Skip to content

Changes

https://shotprep.io
Compared to previous audit · 7 hours ago View previous audit

Amsterdam, Netherlands → Santa Clara, United States

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

11
New issues
13
Resolved
20
score changes
CategoryPreviousCurrentChange
CompositeB (80)B (82) +2.000
PerformanceA (96)A (93) -3.000
SecurityD (66)C (76) +10.000
AccessibilityD (66)D (66)—
SEOB (89)B (89)—
InfrastructureB (86)B (85) -1.000
ComplianceA (90)A (90)—
ContentD (68)D (68)—
SustainabilityA+ (97)B (89) -8.000
MetricPreviousCurrentChange
Performance 95005800 -3700
Accessibility 95009500—
Best Practices 100009600 -400
SEO 1000010000—
PWA 00—
Desktop Performance 100009600 -400
Desktop Accessibility 95009500—
Desktop Best Practices 100009600 -400
Desktop SEO 1000010000—
FCP 927 ms1.23 s +300 ms
LCP 2.32 s4.88 s +2.55 s
TBT 149 ms1.24 s +1.09 s
CLS 0.0000.000—
Desktop FCP 265 ms395 ms +130 ms
Desktop LCP 474 ms654 ms +180 ms
Desktop TBT 0 ms142 ms +142 ms
Desktop CLS 0.0000.000—
TTFB †282 ms1.48 s +1.19 s
DNS †19 ms14 ms -6 ms
TLS †14 ms127 ms +113 ms
Connect †4 ms1 ms -3 ms
Total †284 ms1.48 s +1.19 s

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
B 80
Projected
A 92
Actual
B 82
Close to projection — 10 points away
13 issues resolved since last audit
20 issues remaining
Resolving remaining issues could reach A

Estimate — actual results may vary

CRITICAL 1 image-only link(s) without alt text accessibility
WARNING https://shotprep.io/: 806ms CPU time performance
WARNING DNS resolution is slow (256 ms) infrastructure
WARNING https://shotprep.io/_next/static/chunks/10~x95jhs6...: 1316ms CPU time performance
WARNING https://shotprep.io/_next/static/chunks/0pfzsr1~bc...: 575ms CPU time performance
WARNING https://us-assets.i.posthog.com/static/posthog-rec...: 25 KB unused (48%) performance
WARNING Unattributable: 363ms CPU time performance
WARNING https://shotprep.io/_next/static/chunks/10~x95jhs6...: 27 KB unused (39%) performance
WARNING Transfer efficiency: 74% sustainability
WARNING https://us-assets.i.posthog.com/static/surveys.js?...: 25 KB unused (80%) performance
WARNING https://shotprep.io/_next/static/chunks/0pfzsr1~bc...: 33 KB unused (52%) performance
WARNING X-Frame-Options header is missing security
WARNING Permissions-Policy header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No meta description tag found seo
WARNING No accessibility statement detected compliance
WARNING X-Powered-By header reveals technology stack security
WARNING No Permissions-Policy header security
WARNING https://shotprep.io/_next/static/chunks/0h4bq73pog...: 448ms CPU time performance
WARNING https://shotprep.io/_next/static/chunks/0h4bq73pog...: 27 KB unused (39%) performance
WARNING Referrer-Policy header is missing security
WARNING https://shotprep.io/: 453ms CPU time performance
WARNING X-Content-Type-Options header is missing security
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
CRITICAL Content-Security-Policy header is missing security
CRITICAL No Content-Security-Policy header found security
WARNING HTTP→HTTPS redirect uses 302 instead of 301 infrastructure
WARNING HSTS is missing includeSubDomains security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No Open Graph meta tags found content
WARNING No DMARC record found security
WARNING No canonical tag found seo
+ x-frame-options DENY
+ cross-origin-opener-policy same-origin
+ content-security-policy-report-only default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none...
+ referrer-policy strict-origin-when-cross-origin
+ permissions-policy accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), m...
+ x-content-type-options nosniff
− x-powered-by Next.js
x-vercel-id
sfo1::iad1::lvsf7-1776397921468-a9a2d573c563 → fra1::iad1::b8rwb-1776423795468-7dbc0a86f47e

8 headers unchanged

+ PostHog Analytics
Next.js v16.2.1 → v16.2.4

12 technologies unchanged

Looking ahead

+11 pts
B (82) Could reach A (93)
Security +24Accessibility +14Infrastructure +8Performance +7Content +4SEO +4Sustainability +4

Estimate — actual results may vary (20 issues to fix)

Website improvement report — Shotprep

April 17, 2026 → April 17, 2026

B B 80 → 82 +2 pts

13

Resolved

11

New issues

9

Still remaining

Financial summary

Investment delivered

$1,258 in development time

Investment remaining

$4,375 to complete the remaining items

Ongoing risk

$0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score80 (B)82 (B)+2
Performance96 (A)93 (A)-3
Security66 (D)76 (C)+10
Accessibility66 (D)66 (D)0
SEO89 (B)89 (B)0
Infrastructure86 (B)85 (B)-1
Compliance90 (A)90 (A)0
Content68 (D)68 (D)0
Sustainability97 (A+)89 (B)-8

Resolved (13)

  • X-Frame-Options header is missing (Security)

    → Reduced attack surface for visitors

  • Permissions-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • No meta description tag found (SEO)

    → Better search engine visibility

  • No accessibility statement detected (Compliance)

    → Reduced regulatory exposure

  • X-Powered-By header reveals technology stack (Security)

    → Reduced attack surface for visitors

  • No Permissions-Policy header (Security)

    → Reduced attack surface for visitors

  • https://shotprep.io/_next/static/chunks/0h4bq73pog...: 448ms CPU time (Performance)

    → Page loads faster for users

  • https://shotprep.io/_next/static/chunks/0h4bq73pog...: 27 KB unused (39%) (Performance)

    → Page loads faster for users

  • Referrer-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://shotprep.io/: 453ms CPU time (Performance)

    → Page loads faster for users

  • X-Content-Type-Options header is missing (Security)

    → Reduced attack surface for visitors

  • GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

    → Reduced regulatory exposure

Recommended next steps (20)

  • Sprint 1

    1 image-only link(s) without alt text (Accessibility)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 1

    https://shotprep.io/: 806ms CPU time (Performance)

  • Sprint 2

    DNS resolution is slow (256 ms) (Infrastructure)

  • Sprint 1

    https://shotprep.io/_next/static/chunks/10~x95jhs6...: 1316ms CPU time (Performance)

  • Sprint 1

    https://shotprep.io/_next/static/chunks/0pfzsr1~bc...: 575ms CPU time (Performance)

  • Sprint 3

    https://us-assets.i.posthog.com/static/posthog-rec...: 25 KB unused (48%) (Performance)

  • Sprint 1

    Unattributable: 363ms CPU time (Performance)

  • Sprint 3

    https://shotprep.io/_next/static/chunks/10~x95jhs6...: 27 KB unused (39%) (Performance)

  • Sprint 1

    Transfer efficiency: 74% (Sustainability)

  • Sprint 3

    https://us-assets.i.posthog.com/static/surveys.js?...: 25 KB unused (80%) (Performance)

  • Sprint 3

    https://shotprep.io/_next/static/chunks/0pfzsr1~bc...: 33 KB unused (52%) (Performance)

  • Sprint 1

    HTTP→HTTPS redirect uses 302 instead of 301 (Infrastructure)

  • Sprint 1

    HSTS is missing includeSubDomains (Security)

…and 5 more recommended item(s)

Send Feedback