Skip to content

Changes

https://strictmx.com
Compared to previous audit · 1 hour ago View previous audit

Amsterdam, Netherlands → Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

3
New issues
7
Resolved
15
score changes
CategoryPreviousCurrentChange
CompositeA (91)A (93) +2.000
PerformanceA (96)A (96)—
SecurityA (92)A (96) +4.000
AccessibilityB (86)B (86)—
SEOA+ (100)A+ (100)—
InfrastructureA (91)A (92) +1.000
ComplianceC (70)C (70)—
ContentA+ (100)A+ (100)—
SustainabilityB (88)A (95) +7.000
MetricPreviousCurrentChange
Performance 1000010000—
Accessibility 91009100—
Best Practices 1000010000—
SEO 92009200—
PWA 00—
Desktop Performance 1000010000—
Desktop Accessibility 91009100—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 1.35 s990 ms -362 ms
LCP 1.46 s1.22 s -240 ms
TBT 0 ms33 ms +33 ms
CLS 0.0000.010 +0.010
Desktop FCP 355 ms330 ms -25 ms
Desktop LCP 383 ms369 ms -14 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0080.008—
TTFB †353 ms304 ms -49 ms
DNS †47 ms32 ms -15 ms
TLS †106 ms96 ms -9 ms
Connect †99 ms86 ms -13 ms
Total †354 ms305 ms -49 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING Unattributable: 365ms CPU time performance
WARNING HTTP→HTTPS redirect uses 302 instead of 301 infrastructure
WARNING https://strictmx.com/: 606ms CPU time performance
WARNING Permissions-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No Permissions-Policy header security
WARNING HTTP→HTTPS redirect is not permanent infrastructure
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING 2 font preload(s) missing `crossorigin` -- font will be downloaded twice performance
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 1 field(s) would benefit from inputmode attribute accessibility
WARNING No accessibility statement detected compliance
WARNING No favicon.ico at site root accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING GDPR Article 13 disclosure coverage: 2 / 8 categories compliance
WARNING Terms of Service not detected compliance
+ permissions-policy accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media...
+ cross-origin-embedder-policy require-corp
+ cross-origin-opener-policy same-origin
content-security-policy
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:... → default-src 'self'; script-src 'self' 'sha256-hrGyrAV1GJvJ1zdak4kwDGeQvgDZWtU...

9 headers unchanged

Technology stack unchanged

5 technologies unchanged

Looking ahead

+4 pts
A (93) Could reach A+ (97)
Accessibility +10Compliance +10Infrastructure +8Performance +4

Estimate — actual results may vary (10 issues to fix)

Website improvement report — Strictmx

August 19, 2026 → August 19, 2026

A A 91 → 93 +2 pts

7

Resolved

3

New issues

7

Still remaining

Financial summary

Investment delivered

€347 in development time

Investment remaining

€660 to complete the remaining items

Ongoing risk

€0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score91 (A)93 (A)+2
Performance96 (A)96 (A)0
Security92 (A)96 (A)+4
Accessibility86 (B)86 (B)0
SEO100 (A+)100 (A+)0
Infrastructure91 (A)92 (A)+1
Compliance70 (C)70 (C)0
Content100 (A+)100 (A+)0
Sustainability88 (B)95 (A)+7

Resolved (7)

  • Permissions-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Cross-Origin-Embedder-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • No Permissions-Policy header (Security)

    → Reduced attack surface for visitors

  • HTTP→HTTPS redirect is not permanent (Infrastructure)

    → More reliable delivery

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Permissions-Policy header not set -- features default to allow-on-same-origin (Security)

    → Reduced attack surface for visitors

  • 2 font preload(s) missing `crossorigin` -- font will be downloaded twice (Performance)

    → Page loads faster for users

Recommended next steps (10)

  • Sprint 1

    Unattributable: 365ms CPU time (Performance)

  • Sprint 3

    HTTP→HTTPS redirect uses 302 instead of 301 (Infrastructure)

  • Sprint 1

    https://strictmx.com/: 606ms CPU time (Performance)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 1

    1 field(s) would benefit from inputmode attribute (Accessibility)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 1

    No favicon.ico at site root (Accessibility)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 2 / 8 categories (Compliance)

  • Sprint 1

    Terms of Service not detected (Compliance)

Send Feedback