Skip to content

Changes

https://strictmx.com
Compared to previous audit · 1 hour ago View previous audit

Amsterdam, Netherlands → Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

3
New issues
6
Resolved
15
score changes
CategoryPreviousCurrentChange
CompositeA (91)A (93) +2.000
PerformanceA (96)A (96)—
SecurityA (92)A (96) +4.000
AccessibilityB (86)B (86)—
SEOA+ (100)A+ (100)—
InfrastructureA (91)A (92) +1.000
ComplianceC (70)C (70)—
ContentA+ (100)A+ (100)—
SustainabilityB (88)A (95) +7.000
MetricPreviousCurrentChange
Performance 1000010000—
Accessibility 91009100—
Best Practices 1000010000—
SEO 92009200—
PWA 00—
Desktop Performance 1000010000—
Desktop Accessibility 91009100—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 1.35 s990 ms -362 ms
LCP 1.46 s1.22 s -240 ms
TBT 0 ms33 ms +33 ms
CLS 0.0000.010 +0.010
Desktop FCP 355 ms330 ms -25 ms
Desktop LCP 383 ms369 ms -14 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0080.008—
TTFB †353 ms304 ms -49 ms
DNS †47 ms32 ms -15 ms
TLS †106 ms96 ms -9 ms
Connect †99 ms86 ms -13 ms
Total †354 ms305 ms -49 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://strictmx.com/: 606ms CPU time performance
WARNING Unattributable: 365ms CPU time performance
WARNING HTTP→HTTPS redirect uses 302 instead of 301 infrastructure
WARNING No Permissions-Policy header security
WARNING 2 font preload(s) missing `crossorigin` -- font will be downloaded twice performance
WARNING HTTP→HTTPS redirect is not permanent infrastructure
WARNING Permissions-Policy header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No favicon.ico at site root accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING No accessibility statement detected compliance
WARNING GDPR Article 13 disclosure coverage: 2 / 8 categories compliance
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 1 field(s) would benefit from inputmode attribute accessibility
WARNING Terms of Service not detected compliance
+ cross-origin-embedder-policy require-corp
+ cross-origin-opener-policy same-origin
+ permissions-policy accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media...
content-security-policy
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:... → default-src 'self'; script-src 'self' 'sha256-hrGyrAV1GJvJ1zdak4kwDGeQvgDZWtU...

9 headers unchanged

Technology stack unchanged

5 technologies unchanged

Looking ahead

+4 pts
A (93) Could reach A+ (97)
Accessibility +10Compliance +10Infrastructure +8Performance +4

Estimate — actual results may vary (10 issues to fix)

Website improvement report — Strictmx

August 19, 2026 → August 19, 2026

A A 91 → 93 +2 pts

6

Resolved

3

New issues

7

Still remaining

Financial summary

Investment delivered

€307 in development time

Investment remaining

€660 to complete the remaining items

Ongoing risk

€0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score91 (A)93 (A)+2
Performance96 (A)96 (A)0
Security92 (A)96 (A)+4
Accessibility86 (B)86 (B)0
SEO100 (A+)100 (A+)0
Infrastructure91 (A)92 (A)+1
Compliance70 (C)70 (C)0
Content100 (A+)100 (A+)0
Sustainability88 (B)95 (A)+7

Resolved (6)

  • No Permissions-Policy header (Security)

    → Reduced attack surface for visitors

  • 2 font preload(s) missing `crossorigin` -- font will be downloaded twice (Performance)

    → Page loads faster for users

  • HTTP→HTTPS redirect is not permanent (Infrastructure)

    → More reliable delivery

  • Permissions-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Cross-Origin-Embedder-Policy header is missing (Security)

    → Reduced attack surface for visitors

Recommended next steps (10)

  • Sprint 1

    https://strictmx.com/: 606ms CPU time (Performance)

  • Sprint 1

    Unattributable: 365ms CPU time (Performance)

  • Sprint 3

    HTTP→HTTPS redirect uses 302 instead of 301 (Infrastructure)

  • Sprint 1

    No favicon.ico at site root (Accessibility)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 2 / 8 categories (Compliance)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 1

    1 field(s) would benefit from inputmode attribute (Accessibility)

  • Sprint 1

    Terms of Service not detected (Compliance)

Send Feedback