Skip to content

Changes

https://www.mossandmolt.com
Compared to previous audit · 18 hours ago View previous audit
35
New issues
24
Resolved
20
score changes
CategoryPreviousCurrentChange
CompositeB (84)B (84)—
PerformanceB (87)B (88) +1.000
SecurityB (82)C (78) -4.000
AccessibilityC (79)B (80) +1.000
SEOA (91)A (95) +4.000
InfrastructureB (86)B (89) +3.000
ComplianceB (83)B (82) -1.000
ContentB (85)B (86) +1.000
SustainabilityB (85)B (81) -4.000
MetricPreviousCurrentChange
Performance 31005600 +2500
Accessibility 1000010000—
Best Practices 1000010000—
SEO 92009200—
PWA 00—
Desktop Performance 88009300 +500
Desktop Accessibility 97009700—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 5.07 s4.94 s -129 ms
LCP 12.40 s14.36 s +1.96 s
TBT 350 ms172 ms -178 ms
CLS 0.3520.000 -0.352
Desktop FCP 748 ms716 ms -32 ms
Desktop LCP 1.19 s1.57 s +375 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0780.030 -0.048
TTFB †139 ms873 ms +734 ms
DNS 74 ms74 ms—
TLS †24 ms23 ms -2 ms
Connect 17 ms17 ms—
Total †139 ms910 ms +770 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Cookie 'localization' is missing the Secure flag security
CRITICAL Cookie 'cart_currency' is missing the Secure flag security
WARNING Referrer-Policy header is missing security
WARNING default-src directive is missing security
WARNING base-uri directive is missing security
WARNING JavaScript is 596 KB — consider code splitting or lazy loading performance
WARNING Unattributable: 1301ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/b610a19cewf693...: 38 KB unused (45%) performance
WARNING Total JS execution time is 7.2 s -- over the 3.5s budget performance
WARNING 5 unclassified cookie(s) set before any consent step compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING form-action directive is missing security
WARNING 444 HTTP requests — consider bundling or reducing performance
WARNING https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 439ms CPU time performance
WARNING 199 of 200 links are healthy content
WARNING 4 images significantly larger than display size content
WARNING 22 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING 21 images missing explicit width/height content
WARNING Multiple H1 headings (2 found) accessibility
WARNING Permissions-Policy header is missing security
WARNING 0.90g CO2 — above the median website (0.60g) sustainability
WARNING Images are 1.7 MB — compress or use modern formats performance
WARNING Page weight 3.8 MB exceeds 1 MB target by 2.8 MB performance
WARNING 1 `@font-face` rule(s) without `font-display` -- causes FOIT performance
WARNING Total image weight: 1444 KB (1.4 MB) content
WARNING HSTS is enabled but max-age is short (7889238s, should be >= 31536000s) security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING https://www.mossandmolt.com/: 3662ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/b610a19cewf693...: 640ms CPU time performance
WARNING Cookie 'localization' is missing the HttpOnly flag security
WARNING Cookie 'cart_currency' is missing the HttpOnly flag security
WARNING No Permissions-Policy header security
WARNING Page weighs 5.8 MB (3.8 MB transferred) performance
WARNING https://cdn.shopify.com/extensions/01a19bde-0e34-7...: 505ms CPU time performance
WARNING 156 inline style attribute(s) detected security
CRITICAL 196 of 200 links are healthy content
CRITICAL Content-Security-Policy header is missing security
CRITICAL Canonical target returns 403 seo
CRITICAL HSTS header is missing security
WARNING Unexpected status code: HTTP 403 accessibility
WARNING Unattributable: 1362ms CPU time performance
WARNING https://www.mossandmolt.com/: 5027ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/b610a19cewf693...: 35 KB unused (42%) performance
WARNING Broken link: https://www.mossandmolt.com/.well-known/ucp content
WARNING 2 above-fold image(s) marked loading="lazy" (LCP anti-pattern) content
WARNING JavaScript is 645 KB — consider code splitting or lazy loading performance
WARNING https://www.mossandmolt.com/cdn/wpm/b610a19cewf693...: 800ms CPU time performance
WARNING Broken link: https://www.mossandmolt.com/ content
WARNING Compressed response missing `Vary` header performance
WARNING Page weight 3.2 MB exceeds 1 MB target by 2.2 MB performance
WARNING Page weighs 5.2 MB (3.2 MB transferred) performance
WARNING 449 HTTP requests — consider bundling or reducing performance
WARNING https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 517ms CPU time performance
WARNING Broken link: https://www.mossandmolt.com/checkouts/internal/preloads.j... content
WARNING 24 images missing explicit width/height content
WARNING Total image weight: 1196 KB (1.2 MB) content
WARNING Images are 1.1 MB — compress or use modern formats performance
WARNING https://cdn.shopify.com/extensions/01a19ad6-3b93-7...: 625ms CPU time performance
WARNING 0.75g CO2 — above the median website (0.60g) sustainability
CRITICAL 2 link(s) with no accessible text accessibility
CRITICAL 10 publicly-accessible JavaScript source map(s) security
WARNING GraphQL introspection enabled at /api/graphql security
WARNING 3 link(s) with generic text accessibility
WARNING Broken link: https://monorail-edge.shopifysvc.com content
WARNING SRI adoption: 1/26 third-party resources protected (3%) security
WARNING External script from cdn.shopify.com lacks integrity attribute security
WARNING No DMARC record found security
WARNING CNAME record at zone apex infrastructure
WARNING Missing og:image content
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@610a19cewf693d529pf324840bm6169d9b4/cust…") accessibility
WARNING External link from cdn.shopify.com lacks integrity attribute security
WARNING Registrar lock is NOT enabled infrastructure
WARNING Heading level skipped: H2 → H4 (missing H3) accessibility
WARNING 1 link(s) open in a new tab without rel=noopener security
WARNING No favicon.ico at site root accessibility
WARNING Missing required property "name" for Organization content
WARNING No accessibility statement detected compliance
WARNING 2 Organization blocks on the page -- only one should describe the publishing entity content
WARNING 24 link(s) open in new tab without warning accessibility
+ content-language en-US
+ set-cookie _shopify_essential=:AaGfDdtiAAEAeeTbwJpeH4Kl8MI7Ryq-_vfomTK40q-fHF7E-o9mAig6R...
+ cf-cache-status DYNAMIC
+ strict-transport-security max-age=7889238
+ powered-by Shopify
+ cache-control private, max-age=0, must-revalidate
+ etag "sfr:computation:v2:7be3a42f02e2a1159e66a0fb27fe4212857e90c1e9bc0244d746ea0d3...
+ x-dc gcp-europe-west1,gcp-europe-west1,gcp-europe-west1
+ link <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="...
+ content-length 202127
+ shopify-complexity-score 7080
+ vary accept-encoding
+ product-filtering-backend bitset_roaring
+ cdn-cache-control no-cache, no-store
+ shopify-complexity-score-v2 708
+ content-security-policy block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
− cross-origin-resource-policy same-origin
− cross-origin-embedder-policy require-corp
− cross-origin-opener-policy same-origin
− cf-mitigated challenge
− referrer-policy same-origin
− permissions-policy accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(...
− critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
− origin-agent-cluster ?1
accept-ch
Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ... → Sec-CH-Viewport-Width
content-type
text/html; charset=UTF-8 → text/html; charset=utf-8
x-frame-options
SAMEORIGIN → DENY

7 headers unchanged

+ HSTS Security

14 technologies unchanged

Looking ahead

+14 pts
B (84) Could reach A+ (98)
Security +22Accessibility +20Content +14Performance +12Compliance +8Infrastructure +8Sustainability +4

Estimate — actual results may vary (55 issues to fix)

Website improvement report — Mossandmolt

November 2, 2026 → November 3, 2026

B B 84 → 84 0 pts

24

Resolved

35

New issues

20

Still remaining

Financial summary

Investment delivered

€3,273 in development time

Investment remaining

€4,810 to complete the remaining items

Ongoing risk

€1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score84 (B)84 (B)0
Performance87 (B)88 (B)+1
Security82 (B)78 (C)-4
Accessibility79 (C)80 (B)+1
SEO91 (A)95 (A)+4
Infrastructure86 (B)89 (B)+3
Compliance83 (B)82 (B)-1
Content85 (B)86 (B)+1
Sustainability85 (B)81 (B)-4

Resolved (24)

  • Unexpected status code: HTTP 403 (Accessibility)

    → Improved usability for assistive technology users

  • Unattributable: 1362ms CPU time (Performance)

    → Page loads faster for users

  • 196 of 200 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • https://www.mossandmolt.com/: 5027ms CPU time (Performance)

    → Page loads faster for users

  • https://www.mossandmolt.com/cdn/wpm/b610a19cewf693...: 35 KB unused (42%) (Performance)

    → Page loads faster for users

  • Broken link: https://www.mossandmolt.com/.well-known/ucp (Content)

    → Stronger social sharing and on-page quality

  • 2 above-fold image(s) marked loading="lazy" (LCP anti-pattern) (Content)

    → Stronger social sharing and on-page quality

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • JavaScript is 645 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • https://www.mossandmolt.com/cdn/wpm/b610a19cewf693...: 800ms CPU time (Performance)

    → Page loads faster for users

  • Broken link: https://www.mossandmolt.com/ (Content)

    → Stronger social sharing and on-page quality

  • Compressed response missing `Vary` header (Performance)

    → Page loads faster for users

  • Page weight 3.2 MB exceeds 1 MB target by 2.2 MB (Performance)

    → Page loads faster for users

  • Canonical target returns 403 (SEO)

    → Better search engine visibility

  • Page weighs 5.2 MB (3.2 MB transferred) (Performance)

    → Page loads faster for users

…and 9 more resolved issue(s)

Recommended next steps (55)

  • Sprint 1

    Cookie 'localization' is missing the Secure flag (Security)

  • Sprint 1

    Cookie 'cart_currency' is missing the Secure flag (Security)

  • Sprint 1

    2 link(s) with no accessible text (Accessibility)

  • Sprint 1

    10 publicly-accessible JavaScript source map(s) (Security)

  • Sprint 1

    Referrer-Policy header is missing (Security)

  • Sprint 1

    default-src directive is missing (Security)

  • Sprint 1

    base-uri directive is missing (Security)

  • Sprint 3

    JavaScript is 596 KB — consider code splitting or lazy loading (Performance)

  • Sprint 1

    Unattributable: 1301ms CPU time (Performance)

  • Sprint 3

    https://www.mossandmolt.com/cdn/wpm/b610a19cewf693...: 38 KB unused (45%) (Performance)

  • Sprint 2

    Total JS execution time is 7.2 s -- over the 3.5s budget (Performance)

  • Sprint 1

    5 unclassified cookie(s) set before any consent step (Compliance)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    form-action directive is missing (Security)

  • Sprint 2

    444 HTTP requests — consider bundling or reducing (Performance)

…and 40 more recommended item(s)

Send Feedback