Skip to content

Changes

https://www.theverge.com
Compared to previous audit · 10 hours ago View previous audit
26
New issues
22
Resolved
17
score changes
CategoryPreviousCurrentChange
CompositeC (77)C (77)—
PerformanceC (75)C (74) -1.000
SecurityC (72)C (73) +1.000
AccessibilityC (75)C (77) +2.000
SEOA (91)A (92) +1.000
InfrastructureB (87)B (87)—
ComplianceD (67)D (67)—
ContentA (95)A (90) -5.000
SustainabilityC (75)C (71) -4.000
MetricPreviousCurrentChange
Performance 36003500 -100
Accessibility 97009700—
Best Practices 96009600—
SEO 92009200—
PWA 00—
Desktop Performance 85008000 -500
Desktop Accessibility 93009300—
Desktop Best Practices 96009600—
Desktop SEO 92009200—
FCP 2.20 s2.20 s—
LCP 8.65 s7.62 s -1.03 s
TBT 3.03 s3.40 s +369 ms
CLS 0.0050.007 +0.002
Desktop FCP 675 ms705 ms +30 ms
Desktop LCP 1.75 s1.80 s +49 ms
Desktop TBT 186 ms222 ms +36 ms
Desktop CLS 0.0010.022 +0.021
TTFB 67 ms67 ms—
DNS 63 ms63 ms—
TLS †2 ms2 ms +0 ms
Connect †0 ms0 ms -0 ms
Total 69 ms69 ms—

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Page weighs 16.4 MB (6.9 MB transferred) performance
WARNING 201 HTTP requests — consider bundling or reducing performance
WARNING Total JS execution time is 14.5 s -- over the 3.5s budget performance
WARNING 200 inline style attribute(s) detected security
WARNING Images are 2.6 MB — compress or use modern formats performance
WARNING 3 advertising/retargeting trackers detected compliance
WARNING 197 of 200 links are healthy content
WARNING https://www.theverge.com/_next/static/chunks/frame...: 2278ms CPU time performance
WARNING 133 images missing explicit width/height content
WARNING Third-party scripts: 7431ms (51% of total) performance
WARNING 15 link(s) open in new tab without warning accessibility
WARNING Unattributable: 1722ms CPU time performance
WARNING 1.64g CO2 — above the median website (0.60g) sustainability
WARNING Privacy Policy not detected compliance
WARNING JavaScript is 3.4 MB — consider code splitting or lazy loading performance
WARNING Third-party code accounts for 69% of page weight (4.8 MiB of 6.9 MiB) performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING https://www.gstatic.com/recaptcha/releases/U5VsmTD...: 174 KB unused (48%) performance
WARNING 99 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING https://www.theverge.com/_next/static/chunks/pages...: 2982ms CPU time performance
WARNING 153 third-party resources (69% of weight) performance
WARNING OpenAPI / Swagger spec exposed at /swagger.json security
WARNING https://securepubads.g.doubleclick.net/pagead/mana...: 1364ms CPU time performance
WARNING https://cdn.concert.io/lib/concert-ads/v2-latest/c...: 1106ms CPU time performance
WARNING Page weight 6.9 MB exceeds 1 MB target by 5.9 MB performance
WARNING 1.64g CO2 per page view sustainability
CRITICAL Domain expires in 22 days infrastructure
CRITICAL 196 of 200 links are healthy content
CRITICAL Page weighs 13.1 MB (4.3 MB transferred) performance
WARNING Third-party code accounts for 51% of page weight (2.2 MiB of 4.3 MiB) performance
WARNING 1.02g CO2 per page view sustainability
WARNING 136 third-party resources (51% of weight) performance
WARNING 1 heading(s) are over 120 characters -- likely a misformatted paragraph accessibility
WARNING Unattributable: 1583ms CPU time performance
WARNING https://www.theverge.com/: 1178ms CPU time performance
WARNING https://securepubads.g.doubleclick.net/pagead/mana...: 977ms CPU time performance
WARNING Broken link: https://platform.theverge.com/wp-content/uploads/sites/2/... content
WARNING 13 link(s) open in new tab without warning accessibility
WARNING JavaScript is 3.2 MB — consider code splitting or lazy loading performance
WARNING https://www.theverge.com/_next/static/chunks/frame...: 2165ms CPU time performance
WARNING External script from ep2.adtrafficquality.google lacks integrity attribute security
WARNING https://www.theverge.com/_next/static/chunks/pages...: 2757ms CPU time performance
WARNING 184 HTTP requests — consider bundling or reducing performance
WARNING https://www.gstatic.com/recaptcha/releases/U5VsmTD...: 175 KB unused (48%) performance
WARNING 1.02g CO2 — above the median website (0.60g) sustainability
WARNING 201 inline style attribute(s) detected security
WARNING Transfer efficiency: 68% sustainability
WARNING Page weight 4.3 MB exceeds 1 MB target by 3.3 MB performance
CRITICAL og:image is not reachable content
CRITICAL Cookie '_vm_consent_type' is missing the Secure flag security
CRITICAL 1 control(s) without accessible label accessibility
CRITICAL No H1 heading found accessibility
CRITICAL 2 non-essential cookie(s) set without consent banner compliance
WARNING default-src directive is missing security
WARNING X-Content-Type-Options header is missing security
WARNING External script from cdn.cookielaw.org lacks integrity attribute security
WARNING External script from cdnjs.cloudflare.com lacks integrity attribute security
WARNING https://www.theverge.com/metrics/gtm.js?id=GTM-WQ5...: 222 KB unused (32%) performance
WARNING https://www.theverge.com/_next/static/chunks/pages...: 169 KB unused (38%) performance
WARNING Title is only 3 characters — consider expanding seo
WARNING Broken link: https://aax.amazon-adsystem.com content
WARNING External script from cdn.concert.io lacks integrity attribute security
WARNING External script from pub.doubleverify.com lacks integrity attribute security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Cookie 'vmidv1' is missing the HttpOnly flag security
WARNING 7 link(s) with generic text accessibility
WARNING base-uri directive is missing security
WARNING No DMARC record found security
WARNING Registrar lock is NOT enabled infrastructure
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING External script from config.aps.amazon-adsystem.com lacks integrity attribute security
WARNING External script from www.googletagservices.com lacks integrity attribute security
WARNING X-Powered-By header reveals technology stack security
WARNING External script from client.aps.amazon-adsystem.com lacks integrity attribute security
WARNING External script from www.google.com lacks integrity attribute security
WARNING External script from tag.wknd.ai lacks integrity attribute security
WARNING External script from secure.cdn.fastclick.net lacks integrity attribute security
WARNING Cookie '_vm_consent_type' is missing the HttpOnly flag security
WARNING External script from securepubads.g.doubleclick.net lacks integrity attribute security
WARNING CNAME record at zone apex infrastructure
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING External script from cdn.bullwhip.cloud lacks integrity attribute security
WARNING External script from btloader.com lacks integrity attribute security
WARNING External script from theverge.coral.coralproject.net lacks integrity attribute security
WARNING Broken link: https://securepubads.g.doubleclick.net content
WARNING HSTS is missing includeSubDomains security
WARNING No Permissions-Policy header security
WARNING Broken link: https://pagead2.googlesyndication.com content
WARNING No SPF record found security
WARNING <iframe> missing title attribute (src="") accessibility
WARNING form-action directive is missing security
WARNING 2 link(s) open in a new tab without rel=noopener security
WARNING X-Frame-Options header is missing security
WARNING Referrer-Policy header is missing security
WARNING Permissions-Policy header is missing security
WARNING Cookie '_vm_consent_type' has no SameSite attribute security
WARNING External script from assets.zephr.com lacks integrity attribute security
WARNING External script from apps.voxmedia.com lacks integrity attribute security
set-cookie
vmidv1=bf4515e3-1ad0-4715-b39d-65cd73b91406;Expires=Wed, 07 May 2031 21:26:43... → vmidv1=c0777750-6c78-4bcb-b87b-81cc0563fb9d;Expires=Thu, 08 May 2031 08:21:27...
etag
"12sitob6smgm4av" → "8v31v0yikhlxpu"

11 headers unchanged

Technology stack unchanged

26 technologies unchanged

Looking ahead

+20 pts
C (77) Could reach A+ (97)
Security +27Performance +26Accessibility +22Compliance +18Content +10Infrastructure +8Sustainability +8SEO +4

Estimate — actual results may vary (76 issues to fix)

Website improvement report — Theverge

May 8, 2026 → May 9, 2026

C C 77 → 77 0 pts

22

Resolved

26

New issues

50

Still remaining

Financial summary

Investment delivered

$4,350 in development time

Investment remaining

$9,992 to complete the remaining items

Ongoing risk

$2/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score77 (C)77 (C)0
Performance75 (C)74 (C)-1
Security72 (C)73 (C)+1
Accessibility75 (C)77 (C)+2
SEO91 (A)92 (A)+1
Infrastructure87 (B)87 (B)0
Compliance67 (D)67 (D)0
Content95 (A)90 (A)-5
Sustainability75 (C)71 (C)-4

Resolved (22)

  • Third-party code accounts for 51% of page weight (2.2 MiB of 4.3 MiB) (Performance)

    → Page loads faster for users

  • Domain expires in 22 days (Infrastructure)

    → More reliable delivery

  • 1.02g CO2 per page view (Sustainability)

    → Lower carbon footprint per page view

  • 136 third-party resources (51% of weight) (Performance)

    → Page loads faster for users

  • 1 heading(s) are over 120 characters -- likely a misformatted paragraph (Accessibility)

    → Improved usability for assistive technology users

  • Unattributable: 1583ms CPU time (Performance)

    → Page loads faster for users

  • https://www.theverge.com/: 1178ms CPU time (Performance)

    → Page loads faster for users

  • https://securepubads.g.doubleclick.net/pagead/mana...: 977ms CPU time (Performance)

    → Page loads faster for users

  • Broken link: https://platform.theverge.com/wp-content/uploads/sites/2/... (Content)

    → Stronger social sharing and on-page quality

  • 13 link(s) open in new tab without warning (Accessibility)

    → Improved usability for assistive technology users

  • JavaScript is 3.2 MB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • https://www.theverge.com/_next/static/chunks/frame...: 2165ms CPU time (Performance)

    → Page loads faster for users

  • External script from ep2.adtrafficquality.google lacks integrity attribute (Security)

    → Reduced attack surface for visitors

  • https://www.theverge.com/_next/static/chunks/pages...: 2757ms CPU time (Performance)

    → Page loads faster for users

  • 196 of 200 links are healthy (Content)

    → Stronger social sharing and on-page quality

…and 7 more resolved issue(s)

Recommended next steps (76)

  • Sprint 1

    Page weighs 16.4 MB (6.9 MB transferred) (Performance)

  • Sprint 1

    og:image is not reachable (Content)

  • Sprint 1

    Cookie '_vm_consent_type' is missing the Secure flag (Security)

  • Sprint 2

    1 control(s) without accessible label (Accessibility)

  • Sprint 1

    No H1 heading found (Accessibility)

  • Sprint 2

    2 non-essential cookie(s) set without consent banner (Compliance)

  • Sprint 2

    201 HTTP requests — consider bundling or reducing (Performance)

  • Sprint 2

    Total JS execution time is 14.5 s -- over the 3.5s budget (Performance)

  • Sprint 2

    200 inline style attribute(s) detected (Security)

  • Sprint 2

    Images are 2.6 MB — compress or use modern formats (Performance)

  • Sprint 2

    3 advertising/retargeting trackers detected (Compliance)

  • Sprint 1

    197 of 200 links are healthy (Content)

  • Sprint 1

    https://www.theverge.com/_next/static/chunks/frame...: 2278ms CPU time (Performance)

  • Sprint 1

    133 images missing explicit width/height (Content)

  • Sprint 3

    Third-party scripts: 7431ms (51% of total) (Performance)

…and 61 more recommended item(s)

Send Feedback