Skip to content

Changes

https://18webdesign.com
Compared to previous audit · 10 minutes ago View previous audit
6
New issues
6
Resolved
12
score changes
CategoryPreviousCurrentChange
CompositeA (90)A (91) +1.000
PerformanceA (93)A (93)—
SecurityB (86)B (89) +3.000
AccessibilityB (86)B (86)—
SEOA (95)A (95)—
InfrastructureA (90)A (90)—
ComplianceA (91)A (91)—
ContentA+ (97)A+ (97)—
SustainabilityA (90)A (90)—
MetricPreviousCurrentChange
Performance 96009900 +300
Accessibility 1000010000—
Best Practices 1000010000—
SEO 1000010000—
PWA 00—
Desktop Performance 1000010000—
Desktop Accessibility 1000010000—
Desktop Best Practices 1000010000—
Desktop SEO 1000010000—
FCP 1.52 s1.53 s—
LCP 2.72 s1.92 s -796 ms
TBT 0 ms0 ms—
CLS 0.0000.000—
Desktop FCP 486 ms467 ms -19 ms
Desktop LCP 545 ms524 ms -21 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0000.000 +0.000
TTFB †282 ms192 ms -90 ms
DNS †113 ms2 ms -111 ms
TLS †58 ms63 ms +5 ms
Connect †53 ms54 ms +1 ms
Total †283 ms193 ms -90 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING 14 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING 5 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING https://18webdesign.com/: 1869ms CPU time performance
WARNING Unattributable: 255ms CPU time performance
WARNING 5 render-blocking <script src> tag(s) without async/defer performance
WARNING Domain expires in 79 days infrastructure
WARNING Referrer-Policy header is missing security
WARNING Domain expires in 76 days infrastructure
WARNING No Permissions-Policy header security
WARNING X-Frame-Options header is missing security
WARNING Permissions-Policy header is missing security
WARNING https://18webdesign.com/: 1724ms CPU time performance
CRITICAL Content-Security-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING DMARC policy is none — monitoring only security
WARNING 3 link(s) open in new tab without warning accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING No accessibility statement detected compliance
WARNING 1 images missing explicit width/height content
WARNING HSTS is enabled but missing includeSubDomains security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING https://18webdesign.com/js/scripts.js: unminified — 3 KB could be saved performance
+ x-frame-options DENY
+ referrer-policy strict-origin-when-cross-origin
+ permissions-policy camera=(), microphone=(), geolocation=(), payment=(), usb=()

12 headers unchanged

Technology stack unchanged

10 technologies unchanged

Looking ahead

+7 pts
A (91) Could reach A+ (98)
Security +11Accessibility +10Infrastructure +8Performance +7Compliance +4Content +3

Estimate — actual results may vary (16 issues to fix)

Website improvement report — 18webdesign

November 5, 2026 → November 5, 2026

A A 90 → 91 +1 pts

6

Resolved

6

New issues

10

Still remaining

Financial summary

Investment delivered

lei225 in development time

Investment remaining

lei2,085 to complete the remaining items

Ongoing risk

lei1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score90 (A)91 (A)+1
Performance93 (A)93 (A)0
Security86 (B)89 (B)+3
Accessibility86 (B)86 (B)0
SEO95 (A)95 (A)0
Infrastructure90 (A)90 (A)0
Compliance91 (A)91 (A)0
Content97 (A+)97 (A+)0
Sustainability90 (A)90 (A)0

Resolved (6)

  • Referrer-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Domain expires in 76 days (Infrastructure)

    → More reliable delivery

  • No Permissions-Policy header (Security)

    → Reduced attack surface for visitors

  • X-Frame-Options header is missing (Security)

    → Reduced attack surface for visitors

  • Permissions-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://18webdesign.com/: 1724ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (16)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    14 text node(s) render below 12 CSS pixels on mobile (Accessibility)

  • Sprint 1

    5 render-blocking stylesheet(s) -- recommended: <=3 (Performance)

  • Sprint 1

    https://18webdesign.com/: 1869ms CPU time (Performance)

  • Sprint 1

    Unattributable: 255ms CPU time (Performance)

  • Sprint 2

    5 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 1

    Domain expires in 79 days (Infrastructure)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    DMARC policy is none — monitoring only (Security)

  • Sprint 1

    3 link(s) open in new tab without warning (Accessibility)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 1

    1 images missing explicit width/height (Content)

  • Sprint 1

    HSTS is enabled but missing includeSubDomains (Security)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

…and 1 more recommended item(s)

Send Feedback