Skip to content

Changes

https://tomorrowspayment.com
Compared to previous audit · 9 minutes ago View previous audit

Madrid, Spain → Sao Paulo, Brazil

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

4
New issues
4
Resolved
14
score changes
CategoryPreviousCurrentChange
CompositeB (87)B (87)—
PerformanceB (86)B (87) +1.000
SecurityB (87)B (87)—
AccessibilityB (86)B (86)—
SEOA+ (99)A+ (99)—
InfrastructureB (87)A (90) +3.000
ComplianceC (75)C (75)—
ContentA (90)A (90)—
SustainabilityC (75)C (75)—
MetricPreviousCurrentChange
Performance 65006300 -200
Accessibility 92009200—
Best Practices 1000010000—
SEO 1000010000—
PWA 00—
Desktop Performance 83008200 -100
Desktop Accessibility 92009200—
Desktop Best Practices 1000010000—
Desktop SEO 1000010000—
FCP 4.13 s4.05 s -81 ms
LCP 10.67 s11.52 s +854 ms
TBT 0 ms0 ms—
CLS 0.0000.000 -0.000
Desktop FCP 997 ms1.07 s +71 ms
Desktop LCP 2.71 s2.84 s +133 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0000.000—
TTFB †467 ms440 ms -27 ms
DNS †8 ms29 ms +21 ms
TLS †14 ms25 ms +11 ms
Connect †1 ms17 ms +15 ms
Total †578 ms539 ms -39 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://tomorrowspayment.com/: 615ms CPU time performance
WARNING 112 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING https://tomorrowspayment.com/_astro/hoisted.D3uQPd...: 824ms CPU time performance
WARNING Unattributable: 584ms CPU time performance
CRITICAL 'unsafe-inline' found in script source security
WARNING https://tomorrowspayment.com/: 1380ms CPU time performance
WARNING https://tomorrowspayment.com/_astro/hoisted.CJQ-FB...: 1153ms CPU time performance
WARNING Unattributable: 863ms CPU time performance
CRITICAL Page weighs 6.1 MB (6.0 MB transferred) performance
CRITICAL HTTP version does not redirect to HTTPS infrastructure
WARNING HSTS is enabled but max-age is short (15552000s, should be >= 31536000s) security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING SRI adoption: 0/1 third-party resources protected (0%) security
WARNING 62 of 64 links are healthy content
WARNING Broken link: https://fonts.googleapis.com content
WARNING 1.42g CO2 per page view sustainability
WARNING 1 control(s) rely on placeholder only accessibility
WARNING Images are 3.1 MB — compress or use modern formats performance
WARNING https://tomorrowspayment.com/media/production/imag... is missing width/height — may cause layout shift performance
WARNING Compressed response missing `Vary` header performance
WARNING Broken link: https://fonts.gstatic.com content
WARNING DMARC policy is none — monitoring only security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING Total image weight: 1013 KB (1.0 MB) content
WARNING 1.42g CO2 — above the median website (0.60g) sustainability
WARNING Registrar lock is NOT enabled infrastructure
WARNING GDPR Article 13 disclosure coverage: 1 / 8 categories compliance
WARNING 1 software version(s) disclosed in HTML: Astro v4.16.19 security
WARNING External link from fonts.googleapis.com lacks integrity attribute security
WARNING Page weight 6.0 MB exceeds 1 MB target by 5.0 MB performance
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING All 4 images use legacy formats (JPEG/PNG/GIF) content
WARNING 18 font weights loaded -- likely 100+ KB of unused payload sustainability
WARNING 7 images missing explicit width/height content
WARNING 2 field(s) would benefit from inputmode attribute accessibility
+ cache-control public, no-cache, must-revalidate
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflar... → default-src 'self'; script-src 'self' 'nonce-ffefd6c7-7ce3-4f08-a296-eacca450...

10 headers unchanged

Technology stack unchanged

11 technologies unchanged

Looking ahead

+11 pts
B (87) Could reach A+ (98)
Accessibility +13Performance +13Security +13Content +10Infrastructure +10Sustainability +10Compliance +4

Estimate — actual results may vary (31 issues to fix)

Website improvement report — Tomorrowspayment

September 19, 2026 → September 19, 2026

B B 87 → 87 0 pts

4

Resolved

4

New issues

27

Still remaining

Financial summary

Investment delivered

€510 in development time

Investment remaining

€2,040 to complete the remaining items

Ongoing risk

€1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score87 (B)87 (B)0
Performance86 (B)87 (B)+1
Security87 (B)87 (B)0
Accessibility86 (B)86 (B)0
SEO99 (A+)99 (A+)0
Infrastructure87 (B)90 (A)+3
Compliance75 (C)75 (C)0
Content90 (A)90 (A)0
Sustainability75 (C)75 (C)0

Resolved (4)

  • 'unsafe-inline' found in script source (Security)

    → Reduced attack surface for visitors

  • https://tomorrowspayment.com/: 1380ms CPU time (Performance)

    → Page loads faster for users

  • https://tomorrowspayment.com/_astro/hoisted.CJQ-FB...: 1153ms CPU time (Performance)

    → Page loads faster for users

  • Unattributable: 863ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (31)

  • Sprint 1

    Page weighs 6.1 MB (6.0 MB transferred) (Performance)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    https://tomorrowspayment.com/: 615ms CPU time (Performance)

  • Sprint 1

    112 text node(s) render below 12 CSS pixels on mobile (Accessibility)

  • Sprint 1

    https://tomorrowspayment.com/_astro/hoisted.D3uQPd...: 824ms CPU time (Performance)

  • Sprint 1

    Unattributable: 584ms CPU time (Performance)

  • Sprint 1

    HSTS is enabled but max-age is short (15552000s, should be >= 31536000s) (Security)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    SRI adoption: 0/1 third-party resources protected (0%) (Security)

  • Sprint 1

    62 of 64 links are healthy (Content)

  • Sprint 1

    Broken link: https://fonts.googleapis.com (Content)

  • Sprint 1

    1.42g CO2 per page view (Sustainability)

  • Sprint 2

    1 control(s) rely on placeholder only (Accessibility)

  • Sprint 2

    Images are 3.1 MB — compress or use modern formats (Performance)

  • Sprint 1

    https://tomorrowspayment.com/media/production/imag... is missing width/height — may cause layout shift (Performance)

…and 16 more recommended item(s)

Send Feedback