Skip to content

Changes

https://shotprep.io
Compared to previous audit · 7 hours ago View previous audit

Amsterdam, Netherlands → Santa Clara, United States

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

12
New issues
14
Resolved
20
score changes
CategoryPreviousCurrentChange
CompositeB (80)B (82) +2.000
PerformanceA (96)A (93) -3.000
SecurityD (66)C (76) +10.000
AccessibilityD (66)D (66)—
SEOB (89)B (89)—
InfrastructureB (86)B (85) -1.000
ComplianceA (90)A (90)—
ContentD (68)D (68)—
SustainabilityA+ (97)B (89) -8.000
MetricPreviousCurrentChange
Performance 95005800 -3700
Accessibility 95009500—
Best Practices 100009600 -400
SEO 1000010000—
PWA 00—
Desktop Performance 100009600 -400
Desktop Accessibility 95009500—
Desktop Best Practices 100009600 -400
Desktop SEO 1000010000—
FCP 927 ms1.23 s +300 ms
LCP 2.32 s4.88 s +2.55 s
TBT 149 ms1.24 s +1.09 s
CLS 0.0000.000—
Desktop FCP 265 ms395 ms +130 ms
Desktop LCP 474 ms654 ms +180 ms
Desktop TBT 0 ms142 ms +142 ms
Desktop CLS 0.0000.000—
TTFB †282 ms1.48 s +1.19 s
DNS †19 ms14 ms -6 ms
TLS †14 ms127 ms +113 ms
Connect †4 ms1 ms -3 ms
Total †284 ms1.48 s +1.19 s

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
B 80
Projected
A 92
Actual
B 82
Close to projection — 10 points away
14 issues resolved since last audit
19 issues remaining
Resolving remaining issues could reach A

Estimate — actual results may vary

CRITICAL 1 image-only link(s) without alt text accessibility
WARNING https://shotprep.io/_next/static/chunks/0pfzsr1~bc...: 575ms CPU time performance
WARNING Unattributable: 363ms CPU time performance
WARNING https://shotprep.io/_next/static/chunks/0pfzsr1~bc...: 33 KB unused (52%) performance
WARNING https://us-assets.i.posthog.com/static/surveys.js?...: 25 KB unused (80%) performance
WARNING https://us-assets.i.posthog.com/static/posthog-rec...: 25 KB unused (48%) performance
WARNING https://shotprep.io/_next/static/chunks/10~x95jhs6...: 27 KB unused (39%) performance
WARNING DNS resolution is slow (256 ms) infrastructure
WARNING HTTP→HTTPS redirect uses 302 instead of 301 infrastructure
WARNING Transfer efficiency: 74% sustainability
WARNING https://shotprep.io/_next/static/chunks/10~x95jhs6...: 1316ms CPU time performance
WARNING https://shotprep.io/: 806ms CPU time performance
WARNING X-Powered-By header reveals technology stack security
WARNING https://shotprep.io/_next/static/chunks/0h4bq73pog...: 27 KB unused (39%) performance
WARNING X-Content-Type-Options header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING https://shotprep.io/: 453ms CPU time performance
WARNING X-Frame-Options header is missing security
WARNING Referrer-Policy header is missing security
WARNING https://shotprep.io/_next/static/chunks/0h4bq73pog...: 448ms CPU time performance
WARNING No meta description tag found seo
WARNING No accessibility statement detected compliance
WARNING Permissions-Policy header is missing security
WARNING No Permissions-Policy header security
WARNING HTTP→HTTPS redirect is not permanent infrastructure
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
CRITICAL Content-Security-Policy header is missing security
WARNING No canonical tag found seo
WARNING HSTS is missing includeSubDomains security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No Open Graph meta tags found content
WARNING No DMARC record found security
+ referrer-policy strict-origin-when-cross-origin
+ x-content-type-options nosniff
+ x-frame-options DENY
+ content-security-policy-report-only default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none...
+ cross-origin-opener-policy same-origin
+ permissions-policy accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), m...
− x-powered-by Next.js
x-vercel-id
sfo1::iad1::lvsf7-1776397921468-a9a2d573c563 → fra1::iad1::b8rwb-1776423795468-7dbc0a86f47e

8 headers unchanged

+ PostHog Analytics
Next.js v16.2.1 → v16.2.4

12 technologies unchanged

Looking ahead

+10 pts
B (82) Could reach A (92)
Security +18Accessibility +14Infrastructure +8Performance +7Content +4SEO +4Sustainability +4

Estimate — actual results may vary (19 issues to fix)

Website improvement report — Shotprep

April 17, 2026 → April 17, 2026

B B 80 → 82 +2 pts

14

Resolved

12

New issues

7

Still remaining

Financial summary

Investment delivered

$1,267 in development time

Investment remaining

$4,467 to complete the remaining items

Ongoing risk

$0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score80 (B)82 (B)+2
Performance96 (A)93 (A)-3
Security66 (D)76 (C)+10
Accessibility66 (D)66 (D)0
SEO89 (B)89 (B)0
Infrastructure86 (B)85 (B)-1
Compliance90 (A)90 (A)0
Content68 (D)68 (D)0
Sustainability97 (A+)89 (B)-8

Resolved (14)

  • X-Powered-By header reveals technology stack (Security)

    → Reduced attack surface for visitors

  • https://shotprep.io/_next/static/chunks/0h4bq73pog...: 27 KB unused (39%) (Performance)

    → Page loads faster for users

  • X-Content-Type-Options header is missing (Security)

    → Reduced attack surface for visitors

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://shotprep.io/: 453ms CPU time (Performance)

    → Page loads faster for users

  • X-Frame-Options header is missing (Security)

    → Reduced attack surface for visitors

  • Referrer-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://shotprep.io/_next/static/chunks/0h4bq73pog...: 448ms CPU time (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • No accessibility statement detected (Compliance)

    → Reduced regulatory exposure

  • Permissions-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • No Permissions-Policy header (Security)

    → Reduced attack surface for visitors

  • HTTP→HTTPS redirect is not permanent (Infrastructure)

    → More reliable delivery

  • GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

    → Reduced regulatory exposure

Recommended next steps (19)

  • Sprint 1

    1 image-only link(s) without alt text (Accessibility)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    https://shotprep.io/_next/static/chunks/0pfzsr1~bc...: 575ms CPU time (Performance)

  • Sprint 1

    Unattributable: 363ms CPU time (Performance)

  • Sprint 3

    https://shotprep.io/_next/static/chunks/0pfzsr1~bc...: 33 KB unused (52%) (Performance)

  • Sprint 3

    https://us-assets.i.posthog.com/static/surveys.js?...: 25 KB unused (80%) (Performance)

  • Sprint 3

    https://us-assets.i.posthog.com/static/posthog-rec...: 25 KB unused (48%) (Performance)

  • Sprint 3

    https://shotprep.io/_next/static/chunks/10~x95jhs6...: 27 KB unused (39%) (Performance)

  • Sprint 2

    DNS resolution is slow (256 ms) (Infrastructure)

  • Sprint 3

    HTTP→HTTPS redirect uses 302 instead of 301 (Infrastructure)

  • Sprint 1

    Transfer efficiency: 74% (Sustainability)

  • Sprint 1

    https://shotprep.io/_next/static/chunks/10~x95jhs6...: 1316ms CPU time (Performance)

  • Sprint 1

    https://shotprep.io/: 806ms CPU time (Performance)

  • Sprint 1

    No canonical tag found (SEO)

  • Sprint 1

    HSTS is missing includeSubDomains (Security)

…and 4 more recommended item(s)

Send Feedback