Skip to content

Changes

https://costdown.org
Compared to previous audit · 3 minutes ago View previous audit

Santa Clara, United States Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

5
New issues
1
Resolved
13
score changes
CategoryPreviousCurrentChange
CompositeB (89)B (89)
PerformanceA+ (97)A (96) -1.000
SecurityB (89)B (89)
AccessibilityA (90)A (90)
SEOA (95)A+ (97) +2.000
InfrastructureA (90)B (83) -7.000
ComplianceD (63)D (63)
ContentC (75)C (75)
SustainabilityA+ (98)A+ (98)
MetricPreviousCurrentChange
Performance 90006500 -2500
Accessibility 96009600
Best Practices 1000010000
SEO 91009100
PWA 00
Desktop Performance 98009800
Desktop Accessibility 96009600
Desktop Best Practices 1000010000
Desktop SEO 92009200
FCP 1.10 s2.65 s +1.56 s
LCP 3.59 s5.18 s +1.59 s
TBT 77 ms360 ms +284 ms
CLS 0.0000.000
Desktop FCP 585 ms591 ms +6 ms
Desktop LCP 1.09 s1.09 s
Desktop TBT 0 ms0 ms
Desktop CLS 0.0000.000
TTFB 375 ms1.05 s +679 ms
DNS 30 ms7 ms -23 ms
TLS 22 ms15 ms -7 ms
Connect 17 ms4 ms -12 ms
Total 443 ms1.22 s +776 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING Unattributable: 293ms CPU time performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 1109ms CPU time performance
WARNING https://costdown.org/: 549ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING https://costdown.org/: 360ms CPU time performance
CRITICAL 'unsafe-inline' found in script source security
CRITICAL Both www and non-www versions serve content infrastructure
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Permissions-Policy header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No SPF record found security
WARNING No Open Graph meta tags found content
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING No DMARC record found security
WARNING Registrar lock is NOT enabled infrastructure
WARNING Privacy Policy not detected compliance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING No privacy policy link detected compliance
WARNING No accessibility statement detected compliance
WARNING Terms of Service not detected compliance
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING X-Powered-By header reveals technology stack security
WARNING No Permissions-Policy header security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility

HTTP headers unchanged

15 headers unchanged

Technology stack unchanged

10 technologies unchanged

Looking ahead

+7 pts
B (89) Could reach A (96)
Compliance +16Infrastructure +14Security +11Content +8Accessibility +4Performance +4

Estimate — actual results may vary (24 issues to fix)

Website improvement report — Costdown

August 27, 2026 → August 27, 2026

B B 89 → 89 0 pts

1

Resolved

5

New issues

19

Still remaining

Financial summary

Investment remaining

₫13,350,000 to complete the remaining items

Ongoing risk

₫3,437/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score89 (B)89 (B)0
Performance97 (A+)96 (A)-1
Security89 (B)89 (B)0
Accessibility90 (A)90 (A)0
SEO95 (A)97 (A+)+2
Infrastructure90 (A)83 (B)-7
Compliance63 (D)63 (D)0
Content75 (C)75 (C)0
Sustainability98 (A+)98 (A+)0

Resolved (1)

  • https://costdown.org/: 360ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (24)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    Unattributable: 293ms CPU time (Performance)

  • Sprint 2

    IPv6 DNS records exist but server is not reachable (Infrastructure)

  • Sprint 1

    https://costdown.org/_next/static/chunks/1255-fc6c...: 1109ms CPU time (Performance)

  • Sprint 1

    https://costdown.org/: 549ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 1

    Permissions-Policy header is missing (Security)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 1

    No Open Graph meta tags found (Content)

  • Sprint 1

    Permissions-Policy header not set -- features default to allow-on-same-origin (Security)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

…and 9 more recommended item(s)

Send Feedback