Skip to content

Changes

https://www.gov.uk
Compared to previous audit · 1 day ago View previous audit

Amsterdam, Netherlands → Singapore, Singapore

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

6
New issues
2
Resolved
14
score changes
CategoryPreviousCurrentChange
CompositeB (87)A (90) +3.000
PerformanceA (96)A (95) -1.000
SecurityB (82)B (89) +7.000
AccessibilityB (82)B (87) +5.000
SEOA (94)A (95) +1.000
InfrastructureA (90)A (90)—
ComplianceC (77)C (77)—
ContentB (84)C (79) -5.000
SustainabilityA (93)A (92) -1.000
MetricPreviousCurrentChange
Performance 77007700—
Accessibility 1000010000—
Best Practices 1000010000—
SEO 1000010000—
PWA 00—
Desktop Performance 1000010000—
Desktop Accessibility 1000010000—
Desktop Best Practices 1000010000—
Desktop SEO 1000010000—
FCP 1.50 s1.50 s—
LCP 1.84 s1.86 s +20 ms
TBT 23 ms63 ms +40 ms
CLS 0.5650.565—
Desktop FCP 403 ms405 ms—
Desktop LCP 420 ms430 ms +10 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0000.000—
TTFB †11 ms10 ms -0 ms
DNS †4 ms3 ms -1 ms
TLS †5 ms5 ms—
Connect †1 ms1 ms +0 ms
Total †12 ms12 ms -0 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING 4 images missing alt text content
WARNING https://www.gov.uk/: 609ms CPU time performance
WARNING Unattributable: 399ms CPU time performance
WARNING DNS resolution is slow (293 ms) infrastructure
WARNING All 4 images use legacy formats (JPEG/PNG/GIF) content
WARNING 2 images significantly larger than display size content
CRITICAL Domain has EXPIRED infrastructure
WARNING https://www.gov.uk/: 343ms CPU time performance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No SPF record found security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING HSTS is missing includeSubDomains security
WARNING CNAME record at zone apex infrastructure
WARNING Registrar lock is NOT enabled infrastructure
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING form-action directive is missing security
WARNING No DMARC record found security
WARNING https://www.gov.uk/assets/frontend/application-1a5...: 26 KB unused (64%) performance
WARNING Title is only 6 characters — consider expanding seo
etag
W/"12c8dea7ab0134e67fa162bf297e288c" → W/"2ffb31165d05278ca7e093dcf7d48fc1"
content-security-policy
default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c... → default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c...
x-runtime
0.023778 → 0.022980

16 headers unchanged

Technology stack unchanged

12 technologies unchanged

Looking ahead

+6 pts
A (90) Could reach A (96)
Security +11Content +10Infrastructure +10Performance +5Accessibility +4Compliance +4SEO +4

Estimate — actual results may vary (18 issues to fix)

Website improvement report — Gov

May 7, 2026 → May 9, 2026

B A 87 → 90 +3 pts

2

Resolved

6

New issues

12

Still remaining

Financial summary

Investment delivered

£6 in development time

Investment remaining

£1,631 to complete the remaining items

Ongoing risk

£0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score87 (B)90 (A)+3
Performance96 (A)95 (A)-1
Security82 (B)89 (B)+7
Accessibility82 (B)87 (B)+5
SEO94 (A)95 (A)+1
Infrastructure90 (A)90 (A)0
Compliance77 (C)77 (C)0
Content84 (B)79 (C)-5
Sustainability93 (A)92 (A)-1

Resolved (2)

  • https://www.gov.uk/: 343ms CPU time (Performance)

    → Page loads faster for users

  • Domain has EXPIRED (Infrastructure)

    → More reliable delivery

Recommended next steps (18)

  • Sprint 2

    4 images missing alt text (Content)

  • Sprint 1

    https://www.gov.uk/: 609ms CPU time (Performance)

  • Sprint 1

    Unattributable: 399ms CPU time (Performance)

  • Sprint 2

    DNS resolution is slow (293 ms) (Infrastructure)

  • Sprint 2

    All 4 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 2

    2 images significantly larger than display size (Content)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 1

    1 link(s) open in new tab without warning (Accessibility)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 1

    HSTS is missing includeSubDomains (Security)

  • Sprint 1

    CNAME record at zone apex (Infrastructure)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    form-action directive is missing (Security)

…and 3 more recommended item(s)

Send Feedback