Changes
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | B (86) | B (87) | +1.000 |
| Performance | A (96) | A (96) | — |
| Security | B (83) | B (87) | +4.000 |
| Accessibility | C (78) | C (78) | — |
| SEO | A (93) | A (93) | — |
| Infrastructure | A (92) | A (92) | — |
| Compliance | D (65) | D (65) | — |
| Content | B (82) | B (85) | +3.000 |
| Sustainability | A (93) | A (93) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 7700 | 7700 | — |
| Accessibility | 10000 | 10000 | — |
| Best Practices | 10000 | 10000 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9600 | 9600 | — |
| Desktop Accessibility | 10000 | 10000 | — |
| Desktop Best Practices | 10000 | 10000 | — |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 947 ms | 830 ms | -118 ms |
| LCP | 6.45 s | 6.50 s | — |
| TBT | 59 ms | 44 ms | -15 ms |
| CLS | 0.002 | 0.002 | +0.000 |
| Desktop FCP | 376 ms | 363 ms | -12 ms |
| Desktop LCP | 1.34 s | 1.34 s | — |
| Desktop TBT | 0 ms | 0 ms | — |
| Desktop CLS | 0.008 | 0.008 | — |
| TTFB † | 135 ms | 120 ms | -15 ms |
| DNS † | 38 ms | 42 ms | +4 ms |
| TLS † | 26 ms | 25 ms | -0 ms |
| Connect † | 16 ms | 17 ms | +0 ms |
| Total † | 136 ms | 121 ms | -15 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
referrer-policy strict-origin-when-cross-originx-frame-options SAMEORIGINx-content-type-options nosniffpermissions-policy camera=(), microphone=(), geolocation=()strict-transport-security max-age=25920006 headers unchanged
4 technologies unchanged
Looking ahead
+10 ptsEstimate — actual results may vary (27 issues to fix)
Website improvement report — Nivasvisualstudio
November 7, 2026 → November 7, 2026
11
Resolved
7
New issues
20
Still remaining
Financial summary
Investment delivered
₹11,500 in development time
Investment remaining
₹64,750 to complete the remaining items
Ongoing risk
₹22/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 86 (B) | 87 (B) | +1 |
| Performance | 96 (A) | 96 (A) | 0 |
| Security | 83 (B) | 87 (B) | +4 |
| Accessibility | 78 (C) | 78 (C) | 0 |
| SEO | 93 (A) | 93 (A) | 0 |
| Infrastructure | 92 (A) | 92 (A) | 0 |
| Compliance | 65 (D) | 65 (D) | 0 |
| Content | 82 (B) | 85 (B) | +3 |
| Sustainability | 93 (A) | 93 (A) | 0 |
Resolved (11)
/.git/config is publicly accessible (Security)
→ Reduced attack surface for visitors
HSTS header is missing (Security)
→ Reduced attack surface for visitors
Page weight 1.1 MB exceeds 1 MB target by 62 KB (Performance)
→ Page loads faster for users
No Permissions-Policy header (Security)
→ Reduced attack surface for visitors
X-Frame-Options header is missing (Security)
→ Reduced attack surface for visitors
1 images significantly larger than display size (Content)
→ Stronger social sharing and on-page quality
Referrer-Policy header is missing (Security)
→ Reduced attack surface for visitors
Unattributable: 311ms CPU time (Performance)
→ Page loads faster for users
Permissions-Policy header is missing (Security)
→ Reduced attack surface for visitors
https://nivasvisualstudio.in/: 605ms CPU time (Performance)
→ Page loads faster for users
X-Content-Type-Options header is missing (Security)
→ Reduced attack surface for visitors
Recommended next steps (27)
- Sprint 1
No <main> landmark found (Accessibility)
- Sprint 2
Content-Security-Policy header is missing (Security)
- Sprint 1
HSTS is enabled but max-age is short (2592000s, should be >= 31536000s) (Security)
- Sprint 1
Permissions-Policy covers 3/10 high-risk features (30%) (Security)
- Sprint 2
Page weight 1.1 MB exceeds 1 MB target by 63 KB (Performance)
- Sprint 2
Trackers detected but no cookie policy found (Compliance)
- Sprint 2
Trackers detected but no privacy policy found (Compliance)
- Sprint 1
https://nivasvisualstudio.in/: 551ms CPU time (Performance)
- Sprint 2
1 render-blocking <script src> tag(s) without async/defer (Performance)
- Sprint 2
All 5 images use legacy formats (JPEG/PNG/GIF) (Content)
- Sprint 2
Cross-Origin-Embedder-Policy header is missing (Security)
- Sprint 2
No DMARC record found (Security)
- Sprint 1
Canonical does not match final URL (https://nivasvisualstudio.in) (SEO)
- Sprint 3
Thin content — only 61 words (SEO)
- Sprint 1
Cross-Origin-Opener-Policy header is missing (Security)
…and 12 more recommended item(s)