C — https://pcisecuritystandards.org

Site Health

Score: 74 / 100

Based on 8 categories, 0 sections

Decent speed, but optimizing further could improve engagement.

Several missing protections leave your users and data exposed.

Several issues make your site difficult for assistive technology users.

Well-optimized for search — your content is discoverable.

Good server performance with room for optimization.

Strong compliance posture across regulations.

Rich content metadata — your pages look great everywhere.

Reasonable footprint with room for optimization.

How is this calculated?

The overall score is a weighted average of individual category scores. Categories with more impact on user experience and security carry more weight.

Performance 25%Security 25%Accessibility 15%SEO 10%Infrastructure 10%Compliance 8%Content 5%Sustainability 2%

Weights reflect general web best practices. Individual needs may differ.

How the composite score is calculated

How you compare

Elementor · 32 peers

You 74

Avg 74

At average

0 50 100

Better than 43% of Elementor sites See full Elementor benchmark →

WordPress · 625 peers

You 74

Avg 74

At average

0 50 100

Better than 42% of WordPress sites See full WordPress benchmark →

Top Priorities (5)

Content-Security-Policy header is missing

Security gaps expose your site and users to attacks, eroding trust.

Security › Security Headers

No Content-Security-Policy header found

Security gaps expose your site and users to attacks, eroding trust.

Security › Content Security Policy

57 third-party resources (100% of weight)

Performance issues directly impact user engagement and conversion rates.

Performance › Page Weight Inventory

Cross-Origin-Embedder-Policy header is missing

Security gaps expose your site and users to attacks, eroding trust.

Security › Security Headers

Cross-Origin-Opener-Policy header is missing

Security gaps expose your site and users to attacks, eroding trust.

Security › Security Headers

View fix priority matrix

Fix Priority Matrix

5 findings

Impact

Quick Wins

High impact, low effort — start here.

Strategic

High impact, requires investment.

Easy Improvements

Small gains, minimal effort.

Nothing in this quadrant — good news.

Deprioritize

Low impact, high effort — do last.

Nothing in this quadrant — good news.

← Low effort High effort →

Embed this badge

Markdown

[![BeaverCheck](https://beavercheck.com/badge?url=https%3A%2F%2Fpcisecuritystandards.org)](https://beavercheck.com/results/5fb43b5f-9cf9-4b86-8887-2a9f0d8b86d2)

HTML

<a href="https://beavercheck.com/results/5fb43b5f-9cf9-4b86-8887-2a9f0d8b86d2"><img src="https://beavercheck.com/badge?url=https%3A%2F%2Fpcisecuritystandards.org" alt="BeaverCheck Score"></a>

Image URL

https://beavercheck.com/badge?url=https%3A%2F%2Fpcisecuritystandards.org

This badge auto-updates with your latest scan result.

What fixing these means

Your site performs reasonably well, but a few targeted fixes could meaningfully improve results. Your LCP of 8.3s exceeds Google's 2.5s 'Good' threshold and the 1 performance issue below directly contributes to it. Addressing the critical issues below would have the most immediate impact on your user trust.

4 security gaps detected — browsers may warn visitors about your site.

Your LCP is 8.3s — fixing the 1 performance critical could bring it under Google's 2.5s 'Good' threshold.

Conversion Barriers

3 critical 5 warning

8 barrier(s) likely increasing bounce by ~32%.

Speed (2)

Page takes 8.3s to load

+12% bounce

Users abandon at ~3s — you're 5.8s over the 2.5s threshold

Fix: Optimize render-blocking resources, preload the hero image, and compress images

High main-thread blocking time

+2% bounce

Page is non-interactive for 384ms after first paint

Fix: Defer third-party scripts and split large bundles

Trust (1)

No Content-Security-Policy header

+1% bounce

Higher XSS blast radius — one compromised script can exfiltrate the checkout form

Fix: Ship a reporting-only CSP first, then enforce once violations are clean

Usability (1)

Severe layout shift during page load

+6% bounce

Users mis-click when content jumps — converting intent into frustration

Fix: Reserve space for images, ads, and embeds with explicit width/height

Content (1)

Content is hard to read

+2% bounce

Graduate-level reading difficulty — limits the addressable audience for product or blog pages

Fix: Shorten sentences; replace jargon with plain language; target Flesch ease ≥60

Navigation (3)

7 link(s) with generic text ("click here", "read more")

+1% bounce

Screen-reader users navigating by link list see no context — and search engines can't infer relevance

Fix: Rewrite with descriptive phrases that identify the destination

No skip-to-content link

+1% bounce

Keyboard and screen-reader users must tab through the entire header on every page

Fix: Add a visible-on-focus <a href="#main">Skip to content</a> as the first focusable element

3 broken link(s) on the page

+5% bounce

Clicks land on 404s — trust drops and the session often ends

Fix: Fix or remove the broken destinations surfaced on the Content tab

Preliminary CRO audit — each barrier links to the tab with detailed analysis.

Return on Investment

$400 investment → $5,031/month returns + USD 157,500 risk avoided

Payback period: < 1 month First-year ROI: +14994%

Investment

$400

4h · 5 findings

Monthly returns

$5,031 /mo

~$60,376 / year

Conversions recovered $5,030
Bandwidth savings $0.97

Regulatory risk avoided

USD 157,500

if kept compliant

ADA Title III USD 150,000
CCPA/CPRA USD 7,500

Payback period

0 12mo 24mo

$200 — in quick wins — start here for the fastest payback

Figures combine localized regulatory fine ceilings, search/conversion value priced against local CPC, and bandwidth waste estimates. Results depend on implementation quality and audience composition. Not legal or financial advice.

Full methodology & sources

Estimated Remediation Cost

$400

4.0 developer hours at $100/hr

Based on United States rates ($100/hr)

Quick wins

$200 4 fixes in ~120 minutes

Start here for the best return on investment

Cost by category

Cost by effort level

Adjust assumptions

Custom rate

$ /hr

Rates reflect fully-loaded developer cost including overhead

How developer rates are sourced

What Inaction Is Costing You

$13,126 / month at risk

~$157,512 / year if left unfixed

Compliance Risk

$157,500

ADA Title IIICCPA/CPRA

No privacy policy link detected
CCPA/CPRA: USD 2,500 – USD 7,500
Trackers detected but no cookie policy found
CCPA/CPRA: USD 2,500 – USD 7,500
Trackers detected but no privacy policy found
CCPA/CPRA: USD 2,500 – USD 7,500

+4 more

Bandwidth Waste

$0.97 /mo

12109.9 MB/mo × 0.080 USD/GB

Optimize transfer: save ~1.2 MB per page load
Saves $0.97/mo

Compliance figures represent the statutory maximum fine for the most severe triggered category, capped per regulation — not the sum of per-finding penalties. Based on published regulatory fine ranges. This is not legal advice.

Compliance methodology · SEO assumptions · Bandwidth model

Your performance is already good — improvements may show diminishing returns

Monthly visitors

Unique monthly visitors from your analytics

Conversion rate (%)

Purchases, signups, or key actions

Avg. order value

Optional — for revenue estimation

additional conversions/month

more engaged visitors from reduced bounce

potential monthly revenue

Current bounce (est.)

After fixes (est.)

Estimated bounce reduction

Fix 2 critical issues to capture this value

How this is calculated

Based on Google/Deloitte research ("Milliseconds Make Millions") showing a ~7% bounce rate increase per additional second of LCP above the 2.5s "Good" threshold.

Your site's LCP: → estimated after fixes.

These are estimates based on industry research — actual results vary

Bounce-rate model & assumptions

Your data stays in your browser — nothing is sent to our servers

Was this report useful?

Thanks for your feedback!

We'll use a cached audit if available, or offer to scan.

Checking for existing audit...

Press ? for shortcuts

Lighthouse Scores

Industry-standard audits powered by Google Lighthouse.

Performance

Accessibility

Best Practices

SEO

Core Web Vitals

Key metrics that affect user experience.

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

2.54 s

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

8.35 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

384 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.846

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

5.11 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

9.18 s

Detailed Report

Audit breakdown by category with detailed findings.

Performance

Insights

Remove large, duplicate JavaScript modules from bundles to reduce unnecessary bytes consumed by network activity.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile Baseline features, unless you know you must support older browsers. Learn why most sites can deploy ES6+ code without transpiling

Why this matters

Shipping ES5 transpiled code to modern browsers wastes bytes — every user with an evergreen browser pays for compatibility you don't need.

Learn more ▾

Most users today run browsers that natively support ES6+, async/await, optional chaining, and the rest of modern JavaScript. Transpiling to ES5 'just in case' adds 20-40% to your bundle for no benefit. Configure your build to target a modern browserslist, or ship a differential bundle pair (modern + legacy) with the module/nomodule pattern.

Source: Google web.dev / Lighthouse

3rd party code can significantly impact load performance. Reduce and defer loading of 3rd party code to prioritize your page's content.

Why this matters

Performance issues directly impact user engagement and conversion rates.

A long cache lifetime can speed up repeat visits to your page. Learn more about caching.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Request	Cache TTL	Transfer Size
cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js?ver=6.9.4	604800.0 s	123.2 KiB

Layout shifts occur when elements move absent any user interaction. Investigate the causes of layout shifts, such as elements being added, removed, or their fonts changing as the page loads.

Why this matters

Performance issues directly impact user engagement and conversion rates.

headings: [map[key:node label:Element subItemsHeading:map[key:extra] valueType:node] map[granularity:0.001 key:score label:Layout shift score subItemsHeading:map[key:cause valueType:text] valueType:numeric]]

items: [map[node:map[type:text value:Total] score:0.845867] map[node:map[boundingRect:map[bottom:637 height:538 left:15 right:397 top:98 width:382] lhId:page-15-DIV nodeLabel:Registration Now Open We invite the entire payment security industry to attend… path:1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,0,SECTION,0,DIV,0,DIV,0,DIV,0,DIV,0,DIV,0,DIV selector:div.elementor-widget-wrap > div.elementor-element > div.elementor-widget-container > div.swiper snippet:<div class="swiper mySwiper hero__slider swiper-initialized swiper-horizontal swiper-a…"> type:node] score:0.834474 subItems:map[items:[map[cause:Web font extra:map[type:url value:https://www.pcisecuritystandards.org/wp-content/uploads/2022/03/6afe4676-059a-4aa8-b891-29856bbcba22.woff2]] map[cause:Web font extra:map[type:url value:https://www.pcisecuritystandards.org/wp-content/uploads/2022/03/627fbb5a-3bae-4cd9-b617-2f923e29d55e.woff2]] map[cause:Web font extra:map[type:url value:https://www.pcisecuritystandards.org/wp-content/uploads/2022/03/2cd55546-ec00-4af9-aeca-4a3cd186da53.woff2]] map[cause:Web font extra:map[type:url value:https://www.pcisecuritystandards.org/wp-content/uploads/2022/03/14c73713-e4df-4dba-933b-057feeac8dd1.woff2]]] type:subitems]] map[node:map[boundingRect:map[bottom:1334 height:676 left:0 right:412 top:658 width:412] lhId:page-16-SECTION nodeLabel:I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… path:1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,2,SECTION selector:main#content > div.page-content > div.elementor > section.elementor-section snippet:<section class="elementor-section elementor-top-section elementor-element elementor-elemen…" data-id="71af8676" data-element_type="section" data-e-type="section" data-settings="{"background_background":"classic"}"> type:node] score:0.010148] map[node:map[boundingRect:map[bottom:1334 height:676 left:0 right:412 top:658 width:412] lhId:page-16-SECTION nodeLabel:I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… path:1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,2,SECTION selector:main#content > div.page-content > div.elementor > section.elementor-section snippet:<section class="elementor-section elementor-top-section elementor-element elementor-elemen…" data-id="71af8676" data-element_type="section" data-e-type="section" data-settings="{"background_background":"classic"}"> type:node] score:0.001203] map[node:map[boundingRect:map[bottom:369 height:16 left:37 right:45 top:353 width:8] lhId:page-18-::after nodeLabel:div.elementor-widget-container > div.swiper > div.swiper-button-prev > ::after path:1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,0,SECTION,0,DIV,0,DIV,0,DIV,0,DIV,0,DIV,0,DIV,3,DIV,0,::after selector:div.elementor-widget-container > div.swiper > div.swiper-button-prev > ::after snippet:<::after> type:node] score:4.2e-05]]

Your first network request is the most important. Reduce its latency by avoiding redirects, ensuring a fast server response, and enabling text compression.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Consider setting font-display to swap or optional to ensure text is consistently visible. swap can be further optimized to mitigate layout shifts with font metric overrides.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Est Savings
/wp-content/plugins/elementor/assets/lib/font-awesome/web...	45 ms

A forced reflow occurs when JavaScript queries geometric properties (such as offsetWidth) after styles have been invalidated by a change to the DOM state. This can result in poor performance. Learn more about forced reflows and possible mitigations.

Why this matters

Performance issues directly impact user engagement and conversion rates.

headings: [map[key:source label:Source valueType:source-location] map[granularity:1 key:reflowTime label:Total reflow time valueType:ms]]

items: [map[reflowTime:90.619 source:map[type:text value:[unattributed]]]]

Reducing the download time of images can improve the perceived load time of the page and LCP. Learn more about optimizing image size

Why this matters

Performance issues directly impact user engagement and conversion rates.

	URL	Resource Size	Est Savings
Registration Now Open `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/04/vancouver_skyline.png	394.7 KiB	388.9 KiB
2025 PCI SSC Annual Report `div.blog__slider-card > a > div.blog__slider-image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/01/Website_439x439.png	354.3 KiB	330.5 KiB
Take In-Person Training in Dallas `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/04/in-person-training.png	291.7 KiB	285.9 KiB
Special Offer: Become a PCIP `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/03/special-offer.png	253.0 KiB	247.2 KiB
The AI Exchange: Innovators in Payment Security `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2025/10/AI-hero.png	228.0 KiB	222.2 KiB
Share your Favorite PCI SSC Memory `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/02/memory_lane_439x439.png	188.3 KiB	182.6 KiB
RFCs `div.blog__slider-card > a > div.blog__slider-image > img`	www.pcisecuritystandards.org/wp-content/uploads/2023/04/rfc-homepage.png	187.5 KiB	169.8 KiB
Registration Now Open We invite the entire payment security industry to attend… `main#content > div.page-content > div.elementor > section.elementor-section`	www.pcisecuritystandards.org/wp-content/uploads/2022/05/hero-background-1-1.webp	264.4 KiB	131.3 KiB
PCI Perspectives Blog 21 APRIL 2026 PCI SSC Launches Enhanced Language Microsit… `main#content > div.page-content > div.elementor > section.elementor-section`	www.pcisecuritystandards.org/wp-content/uploads/2022/06/Rectangle-oraginal.webp	295.1 KiB	126.2 KiB
Unlock Exclusive Updates `div.blog__slider-card > a > div.blog__slider-image > img`	www.pcisecuritystandards.org/wp-content/uploads/2024/11/Block_1.png	73.5 KiB	62.1 KiB
Recently Published `div.blog__slider-card > a > div.blog__slider-image > img`	www.pcisecuritystandards.org/wp-content/uploads/2024/08/standards_new_card.png	70.0 KiB	59.5 KiB
Sponsorship Opportunities Available `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/02/sponsor-homepage.jpg	27.4 KiB	22.4 KiB
REGISTRATION OPEN: Join Us at the 2026 PCI SSC North America Community Meeting… `main#content > div.page-content > div.elementor > section.elementor-section`	www.pcisecuritystandards.org/wp-content/uploads/2022/03/Mask-1.jpg	190.2 KiB	21.2 KiB
Attend a 2026 PCI SSC Community Meeting `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/02/2026_STD_439x439.jpg	24.6 KiB	20.1 KiB
Share Your Story `div.blog__slider-card > a > div.blog__slider-image > img`	/wp-content/uploads/2025/04/sponsor-highlight-homepage.jpg	15.5 KiB	4.1 KiB

Optimize LCP by making the LCP image discoverable from the HTML immediately, and avoiding lazy-loading

Why this matters

Performance issues directly impact user engagement and conversion rates.

lhId: page-7-SECTION

nodeLabel: Registration Now Open We invite the entire payment security industry to attend…

path: 1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,0,SECTION

selector: main#content > div.page-content > div.elementor > section.elementor-section

snippet: <section class="elementor-section elementor-top-section elementor-element elementor-elemen…" data-id="ec0b8eb" data-element_type="section" data-e-type="section" data-settings="{"background_background":"classic"}">

Avoid chaining critical requests by reducing the length of chains, reducing the download size of resources, or deferring the download of unnecessary resources to improve page load.

Why this matters

Performance issues directly impact user engagement and conversion rates.

description: [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints help the browser establish a connection earlier in the page load, saving time when the first request for that origin is made. The following are the origins that the page preconnected to.

title: Preconnected origins

value: no origins were preconnected

description: Add [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints to your most important origins, but try to use no more than 4.

title: Preconnect candidates

value: No additional origins are good candidates for preconnecting

Requests are blocking the page's initial render, which may delay LCP. Deferring or inlining can move these network requests out of the critical path.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Transfer Size	Duration
/_static/??-eJzTLy/QzcxLzilNSS3WzwKiwtLUokoopZebmaeXVayjj...	34.8 KiB	150 ms
/wp-content/plugins/client-mu-plugins/pci-ssc-core/public...	0 B
/_static/??-eJxVjNEKgzAMAH9oMWxs6svYt3RpcYE2hqVl+PdGBqJPB...	49.3 KiB	300 ms
/_static/??-eJytkk1uAjEMhS/UYCjSsEI9iycxg1XnR2NX096eaBghF...	30.6 KiB	150 ms
/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5...	3.7 KiB

These insights are also available in the Chrome DevTools Performance Panel - record a trace to view more detailed information.

Redirects introduce additional delays before the page can be loaded. Learn how to avoid page redirects.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 834 ms

URL	Time Spent
pcisecuritystandards.org/	834 ms
www.pcisecuritystandards.org/	0.0 ms

These are the largest layout shifts observed on the page. Each table item represents a single layout shift, and shows the element that shifted the most. Below each item are possible root causes that led to the layout shift. Some of these layout shifts may not be included in the CLS metric value due to windowing. Learn how to improve CLS

Why this matters

Performance issues directly impact user engagement and conversion rates.

Element	Layout shift score
Registration Now Open We invite the entire payment security industry to attend… `div.elementor-widget-wrap > div.elementor-element > div.elementor-widget-container > div.swiper`	0.834
I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… `main#content > div.page-content > div.elementor > section.elementor-section`	0.010
I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… `main#content > div.page-content > div.elementor > section.elementor-section`	0.001
div.elementor-widget-container > div.swiper > div.swiper-button-prev > ::after `div.elementor-widget-container > div.swiper > div.swiper-button-prev > ::after`	0.000

Time to Interactive is the amount of time it takes for the page to become fully interactive. Learn more about the Time to Interactive metric.

Why this matters

Performance issues directly impact user engagement and conversion rates.

TTI

The maximum potential First Input Delay that your users could experience is the duration of the longest task. Learn more about the Maximum Potential First Input Delay metric.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Diagnostics

Reduce unused rules from stylesheets and defer CSS not used for above-the-fold content to decrease bytes consumed by network activity. Learn how to reduce unused CSS.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 450 ms 98.9 KiB

URL	Transfer Size	Est Savings
/_static/??-eJxVjNEKgzAMAH9oMWxs6svYt3RpcYE2hqVl+PdGBqJPB...	49.1 KiB	46.9 KiB
/_static/??-eJytkk1uAjEMhS/UYCjSsEI9iycxg1XnR2NX096eaBghF...	30.4 KiB	28.8 KiB
@charset "UTF-8";/** THIS FILE IS AUTOMATICALLY GENERATED...	23.7 KiB	23.3 KiB

Reduce unused JavaScript and defer loading scripts until they are required to decrease bytes consumed by network activity. Learn how to reduce unused JavaScript.

Why this matters

Multi-megabyte JavaScript bundles delay every interactive feature on the page.

Learn more ▾

This is the Lighthouse audit fired when too much JS is shipped relative to what executes. The fix isn't a config flag — it requires bundle analysis (webpack-bundle-analyzer, rollup-plugin-visualizer), splitting routes into chunks, lazy-loading off-screen components, and removing unused dependencies. Fundamentally different from minification: minifying reduces byte count, this reduces what's downloaded at all.

Source: Google web.dev / Lighthouse

Estimated savings: 450 ms 162.1 KiB

URL	Transfer Size	Est Savings
www.googletagmanager.com/gtag/js?id=UA-6219923-9&ver=1.0.0	124.8 KiB	74.0 KiB
cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js?ver=6.9.4	122.8 KiB	57.3 KiB
/_static/??-eJytkc1uAjEMhF8Ib/iR4IQ48xjZxFq8OE4UJ00fvwGBC...	54.2 KiB	30.8 KiB

Consider reducing the time spent parsing, compiling, and executing JS. You may find delivering smaller JS payloads helps with this. Learn how to reduce Javascript execution time.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Total CPU Time	Script Evaluation	Script Parse
www.pcisecuritystandards.org/	900 ms	34 ms	7.6 ms
/_static/??-eJzTLy/QzcxLzilNSS3WzwKiwtLUokoopZebmaeXVayjj...	813 ms	742 ms	8.2 ms
/_static/??-eJytkc1uAjEMhF8Ib/iR4IQ48xjZxFq8OE4UJ00fvwGBC...	791 ms	250 ms	21 ms
cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js?ver=6.9.4	389 ms	303 ms	54 ms
Unattributable	355 ms	5.8 ms	0.0 ms
www.googletagmanager.com/gtag/js?id=UA-6219923-9&ver=1.0.0	124 ms	90 ms	33 ms

Consider reducing the time spent parsing, compiling and executing JS. You may find delivering smaller JS payloads helps with this. Learn how to minimize main-thread work

Why this matters

Performance issues directly impact user engagement and conversion rates.

Category	Time Spent
Script Evaluation	1.6 s
Other	919 ms
Style & Layout	587 ms
Parse HTML & CSS	197 ms
Rendering	175 ms
Script Parsing & Compilation	153 ms

Many navigations are performed by going back to a previous page, or forwards again. The back/forward cache (bfcache) can speed up these return navigations. Learn more about the bfcache

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failure reason	Failure type
Pages whose main resource has cache-control:no-store cannot enter back/forward cache.	Not actionable
Back/forward cache is disabled because some JavaScript network request received resource with Cache-Control: no-store header.	Not actionable

Large network payloads cost users real money and are highly correlated with long load times. Learn how to reduce payload sizes.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Transfer Size
www.pcisecuritystandards.org/wp-content/uploads/2026/04/vancouver_skyline.png	395.5 KiB
www.pcisecuritystandards.org/wp-content/uploads/2026/01/Website_439x439.png	355.0 KiB
www.pcisecuritystandards.org/wp-content/uploads/2022/03/Rectangle.jpg	295.8 KiB
www.pcisecuritystandards.org/wp-content/uploads/2022/06/Rectangle-oraginal.webp	295.8 KiB
www.pcisecuritystandards.org/wp-content/uploads/2026/04/in-person-training.png	292.3 KiB
www.pcisecuritystandards.org/wp-content/uploads/2022/05/hero-background-1-1.webp	265.0 KiB
www.pcisecuritystandards.org/wp-content/uploads/2026/03/special-offer.png	253.6 KiB
www.pcisecuritystandards.org/wp-content/uploads/2025/10/AI-hero.png	228.6 KiB
www.pcisecuritystandards.org/wp-content/uploads/2022/03/Mask-1.jpg	190.7 KiB
www.pcisecuritystandards.org/wp-content/uploads/2026/02/memory_lane_439x439.png	188.9 KiB

More information about the performance of your application. These numbers don't directly affect the Performance score.

●Optimize DOM size

●LCP breakdown

●Modern HTTP

●Optimize viewport for mobile

●Minify CSS

●Minify JavaScript

●Avoid long main-thread tasks 9 long tasks found

●Avoid non-composited animations 11 animated elements found

●Image elements have explicit `width` and `height`

●Network Requests

●Network Round Trip Times 30 ms

●Server Backend Latencies 80 ms

●Tasks

●Diagnostics

●Metrics

●Screenshot Thumbnails

●Final Screenshot

●Script Treemap Data

●Resources Summary

●Initial server response time was short Root document took 440 ms

○INP breakdown

○User Timing marks and measures

Accessibility

These checks highlight opportunities to improve the accessibility of your web app. Automatic detection can only detect a subset of issues and does not guarantee the accessibility of your web app, so manual testing is also encouraged.

Contrast

Low-contrast text is difficult or impossible for many users to read. Learn how to provide sufficient color contrast.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
Accept `div#ccc-notify > div.ccc-notify-buttons > button#ccc-notify-accept > span`
Cookie Preferences `div#ccc-notify > div.ccc-notify-buttons > button.ccc-notify-button > span`
Featured FAQ `div.elementor-image-box-wrapper > div.elementor-image-box-content > h3.elementor-image-box-title > a`
Just Published `div.elementor-image-box-wrapper > div.elementor-image-box-content > h3.elementor-image-box-title > a`
Featured Document `div.elementor-image-box-wrapper > div.elementor-image-box-content > h3.elementor-image-box-title > a`
Association Management services provided by Virtual, Inc. `div.elementor-widget-container > ul.elementor-icon-list-items > li.elementor-icon-list-item > span.elementor-icon-list-text`
Antitrust Policy `ul.elementor-icon-list-items > li.elementor-icon-list-item > a > span.elementor-icon-list-text`
Privacy Policy `ul.elementor-icon-list-items > li.elementor-icon-list-item > a > span.elementor-icon-list-text`
IPR Policy `ul.elementor-icon-list-items > li.elementor-icon-list-item > a > span.elementor-icon-list-text`

These are opportunities to improve the legibility of your content.

Best practices

Touch targets with sufficient size and spacing help users who may have difficulty targeting small controls to activate the targets. Learn more about touch targets.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
Go to slide 2 `div.elementor-widget-container > div.swiper > div.swiper-pagination > span.swiper-pagination-bullet`
Go to slide 3 `div.elementor-widget-container > div.swiper > div.swiper-pagination > span.swiper-pagination-bullet`
Español `div.elementor-widget-container > ul.elementor-icon-list-items > li.elementor-icon-list-item > a`
Português `div.elementor-widget-container > ul.elementor-icon-list-items > li.elementor-icon-list-item > a`
中文 `div.elementor-widget-container > ul.elementor-icon-list-items > li.elementor-icon-list-item > a`

These items highlight common accessibility best practices.

Visible text labels that do not match the accessible name can result in a confusing experience for screen reader users. Learn more about accessible names.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
Unlock Exclusive Updates Become a part of our community and join our mailing l… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
2025 PCI SSC Annual Report PCI Security Standards Council publishes first annu… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
Share Your Story Sign up for our Call for Speakers notification email list to … `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
Now Available To address stakeholder feedback and questions received since PCI… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
Just Published PCI PIN Transaction Security (PTS) Point of Interaction (POI) M… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
RFCs The RFC process is an avenue for PCI SSC stakeholders to provide feedback… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
Recently Published PCI SSC has published version 1.1 of the PCI Mobile Payment… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
21 APRIL 2026 PCI SSC Launches Enhanced Language Microsites for Global Audience… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`

○Interactive controls are keyboard focusable

○Interactive elements indicate their purpose and state

○The page has a logical tab order

○Visual order on the page follows DOM order

○User focus is not accidentally trapped in a region

○The user's focus is directed to new content added to the page

○HTML5 landmark elements are used to improve navigation

○Offscreen content is hidden from assistive technology

○Custom controls have associated labels

○Custom controls have ARIA roles

●`[aria-*]` attributes match their roles

●`[aria-hidden="true"]` is not present on the document `<body>`

●`[role]`s have all required `[aria-*]` attributes

●`[role]` values are valid

●`[aria-*]` attributes have valid values

●`[aria-*]` attributes are valid and not misspelled

●Buttons have an accessible name

●Image elements have `[alt]` attributes

●`[user-scalable="no"]` is not used in the `<meta name="viewport">` element and the `[maximum-scale]` attribute is not less than 5.

●`[accesskey]` values are unique

●`button`, `link`, and `menuitem` elements have accessible names

●ARIA attributes are used as specified for the element's role

●Elements with `role="dialog"` or `role="alertdialog"` have accessible names.

●`[aria-hidden="true"]` elements do not contain focusable descendents

●Elements use only permitted ARIA attributes

●Document has a `<title>` element

●`<html>` element has a `[lang]` attribute

●`<html>` element has a valid value for its `[lang]` attribute

●Links are distinguishable without relying on color.

●Links have a discernible name

●Lists contain only `<li>` elements and script supporting elements (`<script>` and `<template>`).

●List items (`<li>`) are contained within `<ul>`, `<ol>` or `<menu>` parent elements

●No element has a `[tabindex]` value greater than 0

●Heading elements appear in a sequentially-descending order

●Document has a main landmark.

●Deprecated ARIA roles were not used

●Identical links have the same purpose.

○ARIA input fields have accessible names

○ARIA `meter` elements have accessible names

○ARIA `progressbar` elements have accessible names

○Elements with an ARIA `[role]` that require children to contain a specific `[role]` have all required children.

○`[role]`s are contained by their required parent element

○Elements with the `role=text` attribute do not have focusable descendents.

○ARIA toggle fields have accessible names

○ARIA `tooltip` elements have accessible names

○ARIA `treeitem` elements have accessible names

○The page contains a heading, skip link, or landmark region

○`<dl>`'s contain only properly-ordered `<dt>` and `<dd>` groups, `<script>`, `<template>` or `<div>` elements.

○Definition list items are wrapped in `<dl>` elements

○ARIA IDs are unique

○No form fields have multiple labels

○`<frame>` or `<iframe>` elements have a title

○`<html>` element has an `[xml:lang]` attribute with the same base language as the `[lang]` attribute.

○Input buttons have discernible text.

○`<input type="image">` elements have `[alt]` text

○Form elements have associated labels

○The document does not use `<meta http-equiv="refresh">`

○`<object>` elements have alternate text

○Select elements have associated label elements.

○Skip links are focusable.

○Cells in a `<table>` element that use the `[headers]` attribute refer to table cells within the same table.

○`<th>` elements and elements with `[role="columnheader"/"rowheader"]` have data cells they describe.

○`[lang]` attributes have a valid value

○`<video>` elements contain a `<track>` element with `[kind="captions"]`

○Tables have different content in the summary attribute and `<caption>`.

○All heading elements contain content.

○Uses ARIA roles only on compatible elements

○Image elements do not have `[alt]` attributes that are redundant text.

○Tables use `<caption>` instead of cells with the `[colspan]` attribute to indicate a caption.

○`<td>` elements in a large `<table>` have one or more table headers.

Best Practices

General

Errors logged to the console indicate unresolved problems. They can come from network request failures and other browser concerns. Learn more about this errors in console diagnostic audit

Why this matters

Performance issues directly impact user engagement and conversion rates.

Source	Description
/wp-content/plugins/client-mu-plugins/pci-ssc-core/public...	`Failed to load resource: the server responded with a status of 404 ()`
/wp-content/plugins/client-mu-plugins/pci-ssc-core/public...	`Failed to load resource: the server responded with a status of 404 ()`

●Uses HTTPS

●Avoids deprecated APIs

●Avoids third-party cookies

●Allows users to paste into input fields

●Avoids requesting the geolocation permission on page load

●Avoids requesting the notification permission on page load

●Displays images with correct aspect ratio

●Serves images with appropriate resolution

●Page has the HTML doctype

●Properly defines charset

●No issues in the `Issues` panel in Chrome Devtools

●Ensure CSP is effective against XSS attacks

●Ensure proper origin isolation with COOP

●Mitigate DOM-based XSS with Trusted Types

●Detected JavaScript libraries

●Page has valid source maps

○Redirects HTTP traffic to HTTPS

○Use a strong HSTS policy

○Mitigate clickjacking with XFO or CSP

SEO

These checks ensure that your page is following basic search engine optimization advice. There are many additional factors Lighthouse does not score here that may affect your search ranking, including performance on Core Web Vitals. Learn more about Google Search Essentials.

Content Best Practices

Descriptive link text helps search engines understand your content. Learn how to make links more accessible.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Link destination	Link Text
/program_training_and_qualification/pci_professional_qual...	MORE INFORMATION
www.pcisecuritystandards.org/events/event-sponsorship-opportunities/	LEARN MORE
/the-ai-exchange-innovators-in-payment-security-featuring...	READ MORE
/wp-content/uploads/2026/03/UPDATED2-Extension-of-Expirat...	Read More
/about_us/press_releases/pci-security-standards-council-p...	Read More
/about_us/press_releases/pci-security-standards-council-a...	Read More
events.pcisecuritystandards.org/	More information
/faq/articles/Frequently_Asked_Question/What-are-acceptab...	Read More
www.pcisecuritystandards.org/document_library?category=pcidss	Read More

Format your HTML in a way that enables crawlers to better understand your app’s content.

○Structured data is valid

●Page isn’t blocked from indexing

●Document has a `<title>` element

●Document has a meta description

●Page has successful HTTP status code

●Links are crawlable

●robots.txt is valid

●Image elements have `[alt]` attributes

●Document has a valid `hreflang`

●Document has a valid `rel=canonical`

Lighthouse Scores

Industry-standard audits powered by Google Lighthouse. — Desktop

Performance

Accessibility

Best Practices

SEO

Core Web Vitals

Key metrics that affect user experience. — Desktop

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

654 ms

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

2.00 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

3 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

1.263

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

1.56 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

2.00 s

Detailed Report

Audit breakdown by category with detailed findings.

Performance

Insights

Remove large, duplicate JavaScript modules from bundles to reduce unnecessary bytes consumed by network activity.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Why this matters

Shipping ES5 transpiled code to modern browsers wastes bytes — every user with an evergreen browser pays for compatibility you don't need.

Learn more ▾

Source: Google web.dev / Lighthouse

3rd party code can significantly impact load performance. Reduce and defer loading of 3rd party code to prioritize your page's content.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Layout shifts occur when elements move absent any user interaction. Investigate the causes of layout shifts, such as elements being added, removed, or their fonts changing as the page loads.

Why this matters

Performance issues directly impact user engagement and conversion rates.

items: [map[node:map[type:text value:Total] score:1.2634930000000002] map[node:map[boundingRect:map[bottom:5979 height:5800 left:0 right:1350 top:179 width:1350] lhId:page-18-MAIN nodeLabel:Registration Now Open We invite the entire payment security industry to attend… path:1,HTML,1,BODY,2,MAIN selector:body.home > main#content snippet:<main id="content" class="site-main post-17664 page type-page status-publish has-post-thumbnail hent…" role="main"> type:node] score:0.859352] map[node:map[boundingRect:map[bottom:798 height:619 left:0 right:1350 top:179 width:1350] lhId:page-5-SECTION nodeLabel:Registration Now Open We invite the entire payment security industry to attend… path:1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,0,SECTION selector:main#content > div.page-content > div.elementor > section.elementor-section snippet:<section class="elementor-section elementor-top-section elementor-element elementor-elemen…" data-id="ec0b8eb" data-element_type="section" data-e-type="section" data-settings="{"background_background":"classic"}"> type:node] score:0.397516] map[node:map[boundingRect:map[bottom:1210 height:411 left:0 right:1350 top:799 width:1350] lhId:page-19-SECTION nodeLabel:I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… path:1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,2,SECTION selector:main#content > div.page-content > div.elementor > section.elementor-section snippet:<section class="elementor-section elementor-top-section elementor-element elementor-elemen…" data-id="71af8676" data-element_type="section" data-e-type="section" data-settings="{"background_background":"classic"}"> type:node] score:0.003155] map[node:map[boundingRect:map[bottom:41 height:30 left:958 right:1044 top:11 width:86] lhId:page-11-DIV nodeLabel:Contact Us path:1,HTML,1,BODY,1,HEADER,1,HEADER,0,DIV,0,DIV,0,DIV,0,SECTION,0,DIV,0,DIV,0,DIV,0,DIV selector:div.elementor-container > div.elementor-column > div.elementor-widget-wrap > div.elementor-element snippet:<div class="elementor-element elementor-element-6c256f63 elementor-align-left elemento…" data-id="6c256f63" data-element_type="widget" data-e-type="widget" data-widget_type="button.default"> type:node] score:0.001318] map[node:map[boundingRect:map[bottom:1210 height:411 left:0 right:1350 top:799 width:1350] lhId:page-19-SECTION nodeLabel:I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… path:1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,2,SECTION selector:main#content > div.page-content > div.elementor > section.elementor-section snippet:<section class="elementor-section elementor-top-section elementor-element elementor-elemen…" data-id="71af8676" data-element_type="section" data-e-type="section" data-settings="{"background_background":"classic"}"> type:node] score:0.001177]]

Your first network request is the most important. Reduce its latency by avoiding redirects, ensuring a fast server response, and enabling text compression.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Consider setting font-display to swap or optional to ensure text is consistently visible. swap can be further optimized to mitigate layout shifts with font metric overrides.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Est Savings
/wp-content/plugins/elementor/assets/lib/font-awesome/web...	35 ms
/wp-content/plugins/elementor/assets/lib/font-awesome/web...	35 ms

Why this matters

Performance issues directly impact user engagement and conversion rates.

headings: [map[key:source label:Source valueType:source-location] map[granularity:1 key:reflowTime label:Total reflow time valueType:ms]]

items: [map[reflowTime:44.484 source:map[type:text value:[unattributed]]]]

Reducing the download time of images can improve the perceived load time of the page and LCP. Learn more about optimizing image size

Why this matters

Performance issues directly impact user engagement and conversion rates.

	URL	Resource Size	Est Savings
Registration Now Open `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/04/vancouver_skyline.png	394.7 KiB	354.1 KiB
Take In-Person Training in Dallas `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/04/in-person-training.png	291.7 KiB	260.3 KiB
2025 PCI SSC Annual Report `div.blog__slider-card > a > div.blog__slider-image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/01/Website_439x439.png	354.3 KiB	250.1 KiB
Special Offer: Become a PCIP `div.hero__slider-cover > div.hero__slider-cover--content > div.hero__slider-cover--image > img`	www.pcisecuritystandards.org/wp-content/uploads/2026/03/special-offer.png	253.0 KiB	221.6 KiB
RFCs `div.blog__slider-card > a > div.blog__slider-image > img`	www.pcisecuritystandards.org/wp-content/uploads/2023/04/rfc-homepage.png	187.5 KiB	169.1 KiB
Registration Now Open We invite the entire payment security industry to attend… `main#content > div.page-content > div.elementor > section.elementor-section`	www.pcisecuritystandards.org/wp-content/uploads/2022/05/hero-background-1-1.webp	264.4 KiB	131.3 KiB
PCI Perspectives Blog 21 APRIL 2026 PCI SSC Launches Enhanced Language Microsit… `main#content > div.page-content > div.elementor > section.elementor-section`	www.pcisecuritystandards.org/wp-content/uploads/2022/06/Rectangle-oraginal.webp	295.1 KiB	126.2 KiB
Unlock Exclusive Updates `div.blog__slider-card > a > div.blog__slider-image > img`	www.pcisecuritystandards.org/wp-content/uploads/2024/11/Block_1.png	73.5 KiB	62.3 KiB
Recently Published `div.blog__slider-card > a > div.blog__slider-image > img`	www.pcisecuritystandards.org/wp-content/uploads/2024/08/standards_new_card.png	70.0 KiB	59.1 KiB
div.blog__slider-card > a > div.blog__slider-image > img.attachment-blog_thumb `div.blog__slider-card > a > div.blog__slider-image > img.attachment-blog_thumb`	/wp-content/uploads/2026/04/sponsor-blog-clear@2x.jpg?res...	45.4 KiB	35.3 KiB
REGISTRATION OPEN: Join Us at the 2026 PCI SSC North America Community Meeting… `main#content > div.page-content > div.elementor > section.elementor-section`	www.pcisecuritystandards.org/wp-content/uploads/2022/03/Mask-1.jpg	190.2 KiB	21.2 KiB

Optimize LCP by making the LCP image discoverable from the HTML immediately, and avoiding lazy-loading

Why this matters

Performance issues directly impact user engagement and conversion rates.

lhId: page-5-SECTION

nodeLabel: Registration Now Open We invite the entire payment security industry to attend…

path: 1,HTML,1,BODY,2,MAIN,1,DIV,0,DIV,0,SECTION

selector: main#content > div.page-content > div.elementor > section.elementor-section

Avoid chaining critical requests by reducing the length of chains, reducing the download size of resources, or deferring the download of unnecessary resources to improve page load.

Why this matters

Performance issues directly impact user engagement and conversion rates.

title: Preconnected origins

value: no origins were preconnected

description: Add [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints to your most important origins, but try to use no more than 4.

title: Preconnect candidates

value: No additional origins are good candidates for preconnecting

Requests are blocking the page's initial render, which may delay LCP. Deferring or inlining can move these network requests out of the critical path.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Transfer Size	Duration
/_static/??-eJzTLy/QzcxLzilNSS3WzwKiwtLUokoopZebmaeXVayjj...	34.8 KiB
/wp-content/plugins/client-mu-plugins/pci-ssc-core/public...	0 B
/_static/??-eJxVjNEKgzAMAH9oMWxs6svYt3RpcYE2hqVl+PdGBqJPB...	49.3 KiB	80 ms
/_static/??-eJytkk1uAjEMhS/UYCjSsEI9iycxg1XnR2NX096eaBghF...	30.6 KiB
/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5...	3.7 KiB

A long cache lifetime can speed up repeat visits to your page. Learn more about caching.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Request	Cache TTL	Transfer Size
cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js?ver=6.9.4	604800.0 s	123.4 KiB

These insights are also available in the Chrome DevTools Performance Panel - record a trace to view more detailed information.

Diagnostics

Reduce unused rules from stylesheets and defer CSS not used for above-the-fold content to decrease bytes consumed by network activity. Learn how to reduce unused CSS.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 80 ms 110.8 KiB

URL	Transfer Size	Est Savings
/_static/??-eJxVjNEKgzAMAH9oMWxs6svYt3RpcYE2hqVl+PdGBqJPB...	49.1 KiB	46.1 KiB
/_static/??-eJytkk1uAjEMhS/UYCjSsEI9iycxg1XnR2NX096eaBghF...	30.4 KiB	28.3 KiB
@charset "UTF-8";/** THIS FILE IS AUTOMATICALLY GENERATED...	23.7 KiB	23.4 KiB
.elementor-kit-16965{--e-global-color-primary:#00A7A7;--e-global-color-secondary:#FF7F2C;--e-global…	24.2 KiB	13.0 KiB

Reduce unused JavaScript and defer loading scripts until they are required to decrease bytes consumed by network activity. Learn how to reduce unused JavaScript.

Why this matters

Multi-megabyte JavaScript bundles delay every interactive feature on the page.

Learn more ▾

Source: Google web.dev / Lighthouse

Estimated savings: 40 ms 163.1 KiB

URL	Transfer Size	Est Savings
www.googletagmanager.com/gtag/js?id=UA-6219923-9&ver=1.0.0	124.8 KiB	74.0 KiB
cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js?ver=6.9.4	123.0 KiB	57.4 KiB
/_static/??-eJytkc1uAjEMhF8Ib/iR4IQ48xjZxFq8OE4UJ00fvwGBC...	54.2 KiB	31.7 KiB

Many navigations are performed by going back to a previous page, or forwards again. The back/forward cache (bfcache) can speed up these return navigations. Learn more about the bfcache

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failure reason	Failure type
Pages whose main resource has cache-control:no-store cannot enter back/forward cache.	Not actionable
Back/forward cache is disabled because some JavaScript network request received resource with Cache-Control: no-store header.	Not actionable

Large network payloads cost users real money and are highly correlated with long load times. Learn how to reduce payload sizes.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Transfer Size
www.pcisecuritystandards.org/wp-content/uploads/2026/04/vancouver_skyline.png	395.5 KiB
www.pcisecuritystandards.org/wp-content/uploads/2026/01/Website_439x439.png	355.0 KiB
www.pcisecuritystandards.org/wp-content/uploads/2022/03/Rectangle.jpg	295.8 KiB
www.pcisecuritystandards.org/wp-content/uploads/2022/06/Rectangle-oraginal.webp	295.8 KiB
www.pcisecuritystandards.org/wp-content/uploads/2026/04/in-person-training.png	292.3 KiB
www.pcisecuritystandards.org/wp-content/uploads/2022/05/hero-background-1-1.webp	265.0 KiB
www.pcisecuritystandards.org/wp-content/uploads/2026/03/special-offer.png	253.6 KiB
www.pcisecuritystandards.org/wp-content/uploads/2025/10/AI-hero.png	228.6 KiB
www.pcisecuritystandards.org/wp-content/uploads/2022/03/Mask-1.jpg	190.7 KiB
www.pcisecuritystandards.org/wp-content/uploads/2026/02/memory_lane_439x439.png	188.8 KiB

More information about the performance of your application. These numbers don't directly affect the Performance score.

Redirects introduce additional delays before the page can be loaded. Learn how to avoid page redirects.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 230 ms

URL	Time Spent
pcisecuritystandards.org/	230 ms
www.pcisecuritystandards.org/	0.0 ms

Why this matters

Performance issues directly impact user engagement and conversion rates.

Element	Layout shift score
Registration Now Open We invite the entire payment security industry to attend… `body.home > main#content`	0.859
Registration Now Open We invite the entire payment security industry to attend… `main#content > div.page-content > div.elementor > section.elementor-section`	0.398
I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… `main#content > div.page-content > div.elementor > section.elementor-section`	0.003
Contact Us `div.elementor-container > div.elementor-column > div.elementor-widget-wrap > div.elementor-element`	0.001
I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… `main#content > div.page-content > div.elementor > section.elementor-section`	0.001
I Want To Visit the PCI SSC Newsroom Join PCI SSC Search the Document Library F… `main#content > div.page-content > div.elementor > section.elementor-section`	0.001
div.elementor-widget-container > div.swiper > div.swiper-button-prev > ::after `div.elementor-widget-container > div.swiper > div.swiper-button-prev > ::after`	0.000

●Time to Interactive 2.0 s

●Optimize DOM size

●LCP breakdown

●Modern HTTP

●Optimize viewport for mobile

●Max Potential First Input Delay 50 ms

●Minify CSS

●Minify JavaScript

●JavaScript execution time 0.3 s

●Minimizes main-thread work 0.9 s

●Avoid long main-thread tasks 1 long task found

●Avoid non-composited animations 24 animated elements found

●Image elements have explicit `width` and `height`

●Network Requests

●Network Round Trip Times 30 ms

●Server Backend Latencies 30 ms

●Tasks

●Diagnostics

●Metrics

●Screenshot Thumbnails

●Final Screenshot

●Script Treemap Data

●Resources Summary

●Initial server response time was short Root document took 440 ms

○INP breakdown

○User Timing marks and measures

Accessibility

Contrast

Low-contrast text is difficult or impossible for many users to read. Learn how to provide sufficient color contrast.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
Your choice regarding cookies on this site `div#ccc > div#ccc-notify > div.ccc-notify-text > h1#ccc-notify-title`
We use cookies to optimise site functionality and give you the best possible ex… `div#ccc > div#ccc-notify > div.ccc-notify-text > p`
Accept `div#ccc-notify > div.ccc-notify-buttons > button#ccc-notify-accept > span`
Cookie Preferences `div#ccc-notify > div.ccc-notify-buttons > button.ccc-notify-button > span`
Association Management services provided by Virtual, Inc. `div.elementor-widget-container > ul.elementor-icon-list-items > li.elementor-icon-list-item > span.elementor-icon-list-text`
Antitrust Policy `ul.elementor-icon-list-items > li.elementor-icon-list-item > a > span.elementor-icon-list-text`
Privacy Policy `ul.elementor-icon-list-items > li.elementor-icon-list-item > a > span.elementor-icon-list-text`
IPR Policy `ul.elementor-icon-list-items > li.elementor-icon-list-item > a > span.elementor-icon-list-text`

These are opportunities to improve the legibility of your content.

Best practices

Touch targets with sufficient size and spacing help users who may have difficulty targeting small controls to activate the targets. Learn more about touch targets.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
Go to slide 3 `div.elementor-widget-container > div.swiper > div.swiper-pagination > span.swiper-pagination-bullet`
Go to slide 4 `div.elementor-widget-container > div.swiper > div.swiper-pagination > span.swiper-pagination-bullet`
Go to slide 5 `div.elementor-widget-container > div.swiper > div.swiper-pagination > span.swiper-pagination-bullet`
Go to slide 6 `div.elementor-widget-container > div.swiper > div.swiper-pagination > span.swiper-pagination-bullet`
Go to slide 7 `div.elementor-widget-container > div.swiper > div.swiper-pagination > span.swiper-pagination-bullet`
X-twitter `div.elementor-widget-container > div.elementor-social-icons-wrapper > span.elementor-grid-item > a.elementor-icon`

These items highlight common accessibility best practices.

Visible text labels that do not match the accessible name can result in a confusing experience for screen reader users. Learn more about accessible names.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
Unlock Exclusive Updates Become a part of our community and join our mailing l… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
2025 PCI SSC Annual Report PCI Security Standards Council publishes first annu… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
Share Your Story Sign up for our Call for Speakers notification email list to … `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
Now Available To address stakeholder feedback and questions received since PCI… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
Just Published PCI PIN Transaction Security (PTS) Point of Interaction (POI) M… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
RFCs The RFC process is an avenue for PCI SSC stakeholders to provide feedback… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
Recently Published PCI SSC has published version 1.1 of the PCI Mobile Payment… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
21 APRIL 2026 PCI SSC Launches Enhanced Language Microsites for Global Audience… `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
16 APRIL 2026 Exhibit at or Sponsor the 2026 Community Meetings Read More `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`
14 APRIL 2026 Spotlight On: Stripe, a New Principal Participating Organization … `div.swiper-slide > div.blog__slider-cover > div.blog__slider-card > a`

○Interactive controls are keyboard focusable

○Interactive elements indicate their purpose and state

○The page has a logical tab order

○Visual order on the page follows DOM order

○User focus is not accidentally trapped in a region

○The user's focus is directed to new content added to the page

○HTML5 landmark elements are used to improve navigation

○Offscreen content is hidden from assistive technology

○Custom controls have associated labels

○Custom controls have ARIA roles

●`[aria-*]` attributes match their roles

●`[aria-hidden="true"]` is not present on the document `<body>`

●`[role]`s have all required `[aria-*]` attributes

●Elements with an ARIA `[role]` that require children to contain a specific `[role]` have all required children.

●`[role]`s are contained by their required parent element

●`[role]` values are valid

●`[aria-*]` attributes have valid values

●`[aria-*]` attributes are valid and not misspelled

●Buttons have an accessible name

●Image elements have `[alt]` attributes

●Form elements have associated labels

●`[user-scalable="no"]` is not used in the `<meta name="viewport">` element and the `[maximum-scale]` attribute is not less than 5.

●`[accesskey]` values are unique

●`button`, `link`, and `menuitem` elements have accessible names

●ARIA attributes are used as specified for the element's role

●Elements with `role="dialog"` or `role="alertdialog"` have accessible names.

●`[aria-hidden="true"]` elements do not contain focusable descendents

●Elements use only permitted ARIA attributes

●Document has a `<title>` element

●`<html>` element has a `[lang]` attribute

●`<html>` element has a valid value for its `[lang]` attribute

●Links are distinguishable without relying on color.

●Links have a discernible name

●Lists contain only `<li>` elements and script supporting elements (`<script>` and `<template>`).

●List items (`<li>`) are contained within `<ul>`, `<ol>` or `<menu>` parent elements

●No element has a `[tabindex]` value greater than 0

●Heading elements appear in a sequentially-descending order

●Document has a main landmark.

●Deprecated ARIA roles were not used

●Identical links have the same purpose.

○ARIA input fields have accessible names

○ARIA `meter` elements have accessible names

○ARIA `progressbar` elements have accessible names

○Elements with the `role=text` attribute do not have focusable descendents.

○ARIA toggle fields have accessible names

○ARIA `tooltip` elements have accessible names

○ARIA `treeitem` elements have accessible names

○The page contains a heading, skip link, or landmark region

○`<dl>`'s contain only properly-ordered `<dt>` and `<dd>` groups, `<script>`, `<template>` or `<div>` elements.

○Definition list items are wrapped in `<dl>` elements

○ARIA IDs are unique

○No form fields have multiple labels

○`<frame>` or `<iframe>` elements have a title

○`<html>` element has an `[xml:lang]` attribute with the same base language as the `[lang]` attribute.

○Input buttons have discernible text.

○`<input type="image">` elements have `[alt]` text

○The document does not use `<meta http-equiv="refresh">`

○`<object>` elements have alternate text

○Select elements have associated label elements.

○Skip links are focusable.

○Cells in a `<table>` element that use the `[headers]` attribute refer to table cells within the same table.

○`<th>` elements and elements with `[role="columnheader"/"rowheader"]` have data cells they describe.

○`[lang]` attributes have a valid value

○`<video>` elements contain a `<track>` element with `[kind="captions"]`

○Tables have different content in the summary attribute and `<caption>`.

○All heading elements contain content.

○Uses ARIA roles only on compatible elements

○Image elements do not have `[alt]` attributes that are redundant text.

○Tables use `<caption>` instead of cells with the `[colspan]` attribute to indicate a caption.

○`<td>` elements in a large `<table>` have one or more table headers.

Best Practices

General

Errors logged to the console indicate unresolved problems. They can come from network request failures and other browser concerns. Learn more about this errors in console diagnostic audit

Why this matters

Performance issues directly impact user engagement and conversion rates.

Source	Description
/wp-content/plugins/client-mu-plugins/pci-ssc-core/public...	`Failed to load resource: the server responded with a status of 404 ()`
/wp-content/plugins/client-mu-plugins/pci-ssc-core/public...	`Failed to load resource: the server responded with a status of 404 ()`

●Uses HTTPS

●Avoids deprecated APIs

●Avoids third-party cookies

●Allows users to paste into input fields

●Avoids requesting the geolocation permission on page load

●Avoids requesting the notification permission on page load

●Displays images with correct aspect ratio

●Serves images with appropriate resolution

●Page has the HTML doctype

●Properly defines charset

●No issues in the `Issues` panel in Chrome Devtools

●Ensure CSP is effective against XSS attacks

●Ensure proper origin isolation with COOP

●Mitigate DOM-based XSS with Trusted Types

●Detected JavaScript libraries

●Page has valid source maps

○Redirects HTTP traffic to HTTPS

○Use a strong HSTS policy

○Mitigate clickjacking with XFO or CSP

SEO

Content Best Practices

Descriptive link text helps search engines understand your content. Learn how to make links more accessible.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Link destination	Link Text
/program_training_and_qualification/pci_professional_qual...	MORE INFORMATION
www.pcisecuritystandards.org/events/event-sponsorship-opportunities/	LEARN MORE
/the-ai-exchange-innovators-in-payment-security-featuring...	READ MORE
/wp-content/uploads/2026/03/UPDATED2-Extension-of-Expirat...	Read More
/about_us/press_releases/pci-security-standards-council-p...	Read More
/about_us/press_releases/pci-security-standards-council-a...	Read More
events.pcisecuritystandards.org/	More information
/faq/articles/Frequently_Asked_Question/What-are-acceptab...	Read More
www.pcisecuritystandards.org/document_library?category=pcidss	Read More

Format your HTML in a way that enables crawlers to better understand your app’s content.

○Structured data is valid

●Page isn’t blocked from indexing

●Document has a `<title>` element

●Document has a meta description

●Page has successful HTTP status code

●Links are crawlable

●robots.txt is valid

●Image elements have `[alt]` attributes

●Document has a valid `hreflang`

●Document has a valid `rel=canonical`

Results for https://pcisecuritystandards.org

Site Health

How you compare

Top Priorities (5)

Fix Priority Matrix

Quick Wins

Strategic

Easy Improvements

Deprioritize

What fixing these means

Conversion Barriers

Speed (2)

Trust (1)

Usability (1)

Content (1)

Navigation (3)

Return on Investment

Investment

Monthly returns

Regulatory risk avoided

Payback period

Estimated Remediation Cost

Cost by category

Cost by effort level

What Inaction Is Costing You

Compliance Risk

Bandwidth Waste

Lighthouse Scores

Core Web Vitals

Detailed Report

Performance

Insights

Diagnostics

Accessibility

Contrast

Best practices

Best Practices

General

SEO

Content Best Practices

Lighthouse Scores

Core Web Vitals

Detailed Report

Performance

Insights

Diagnostics

Accessibility

Contrast

Best practices

Best Practices

General

SEO

Content Best Practices

Keyboard Shortcuts