Changes
New York, United Stated → Madrid, Spain
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | B (85) | B (88) | +3.000 |
| Performance | A (94) | A (94) | — |
| Security | C (79) | B (86) | +7.000 |
| Accessibility | B (84) | B (80) | -4.000 |
| SEO | B (85) | A+ (97) | +12.000 |
| Infrastructure | A (94) | B (88) | -6.000 |
| Compliance | C (70) | D (69) | -1.000 |
| Content | C (76) | A+ (99) | +23.000 |
| Sustainability | B (88) | B (88) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 7600 | 6500 | -1100 |
| Accessibility | 9600 | 9200 | -400 |
| Best Practices | 7300 | 7300 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9900 | 9800 | -100 |
| Desktop Accessibility | 10000 | 10000 | — |
| Desktop Best Practices | 7300 | 7300 | — |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 3.03 s | 3.34 s | +310 ms |
| LCP | 3.70 s | 4.61 s | +914 ms |
| TBT | 319 ms | 431 ms | +112 ms |
| CLS | 0.041 | 0.041 | — |
| Desktop FCP | 710 ms | 714 ms | — |
| Desktop LCP | 791 ms | 1.01 s | +215 ms |
| Desktop TBT | 16 ms | 44 ms | +28 ms |
| Desktop CLS | 0.003 | 0.003 | — |
| TTFB † | 160 ms | 152 ms | -8 ms |
| DNS † | 41 ms | 9 ms | -32 ms |
| TLS † | 21 ms | 9 ms | -13 ms |
| Connect † | 17 ms | 2 ms | -15 ms |
| Total † | 160 ms | 153 ms | -8 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
last-modified Mon, 25 May 2026 02:40:37 GMT → Mon, 25 May 2026 03:45:22 GMTx-ipfs-roots bafybeicgeisyngoxppp4rzshdwwr7oidtxmq52wtg6jd6zk7ejzfn26l6q → bafybeif7kvmno4d6kstmyxyctrfwa4prdsyhjpg5lpfg3zztaf27mkiulm16 headers unchanged
4 technologies unchanged
Looking ahead
+9 ptsEstimate — actual results may vary (28 issues to fix)
Website improvement report — Xpenv
May 25, 2026 → May 25, 2026
17
Resolved
13
New issues
15
Still remaining
Financial summary
Investment delivered
€2,337 in development time
Investment remaining
€2,160 to complete the remaining items
Ongoing risk
€0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 85 (B) | 88 (B) | +3 |
| Performance | 94 (A) | 94 (A) | 0 |
| Security | 79 (C) | 86 (B) | +7 |
| Accessibility | 84 (B) | 80 (B) | -4 |
| SEO | 85 (B) | 97 (A+) | +12 |
| Infrastructure | 94 (A) | 88 (B) | -6 |
| Compliance | 70 (C) | 69 (D) | -1 |
| Content | 76 (C) | 99 (A+) | +23 |
| Sustainability | 88 (B) | 88 (B) | 0 |
Resolved (17)
Terms of Service not detected (Compliance)
→ Reduced regulatory exposure
External script from challenges.cloudflare.com lacks integrity attribute (Security)
→ Reduced attack surface for visitors
No <nav> landmark found (Accessibility)
→ Improved usability for assistive technology users
https://xpenv.com/assets/index-7YzAFMRA.js: 260 KB unused (63%) (Performance)
→ Page loads faster for users
Title is only 16 characters — consider expanding (SEO)
→ Better search engine visibility
Dead-end page — no outgoing internal links (SEO)
→ Better search engine visibility
2 link(s) open in new tab without warning (Accessibility)
→ Improved usability for assistive technology users
No meta description tag found (SEO)
→ Better search engine visibility
Scan returned a Cloudflare bot-protection interstitial, not the actual page (Security)
→ Reduced attack surface for visitors
Page has only 47 words — nearly empty (SEO)
→ Better search engine visibility
No Open Graph meta tags found (Content)
→ Stronger social sharing and on-page quality
No internal links found (SEO)
→ Better search engine visibility
SRI adoption: 0/1 third-party resources protected (0%) (Security)
→ Reduced attack surface for visitors
https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 279ms CPU time (Performance)
→ Page loads faster for users
Thin content — only 47 words (SEO)
→ Better search engine visibility
…and 2 more resolved issue(s)
Recommended next steps (28)
- Sprint 1
Transfer efficiency: 42% (Sustainability)
- Sprint 2
Content-Security-Policy header is missing (Security)
- Sprint 2
Heading level skipped: H1 → H3 (missing H2) (Accessibility)
- Sprint 1
https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 337ms CPU time (Performance)
- Sprint 1
3 field(s) would benefit from inputmode attribute (Accessibility)
- Sprint 1
<iframe> missing title attribute (src="") (Accessibility)
- Sprint 1
https://xpenv.com/assets/index-CbiQIQhh.js: 641ms CPU time (Performance)
- Sprint 1
Unattributable: 342ms CPU time (Performance)
- Sprint 1
8 link(s) open in new tab without warning (Accessibility)
- Sprint 3
https://xpenv.com/assets/index-CbiQIQhh.js: 260 KB unused (63%) (Performance)
- Sprint 2
No privacy policy link detected (Compliance)
- Sprint 1
Login form does not contain a recognizable CSRF token (Security)
- Sprint 1
3 field(s) missing recommended autocomplete attribute (Accessibility)
- Sprint 1
No favicon.ico at site root (Accessibility)
- Sprint 2
IPv6 DNS records exist but server is not reachable (Infrastructure)
…and 13 more recommended item(s)