Skip to content

Changes

https://derstandard.at
Compared to previous audit · 12 weeks ago View previous audit

Santa Clara, United States → Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

18
New issues
9
Resolved
21
score changes
CategoryPreviousCurrentChange
CompositeC (74)B (82) +8.000
PerformanceB (89)B (88) -1.000
SecurityD (56)B (81) +25.000
AccessibilityD (65)B (82) +17.000
SEOC (72)B (83) +11.000
InfrastructureB (87)B (80) -7.000
ComplianceB (85)C (74) -11.000
ContentD (68)C (73) +5.000
SustainabilityB (82)B (83) +1.000
MetricPreviousCurrentChange
Performance 78006600 -1200
Accessibility 96009600—
Best Practices 96009600—
SEO 92009200—
PWA 00—
Desktop Performance 87008100 -600
Desktop Accessibility 96009600—
Desktop Best Practices 96009600—
Desktop SEO 92009200—
FCP 3.02 s3.10 s +77 ms
LCP 3.31 s3.25 s -62 ms
TBT 162 ms528 ms +367 ms
CLS 0.1500.150—
Desktop FCP 898 ms1.26 s +362 ms
Desktop LCP 1.12 s1.48 s +362 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.2010.201—
TTFB †203 ms909 ms +705 ms
DNS †53 ms180 ms +127 ms
TLS †77 ms366 ms +290 ms
Connect †37 ms181 ms +145 ms
Total †203 ms909 ms +705 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 74
Projected
B 88
Actual
B 82
Close to projection — 6 points away
9 issues resolved since last audit
52 issues remaining
Resolving remaining issues could reach A

Estimate — actual results may vary

WARNING https://www.derstandard.at/consent/tcf/: 293ms CPU time performance
WARNING security.txt: Missing required 'Contact' field security
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING DNS resolution is slow (532 ms) infrastructure
WARNING 1 images missing explicit width/height content
WARNING SRI adoption: 0/8 third-party resources protected (0%) security
WARNING External script from data-dda7d24eb2.derstandard.at lacks integrity attribute security
WARNING <iframe> missing title attribute (src="") accessibility
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING 4 tap target(s) too small or too close to neighbors accessibility
WARNING Unattributable: 379ms CPU time performance
WARNING Third-party code accounts for 100% of page weight (514.4 KiB of 514.6 KiB) performance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING https://b.staticfiles.at/auth-js/auth.esm-SUXKCXBJ...: 54 KB unused (75%) performance
WARNING 2 render-blocking <script src> tag(s) without async/defer performance
WARNING https://spcmp.r53.derstandard.at/Notice.97af9.js: 566ms CPU time performance
WARNING Third-party scripts: 1444ms (79% of total) performance
WARNING https://spcmp.r53.derstandard.at/Notice.97af9.js: 64 KB unused (69%) performance
CRITICAL /.svn/entries is publicly accessible security
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
WARNING https://spcmp.r53.derstandard.at/Notice.8f529.js: 63 KB unused (69%) performance
WARNING Third-party scripts: 838ms (76% of total) performance
WARNING https://spcmp.r53.derstandard.at/Notice.8f529.js: 330ms CPU time performance
WARNING Unattributable: 258ms CPU time performance
WARNING https://b.staticfiles.at/auth-js/auth.esm-G2QHQGVL...: 52 KB unused (75%) performance
WARNING Third-party code accounts for 100% of page weight (502.6 KiB of 502.8 KiB) performance
WARNING /phpinfo.php is publicly accessible security
CRITICAL HSTS header is missing security
CRITICAL No Content-Security-Policy header found security
CRITICAL Content-Security-Policy header is missing security
WARNING Thin content — only 93 words seo
WARNING 2 redirects before reaching final URL infrastructure
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING X-Content-Type-Options header is missing security
WARNING No internal links found seo
WARNING Dead-end page — no outgoing internal links seo
WARNING X-Frame-Options header is missing security
WARNING No Open Graph meta tags found content
WARNING Referrer-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING External script from px.staticfiles.at lacks integrity attribute security
WARNING 47 third-party resources (100% of weight) performance
WARNING Page has 93 words — thin content seo
WARNING DMARC policy is none — monitoring only security
WARNING https://at.staticfiles.at/img/privacywall/backgrou... is missing width/height — may cause layout shift performance
WARNING Title is only 14 characters — consider expanding seo
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING External script from at.staticfiles.at lacks integrity attribute security
WARNING No Permissions-Policy header security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No canonical tag found seo
WARNING External script from b.staticfiles.at lacks integrity attribute security
WARNING https://spcmp.r53.derstandard.at/wrapperMessagingW...: 22 KB unused (44%) performance
WARNING No meta description tag found seo
WARNING No accessibility statement detected compliance
WARNING Permissions-Policy header is missing security
WARNING External link from at.staticfiles.at lacks integrity attribute security
WARNING External script from spcmp.r53.derstandard.at lacks integrity attribute security
WARNING No `<meta charset>` declaration in HTML seo
WARNING Transfer efficiency: 73% sustainability
WARNING 2 of 2 <nav> elements are unlabeled accessibility

HTTP headers unchanged

4 headers unchanged

+ Bootstrap UI frameworks

7 technologies unchanged

Looking ahead

+13 pts
B (82) Could reach A (95)
Security +19SEO +17Accessibility +13Performance +12Content +10Compliance +8Infrastructure +8Sustainability +4

Estimate — actual results may vary (52 issues to fix)

Website improvement report — Derstandard

April 21, 2026 → July 20, 2026

C B 74 → 82 +8 pts

9

Resolved

18

New issues

34

Still remaining

Financial summary

Investment delivered

€2,763 in development time

Investment remaining

€6,920 to complete the remaining items

Ongoing risk

€0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score74 (C)82 (B)+8
Performance89 (B)88 (B)-1
Security56 (D)81 (B)+25
Accessibility65 (D)82 (B)+17
SEO72 (C)83 (B)+11
Infrastructure87 (B)80 (B)-7
Compliance85 (B)74 (C)-11
Content68 (D)73 (C)+5
Sustainability82 (B)83 (B)+1

Resolved (9)

  • https://spcmp.r53.derstandard.at/Notice.8f529.js: 63 KB unused (69%) (Performance)

    → Page loads faster for users

  • Third-party scripts: 838ms (76% of total) (Performance)

    → Page loads faster for users

  • /.svn/entries is publicly accessible (Security)

    → Reduced attack surface for visitors

  • https://spcmp.r53.derstandard.at/Notice.8f529.js: 330ms CPU time (Performance)

    → Page loads faster for users

  • Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

    → Improved usability for assistive technology users

  • Unattributable: 258ms CPU time (Performance)

    → Page loads faster for users

  • https://b.staticfiles.at/auth-js/auth.esm-G2QHQGVL...: 52 KB unused (75%) (Performance)

    → Page loads faster for users

  • Third-party code accounts for 100% of page weight (502.6 KiB of 502.8 KiB) (Performance)

    → Page loads faster for users

  • /phpinfo.php is publicly accessible (Security)

    → Reduced attack surface for visitors

Recommended next steps (52)

  • Sprint 1

    HSTS header is missing (Security)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    https://www.derstandard.at/consent/tcf/: 293ms CPU time (Performance)

  • Sprint 1

    security.txt: Missing required 'Contact' field (Security)

  • Sprint 1

    Permissions-Policy header not set -- features default to allow-on-same-origin (Security)

  • Sprint 2

    DNS resolution is slow (532 ms) (Infrastructure)

  • Sprint 1

    1 images missing explicit width/height (Content)

  • Sprint 1

    SRI adoption: 0/8 third-party resources protected (0%) (Security)

  • Sprint 1

    External script from data-dda7d24eb2.derstandard.at lacks integrity attribute (Security)

  • Sprint 1

    <iframe> missing title attribute (src="") (Accessibility)

  • Sprint 1

    security.txt: Missing required 'Expires' field (RFC 9116) (Security)

  • Sprint 1

    4 tap target(s) too small or too close to neighbors (Accessibility)

  • Sprint 1

    Unattributable: 379ms CPU time (Performance)

  • Sprint 3

    Third-party code accounts for 100% of page weight (514.4 KiB of 514.6 KiB) (Performance)

…and 37 more recommended item(s)

Send Feedback