Skip to content
https://lantian.pub Export & share
Scanned
2026-07-24 02:43 UTC
Worker
🇺🇸 New York
Duration
47.00s
Vs prev

Global Performance

6/6 locations

Strong global performance — average 173ms across 6 locations, fastest from Amsterdam (59ms), slowest from Sao Paulo (540ms). No CDN detected. 1 location above the 500ms target.

United Stated - New York
Full audit
62ms
DNS 11ms · TLS 25ms
United States - Santa Clara
78ms
DNS 15ms · TLS 38ms
Singapore - Singapore
135ms
DNS 7ms · TLS 50ms
Spain - Madrid
162ms
DNS 42ms · TLS 44ms
Netherlands - Amsterdam
59ms
DNS 9ms · TLS 22ms
Brazil - Sao Paulo
540ms
DNS 112ms · TLS 148ms
CDN: No CDN · Avg TTFB: 173ms · Cache: private

Audit overview

Compliance needs attention; the rest of the categories are in good shape.

Fix Priority Matrix

5 findings

Quick Wins

2

High impact, low effort — start here.

Strategic

3

High impact, requires investment.

Easy Improvements

0

Small gains, minimal effort.

Nothing in this quadrant — good news.

Deprioritize

0

Low impact, high effort — do last.

Nothing in this quadrant — good news.

← Low effort High effort →

Screenshots

DESKTOP + MOBILE
Desktop
Desktop screenshot
Mobile
Mobile screenshot

Top Priorities (5)

Sorted by impact
Critical: 1

Content-Security-Policy header is missing

Without a CSP, a single XSS bug can exfiltrate everything your users type — including credentials.

Security › Security Headers
Critical: 2

No Content-Security-Policy header found

Without a CSP, a single XSS bug can exfiltrate everything users type — credentials, payment data, session tokens.

Security › Content Security Policy
Critical: 3

No <main> landmark found

Without a <main> landmark, screen-reader users can't skip past the navigation to the page content — every page starts with re-reading the menu.

Accessibility › Landmark Structure
Warning: 4

11 link(s) open in a new tab without rel=noopener

target="_blank" without rel="noopener" lets the destination tab navigate the original via window.opener -- a reverse-tabnabbing phishing primitive.

Security › Cross-Origin Tab Safety
Warning: 5

Cross-Origin-Embedder-Policy header is missing

COEP enforces that all embedded resources opt-in to cross-origin embedding — required for cross-origin isolation features.

Security › Security Headers
What fixing these means. Your site is in great shape. The remaining improvements are refinements rather than critical fixes. Addressing the critical issues below would have the most immediate impact on your user trust.
4 security gaps detected — browsers may warn visitors about your site.
1 accessibility issue excludes users who rely on assistive technology.

Business case

What fixing the audit's findings is worth -- and what ignoring them keeps costing.

Return on investment

¥2,596 investment → ¥18,236/month returns + CNY 50,000,000 risk avoided

Investment
¥2,596
7.4 h · 5 findings
Monthly returns
¥18,236
¥218,831/yr
Payback
0.1 mo
+8330% Y1
Regulatory risk avoided CNY 50,000,000
Or — fix only the top 3 findings
¥2,1580.1 mo payback · +10039% Y1
Optimistic scenario assuming the top 3 capture most of the upside. Real-world recovery typically falls between this projection and the full-fix ROI above.
¥146 — in quick wins — start here for the fastest payback

Figures combine localized regulatory fine ceilings, search/conversion value priced against local CPC, and bandwidth waste estimates. Results depend on implementation quality and audience composition. Not legal or financial advice.

Conversion barriers

5 barrier(s) likely increasing bounce by ~17%.

Barriers
5
5 warn
Bounce delta
+17pp
added vs baseline
Score
85
A
Speed
1
Trust
1
Usability
0
Content
1
Nav
2
  • Page loads in 3.1s
    Every additional 100ms above 2.5s costs conversions — you're 610ms over
    → Target <2.5s LCP: defer non-critical scripts and optimize the hero image
  • No Content-Security-Policy header
    Higher XSS blast radius — one compromised script can exfiltrate the checkout form
    → Ship a reporting-only CSP first, then enforce once violations are clean
  • No structured data
    No rich-result eligibility in Google — lower SERP CTR vs competitors with stars and prices
    → Add JSON-LD for your page type (Product, Article, FAQPage, LocalBusiness, …)
  • No skip-to-content link
    Keyboard and screen-reader users must tab through the entire header on every page
    → Add a visible-on-focus <a href="#main">Skip to content</a> as the first focusable element
  • 2 broken link(s) on the page
    Clicks land on 404s — trust drops and the session often ends
    → Fix or remove the broken destinations surfaced on the Content tab

Preliminary CRO audit — each barrier links to the tab with detailed analysis.

Remediation cost

¥2,596 7.4 developer hours at ¥350/hr
Quick wins
¥146 2 fixes in ~25 minutes

Start here for the best return on investment

Cost by category

Cost by effort level

Adjust assumptions

Team composition

Multiplier applied to dev hours to reflect QA, design, and PM overhead. Use Dev only for solo work; Full team for projects with formal review processes.

¥ /hr

Rates reflect fully-loaded developer cost including overhead

How developer rates are sourced

Warning:Cost of inaction

¥13,966 / month at risk ~¥167,589 / year if left unfixed
Default is 10,000. Use your own number for accurate $-figures.

Compliance Risk

¥50,000,000

PIPL
  • No privacy policy link detected
    PIPL: CNY 100,000 – CNY 50,000,000
  • 4 advertising/retargeting trackers detected
    PIPL: CNY 100,000 – CNY 50,000,000
  • Trackers detected but no cookie policy found
    PIPL: CNY 100,000 – CNY 50,000,000

Bounce-Rate Cost

¥13,965 /mo

+16.9pp bounce · ~1,685 lost visitors/mo

CPC: CNY 8.29

Bandwidth Waste

¥0.73 /mo

1283.9 MB/mo × 0.571 CNY/GB

  • Optimize transfer: save ~128 KB per page load
    Saves ¥0.73/mo

Compliance figures represent the statutory maximum fine for the most severe triggered category, capped per regulation — not the sum of per-finding penalties. Based on published regulatory fine ranges. This is not legal advice.

Compliance methodology · SEO assumptions · Bandwidth model

Your performance is already good — improvements may show diminishing returns

Unique monthly visitors from your analytics

Purchases, signups, or key actions

Optional — for revenue estimation

additional conversions/month

more engaged visitors from reduced bounce

potential monthly revenue
Current bounce (est.)
After fixes (est.)
Estimated bounce reduction

Fix 3 critical issues to capture this value

How this is calculated

Based on Google/Deloitte research ("Milliseconds Make Millions") showing a ~7% bounce rate increase per additional second of LCP above the 2.5s "Good" threshold.

Your site's LCP: → estimated after fixes.

These are estimates based on industry research — actual results vary

Bounce-rate model & assumptions

Your data stays in your browser — nothing is sent to our servers

Lighthouse

Mobile

85
Performance Overall performance score (0–100) based on Core Web Vitals and other metrics. 90+ is good.
92
Accessibility Measures how accessible the page is for users with disabilities. Checks color contrast, ARIA labels, and semantic HTML.
100
Best Practices Checks for modern web development best practices including HTTPS, no console errors, and secure JavaScript.
100
SEO Measures basic SEO optimizations: meta tags, crawlability, link text, and mobile friendliness.

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

2.59 s

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

3.11 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

178 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.100

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

2.92 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

3.12 s

Desktop

99
Performance Overall performance score (0–100) based on Core Web Vitals and other metrics. 90+ is good.
94
Accessibility Measures how accessible the page is for users with disabilities. Checks color contrast, ARIA labels, and semantic HTML.
100
Best Practices Checks for modern web development best practices including HTTPS, no console errors, and secure JavaScript.
100
SEO Measures basic SEO optimizations: meta tags, crawlability, link text, and mobile friendliness.

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

692 ms

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

752 ms

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

0 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.049

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

692 ms

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

754 ms

Categories

8
Avg score 86.4

How you compare

Where this site stands against peers running the same stack.

Magento · 5 peers
You 88
·
Avg 74
+14 above average
0 50 100
Better than 80% of Magento sites See full Magento benchmark →
Shopify · 78 peers
You 88
·
Avg 74
+14 above average
0 50 100
Better than 98% of Shopify sites See full Shopify benchmark →

Technology stack

Framer Sites 12.42.2, on Atlassian Bitbucket, hosted on Next.js

124 technologies detected 7 stack layers 32 with CPE identifier Enterprise

Stack Architecture

Analytics
Flying Pages Google AdSense Google Analytics HubSpot HubSpot Chat Microsoft Advertising Okta Prebid Q4 Quanta Quantcast Measure Stripe 22.3.2 Swagify Umami WEBXPAY WP Google Map Plugin WP Job Openings WP Maintenance Mode WP Rocket WP-Statistics WPForms WPS Visitor Counter Yandex.Direct Yandex.Messenger Zendesk
Ecommerce
Magento Shopify
CMS
Framer Sites 12.42.2 Oracle Application Express Squarespace WHMCS Webflow Wix WordPress XOOPS
Build
Coveo Qstomizer
Framework
AddThis Adobe Fonts 0.1.1 Alpine.js 3.15.12 Angular 22.0.7 Angular Material Ant Design 6.5.1 Astro Atlassian Jira Babel Backbone.js 1.6.1 Catberry.js 9.0.0 CodeMirror 6.0.2 D3 7.9.0 Discourse Django Ember.js 7.1.0 ExtJS Ciallo~(∠・ω< )⌒☆ Flowplayer 7.2.7 Flutter Font Awesome GSAP 3.15.0 Google Maps Google Search Console HSTS HTTP/3 Hammer.js 2.0.8 Handlebars 4.7.9 Highlight.js IPB Invision Power Board Ionic 5.4.16 Knockout.js 3.5.3 Magisto Microsoft MobX Monaco Editor MySQL Nextra Nuxt.js Open Graph PDF.js 2.5.4 Prism Prototype Ciallo~(∠・ω< )⌒☆ RSS Redux RequireJS 2.3.8 Rive Ruby on Rails RxJS Sentry 0.38.0 Socket.io 4.8.3 SolidJS Svelte Swagger UI Tailwind CSS Three.js 0.185.1 Typekit 0.1.1 USWDS Underscore.js 4.18.1 UptimeRobot Vite VitePress Vue.js 3.5.40 VuePress 1.9.10 WEN Themes Education Hub WEN Themes Signify Dark Waveform Weaver Xtreme Webpack Zone.js core-js 3.49.0 crypto-js jQuery 4.0.0 lit-element 4 lit-html 3 web-vitals
Runtime
Atlassian Bitbucket Dart Java Node.js PHP Python Ruby TypeScript styled-components
Hosting
Next.js 16.2.10 Remix

All Detected Technologies (124)

Next.js is a React framework for developing single page Javascript applications.

Categories JavaScript frameworks, Web frameworks, Web servers, Static site generator Website https://nextjs.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Remix is a React framework used for server-side rendering (SSR).

Categories Web frameworks, Web servers Website https://remix.run/ Detected by BeaverCheck

Bitbucket is a web-based version control repository hosting service for source code and development projects that use either Mercurial or Git revision control systems.

Categories Development Website https://www.atlassian.com/software/bitbucket/overview/ Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Dart is an open-source, general-purpose, object-oriented programming language developed by Google.

Categories Programming languages Website https://dart.dev Detected by BeaverCheck

Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.

Categories Programming languages Website https://java.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

Categories Programming languages Website https://nodejs.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

PHP is a general-purpose scripting language used for web development.

Categories Programming languages Website https://php.net Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Python is an interpreted and general-purpose programming language.

Categories Programming languages Website https://python.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Ruby is an open-source object-oriented programming language.

Categories Programming languages Website https://ruby-lang.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

TypeScript is an open-source language which builds on JavaScript by adding static type definitions.

Categories Programming languages Website https://www.typescriptlang.org Detected by BeaverCheck

Styled components is a CSS-in-JS styling framework that uses tagged template literals in JavaScript.

Categories JavaScript frameworks, Development Website https://styled-components.com Detected by BeaverCheck

Framer is primarily a design and prototyping tool. It allows you to design interactive prototypes of websites and applications using production components and real data.

Categories Page builders Website https://framer.com/sites Detected by BeaverCheck

Oracle Application Express (APEX) is an enterprise low-code development platform from Oracle Corporation. APEX is a fully supported no-cost feature of Oracle Database.

Categories Page builders Website https://apex.oracle.com Detected by BeaverCheck

Squarespace provides Software-as-a-Service (SaaS) for website building and hosting, and allows users to use pre-built website templates.

Categories CMS Website https://www.squarespace.com Detected by BeaverCheck

WHMCS is an automation platform that simplifies and automates all aspects of operating an online web hosting and domain registrar business.

Categories CMS Website https://www.whmcs.com Detected by BeaverCheck

Webflow is Software-as-a-Service (SaaS) for website building and hosting.

Categories Page builders Website https://webflow.com Detected by BeaverCheck

Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.

Categories CMS, Blogs Website https://www.wix.com Detected by BeaverCheck

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

Categories CMS, Blogs Website https://wordpress.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →
Categories CMS Website https://xoops.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Magento is an open-source ecommerce platform written in PHP.

Categories Ecommerce Website https://magento.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.

Categories Ecommerce Website https://shopify.com Detected by BeaverCheck

AddThis is a social bookmarking service that can be integrated into a website with the use of a web widget.

Categories Widgets Website https://www.addthis.com Detected by BeaverCheck

Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.

Categories Font scripts Website https://fonts.adobe.com Detected by BeaverCheck

Alpine.js is a minimal framework for composing behavior directly in your markup.

Categories JavaScript frameworks Website https://alpinejs.dev Detected by BeaverCheck

Angular is a TypeScript-based open-source web application framework led by the Angular Team at Google.

Categories JavaScript frameworks Website https://angular.io Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Angular Material is a UI component library for Angular JS developers. Angular Material components assist in constructing attractive, consistent, and functional web pages and web applications.

Categories UI frameworks Website https://material.angularjs.org Detected by BeaverCheck

Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.

Categories UI frameworks Website https://ant.design Detected by BeaverCheck

Astro is a new JavaScript-based static site builder.

Categories Static site generator, JavaScript frameworks Website https://astro.build Detected by BeaverCheck
Categories Issue trackers Website https://www.atlassian.com/software/jira Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Babel is a free and open-source transcompiler for writing next generation JavaScript.

Categories Miscellaneous Website https://babeljs.io Detected by BeaverCheck

BackboneJS is a JavaScript library that allows to develop and structure the client side applications that run in a web browser.

Categories JavaScript frameworks Website https://backbonejs.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Catberry.js is a framework for building isomorphic web applications that render on both the server and client sides using JavaScript.

Categories JavaScript frameworks, Web frameworks Website https://catberry.github.io/ Detected by BeaverCheck

CodeMirror is a JavaScript component that provides a code editor in the browser.

Categories Editors Website https://codemirror.net Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

D3.js is a JavaScript library for producing dynamic, interactive data visualisations in web browsers.

Categories JavaScript graphics Website https://d3js.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Discourse is an open-source internet forum and mailing list management software application.

Categories Message boards Website https://discourse.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Django is a Python-based free and open-source web application framework.

Categories Web frameworks Website https://djangoproject.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Ember.js is a comprehensive JavaScript framework that simplifies the development of modern web applications by providing a powerful CLI, a built-in router, and a fast rendering engine.

Categories JavaScript frameworks Website https://emberjs.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

ExtJS is a JavaScript framework developed by Sencha, designed for creating feature-rich, cross-platform web applications with a comprehensive set of UI components and tools.

Categories JavaScript frameworks Website https://www.sencha.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Flowplayer is a scalable, performance-first HTML 5 video player and platform hosting solution for publishers, broadcasters and digital media.

Categories Video players Website https://flowplayer.com Detected by BeaverCheck

Flutter is an open source framework by Google for building beautiful, natively compiled, multi-platform applications from a single codebase.

Categories UI frameworks Website https://flutter.dev Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Font Awesome is a font and icon toolkit based on CSS and Less.

Categories Font scripts Website https://fontawesome.com/ Detected by BeaverCheck

GSAP is an animation library that allows you to create animations with JavaScript.

Categories JavaScript frameworks Website https://greensock.com/gsap Detected by BeaverCheck

Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.

Categories Maps Website https://maps.google.com Detected by BeaverCheck
Categories Analytics Detected by BeaverCheck · Medium Evidence TXT record: google-site-verification=eySrj7tImhjLmyEzhvz6-esuzD2jdnQ8anx4qfIwApw

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

Categories Security Website https://www.rfc-editor.org/rfc/rfc6797#section-6.1 Detected by BeaverCheck

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

Categories Miscellaneous Website https://httpwg.org/ Detected by BeaverCheck

Hammer.js is a JavaScript library for adding touch gestures like swipe, pinch, and rotate to web applications.

Categories JavaScript libraries Website https://hammerjs.github.io Detected by BeaverCheck

Handlebars is a JavaScript library used to create reusable webpage templates.

Categories JavaScript frameworks Website https://handlebarsjs.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Highlight.js is a JavaScript library for syntax highlighting, supporting 192 languages and 496 themes.

Categories JavaScript libraries Website https://highlightjs.org/ Detected by BeaverCheck
Categories Message boards Website https://invisioncommunity.com/ Detected by BeaverCheck

Invision Power Board is a commercial Internet forum software developed by Invision Community (formerly Invision Power Services).

Categories Message boards Website https://invisioncommunity.com Detected by BeaverCheck

Ionic is an open-source framework that enables developers to create cross-platform mobile, web, and desktop applications using web technologies like HTML, CSS, and JavaScript.

Categories Web frameworks Website https://ionicframework.com Detected by BeaverCheck

Knockout.js is basically a library written in JavaScript, based on MVVM pattern that helps developers build rich and responsive websites.

Categories JavaScript frameworks Website https://knockoutjs.com Detected by BeaverCheck

Magisto is a video management solution designed to help marketing professionals, agencies, and businesses of all sizes.

Categories Video players Website https://www.magisto.com Detected by BeaverCheck
Categories Analytics Detected by BeaverCheck · Low Evidence TXT record: MS=ms22955481
Categories JavaScript libraries Website https://mobx.js.org Detected by BeaverCheck

Monaco Editor is the code editor that powers VS Code. Monaco Editor is a tool in the text editor category of a tech stack.

Categories Rich text editors Website https://microsoft.github.io/monaco-editor/ Detected by BeaverCheck

MySQL is an open-source relational database management system.

Categories Databases Website https://mysql.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Nextra is Next.js based static site generator.

Categories Static site generator Website https://nextra.site/ Detected by BeaverCheck

Nuxt is a Vue framework for developing modern web applications.

Categories JavaScript frameworks, Web frameworks, Static site generator Website https://nuxt.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Open Graph is a protocol that is used to integrate any web page into the social graph.

Categories Miscellaneous Website https://ogp.me Detected by BeaverCheck
Categories Miscellaneous Website https://mozilla.github.io/pdf.js/ Detected by BeaverCheck

Prism is an extensible syntax highlighter.

Categories Miscellaneous Website https://prismjs.com Detected by BeaverCheck

Prototype is a JavaScript Framework that aims to ease development of web applications.

Categories JavaScript frameworks Website https://www.prototypejs.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.

Categories Miscellaneous Website https://www.rssboard.org/rss-specification Detected by BeaverCheck

Redux is a predictable state container for JavaScript applications.

Categories JavaScript frameworks Website https://redux.js.org Detected by BeaverCheck

RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.

Categories JavaScript frameworks Website https://requirejs.org Detected by BeaverCheck

Rive is a real-time interactive design and animation tool.

Categories JavaScript graphics Website https://rive.app Detected by BeaverCheck

Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.

Categories Web frameworks Website https://rubyonrails.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.

Categories JavaScript frameworks Website https://reactivex.io Detected by BeaverCheck

Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.

Categories Issue trackers Website https://sentry.io/ Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →
Categories JavaScript frameworks Website https://socket.io Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

SolidJS is a purely reactive library. It was designed from the ground up with a reactive core. It's influenced by reactive principles developed by previous libraries.

Categories JavaScript frameworks Website https://www.solidjs.com/ Detected by BeaverCheck

Svelte is a free and open-source front end compiler created by Rich Harris and maintained by the Svelte core team members.

Categories JavaScript frameworks Website https://svelte.dev Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Swagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate documentation from a Swagger-compliant API.

Categories Documentation Website https://swagger.io/tools/swagger-ui Detected by BeaverCheck

Tailwind is a utility-first CSS framework for rapidly building custom user interfaces.

Categories UI frameworks Website https://tailwindcss.com/ Detected by BeaverCheck

Three.js is a cross-browser JavaScript library and application programming interface used to create and display animated 3D computer graphics in a web browser using WebGL.

Categories JavaScript graphics Website https://threejs.org Detected by BeaverCheck

Typekit is an online service which offers a subscription library of fonts.

Categories Font scripts Website https://typekit.com Detected by BeaverCheck

USWDS is a design system for the federal government.

Categories UI frameworks Website https://designsystem.digital.gov Detected by BeaverCheck

Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.

Categories JavaScript libraries Website https://underscorejs.org Detected by BeaverCheck

UptimeRobot is a web-based software that is designed to monitor the sites frequently to check whether any site is down owing to server problem or any bug in coding.

Categories Issue trackers Website https://uptimerobot.com Detected by BeaverCheck

Vite is a rapid development tool for modern web projects.

Categories Miscellaneous Website https://vitejs.dev Detected by BeaverCheck

VitePress is a Vite & Vue Powered Static Site Generator.

Categories Static site generator Website https://vitepress.vuejs.org/ Detected by BeaverCheck

Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.

Categories JavaScript frameworks Website https://vuejs.org Detected by BeaverCheck

VuePress is a static site generator with a Vue-powered theming system, and a default theme for writing technical documentation.

Categories Static site generator Website https://vuepress.vuejs.org/ Detected by BeaverCheck

WEN Themes Education Hub is a clean and elegant WordPress education theme.

Categories WordPress themes Website https://wenthemes.com/item/wordpress-themes/education-hub Detected by BeaverCheck

Signify Dark is a free dark blog and corporate WordPress theme that is trendy, responsive, and dynamic by WEN Themes.

Categories WordPress themes Website https://wenthemes.com/item/wordpress-themes/signify-dark Detected by BeaverCheck

Waveform is a media player that supports various media formats, including audio, video, Youtube, and Vimeo, and includes a waveform visualisation feature, utilising Web Audio API and HTML5 Canvas technologies.

Categories Widgets Website https://music.flatfull.com/waveme/about/ Detected by BeaverCheck

Weaver Xtreme is the orginal options-based WordPress theme.

Categories WordPress themes Website https://weavertheme.com Detected by BeaverCheck

Webpack is an open-source JavaScript module bundler.

Categories Miscellaneous Website https://webpack.js.org/ Detected by BeaverCheck
Categories JavaScript frameworks Website https://github.com/angular/angular/tree/master/packages/zone.js Detected by BeaverCheck

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

Categories JavaScript libraries Website https://github.com/zloirock/core-js Detected by BeaverCheck

crypto-js is a JavaScript library of crypto standards.

Categories JavaScript libraries Website https://github.com/brix/crypto-js Detected by BeaverCheck

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

Categories JavaScript libraries Website https://jquery.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

lit-element is a simple base class for creating web components that work in any web page with any framework. lit-element uses lit-html to render into shadow DOM, and adds API to manage properties and attributes.

Categories JavaScript libraries Website https://lit.dev Detected by BeaverCheck

lit-html is a simple, modern, safe, small and fast HTML templating library for JavaScript.

Categories JavaScript libraries Website https://lit.dev Detected by BeaverCheck

The web-vitals JavaScript is a tiny, modular library for measuring all the web vitals metrics on real users.

Categories JavaScript libraries, RUM Website https://github.com/GoogleChrome/web-vitals Detected by BeaverCheck

Flying Pages is a performance optimisation plugin for WordPress websites designed to reduce page load times and improve the user experience.

Categories WordPress plugins, Performance Website https://wordpress.org/plugins/flying-pages/ Detected by BeaverCheck

Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.

Categories Advertising Website https://www.google.com/adsense/start/ Detected by BeaverCheck

Google Analytics is a free web analytics service that tracks and reports website traffic.

Categories Analytics Website https://google.com/analytics Detected by BeaverCheck

HubSpot is a marketing and sales software that helps companies attract visitors, convert leads, and close customers.

Categories Marketing automation Website https://www.hubspot.com Detected by BeaverCheck

HubSpot Chat is a tool where you can view, manage, and reply to incoming messages from multiple channels.

Categories Live chat Website https://www.hubspot.com/products/crm/live-chat Detected by BeaverCheck

Microsoft Advertising is an online advertising platform developed by Microsoft.

Categories Advertising Website https://ads.microsoft.com Detected by BeaverCheck

Okta is a platform in the Identity-as-a-Service (IDaaS) category. Okta features include Provisioning, Single Sign-On (SSO), Active Directory (AD) and LDAP integration, the centralized de-provisioning of users, multi-factor authentication (MFA), mobile identity management.

Categories Authentication Website https://developer.okta.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Prebid is an open-source header bidding wrapper. It forms the core of our Nucleus ad platform, helping maximize revenue and performance for publishers.

Categories Advertising Website https://prebid.org Detected by BeaverCheck

Q4 is a SaaS platform that provides communication and intelligence solutions to investor relations professionals.

Categories CRM Website https://www.q4inc.com/products/investor-relations-websites/default.aspx Detected by BeaverCheck

Quanta is web performance management solution. Quanta offers the only analytics solution specifically designed to enable business and technical members of ecommerce teams to collaborate effectively with the end in mind: use web performance to directly impact online revenue at all times.

Categories RUM, Analytics Website https://www.quanta.io Detected by BeaverCheck

Quantcast Measure is an audience insights and analytics tool.

Categories Analytics Website https://www.quantcast.com/products/measure-audience-insights Detected by BeaverCheck

Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.

Categories Payment processors Website https://stripe.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

Swagify allows you to upsell, cross-sell, and promote, by creating as many completely customizable offers as you want.

Categories Analytics Website https://swagifyapp.com Detected by BeaverCheck

Umami is a self-hosted web analytics solution. It's goal is to provide a friendlier, privacy-focused alternative to Google Analytics and a free, open-sourced alternative to paid solutions.

Categories Analytics Website https://umami.is/ Detected by BeaverCheck

WEBXPAY is a specialised online payment gateway that expedites buying and selling in a highly secured environment.

Categories Payment processors Website https://webxpay.com Detected by BeaverCheck

WP Google Map Plugin allows you to create google maps shortcodes to display responsive google maps on pages, widgets and custom templates.

Categories WordPress plugins Website https://www.wpmapspro.com Detected by BeaverCheck

WP Job Openings is a job listing and recruitment plugin for WordPress websites.

Categories WordPress plugins, Recruitment & staffing Website https://wpjobopenings.com Detected by BeaverCheck

WP Maintenance Mode is a WordPress plugin which add a maintenance page to your blog.

Categories WordPress plugins Website https://github.com/andrianvaleanu/WP-Maintenance-Mode Detected by BeaverCheck

WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.

Categories Caching, WordPress plugins Website https://wp-rocket.me Detected by BeaverCheck

WP-Statistics is a WordPress plugin which allows you to know your website statistics.

Categories Analytics, WordPress plugins Website https://wp-statistics.com Detected by BeaverCheck

WPForms is a drag and drop WordPress form builder.

Categories WordPress plugins, Form builders Website https://wpforms.com Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

WPS Visitor Counter is a plugin for WordPress that counts the number of visitors to a website.

Categories WordPress plugins Website https://wordpress.org/plugins/wps-visitor-counter/ Detected by BeaverCheck

Yandex Direct is the platform designed for sponsored ad management.

Categories Advertising Website https://ads.yandex.com Detected by BeaverCheck

Yandex.Messenger is an instant messaging application.

Categories Widgets, Live chat Website https://dialogs.yandex.ru Detected by BeaverCheck

Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.

Categories Documentation, Issue trackers, Live chat Website https://zendesk.com Detected by BeaverCheck

Coveo is an enterprise search and relevance platform that uses AI to enhance search capabilities and deliver personalized content across digital touchpoints.

Categories Search engines, Personalisation Website https://www.coveo.com Detected by BeaverCheck

Qstomizer app is the app for Shopify and Woocomerce that allows you to add a visual custom product designer to your shop.

Categories Personalisation Website https://www.qstomizer.com Detected by BeaverCheck

Observations (4)

WordPress detected — review security configuration

WordPress sites benefit from: protecting wp-login.php, disabling XML-RPC if unused, restricting REST API access, and keeping all plugins and themes up to date. Check the Security tab for specific findings.

→ Security

Shopify storefront detected

Shopify handles hosting, SSL, and CDN automatically. Performance optimizations focus on theme code, app scripts, and image optimization. Check the Performance tab for third-party script impact.

jQuery loaded alongside a modern framework

Both jQuery and Vue.js are loaded. Modern frameworks handle DOM manipulation natively. jQuery may be unnecessary and adds ~30KB to the page weight. Check the Performance tab for bundle analysis.

→ Performance

Complex technology stack detected

124 technologies identified. A complex stack increases maintenance burden and attack surface. Consider whether all components are actively needed.

Show your score

Drop this badge on your README, marketing site, or status page. It auto-updates every time the audit re-runs and links back to this report.

BeaverCheck badge

This badge auto-updates with your latest scan result.

[![BeaverCheck](https://beavercheck.com/badge?url=https%3A%2F%2Flantian.pub)](https://beavercheck.com/sites/lantian.pub)
<a href="https://beavercheck.com/sites/lantian.pub"><img src="https://beavercheck.com/badge?url=https%3A%2F%2Flantian.pub" alt="BeaverCheck Score"></a>
https://beavercheck.com/badge?url=https%3A%2F%2Flantian.pub

Export & share

Download the audit, share with your team, or grab a fix plan ready to copy into your tracker.

Share

Copies markdown to clipboard

Export
Download Markdown Report Download JSON

Fix Plan

Three-week roadmap to ship the audit's findings, with one-click copy targets for your tracker.

Three-week fix plan

2 sprints · 7h total → projected A (93)

Sprint 1: Quick Wins

+3

Highest ROI — low effort, high impact

2 findings 0h → A (91)
  • · No <main> landmark found
  • · 11 link(s) open in a new tab without rel=noopener

Sprint 2: Core Fixes

+2

Medium effort, high structural impact

3 findings 7h → A (93)
  • · Content-Security-Policy header is missing
  • · No Content-Security-Policy header found
  • · Cross-Origin-Embedder-Policy header is missing

Send Feedback