Skip to content

Changes

https://nomicalc.com
Compared to previous audit · 10 minutes ago View previous audit
7
New issues
11
Resolved
14
score changes
CategoryPreviousCurrentChange
CompositeB (86)B (88) +2.000
PerformanceB (86)B (86)—
SecurityB (87)A (90) +3.000
AccessibilityB (80)B (86) +6.000
SEOA+ (98)A+ (98)—
InfrastructureA (90)A (90)—
ComplianceC (77)C (77)—
ContentA (91)A (91)—
SustainabilityC (79)C (79)—
MetricPreviousCurrentChange
Performance 85009500 +1000
Accessibility 96009600—
Best Practices 100009600 -400
SEO 1000010000—
PWA 00—
Desktop Performance 1000010000—
Desktop Accessibility 96009600—
Desktop Best Practices 100009600 -400
Desktop SEO 1000010000—
FCP 853 ms2.32 s +1.46 s
LCP 853 ms2.32 s +1.46 s
TBT 586 ms12 ms -574 ms
CLS 0.0000.000—
Desktop FCP 656 ms661 ms—
Desktop LCP 703 ms704 ms—
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0000.000—
TTFB †402 ms283 ms -119 ms
DNS †14 ms8 ms -6 ms
TLS †71 ms8 ms -63 ms
Connect †3 ms4 ms +1 ms
Total †405 ms284 ms -122 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL 'unsafe-inline' found in script source security
CRITICAL 'unsafe-eval' found in script source security
WARNING https://nomicalc.com/: 1407ms CPU time performance
WARNING https://nomicalc.com/assets/vendor-Boaau3YS.js: 277ms CPU time performance
WARNING https://nomicalc.com/assets/utils-CK9pFSIt.js: 202 KB unused (84%) performance
WARNING 0.70g CO2 — above the median website (0.60g) sustainability
WARNING Unattributable: 807ms CPU time performance
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL Content-Security-Policy header is missing security
WARNING 1 publicly-accessible JavaScript source map(s) security
WARNING Unattributable: 983ms CPU time performance
WARNING https://nomicalc.com/assets/vendor-Boaau3YS.js: 359ms CPU time performance
WARNING security.txt: Missing required 'Contact' field security
WARNING https://nomicalc.com/: 1478ms CPU time performance
WARNING 0.84g CO2 — above the median website (0.60g) sustainability
WARNING Manifest contains invalid JSON accessibility
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING https://nomicalc.com/assets/utils-CK9pFSIt.js: 201 KB unused (84%) performance
WARNING 5 link(s) open in new tab without warning accessibility
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No SPF record found security
WARNING Multiple <main> landmarks (2 found) accessibility
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING HSTS is missing includeSubDomains security
WARNING https://nomicalc.com/assets/supabase-9mFPMyoI.js: 22 KB unused (79%) performance
WARNING Registrar lock is NOT enabled infrastructure
WARNING No accessibility statement detected compliance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING 2 images missing explicit width/height content
WARNING Permissions-Policy covers 3/10 high-risk features (30%) security
WARNING DMARC policy is none — monitoring only security
WARNING https://nomicalc.com/assets/index-UWFBqukz.js: 157 KB unused (88%) performance
WARNING Page weight 3.0 MB exceeds 1 MB target by 2.0 MB performance
WARNING Twitter card is `summary_large_image` but OG image is 512×512 (ratio 1.00:1) -- closer to square content
WARNING 1 images significantly larger than display size content
WARNING 1 image(s) with generic alt text accessibility
WARNING Page weighs 4.4 MB (3.0 MB transferred) performance
WARNING All 2 images use legacy formats (JPEG/PNG/GIF) content
+ content-security-policy default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none...
x-nf-request-id
01KXZPXJR99H3PNK5JNPGDF8D2 → 01KXZQG1GHCNQEK44TRAQSSVPD
etag
"94ea93d644e4b2b74ca90f101856354b-ssl-df" → "8c05dc6a093a794924916bcbc88fe397-ssl-df"
cache-status
"Netlify Edge"; fwd=miss → "Netlify Edge"; fwd=stale

12 headers unchanged

Technology stack unchanged

11 technologies unchanged

Looking ahead

+10 pts
B (88) Could reach A+ (98)
Performance +14Accessibility +13Security +10Content +9Compliance +8Infrastructure +4Sustainability +4

Estimate — actual results may vary (28 issues to fix)

Website improvement report — Nomicalc

July 20, 2026 → July 20, 2026

B B 86 → 88 +2 pts

11

Resolved

7

New issues

21

Still remaining

Financial summary

Investment delivered

$1,625 in development time

Investment remaining

$5,908 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score86 (B)88 (B)+2
Performance86 (B)86 (B)0
Security87 (B)90 (A)+3
Accessibility80 (B)86 (B)+6
SEO98 (A+)98 (A+)0
Infrastructure90 (A)90 (A)0
Compliance77 (C)77 (C)0
Content91 (A)91 (A)0
Sustainability79 (C)79 (C)0

Resolved (11)

  • 1 publicly-accessible JavaScript source map(s) (Security)

    → Reduced attack surface for visitors

  • Unattributable: 983ms CPU time (Performance)

    → Page loads faster for users

  • https://nomicalc.com/assets/vendor-Boaau3YS.js: 359ms CPU time (Performance)

    → Page loads faster for users

  • Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

    → Improved usability for assistive technology users

  • security.txt: Missing required 'Contact' field (Security)

    → Reduced attack surface for visitors

  • https://nomicalc.com/: 1478ms CPU time (Performance)

    → Page loads faster for users

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • 0.84g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • Manifest contains invalid JSON (Accessibility)

    → Improved usability for assistive technology users

  • security.txt: Missing required 'Expires' field (RFC 9116) (Security)

    → Reduced attack surface for visitors

  • https://nomicalc.com/assets/utils-CK9pFSIt.js: 201 KB unused (84%) (Performance)

    → Page loads faster for users

Recommended next steps (28)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 1

    https://nomicalc.com/: 1407ms CPU time (Performance)

  • Sprint 1

    https://nomicalc.com/assets/vendor-Boaau3YS.js: 277ms CPU time (Performance)

  • Sprint 3

    https://nomicalc.com/assets/utils-CK9pFSIt.js: 202 KB unused (84%) (Performance)

  • Sprint 2

    0.70g CO2 — above the median website (0.60g) (Sustainability)

  • Sprint 1

    Unattributable: 807ms CPU time (Performance)

  • Sprint 1

    5 link(s) open in new tab without warning (Accessibility)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 2

    Multiple <main> landmarks (2 found) (Accessibility)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 1

    HSTS is missing includeSubDomains (Security)

  • Sprint 3

    https://nomicalc.com/assets/supabase-9mFPMyoI.js: 22 KB unused (79%) (Performance)

…and 13 more recommended item(s)

Send Feedback