Skip to content

Changes

https://www.mossandmolt.com
Compared to previous audit · just now View previous audit
12
New issues
7
Resolved
13
score changes
CategoryPreviousCurrentChange
CompositeB (84)B (84)—
PerformanceB (89)B (89)—
SecurityC (78)C (78)—
AccessibilityC (79)C (79)—
SEOA (94)A (94)—
InfrastructureB (89)B (89)—
ComplianceB (82)B (82)—
ContentB (85)B (85)—
SustainabilityB (85)B (85)—
MetricPreviousCurrentChange
Performance 31002600 -500
Accessibility 95009500—
Best Practices 1000010000—
SEO 85008500—
PWA 00—
Desktop Performance 87008800 +100
Desktop Accessibility 92009200—
Desktop Best Practices 1000010000—
Desktop SEO 85008500—
FCP 5.15 s4.96 s -190 ms
LCP 12.15 s11.84 s -307 ms
TBT 390 ms560 ms +170 ms
CLS 0.3380.338—
Desktop FCP 797 ms732 ms -64 ms
Desktop LCP 1.36 s1.36 s—
Desktop TBT 0 ms8 ms +8 ms
Desktop CLS 0.0740.072 -0.002
TTFB †1.09 s177 ms -914 ms
DNS †76 ms51 ms -25 ms
TLS †34 ms24 ms -9 ms
Connect †17 ms17 ms +0 ms
Total †1.13 s216 ms -912 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING 22 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING https://cdn.shopify.com/extensions/01a18241-b12a-7...: 776ms CPU time performance
WARNING 0.71g CO2 — above the median website (0.60g) sustainability
WARNING 425 HTTP requests — consider bundling or reducing performance
WARNING Cookie 'localization' has no SameSite attribute security
WARNING Total JS execution time is 9.8 s -- over the 3.5s budget performance
WARNING 1 `@font-face` rule(s) without `font-display` -- causes FOIT performance
WARNING https://cdn.shopify.com/storefront/web-components/...: 287ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/b264bf420w2e16...: 660ms CPU time performance
WARNING https://www.mossandmolt.com/: 5872ms CPU time performance
WARNING Unattributable: 1461ms CPU time performance
WARNING Cookie 'cart_currency' has no SameSite attribute security
WARNING 421 HTTP requests — consider bundling or reducing performance
WARNING https://cdn.shopify.com/storefront/web-components/...: 280ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/b264bf420w2e16...: 664ms CPU time performance
WARNING https://cdn.shopify.com/extensions/01a18241-b12a-7...: 711ms CPU time performance
WARNING 0.70g CO2 — above the median website (0.60g) sustainability
WARNING https://www.mossandmolt.com/: 5404ms CPU time performance
WARNING Unattributable: 1396ms CPU time performance
CRITICAL 9 publicly-accessible JavaScript source map(s) security
CRITICAL Cookie 'localization' is missing the Secure flag security
CRITICAL Cookie 'cart_currency' is missing the Secure flag security
CRITICAL 2 image(s) missing alt attribute accessibility
WARNING Images are 1.0 MB — compress or use modern formats performance
WARNING Cookie 'localization' is missing the HttpOnly flag security
WARNING 1 link(s) open in a new tab without rel=noopener security
WARNING External script from cdn.shopify.com lacks integrity attribute security
WARNING 24 link(s) open in new tab without warning accessibility
WARNING 231 inline style attribute(s) detected security
WARNING Page weight 3.0 MB exceeds 1 MB target by 2.0 MB performance
WARNING default-src directive is missing security
WARNING GraphQL introspection enabled at /api/graphql security
WARNING No accessibility statement detected compliance
WARNING Heading level skipped: H2 → H4 (missing H3) accessibility
WARNING 5 unclassified cookie(s) set before any consent step compliance
WARNING Broken link: https://monorail-edge.shopifysvc.com content
WARNING https://www.mossandmolt.com/cdn/wpm/b264bf420w2e16...: 37 KB unused (44%) performance
WARNING 198 of 200 links are healthy content
WARNING 25 images missing explicit width/height content
WARNING 3 link(s) with generic text accessibility
WARNING Page weighs 5.4 MB (3.0 MB transferred) performance
WARNING Registrar lock is NOT enabled infrastructure
WARNING Broken link: https://shop.app content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING SRI adoption: 1/27 third-party resources protected (3%) security
WARNING External link from cdn.shopify.com lacks integrity attribute security
WARNING CNAME record at zone apex infrastructure
WARNING Missing required property "name" for Organization content
WARNING HSTS is enabled but max-age is short (7889238s, should be >= 31536000s) security
WARNING Referrer-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING JavaScript is 614 KB — consider code splitting or lazy loading performance
WARNING 2 Organization blocks on the page -- only one should describe the publishing entity content
WARNING Permissions-Policy header is missing security
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@264bf420w2e1681cap8d55857fm7d879f9c/cust…") accessibility
WARNING Cookie 'cart_currency' is missing the HttpOnly flag security
WARNING Missing og:image content
WARNING 2 images missing alt text content
WARNING base-uri directive is missing security
WARNING form-action directive is missing security
WARNING External script from shop.app lacks integrity attribute security
WARNING No DMARC record found security
WARNING No Permissions-Policy header security
WARNING No favicon.ico at site root accessibility
WARNING Total image weight: 1216 KB (1.2 MB) content
WARNING 3 above-fold image(s) marked loading="lazy" (LCP anti-pattern) content
− product-filtering-backend bitset_roaring
shopify-complexity-score
8840 → 190
etag
"page_cache:85653029085:IndexController:36d2c45562cee70f5f6d32d1d9509424:e8ce... → "page_cache:85653029085:IndexController:36d2c45562cee70f5f6d32d1d9509424:5798...
set-cookie
localization=US; path=/; expires=Thu, 28 Oct 2027 17:17:09 GMT; SameSite=Lax,... → localization=US; path=/; expires=Thu, 28 Oct 2027 17:17:59 GMT, cart_currency...
content-length
217456 → 217446
shopify-complexity-score-v2
884 → 19

20 headers unchanged

Technology stack unchanged

16 technologies unchanged

Looking ahead

+14 pts
B (84) Could reach A+ (98)
Security +22Accessibility +18Content +15Performance +11Compliance +8Infrastructure +8Sustainability +4

Estimate — actual results may vary (59 issues to fix)

Website improvement report — Mossandmolt

October 28, 2026 → October 28, 2026

B B 84 → 84 0 pts

7

Resolved

12

New issues

47

Still remaining

Financial summary

Investment delivered

€680 in development time

Investment remaining

€4,980 to complete the remaining items

Ongoing risk

€1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score84 (B)84 (B)0
Performance89 (B)89 (B)0
Security78 (C)78 (C)0
Accessibility79 (C)79 (C)0
SEO94 (A)94 (A)0
Infrastructure89 (B)89 (B)0
Compliance82 (B)82 (B)0
Content85 (B)85 (B)0
Sustainability85 (B)85 (B)0

Resolved (7)

  • 421 HTTP requests — consider bundling or reducing (Performance)

    → Page loads faster for users

  • https://cdn.shopify.com/storefront/web-components/...: 280ms CPU time (Performance)

    → Page loads faster for users

  • https://www.mossandmolt.com/cdn/wpm/b264bf420w2e16...: 664ms CPU time (Performance)

    → Page loads faster for users

  • https://cdn.shopify.com/extensions/01a18241-b12a-7...: 711ms CPU time (Performance)

    → Page loads faster for users

  • 0.70g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • https://www.mossandmolt.com/: 5404ms CPU time (Performance)

    → Page loads faster for users

  • Unattributable: 1396ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (59)

  • Sprint 1

    9 publicly-accessible JavaScript source map(s) (Security)

  • Sprint 1

    Cookie 'localization' is missing the Secure flag (Security)

  • Sprint 1

    Cookie 'cart_currency' is missing the Secure flag (Security)

  • Sprint 2

    2 image(s) missing alt attribute (Accessibility)

  • Sprint 1

    22 render-blocking stylesheet(s) -- recommended: <=3 (Performance)

  • Sprint 1

    https://cdn.shopify.com/extensions/01a18241-b12a-7...: 776ms CPU time (Performance)

  • Sprint 2

    0.71g CO2 — above the median website (0.60g) (Sustainability)

  • Sprint 2

    425 HTTP requests — consider bundling or reducing (Performance)

  • Sprint 1

    Cookie 'localization' has no SameSite attribute (Security)

  • Sprint 2

    Total JS execution time is 9.8 s -- over the 3.5s budget (Performance)

  • Sprint 2

    1 `@font-face` rule(s) without `font-display` -- causes FOIT (Performance)

  • Sprint 1

    https://cdn.shopify.com/storefront/web-components/...: 287ms CPU time (Performance)

  • Sprint 1

    https://www.mossandmolt.com/cdn/wpm/b264bf420w2e16...: 660ms CPU time (Performance)

  • Sprint 1

    https://www.mossandmolt.com/: 5872ms CPU time (Performance)

  • Sprint 1

    Unattributable: 1461ms CPU time (Performance)

…and 44 more recommended item(s)

Send Feedback