Skip to content

Changes

https://twitter.com
Compared to previous audit · 11 weeks ago View previous audit

Santa Clara, United States → Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

34
New issues
26
Resolved
25
score changes
CategoryPreviousCurrentChange
CompositeC (76)B (80) +4.000
PerformanceC (75)C (79) +4.000
SecurityC (75)B (85) +10.000
AccessibilityD (69)B (83) +14.000
SEOB (81)C (76) -5.000
InfrastructureC (75)C (79) +4.000
ComplianceB (86)D (69) -17.000
ContentC (77)B (84) +7.000
SustainabilityB (86)B (81) -5.000
MetricPreviousCurrentChange
Performance 52004000 -1200
Accessibility 89009300 +400
Best Practices 96009200 -400
SEO 1000010000—
PWA 00—
Desktop Performance 47005900 +1200
Desktop Accessibility 89008900—
Desktop Best Practices 96009200 -400
Desktop SEO 1000010000—
FCP 9.51 s1.87 s -7.64 s
LCP 13.31 s13.31 s—
TBT 238 ms3.68 s +3.44 s
CLS 0.0000.000—
Desktop FCP 1.19 s1.02 s -172 ms
Desktop LCP 2.86 s2.72 s -147 ms
Desktop TBT 353 ms491 ms +138 ms
Desktop CLS 0.2990.002 -0.297
TTFB †190 ms46 ms -143 ms
DNS †18 ms4 ms -13 ms
TLS †19 ms6 ms -14 ms
Connect †17 ms3 ms -14 ms
Total †190 ms47 ms -143 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 76
Projected
A+ 97
Actual
B 80
Fell short of projection
26 issues resolved since last audit
61 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL Page has only 42 words — nearly empty seo
WARNING 50 of 54 links are healthy content
WARNING Cookie 'personalization_id' is missing the HttpOnly flag security
WARNING https://x.com/: 383ms CPU time performance
WARNING https://abs.twimg.com/responsive-web/client-web/on...: 284ms CPU time performance
WARNING 3 font preload(s) missing `crossorigin` -- font will be downloaded twice performance
WARNING Cookie 'guest_id_ads' is missing the HttpOnly flag security
WARNING SRI adoption: 0/3 third-party resources protected (0%) security
WARNING https://abs.twimg.com/responsive-web/client-web/on...: 2994ms CPU time performance
WARNING Unattributable: 688ms CPU time performance
WARNING 92 third-party resources (100% of weight) performance
WARNING Dead-end page — no outgoing internal links seo
WARNING https://abs.twimg.com/responsive-web/client-web/ma...: 1929ms CPU time performance
WARNING Third-party scripts: 6442ms (90% of total) performance
WARNING Third-party code accounts for 100% of page weight (2.5 MiB of 2.5 MiB) performance
WARNING HSTS max-age is too short (300s, should be ≥ 31536000s) security
WARNING Page weight 2.5 MB exceeds 1 MB target by 1.5 MB performance
WARNING https://abs.twimg.com/responsive-web/client-web/ve...: 102 KB unused (50%) performance
WARNING https://abs.twimg.com/responsive-web/client-web/on...: 73 KB unused (35%) performance
WARNING 13 link(s) open in new tab without warning accessibility
WARNING JavaScript is 1.8 MB — consider code splitting or lazy loading performance
WARNING https://abs.twimg.com/responsive-web/client-web/mo...: 70 KB unused (99%) performance
WARNING Thin content — only 42 words seo
WARNING Cookie 'guest_id_marketing' is missing the HttpOnly flag security
WARNING 15 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING Page weighs 6.7 MB (2.5 MB transferred) performance
WARNING 4 tracking-shaped cross-site cookie(s): guest_id, guest_id_ads, guest_id_marketing, personalization_id compliance
WARNING Transfer efficiency: 67% sustainability
WARNING <iframe> missing title attribute (src="") accessibility
WARNING Total JS execution time is 7.1 s -- over the 3.5s budget performance
WARNING https://abs.twimg.com/responsive-web/client-web/ma...: 185 KB unused (50%) performance
WARNING security.txt has expired security
WARNING https://accounts.google.com/gsi/client: 72 KB unused (75%) performance
WARNING No internal links found seo
CRITICAL 38 of 46 links are healthy content
WARNING External script from appleid.cdn-apple.com lacks integrity attribute security
WARNING External link from accounts.google.com lacks integrity attribute security
WARNING External script from accounts.google.com lacks integrity attribute security
WARNING 21 link(s) open in new tab without warning accessibility
WARNING Broken link: https://video.twimg.com content
WARNING https://abs.twimg.com/responsive-web/client-web/ve...: 1452ms CPU time performance
WARNING https://abs.twimg.com/responsive-web/client-web/ma...: 148 KB unused (52%) performance
WARNING https://accounts.google.com/gsi/client: 69 KB unused (72%) performance
WARNING https://abs.twimg.com/responsive-web/client-web/i1...: 42 KB unused (23%) performance
WARNING No meta description tag found seo
WARNING Cookie '__cf_bm' has no SameSite attribute security
WARNING Unattributable: 639ms CPU time performance
WARNING Third-party code accounts for 100% of page weight (1.7 MiB of 1.7 MiB) performance
WARNING https://abs.twimg.com/responsive-web/client-web/ma...: 3049ms CPU time performance
WARNING https://abs.twimg.com/responsive-web/client-web/ve...: 103 KB unused (30%) performance
WARNING https://abs.twimg.com/responsive-web/client-web/mo...: 75 KB unused (99%) performance
WARNING Page weight 1.7 MB exceeds 1 MB target by 695 KB performance
WARNING Page has 153 words — thin content seo
WARNING No headings found accessibility
WARNING Transfer efficiency: 71% sustainability
WARNING Third-party scripts: 5156ms (89% of total) performance
WARNING JavaScript is 1.4 MB — consider code splitting or lazy loading performance
WARNING 69 third-party resources (100% of weight) performance
WARNING Thin content — only 153 words seo
WARNING Broken link: https://api.twitter.com content
CRITICAL 'unsafe-inline' found in script source security
CRITICAL 5 non-essential cookie(s) set without consent banner compliance
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals seo
CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL Viewport prevents user zooming compliance
CRITICAL robots.txt blocks all crawlers infrastructure
WARNING External script from abs.twimg.com lacks integrity attribute security
WARNING X-Powered-By header reveals technology stack security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING sitemap.xml contains invalid XML infrastructure
WARNING Broken link: https://api.x.com content
WARNING frame-ancestors directive is missing security
WARNING No Permissions-Policy header security
WARNING Permissions-Policy header is missing security
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Cookie 'guest_id' is missing the HttpOnly flag security
WARNING Broken link: https://abs.twimg.com content
WARNING Cookie 'ct0' is missing the HttpOnly flag security
WARNING Registrar lock is NOT enabled infrastructure
WARNING sitemap.xml is empty — no URLs found infrastructure
WARNING Broken link: https://pbs.twimg.com content
WARNING base-uri directive is missing security
WARNING Sitemap is empty -- 0 URLs listed seo
WARNING Missing og:image content
WARNING No canonical tag found seo
WARNING Referrer-Policy header is missing security
+ content-length 74
+ via 1.1 varnish
+ content-encoding gzip
+ accept-ranges bytes
− cf-cache-status DYNAMIC
− origin-cf-ray 9ed4b750793ff535-CDG
server
cloudflare envoy → envoy
strict-transport-security
max-age=631138519; includeSubdomains → max-age=300
cache-control
no-cache, no-store, must-revalidate, pre-check=0, post-check=0 → no-cache, private, must-revalidate, pre-check=0, post-check=0
x-transaction-id
c16e00b455361f96 → 04594b67b6bd0fb0
content-security-policy
connect-src 'self' blob: https://fonts.googleapis.com/css https://mapsresourc... → connect-src 'self' blob: https://fonts.googleapis.com/css https://mapsresourc...
last-modified
Thu, 16 Apr 2026 16:55:10 GMT → Thu, 09 Jul 2026 10:34:30 GMT
vary
Accept, accept-encoding → Accept
set-cookie
guest_id=v1%3A177635851021955677; Max-Age=34214400; Expires=Mon, 17 May 2027 ... → guest_id_marketing=v1%3A178359327013531344; Max-Age=63072000; Expires=Sat, 08...
x-response-time
10 → 11

12 headers unchanged

+ Fastly CDN
+ Priority Hints Performance
+ Varnish Caching
− Cloudflare Bot Management Security
− Apple Sign-in Authentication

20 technologies unchanged

Looking ahead

+19 pts
B (80) Could reach A+ (99)
SEO +24Compliance +22Infrastructure +21Performance +21Accessibility +17Content +16Security +15Sustainability +4

Estimate — actual results may vary (61 issues to fix)

Website improvement report — Twitter

April 16, 2026 → July 9, 2026

C B 76 → 80 +4 pts

26

Resolved

34

New issues

27

Still remaining

Financial summary

Investment delivered

€7,353 in development time

Investment remaining

€9,364 to complete the remaining items

Ongoing risk

€1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score76 (C)80 (B)+4
Performance75 (C)79 (C)+4
Security75 (C)85 (B)+10
Accessibility69 (D)83 (B)+14
SEO81 (B)76 (C)-5
Infrastructure75 (C)79 (C)+4
Compliance86 (B)69 (D)-17
Content77 (C)84 (B)+7
Sustainability86 (B)81 (B)-5

Resolved (26)

  • External script from appleid.cdn-apple.com lacks integrity attribute (Security)

    → Reduced attack surface for visitors

  • External link from accounts.google.com lacks integrity attribute (Security)

    → Reduced attack surface for visitors

  • External script from accounts.google.com lacks integrity attribute (Security)

    → Reduced attack surface for visitors

  • 21 link(s) open in new tab without warning (Accessibility)

    → Improved usability for assistive technology users

  • Broken link: https://video.twimg.com (Content)

    → Stronger social sharing and on-page quality

  • https://abs.twimg.com/responsive-web/client-web/ve...: 1452ms CPU time (Performance)

    → Page loads faster for users

  • https://abs.twimg.com/responsive-web/client-web/ma...: 148 KB unused (52%) (Performance)

    → Page loads faster for users

  • https://accounts.google.com/gsi/client: 69 KB unused (72%) (Performance)

    → Page loads faster for users

  • https://abs.twimg.com/responsive-web/client-web/i1...: 42 KB unused (23%) (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • Cookie '__cf_bm' has no SameSite attribute (Security)

    → Reduced attack surface for visitors

  • Unattributable: 639ms CPU time (Performance)

    → Page loads faster for users

  • Third-party code accounts for 100% of page weight (1.7 MiB of 1.7 MiB) (Performance)

    → Page loads faster for users

  • https://abs.twimg.com/responsive-web/client-web/ma...: 3049ms CPU time (Performance)

    → Page loads faster for users

  • https://abs.twimg.com/responsive-web/client-web/ve...: 103 KB unused (30%) (Performance)

    → Page loads faster for users

…and 11 more resolved issue(s)

Recommended next steps (61)

  • Sprint 3

    Page has only 42 words — nearly empty (SEO)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 2

    5 non-essential cookie(s) set without consent banner (Compliance)

  • Sprint 1

    Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

  • Sprint 1

    robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals (SEO)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    Viewport prevents user zooming (Compliance)

  • Sprint 1

    robots.txt blocks all crawlers (Infrastructure)

  • Sprint 1

    50 of 54 links are healthy (Content)

  • Sprint 1

    Cookie 'personalization_id' is missing the HttpOnly flag (Security)

  • Sprint 1

    https://x.com/: 383ms CPU time (Performance)

  • Sprint 1

    https://abs.twimg.com/responsive-web/client-web/on...: 284ms CPU time (Performance)

  • Sprint 2

    3 font preload(s) missing `crossorigin` -- font will be downloaded twice (Performance)

  • Sprint 1

    Cookie 'guest_id_ads' is missing the HttpOnly flag (Security)

  • Sprint 1

    SRI adoption: 0/3 third-party resources protected (0%) (Security)

…and 46 more recommended item(s)

Send Feedback