Skip to content

Changes

https://costdown.org
Compared to previous audit · 32 minutes ago View previous audit

Madrid, Spain → Santa Clara, United States

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

3
New issues
5
Resolved
15
score changes
CategoryPreviousCurrentChange
CompositeB (89)A (90) +1.000
PerformanceA (96)A (96)—
SecurityB (89)B (89)—
AccessibilityA (90)A (90)—
SEOA (95)A (95)—
InfrastructureB (83)A (90) +7.000
ComplianceD (63)D (63)—
ContentB (85)B (85)—
SustainabilityA+ (98)A+ (98)—
MetricPreviousCurrentChange
Performance 74009000 +1600
Accessibility 96009600—
Best Practices 1000010000—
SEO 91009100—
PWA 00—
Desktop Performance 98009900 +100
Desktop Accessibility 96009600—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 2.16 s1.10 s -1.06 s
LCP 5.12 s3.58 s -1.55 s
TBT 236 ms89 ms -147 ms
CLS 0.0000.000—
Desktop FCP 645 ms541 ms -104 ms
Desktop LCP 992 ms893 ms -98 ms
Desktop TBT 14 ms0 ms -14 ms
Desktop CLS 0.0000.000—
TTFB †272 ms286 ms +14 ms
DNS †6 ms36 ms +30 ms
TLS †10 ms23 ms +13 ms
Connect †2 ms17 ms +15 ms
Total †435 ms532 ms +97 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 889ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING https://costdown.org/: 304ms CPU time performance
WARNING https://costdown.org/: 639ms CPU time performance
WARNING https://costdown.org/_next/static/chunks/4bd1b696-...: 333ms CPU time performance
WARNING Unattributable: 263ms CPU time performance
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 1525ms CPU time performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
CRITICAL Both www and non-www versions serve content infrastructure
WARNING X-Powered-By header reveals technology stack security
WARNING No accessibility statement detected compliance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING No DMARC record found security
WARNING No Permissions-Policy header security
WARNING Terms of Service not detected compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No privacy policy link detected compliance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Privacy Policy not detected compliance
WARNING Permissions-Policy header is missing security
WARNING No SPF record found security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING 1 images significantly larger than display size content
content-security-policy
default-src 'self'; script-src 'self' 'nonce-rTbB2MX9e4Skrl7kLWMNWQ==' https:... → default-src 'self'; script-src 'self' 'nonce-JIdDQnx5Sdh/YXfVkX7jzg==' https:...
link
</_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...

13 headers unchanged

Technology stack unchanged

11 technologies unchanged

Looking ahead

+7 pts
A (90) Could reach A+ (97)
Compliance +16Security +11Infrastructure +10Content +8Accessibility +4Performance +4

Estimate — actual results may vary (21 issues to fix)

Website improvement report — Costdown

August 27, 2026 → August 27, 2026

B A 89 → 90 +1 pts

5

Resolved

3

New issues

18

Still remaining

Financial summary

Investment delivered

₫600,000 in development time

Investment remaining

₫9,900,000 to complete the remaining items

Ongoing risk

₫3,324/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score89 (B)90 (A)+1
Performance96 (A)96 (A)0
Security89 (B)89 (B)0
Accessibility90 (A)90 (A)0
SEO95 (A)95 (A)0
Infrastructure83 (B)90 (A)+7
Compliance63 (D)63 (D)0
Content85 (B)85 (B)0
Sustainability98 (A+)98 (A+)0

Resolved (5)

  • https://costdown.org/: 639ms CPU time (Performance)

    → Page loads faster for users

  • https://costdown.org/_next/static/chunks/4bd1b696-...: 333ms CPU time (Performance)

    → Page loads faster for users

  • Unattributable: 263ms CPU time (Performance)

    → Page loads faster for users

  • https://costdown.org/_next/static/chunks/1255-fc6c...: 1525ms CPU time (Performance)

    → Page loads faster for users

  • IPv6 DNS records exist but server is not reachable (Infrastructure)

    → More reliable delivery

Recommended next steps (21)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    https://costdown.org/_next/static/chunks/1255-fc6c...: 889ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 1

    https://costdown.org/: 304ms CPU time (Performance)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 2

    All 1 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 1

    Permissions-Policy header not set -- features default to allow-on-same-origin (Security)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 1

    No Permissions-Policy header (Security)

  • Sprint 1

    Terms of Service not detected (Compliance)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 2

    No privacy policy link detected (Compliance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

…and 6 more recommended item(s)

Send Feedback