Changes
New York, United Stated → Madrid, Spain
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | A (94) | A (94) | — |
| Performance | A+ (97) | A+ (97) | — |
| Security | A (96) | A+ (97) | +1.000 |
| Accessibility | A (91) | A (91) | — |
| SEO | A+ (97) | A+ (97) | — |
| Infrastructure | A (90) | B (89) | -1.000 |
| Compliance | B (85) | B (85) | — |
| Content | A (95) | A (95) | — |
| Sustainability | A+ (98) | A+ (98) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 9500 | 7700 | -1800 |
| Accessibility | 9600 | 9600 | — |
| Best Practices | 10000 | 10000 | — |
| SEO | 9100 | 9100 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9900 | 9900 | — |
| Desktop Accessibility | 9600 | 9600 | — |
| Desktop Best Practices | 10000 | 10000 | — |
| Desktop SEO | 9200 | 9200 | — |
| FCP | 1.23 s | 2.26 s | +1.03 s |
| LCP | 2.90 s | 4.75 s | +1.86 s |
| TBT | 32 ms | 197 ms | +165 ms |
| CLS | 0.000 | 0.000 | — |
| Desktop FCP | 561 ms | 631 ms | +70 ms |
| Desktop LCP | 901 ms | 997 ms | +96 ms |
| Desktop TBT | 0 ms | 15 ms | +15 ms |
| Desktop CLS | 0.000 | 0.000 | — |
| TTFB † | 888 ms | 602 ms | -286 ms |
| DNS † | 35 ms | 42 ms | +7 ms |
| TLS † | 24 ms | 13 ms | -11 ms |
| Connect † | 17 ms | 2 ms | -15 ms |
| Total † | 1.04 s | 800 ms | -238 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
cross-origin-embedder-policy credentiallesscontent-security-policy default-src 'self'; script-src 'self' 'nonce-iUgfo/0CmqLzwl/+7aRkFg==' https:... → default-src 'self'; script-src 'self' 'nonce-tSH2NDcyTEHK0lhvQAqXEQ==' https:...link </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...14 headers unchanged
Technology stack unchanged
12 technologies unchanged
Looking ahead
+3 ptsEstimate — actual results may vary (10 issues to fix)
Website improvement report — Costdown
September 5, 2026 → September 6, 2026
3
Resolved
5
New issues
5
Still remaining
Financial summary
Investment delivered
€128 in development time
Investment remaining
€602 to complete the remaining items
Ongoing risk
€0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 94 (A) | 94 (A) | 0 |
| Performance | 97 (A+) | 97 (A+) | 0 |
| Security | 96 (A) | 97 (A+) | +1 |
| Accessibility | 91 (A) | 91 (A) | 0 |
| SEO | 97 (A+) | 97 (A+) | 0 |
| Infrastructure | 90 (A) | 89 (B) | -1 |
| Compliance | 85 (B) | 85 (B) | 0 |
| Content | 95 (A) | 95 (A) | 0 |
| Sustainability | 98 (A+) | 98 (A+) | 0 |
Resolved (3)
Cross-Origin-Embedder-Policy header is missing (Security)
→ Reduced attack surface for visitors
DMARC policy is none — monitoring only (Security)
→ Reduced attack surface for visitors
https://costdown.org/: 340ms CPU time (Performance)
→ Page loads faster for users
Recommended next steps (10)
- Sprint 1
Both www and non-www versions serve content (Infrastructure)
- Sprint 1
https://costdown.org/: 757ms CPU time (Performance)
- Sprint 1
Unattributable: 339ms CPU time (Performance)
- Sprint 1
https://costdown.org/_next/static/chunks/4bd1b696-...: 278ms CPU time (Performance)
- Sprint 1
https://costdown.org/_next/static/chunks/1255-fc6c...: 264ms CPU time (Performance)
- Sprint 2
1 render-blocking <script src> tag(s) without async/defer (Performance)
- Sprint 2
1 images significantly larger than display size (Content)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)
- Sprint 1
No accessibility statement detected (Compliance)
- Sprint 2
All 1 images use legacy formats (JPEG/PNG/GIF) (Content)