Skip to content

Changes

https://www.mossandmolt.com
Compared to previous audit · 1 day ago View previous audit
36
New issues
22
Resolved
21
score changes
CategoryPreviousCurrentChange
CompositeB (84)B (83) -1.000
PerformanceB (86)B (88) +2.000
SecurityB (82)C (78) -4.000
AccessibilityC (79)C (79)—
SEOA (91)A (93) +2.000
InfrastructureB (86)B (89) +3.000
ComplianceB (83)C (74) -9.000
ContentB (85)B (86) +1.000
SustainabilityB (81)B (81)—
MetricPreviousCurrentChange
Performance 49005100 +200
Accessibility 1000010000—
Best Practices 92009200—
SEO 92009200—
PWA 00—
Desktop Performance 92009600 +400
Desktop Accessibility 97009700—
Desktop Best Practices 92009200—
Desktop SEO 92009200—
FCP 5.22 s4.89 s -326 ms
LCP 13.98 s14.14 s +159 ms
TBT 378 ms344 ms -34 ms
CLS 0.0000.000—
Desktop FCP 756 ms748 ms -8 ms
Desktop LCP 1.43 s1.14 s -299 ms
Desktop TBT 9 ms2 ms -8 ms
Desktop CLS 0.0400.026 -0.014
TTFB †150 ms1.02 s +872 ms
DNS †75 ms73 ms -2 ms
TLS †31 ms26 ms -5 ms
Connect †18 ms17 ms -1 ms
Total †150 ms1.06 s +909 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Cookie 'cart_currency' is missing the Secure flag security
CRITICAL Canonical target returns 429 seo
CRITICAL Cookie 'localization' is missing the Secure flag security
CRITICAL Page weighs 6.0 MB (3.9 MB transferred) performance
WARNING 441 HTTP requests — consider bundling or reducing performance
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Total image weight: 1203 KB (1.2 MB) content
WARNING JavaScript is 600 KB — consider code splitting or lazy loading performance
WARNING https://cdn.shopify.com/extensions/01a1ab38-77f1-7...: 733ms CPU time performance
WARNING Referrer-Policy header is missing security
WARNING base-uri directive is missing security
WARNING Unattributable: 1583ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 545ms CPU time performance
WARNING 5 unclassified cookie(s) set before any consent step compliance
WARNING 0.92g CO2 — above the median website (0.60g) sustainability
WARNING No Permissions-Policy header security
WARNING 1 `@font-face` rule(s) without `font-display` -- causes FOIT performance
WARNING Permissions-Policy header is missing security
WARNING 156 inline style attribute(s) detected security
WARNING Unexpected status code: HTTP 429 accessibility
WARNING Page weight 3.9 MB exceeds 1 MB target by 2.9 MB performance
WARNING 198 of 200 links are healthy content
WARNING HSTS is enabled but max-age is short (7889238s, should be >= 31536000s) security
WARNING Images are 2.0 MB — compress or use modern formats performance
WARNING https://www.mossandmolt.com/cdn/wpm/bb8a4071cw5df5...: 697ms CPU time performance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING 22 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING default-src directive is missing security
WARNING Cookie 'localization' is missing the HttpOnly flag security
WARNING Total JS execution time is 9.7 s -- over the 3.5s budget performance
WARNING form-action directive is missing security
WARNING Cookie 'cart_currency' is missing the HttpOnly flag security
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@b8a4071cw5df52f02p06561c06md4694b52/cust…") accessibility
WARNING https://www.mossandmolt.com/: 4935ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/bb8a4071cw5df5...: 38 KB unused (45%) performance
CRITICAL Canonical target returns 403 seo
CRITICAL Page weighs 5.9 MB (4.0 MB transferred) performance
CRITICAL Content-Security-Policy header is missing security
CRITICAL HSTS header is missing security
CRITICAL 196 of 200 links are healthy content
WARNING JavaScript is 652 KB — consider code splitting or lazy loading performance
WARNING Page weight 4.0 MB exceeds 1 MB target by 3.0 MB performance
WARNING Broken link: https://www.mossandmolt.com/.well-known/ucp content
WARNING 0.95g CO2 — above the median website (0.60g) sustainability
WARNING Unattributable: 1687ms CPU time performance
WARNING https://cdn.shopify.com/extensions/01a1a691-bff0-7...: 803ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 670ms CPU time performance
WARNING Total image weight: 1298 KB (1.3 MB) content
WARNING Compressed response missing `Vary` header performance
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@f2ff7f6ewc606c42cp0e14142bm0d31f5a3/cust…") accessibility
WARNING 471 HTTP requests — consider bundling or reducing performance
WARNING Unexpected status code: HTTP 403 accessibility
WARNING Images are 1.9 MB — compress or use modern formats performance
WARNING https://www.mossandmolt.com/: 5329ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/bf2ff7f6ewc606...: 38 KB unused (45%) performance
WARNING https://www.mossandmolt.com/cdn/wpm/bf2ff7f6ewc606...: 891ms CPU time performance
WARNING Broken link: https://www.mossandmolt.com/checkouts/internal/preloads.j... content
CRITICAL 2 link(s) with no accessible text accessibility
CRITICAL 10 publicly-accessible JavaScript source map(s) security
WARNING 2 Organization blocks on the page -- only one should describe the publishing entity content
WARNING 4 images significantly larger than display size content
WARNING Multiple H1 headings (2 found) accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING 1 link(s) open in a new tab without rel=noopener security
WARNING Heading level skipped: H2 → H4 (missing H3) accessibility
WARNING No DMARC record found security
WARNING SRI adoption: 1/26 third-party resources protected (3%) security
WARNING 3 link(s) with generic text accessibility
WARNING Missing og:image content
WARNING External script from cdn.shopify.com lacks integrity attribute security
WARNING 29 link(s) open in new tab without warning accessibility
WARNING No accessibility statement detected compliance
WARNING Broken link: https://www.mossandmolt.com/ content
WARNING No favicon.ico at site root accessibility
WARNING Broken link: https://monorail-edge.shopifysvc.com content
WARNING External link from cdn.shopify.com lacks integrity attribute security
WARNING GraphQL introspection enabled at /api/graphql security
WARNING CNAME record at zone apex infrastructure
WARNING Missing required property "name" for Organization content
WARNING 26 images missing explicit width/height content
+ strict-transport-security max-age=7889238
+ content-security-policy block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
+ cf-cache-status DYNAMIC
+ x-dc gcp-europe-west1,gcp-europe-west1,gcp-europe-west1
+ product-filtering-backend bitset_roaring
+ shopify-complexity-score 8490
+ etag "sfr:computation:v2:a63c25c9f79ed9c536956a1f3342076bc9fc50193c34aaa79d5e55f0a...
+ content-language en-US
+ vary accept-encoding
+ cdn-cache-control no-cache, no-store
+ powered-by Shopify
+ content-length 203785
+ shopify-complexity-score-v2 849
+ set-cookie _shopify_essential=:AaGt7UyDAAEAyS8Qd5tWZK4DdGGI71atlpj84N5lleOWGH-XW6eyBstLA...
+ cache-control private, max-age=0, must-revalidate
+ link <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="...
− referrer-policy same-origin
− cf-mitigated challenge
− origin-agent-cluster ?1
− permissions-policy accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(...
− critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
− cross-origin-embedder-policy require-corp
− cross-origin-opener-policy same-origin
− cross-origin-resource-policy same-origin
accept-ch
Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ... → Sec-CH-Viewport-Width
x-frame-options
SAMEORIGIN → DENY
content-type
text/html; charset=UTF-8 → text/html; charset=utf-8

7 headers unchanged

+ HSTS Security

14 technologies unchanged

Looking ahead

+15 pts
B (83) Could reach A+ (98)
Security +22Accessibility +21Content +14Performance +12Compliance +10Infrastructure +8SEO +7Sustainability +4

Estimate — actual results may vary (59 issues to fix)

Website improvement report — Mossandmolt

November 4, 2026 → November 5, 2026

B B 84 → 83 -1 pts

22

Resolved

36

New issues

23

Still remaining

Financial summary

Investment delivered

€3,152 in development time

Investment remaining

€5,128 to complete the remaining items

Ongoing risk

€1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score84 (B)83 (B)-1
Performance86 (B)88 (B)+2
Security82 (B)78 (C)-4
Accessibility79 (C)79 (C)0
SEO91 (A)93 (A)+2
Infrastructure86 (B)89 (B)+3
Compliance83 (B)74 (C)-9
Content85 (B)86 (B)+1
Sustainability81 (B)81 (B)0

Resolved (22)

  • JavaScript is 652 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • Page weight 4.0 MB exceeds 1 MB target by 3.0 MB (Performance)

    → Page loads faster for users

  • Canonical target returns 403 (SEO)

    → Better search engine visibility

  • Broken link: https://www.mossandmolt.com/.well-known/ucp (Content)

    → Stronger social sharing and on-page quality

  • 0.95g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • Page weighs 5.9 MB (4.0 MB transferred) (Performance)

    → Page loads faster for users

  • Unattributable: 1687ms CPU time (Performance)

    → Page loads faster for users

  • https://cdn.shopify.com/extensions/01a1a691-bff0-7...: 803ms CPU time (Performance)

    → Page loads faster for users

  • https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 670ms CPU time (Performance)

    → Page loads faster for users

  • Total image weight: 1298 KB (1.3 MB) (Content)

    → Stronger social sharing and on-page quality

  • Compressed response missing `Vary` header (Performance)

    → Page loads faster for users

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@f2ff7f6ewc606c42cp0e14142bm0d31f5a3/cust…") (Accessibility)

    → Improved usability for assistive technology users

  • 471 HTTP requests — consider bundling or reducing (Performance)

    → Page loads faster for users

  • Unexpected status code: HTTP 403 (Accessibility)

    → Improved usability for assistive technology users

…and 7 more resolved issue(s)

Recommended next steps (59)

  • Sprint 1

    Cookie 'cart_currency' is missing the Secure flag (Security)

  • Sprint 1

    Canonical target returns 429 (SEO)

  • Sprint 1

    Cookie 'localization' is missing the Secure flag (Security)

  • Sprint 1

    Page weighs 6.0 MB (3.9 MB transferred) (Performance)

  • Sprint 1

    2 link(s) with no accessible text (Accessibility)

  • Sprint 1

    10 publicly-accessible JavaScript source map(s) (Security)

  • Sprint 2

    441 HTTP requests — consider bundling or reducing (Performance)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    Total image weight: 1203 KB (1.2 MB) (Content)

  • Sprint 3

    JavaScript is 600 KB — consider code splitting or lazy loading (Performance)

  • Sprint 1

    https://cdn.shopify.com/extensions/01a1ab38-77f1-7...: 733ms CPU time (Performance)

  • Sprint 1

    Referrer-Policy header is missing (Security)

  • Sprint 1

    base-uri directive is missing (Security)

  • Sprint 1

    Unattributable: 1583ms CPU time (Performance)

  • Sprint 1

    https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 545ms CPU time (Performance)

…and 44 more recommended item(s)

Send Feedback