Global Performance
6/6 locations ✓Strong global performance — average 173ms across 6 locations, fastest from Amsterdam (59ms), slowest from Sao Paulo (540ms). No CDN detected. 1 location above the 500ms target.
Audit overview
Compliance needs attention; the rest of the categories are in good shape.
Fix Priority Matrix
5 findingsQuick Wins
2High impact, low effort — start here.
Strategic
3High impact, requires investment.
Easy Improvements
0Small gains, minimal effort.
Nothing in this quadrant — good news.
Deprioritize
0Low impact, high effort — do last.
Nothing in this quadrant — good news.
Screenshots
Top Priorities (5)
Content-Security-Policy header is missing
Without a CSP, a single XSS bug can exfiltrate everything your users type — including credentials.
No Content-Security-Policy header found
Without a CSP, a single XSS bug can exfiltrate everything users type — credentials, payment data, session tokens.
No <main> landmark found
Without a <main> landmark, screen-reader users can't skip past the navigation to the page content — every page starts with re-reading the menu.
11 link(s) open in a new tab without rel=noopener
target="_blank" without rel="noopener" lets the destination tab navigate the original via window.opener -- a reverse-tabnabbing phishing primitive.
Cross-Origin-Embedder-Policy header is missing
COEP enforces that all embedded resources opt-in to cross-origin embedding — required for cross-origin isolation features.
Business case
What fixing the audit's findings is worth -- and what ignoring them keeps costing.
Return on investment
¥2,596 investment → ¥18,236/month returns + CNY 50,000,000 risk avoided
Figures combine localized regulatory fine ceilings, search/conversion value priced against local CPC, and bandwidth waste estimates. Results depend on implementation quality and audience composition. Not legal or financial advice.
Conversion barriers
5 barrier(s) likely increasing bounce by ~17%.
- Page loads in 3.1sEvery additional 100ms above 2.5s costs conversions — you're 610ms over→ Target <2.5s LCP: defer non-critical scripts and optimize the hero image
- No Content-Security-Policy headerHigher XSS blast radius — one compromised script can exfiltrate the checkout form→ Ship a reporting-only CSP first, then enforce once violations are clean
- No structured dataNo rich-result eligibility in Google — lower SERP CTR vs competitors with stars and prices→ Add JSON-LD for your page type (Product, Article, FAQPage, LocalBusiness, …)
- No skip-to-content linkKeyboard and screen-reader users must tab through the entire header on every page→ Add a visible-on-focus <a href="#main">Skip to content</a> as the first focusable element
- 2 broken link(s) on the pageClicks land on 404s — trust drops and the session often ends→ Fix or remove the broken destinations surfaced on the Content tab
Preliminary CRO audit — each barrier links to the tab with detailed analysis.
Remediation cost
Start here for the best return on investment
Cost by category
Cost by effort level
Adjust assumptions
Team composition
Multiplier applied to dev hours to reflect QA, design, and PM overhead. Use Dev only for solo work; Full team for projects with formal review processes.
Rates reflect fully-loaded developer cost including overhead
Warning:Cost of inaction
Compliance Risk
¥50,000,000
- No privacy policy link detectedPIPL: CNY 100,000 – CNY 50,000,000
- 4 advertising/retargeting trackers detectedPIPL: CNY 100,000 – CNY 50,000,000
- Trackers detected but no cookie policy foundPIPL: CNY 100,000 – CNY 50,000,000
Bounce-Rate Cost
¥13,965 /mo
+16.9pp bounce · ~1,685 lost visitors/mo
CPC: CNY 8.29
Bandwidth Waste
¥0.73 /mo
1283.9 MB/mo × 0.571 CNY/GB
- Optimize transfer: save ~128 KB per page loadSaves ¥0.73/mo
Compliance figures represent the statutory maximum fine for the most severe triggered category, capped per regulation — not the sum of per-finding penalties. Based on published regulatory fine ranges. This is not legal advice.
Unique monthly visitors from your analytics
Purchases, signups, or key actions
Optional — for revenue estimation
more engaged visitors from reduced bounce
Fix 3 critical issues to capture this value
How this is calculated
Based on Google/Deloitte research ("Milliseconds Make Millions") showing a ~7% bounce rate increase per additional second of LCP above the 2.5s "Good" threshold.
Your site's LCP: → estimated after fixes.
These are estimates based on industry research — actual results vary
Your data stays in your browser — nothing is sent to our servers
Lighthouse
Mobile
First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.
2.59 s
Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.
3.11 s
Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.
178 ms
Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.
0.100
Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.
2.92 s
Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.
3.12 s
Desktop
First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.
692 ms
Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.
752 ms
Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.
0 ms
Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.
0.049
Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.
692 ms
Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.
754 ms
Categories
8Performance
All checks pass
Security
Content-Security-Policy header is missing
Accessibility
No <main> landmark found
SEO
All checks pass
Infrastructure
All checks pass
Compliance
All checks pass
Content
All checks pass
Sustainability
All checks pass
How you compare
Where this site stands against peers running the same stack.
Technology stack
Framer Sites 12.42.2, on Atlassian Bitbucket, hosted on Next.js
Stack Architecture
All Detected Technologies (124)
Next.js is a React framework for developing single page Javascript applications.
Remix is a React framework used for server-side rendering (SSR).
Bitbucket is a web-based version control repository hosting service for source code and development projects that use either Mercurial or Git revision control systems.
Dart is an open-source, general-purpose, object-oriented programming language developed by Google.
Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
PHP is a general-purpose scripting language used for web development.
Python is an interpreted and general-purpose programming language.
Ruby is an open-source object-oriented programming language.
TypeScript is an open-source language which builds on JavaScript by adding static type definitions.
Styled components is a CSS-in-JS styling framework that uses tagged template literals in JavaScript.
Framer is primarily a design and prototyping tool. It allows you to design interactive prototypes of websites and applications using production components and real data.
Oracle Application Express (APEX) is an enterprise low-code development platform from Oracle Corporation. APEX is a fully supported no-cost feature of Oracle Database.
Squarespace provides Software-as-a-Service (SaaS) for website building and hosting, and allows users to use pre-built website templates.
WHMCS is an automation platform that simplifies and automates all aspects of operating an online web hosting and domain registrar business.
Webflow is Software-as-a-Service (SaaS) for website building and hosting.
Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.
Magento is an open-source ecommerce platform written in PHP.
Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.
AddThis is a social bookmarking service that can be integrated into a website with the use of a web widget.
Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.
Alpine.js is a minimal framework for composing behavior directly in your markup.
Angular is a TypeScript-based open-source web application framework led by the Angular Team at Google.
Angular Material is a UI component library for Angular JS developers. Angular Material components assist in constructing attractive, consistent, and functional web pages and web applications.
Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.
Astro is a new JavaScript-based static site builder.
Babel is a free and open-source transcompiler for writing next generation JavaScript.
BackboneJS is a JavaScript library that allows to develop and structure the client side applications that run in a web browser.
Catberry.js is a framework for building isomorphic web applications that render on both the server and client sides using JavaScript.
CodeMirror is a JavaScript component that provides a code editor in the browser.
D3.js is a JavaScript library for producing dynamic, interactive data visualisations in web browsers.
Discourse is an open-source internet forum and mailing list management software application.
Django is a Python-based free and open-source web application framework.
Ember.js is a comprehensive JavaScript framework that simplifies the development of modern web applications by providing a powerful CLI, a built-in router, and a fast rendering engine.
ExtJS is a JavaScript framework developed by Sencha, designed for creating feature-rich, cross-platform web applications with a comprehensive set of UI components and tools.
Flowplayer is a scalable, performance-first HTML 5 video player and platform hosting solution for publishers, broadcasters and digital media.
Flutter is an open source framework by Google for building beautiful, natively compiled, multi-platform applications from a single codebase.
Font Awesome is a font and icon toolkit based on CSS and Less.
GSAP is an animation library that allows you to create animations with JavaScript.
Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
Hammer.js is a JavaScript library for adding touch gestures like swipe, pinch, and rotate to web applications.
Handlebars is a JavaScript library used to create reusable webpage templates.
Highlight.js is a JavaScript library for syntax highlighting, supporting 192 languages and 496 themes.
Invision Power Board is a commercial Internet forum software developed by Invision Community (formerly Invision Power Services).
Ionic is an open-source framework that enables developers to create cross-platform mobile, web, and desktop applications using web technologies like HTML, CSS, and JavaScript.
Knockout.js is basically a library written in JavaScript, based on MVVM pattern that helps developers build rich and responsive websites.
Magisto is a video management solution designed to help marketing professionals, agencies, and businesses of all sizes.
Monaco Editor is the code editor that powers VS Code. Monaco Editor is a tool in the text editor category of a tech stack.
MySQL is an open-source relational database management system.
Nextra is Next.js based static site generator.
Nuxt is a Vue framework for developing modern web applications.
Open Graph is a protocol that is used to integrate any web page into the social graph.
Prism is an extensible syntax highlighter.
Prototype is a JavaScript Framework that aims to ease development of web applications.
RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.
Redux is a predictable state container for JavaScript applications.
RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.
Rive is a real-time interactive design and animation tool.
Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.
RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.
Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.
SolidJS is a purely reactive library. It was designed from the ground up with a reactive core. It's influenced by reactive principles developed by previous libraries.
Svelte is a free and open-source front end compiler created by Rich Harris and maintained by the Svelte core team members.
Swagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate documentation from a Swagger-compliant API.
Tailwind is a utility-first CSS framework for rapidly building custom user interfaces.
Three.js is a cross-browser JavaScript library and application programming interface used to create and display animated 3D computer graphics in a web browser using WebGL.
Typekit is an online service which offers a subscription library of fonts.
USWDS is a design system for the federal government.
Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.
UptimeRobot is a web-based software that is designed to monitor the sites frequently to check whether any site is down owing to server problem or any bug in coding.
Vite is a rapid development tool for modern web projects.
VitePress is a Vite & Vue Powered Static Site Generator.
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
VuePress is a static site generator with a Vue-powered theming system, and a default theme for writing technical documentation.
WEN Themes Education Hub is a clean and elegant WordPress education theme.
Signify Dark is a free dark blog and corporate WordPress theme that is trendy, responsive, and dynamic by WEN Themes.
Waveform is a media player that supports various media formats, including audio, video, Youtube, and Vimeo, and includes a waveform visualisation feature, utilising Web Audio API and HTML5 Canvas technologies.
Weaver Xtreme is the orginal options-based WordPress theme.
Webpack is an open-source JavaScript module bundler.
core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.
crypto-js is a JavaScript library of crypto standards.
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
lit-element is a simple base class for creating web components that work in any web page with any framework. lit-element uses lit-html to render into shadow DOM, and adds API to manage properties and attributes.
lit-html is a simple, modern, safe, small and fast HTML templating library for JavaScript.
The web-vitals JavaScript is a tiny, modular library for measuring all the web vitals metrics on real users.
Flying Pages is a performance optimisation plugin for WordPress websites designed to reduce page load times and improve the user experience.
Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.
Google Analytics is a free web analytics service that tracks and reports website traffic.
HubSpot is a marketing and sales software that helps companies attract visitors, convert leads, and close customers.
HubSpot Chat is a tool where you can view, manage, and reply to incoming messages from multiple channels.
Microsoft Advertising is an online advertising platform developed by Microsoft.
Okta is a platform in the Identity-as-a-Service (IDaaS) category. Okta features include Provisioning, Single Sign-On (SSO), Active Directory (AD) and LDAP integration, the centralized de-provisioning of users, multi-factor authentication (MFA), mobile identity management.
Prebid is an open-source header bidding wrapper. It forms the core of our Nucleus ad platform, helping maximize revenue and performance for publishers.
Q4 is a SaaS platform that provides communication and intelligence solutions to investor relations professionals.
Quanta is web performance management solution. Quanta offers the only analytics solution specifically designed to enable business and technical members of ecommerce teams to collaborate effectively with the end in mind: use web performance to directly impact online revenue at all times.
Quantcast Measure is an audience insights and analytics tool.
Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.
Swagify allows you to upsell, cross-sell, and promote, by creating as many completely customizable offers as you want.
Umami is a self-hosted web analytics solution. It's goal is to provide a friendlier, privacy-focused alternative to Google Analytics and a free, open-sourced alternative to paid solutions.
WEBXPAY is a specialised online payment gateway that expedites buying and selling in a highly secured environment.
WP Google Map Plugin allows you to create google maps shortcodes to display responsive google maps on pages, widgets and custom templates.
WP Job Openings is a job listing and recruitment plugin for WordPress websites.
WP Maintenance Mode is a WordPress plugin which add a maintenance page to your blog.
WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.
WP-Statistics is a WordPress plugin which allows you to know your website statistics.
WPForms is a drag and drop WordPress form builder.
WPS Visitor Counter is a plugin for WordPress that counts the number of visitors to a website.
Yandex Direct is the platform designed for sponsored ad management.
Yandex.Messenger is an instant messaging application.
Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.
Coveo is an enterprise search and relevance platform that uses AI to enhance search capabilities and deliver personalized content across digital touchpoints.
Qstomizer app is the app for Shopify and Woocomerce that allows you to add a visual custom product designer to your shop.
Observations (4)
WordPress detected — review security configuration
WordPress sites benefit from: protecting wp-login.php, disabling XML-RPC if unused, restricting REST API access, and keeping all plugins and themes up to date. Check the Security tab for specific findings.
Shopify storefront detected
Shopify handles hosting, SSL, and CDN automatically. Performance optimizations focus on theme code, app scripts, and image optimization. Check the Performance tab for third-party script impact.
jQuery loaded alongside a modern framework
Both jQuery and Vue.js are loaded. Modern frameworks handle DOM manipulation natively. jQuery may be unnecessary and adds ~30KB to the page weight. Check the Performance tab for bundle analysis.
Complex technology stack detected
124 technologies identified. A complex stack increases maintenance burden and attack surface. Consider whether all components are actively needed.
Show your score
Drop this badge on your README, marketing site, or status page. It auto-updates every time the audit re-runs and links back to this report.
This badge auto-updates with your latest scan result.
[](https://beavercheck.com/sites/lantian.pub)<a href="https://beavercheck.com/sites/lantian.pub"><img src="https://beavercheck.com/badge?url=https%3A%2F%2Flantian.pub" alt="BeaverCheck Score"></a>https://beavercheck.com/badge?url=https%3A%2F%2Flantian.pubFix Plan
Three-week roadmap to ship the audit's findings, with one-click copy targets for your tracker.
Three-week fix plan
2 sprints · 7h total → projected A (93)
Sprint 1: Quick Wins
+3Highest ROI — low effort, high impact
- · No <main> landmark found
- · 11 link(s) open in a new tab without rel=noopener
Sprint 2: Core Fixes
+2Medium effort, high structural impact
- · Content-Security-Policy header is missing
- · No Content-Security-Policy header found
- · Cross-Origin-Embedder-Policy header is missing


