Skip to content

Changes

https://nomicalc.com
Compared to previous audit · 10 minutes ago View previous audit
7
New issues
12
Resolved
14
score changes
CategoryPreviousCurrentChange
CompositeB (86)B (88) +2.000
PerformanceB (86)B (86)—
SecurityB (87)A (90) +3.000
AccessibilityB (80)B (86) +6.000
SEOA+ (98)A+ (98)—
InfrastructureA (90)A (90)—
ComplianceC (77)C (77)—
ContentA (91)A (91)—
SustainabilityC (79)C (79)—
MetricPreviousCurrentChange
Performance 85009500 +1000
Accessibility 96009600—
Best Practices 100009600 -400
SEO 1000010000—
PWA 00—
Desktop Performance 1000010000—
Desktop Accessibility 96009600—
Desktop Best Practices 100009600 -400
Desktop SEO 1000010000—
FCP 853 ms2.32 s +1.46 s
LCP 853 ms2.32 s +1.46 s
TBT 586 ms12 ms -574 ms
CLS 0.0000.000—
Desktop FCP 656 ms661 ms—
Desktop LCP 703 ms704 ms—
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0000.000—
TTFB †402 ms283 ms -119 ms
DNS †14 ms8 ms -6 ms
TLS †71 ms8 ms -63 ms
Connect †3 ms4 ms +1 ms
Total †405 ms284 ms -122 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL 'unsafe-eval' found in script source security
CRITICAL 'unsafe-inline' found in script source security
WARNING https://nomicalc.com/: 1407ms CPU time performance
WARNING https://nomicalc.com/assets/vendor-Boaau3YS.js: 277ms CPU time performance
WARNING https://nomicalc.com/assets/utils-CK9pFSIt.js: 202 KB unused (84%) performance
WARNING 0.70g CO2 — above the median website (0.60g) sustainability
WARNING Unattributable: 807ms CPU time performance
CRITICAL Content-Security-Policy header is missing security
CRITICAL No Content-Security-Policy header found security
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING Unattributable: 983ms CPU time performance
WARNING https://nomicalc.com/: 1478ms CPU time performance
WARNING security.txt: Missing required 'Contact' field security
WARNING Manifest contains invalid JSON accessibility
WARNING https://nomicalc.com/assets/vendor-Boaau3YS.js: 359ms CPU time performance
WARNING https://nomicalc.com/assets/utils-CK9pFSIt.js: 201 KB unused (84%) performance
WARNING 0.84g CO2 — above the median website (0.60g) sustainability
WARNING 1 publicly-accessible JavaScript source map(s) security
WARNING Permissions-Policy covers 3/10 high-risk features (30%) security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Page weighs 4.4 MB (3.0 MB transferred) performance
WARNING Registrar lock is NOT enabled infrastructure
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING 1 images significantly larger than display size content
WARNING DMARC policy is none — monitoring only security
WARNING https://nomicalc.com/assets/supabase-9mFPMyoI.js: 22 KB unused (79%) performance
WARNING Page weight 3.0 MB exceeds 1 MB target by 2.0 MB performance
WARNING 2 images missing explicit width/height content
WARNING No SPF record found security
WARNING Multiple <main> landmarks (2 found) accessibility
WARNING 1 image(s) with generic alt text accessibility
WARNING https://nomicalc.com/assets/index-UWFBqukz.js: 157 KB unused (88%) performance
WARNING Twitter card is `summary_large_image` but OG image is 512×512 (ratio 1.00:1) -- closer to square content
WARNING All 2 images use legacy formats (JPEG/PNG/GIF) content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING 5 link(s) open in new tab without warning accessibility
WARNING No accessibility statement detected compliance
WARNING HSTS is missing includeSubDomains security
+ content-security-policy default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none...
cache-status
"Netlify Edge"; fwd=miss → "Netlify Edge"; fwd=stale
etag
"94ea93d644e4b2b74ca90f101856354b-ssl-df" → "8c05dc6a093a794924916bcbc88fe397-ssl-df"
x-nf-request-id
01KXZPXJR99H3PNK5JNPGDF8D2 → 01KXZQG1GHCNQEK44TRAQSSVPD

12 headers unchanged

Technology stack unchanged

11 technologies unchanged

Looking ahead

+10 pts
B (88) Could reach A+ (98)
Performance +14Accessibility +13Security +10Content +9Compliance +8Infrastructure +4Sustainability +4

Estimate — actual results may vary (28 issues to fix)

Website improvement report — Nomicalc

July 20, 2026 → July 20, 2026

B B 86 → 88 +2 pts

12

Resolved

7

New issues

21

Still remaining

Financial summary

Investment delivered

$1,925 in development time

Investment remaining

$5,908 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score86 (B)88 (B)+2
Performance86 (B)86 (B)0
Security87 (B)90 (A)+3
Accessibility80 (B)86 (B)+6
SEO98 (A+)98 (A+)0
Infrastructure90 (A)90 (A)0
Compliance77 (C)77 (C)0
Content91 (A)91 (A)0
Sustainability79 (C)79 (C)0

Resolved (12)

  • security.txt: Missing required 'Expires' field (RFC 9116) (Security)

    → Reduced attack surface for visitors

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Unattributable: 983ms CPU time (Performance)

    → Page loads faster for users

  • No Content-Security-Policy header found (Security)

    → Reduced attack surface for visitors

  • https://nomicalc.com/: 1478ms CPU time (Performance)

    → Page loads faster for users

  • security.txt: Missing required 'Contact' field (Security)

    → Reduced attack surface for visitors

  • Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

    → Improved usability for assistive technology users

  • Manifest contains invalid JSON (Accessibility)

    → Improved usability for assistive technology users

  • https://nomicalc.com/assets/vendor-Boaau3YS.js: 359ms CPU time (Performance)

    → Page loads faster for users

  • https://nomicalc.com/assets/utils-CK9pFSIt.js: 201 KB unused (84%) (Performance)

    → Page loads faster for users

  • 0.84g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • 1 publicly-accessible JavaScript source map(s) (Security)

    → Reduced attack surface for visitors

Recommended next steps (28)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    https://nomicalc.com/: 1407ms CPU time (Performance)

  • Sprint 1

    https://nomicalc.com/assets/vendor-Boaau3YS.js: 277ms CPU time (Performance)

  • Sprint 3

    https://nomicalc.com/assets/utils-CK9pFSIt.js: 202 KB unused (84%) (Performance)

  • Sprint 2

    0.70g CO2 — above the median website (0.60g) (Sustainability)

  • Sprint 1

    Unattributable: 807ms CPU time (Performance)

  • Sprint 1

    Permissions-Policy covers 3/10 high-risk features (30%) (Security)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 1

    Page weighs 4.4 MB (3.0 MB transferred) (Performance)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 2

    1 images significantly larger than display size (Content)

  • Sprint 1

    DMARC policy is none — monitoring only (Security)

  • Sprint 3

    https://nomicalc.com/assets/supabase-9mFPMyoI.js: 22 KB unused (79%) (Performance)

…and 13 more recommended item(s)

Send Feedback