Skip to content

Changes

https://www.classicivivi.it
Compared to previous audit · 6 minutes ago View previous audit
10
New issues
12
Resolved
16
score changes
CategoryPreviousCurrentChange
CompositeC (77)B (80) +3.000
PerformanceA (94)A (93) -1.000
SecurityD (65)C (74) +9.000
AccessibilityD (57)D (57)—
SEOB (89)B (89)—
InfrastructureC (79)A (90) +11.000
ComplianceB (86)B (86)—
ContentD (66)D (57) -9.000
SustainabilityB (88)B (88)—
MetricPreviousCurrentChange
Performance 72006300 -900
Accessibility 93009300—
Best Practices 1000010000—
SEO 83008300—
PWA 00—
Desktop Performance 98009800—
Desktop Accessibility 93009300—
Desktop Best Practices 1000010000—
Desktop SEO 83008300—
FCP 2.89 s4.56 s +1.67 s
LCP 4.50 s4.56 s +53 ms
TBT 323 ms388 ms +65 ms
CLS 0.0040.004—
Desktop FCP 691 ms696 ms—
Desktop LCP 1.12 s1.14 s +26 ms
Desktop TBT 27 ms44 ms +17 ms
Desktop CLS 0.0100.010—
TTFB †720 ms432 ms -288 ms
DNS †169 ms5 ms -165 ms
TLS †7 ms8 ms +1 ms
Connect †1 ms2 ms +0 ms
Total †747 ms458 ms -288 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 77
Projected
A 93
Actual
B 80
Fell short of projection
12 issues resolved since last audit
29 issues remaining
Resolving remaining issues could reach A

Estimate — actual results may vary

CRITICAL 'unsafe-eval' found in script source security
CRITICAL 'unsafe-inline' found in script source security
WARNING Unattributable: 289ms CPU time performance
WARNING Session replay tool detected: Microsoft Clarity compliance
WARNING frame-ancestors directive is missing security
WARNING form-action directive is missing security
WARNING Third-party scripts: 964ms (56% of total) performance
WARNING https://scripts.clarity.ms/0.8.59/clarity.js: 618ms CPU time performance
WARNING base-uri directive is missing security
WARNING https://www.classicivivi.it/: 694ms CPU time performance
CRITICAL HSTS header is missing security
CRITICAL Content-Security-Policy header is missing security
CRITICAL No Content-Security-Policy header found security
WARNING Unattributable: 256ms CPU time performance
WARNING https://www.classicivivi.it/: 642ms CPU time performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING No accessibility statement detected compliance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING https://scripts.clarity.ms/0.8.59/clarity.js: 509ms CPU time performance
WARNING No meta description tag found seo
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
CRITICAL No <main> landmark found accessibility
CRITICAL Both www and non-www versions serve content infrastructure
WARNING Bare server default 404 page accessibility
WARNING No DMARC record found security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Broken link: https://fonts.googleapis.com content
WARNING Broken link: https://fonts.gstatic.com content
WARNING 100% of images have non-descriptive filenames seo
WARNING External link from fonts.googleapis.com lacks integrity attribute security
WARNING 1 control(s) rely on placeholder only accessibility
WARNING Terms of Service not detected compliance
WARNING No Open Graph meta tags found content
WARNING 9 of 11 links are healthy content
WARNING Only 32% reduction on repeat visits sustainability
WARNING External script from www.clarity.ms lacks integrity attribute security
WARNING External script from scripts.clarity.ms lacks integrity attribute security
WARNING data:image/png;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/... is missing width/height — may cause layout shift performance
WARNING No canonical tag found seo
WARNING 4 link(s) open in new tab without warning accessibility
+ content-security-policy default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:
+ cross-origin-resource-policy cross-origin
+ cross-origin-embedder-policy unsafe-none
+ strict-transport-security max-age=31536000; includeSubDomains
+ cross-origin-opener-policy same-origin

12 headers unchanged

+ HSTS Security

4 technologies unchanged

Looking ahead

+14 pts
B (80) Could reach A (94)
Security +26Accessibility +21Content +13Infrastructure +10Compliance +8SEO +8Performance +7Sustainability +4

Estimate — actual results may vary (29 issues to fix)

Website improvement report — Classicivivi

April 12, 2026 → April 12, 2026

C B 77 → 80 +3 pts

12

Resolved

10

New issues

19

Still remaining

Financial summary

Investment delivered

€646 in development time

Investment remaining

€1,746 to complete the remaining items

Ongoing risk

€0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score77 (C)80 (B)+3
Performance94 (A)93 (A)-1
Security65 (D)74 (C)+9
Accessibility57 (D)57 (D)0
SEO89 (B)89 (B)0
Infrastructure79 (C)90 (A)+11
Compliance86 (B)86 (B)0
Content66 (D)57 (D)-9
Sustainability88 (B)88 (B)0

Resolved (12)

  • HSTS header is missing (Security)

    → Reduced attack surface for visitors

  • Unattributable: 256ms CPU time (Performance)

    → Page loads faster for users

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://www.classicivivi.it/: 642ms CPU time (Performance)

    → Page loads faster for users

  • IPv6 DNS records exist but server is not reachable (Infrastructure)

    → More reliable delivery

  • No accessibility statement detected (Compliance)

    → Reduced regulatory exposure

  • GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

    → Reduced regulatory exposure

  • https://scripts.clarity.ms/0.8.59/clarity.js: 509ms CPU time (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • No Content-Security-Policy header found (Security)

    → Reduced attack surface for visitors

  • Cross-Origin-Embedder-Policy header is missing (Security)

    → Reduced attack surface for visitors

Recommended next steps (29)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    Unattributable: 289ms CPU time (Performance)

  • Sprint 2

    Session replay tool detected: Microsoft Clarity (Compliance)

  • Sprint 1

    frame-ancestors directive is missing (Security)

  • Sprint 1

    form-action directive is missing (Security)

  • Sprint 3

    Third-party scripts: 964ms (56% of total) (Performance)

  • Sprint 1

    https://scripts.clarity.ms/0.8.59/clarity.js: 618ms CPU time (Performance)

  • Sprint 1

    base-uri directive is missing (Security)

  • Sprint 1

    https://www.classicivivi.it/: 694ms CPU time (Performance)

  • Sprint 1

    Bare server default 404 page (Accessibility)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

…and 14 more recommended item(s)

Send Feedback