 7 ms | 22 ms | +15 ms |
| Connect † | 2 ms | 16 ms | +14 ms |
| Total † | 26 ms | 171 ms | +145 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
cf-cache-status HIT → MISSlast-modified Mon, 25 May 2026 04:37:28 GMT → Mon, 25 May 2026 04:37:27 GMT16 headers unchanged
4 technologies unchanged
Looking ahead
+11 ptsEstimate — actual results may vary (29 issues to fix)
Website improvement report — Xpenv
May 25, 2026 → May 25, 2026
12
Resolved
12
New issues
17
Still remaining
Financial summary
Investment delivered
$2,192 in development time
Investment remaining
$3,167 to complete the remaining items
Ongoing risk
$0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 88 (B) | 86 (B) | -2 |
| Performance | 97 (A+) | 98 (A+) | +1 |
| Security | 84 (B) | 79 (C) | -5 |
| Accessibility | 81 (B) | 84 (B) | +3 |
| SEO | 91 (A) | 85 (B) | -6 |
| Infrastructure | 94 (A) | 93 (A) | -1 |
| Compliance | 63 (D) | 70 (C) | +7 |
| Content | 98 (A+) | 76 (C) | -22 |
| Sustainability | 95 (A) | 98 (A+) | +3 |
Resolved (12)
Thin content — only 6 words (SEO)
→ Better search engine visibility
Broken link: https://xpenv.com/assets/index-CW5Uzupm.js (Content)
→ Stronger social sharing and on-page quality
No <main> landmark found (Accessibility)
→ Improved usability for assistive technology users
No privacy policy link detected in the page (Compliance)
→ Reduced regulatory exposure
7 of 9 links are healthy (Content)
→ Stronger social sharing and on-page quality
Page body has only 44 chars of text -- likely empty / placeholder (Security)
→ Reduced attack surface for visitors
No headings found (Accessibility)
→ Improved usability for assistive technology users
No favicon.ico at site root (Accessibility)
→ Improved usability for assistive technology users
https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 280ms CPU time (Performance)
→ Page loads faster for users
Page has only 6 words — nearly empty (SEO)
→ Better search engine visibility
<iframe> missing title attribute (src="") (Accessibility)
→ Improved usability for assistive technology users
Broken link: https://xpenv.com/assets/index-DyJOIMUX.css (Content)
→ Stronger social sharing and on-page quality
Recommended next steps (29)
- Sprint 3
Page has only 47 words — nearly empty (SEO)
- Sprint 1
Scan returned a Cloudflare bot-protection interstitial, not the actual page (Security)
- Sprint 2
Content-Security-Policy header is missing (Security)
- Sprint 2
1 render-blocking <script src> tag(s) without async/defer (Performance)
- Sprint 1
SRI adoption: 0/1 third-party resources protected (0%) (Security)
- Sprint 1
No canonical tag found (SEO)
- Sprint 1
No meta description tag found (SEO)
- Sprint 1
No internal links found (SEO)
- Sprint 1
Title is only 16 characters — consider expanding (SEO)
- Sprint 1
External script from challenges.cloudflare.com lacks integrity attribute (Security)
- Sprint 1
2 link(s) open in new tab without warning (Accessibility)
- Sprint 3
Thin content — only 47 words (SEO)
- Sprint 1
No Open Graph meta tags found (Content)
- Sprint 1
Cross-Origin-Opener-Policy header is missing (Security)
- Sprint 1
Referrer-Policy header is missing (Security)
…and 14 more recommended item(s)