Skip to content

Changes

https://costdown.org
Compared to previous audit · 39 minutes ago View previous audit

Santa Clara, United States Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

5
New issues
1
Resolved
14
score changes
CategoryPreviousCurrentChange
CompositeA (92)A (92)
PerformanceA+ (97)A+ (97)
SecurityA (93)A (93)
AccessibilityA (90)A (90)
SEOA (96)A (94) -2.000
InfrastructureB (88)B (83) -5.000
ComplianceB (85)B (85)
ContentB (85)B (85)
SustainabilityA+ (98)A+ (98)
MetricPreviousCurrentChange
Performance 88008400 -400
Accessibility 96009600
Best Practices 1000010000
SEO 91009100
PWA 00
Desktop Performance 99009900
Desktop Accessibility 96009600
Desktop Best Practices 1000010000
Desktop SEO 92009200
FCP 1.73 s1.78 s +51 ms
LCP 3.80 s4.14 s +341 ms
TBT 60 ms127 ms +67 ms
CLS 0.0000.000
Desktop FCP 530 ms586 ms +56 ms
Desktop LCP 876 ms921 ms +46 ms
Desktop TBT 0 ms5 ms +5 ms
Desktop CLS 0.0000.000
TTFB 220 ms1.00 s +782 ms
DNS 1 ms24 ms +23 ms
TLS 22 ms13 ms -9 ms
Connect 17 ms7 ms -11 ms
Total 380 ms1.24 s +859 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://costdown.org/: 931ms CPU time performance
WARNING Unattributable: 269ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 293ms CPU time performance
WARNING https://costdown.org/: 333ms CPU time performance
CRITICAL Both www and non-www versions serve content infrastructure
WARNING No SPF record found security
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING X-Powered-By header reveals technology stack security
WARNING No DMARC record found security
WARNING Registrar lock is NOT enabled infrastructure
WARNING No accessibility statement detected compliance
WARNING 1 images significantly larger than display size content
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Cross-Origin-Embedder-Policy header is missing security
content-security-policy
default-src 'self'; script-src 'self' 'nonce-FAU2s+ja38a1BIlQEK26bQ==' https:... default-src 'self'; script-src 'self' 'nonce-QAfzgM1NolvN60rzwkpQ/w==' https:...
link
</_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...

15 headers unchanged

Technology stack unchanged

11 technologies unchanged

Looking ahead

+5 pts
A (92) Could reach A+ (97)
Infrastructure +14Content +8Security +7Accessibility +4Compliance +4Performance +3

Estimate — actual results may vary (15 issues to fix)

Website improvement report — Costdown

August 28, 2026 → August 28, 2026

A A 92 → 92 0 pts

1

Resolved

5

New issues

10

Still remaining

Financial summary

Investment remaining

₫6,750,000 to complete the remaining items

Ongoing risk

₫2,614/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score92 (A)92 (A)0
Performance97 (A+)97 (A+)0
Security93 (A)93 (A)0
Accessibility90 (A)90 (A)0
SEO96 (A)94 (A)-2
Infrastructure88 (B)83 (B)-5
Compliance85 (B)85 (B)0
Content85 (B)85 (B)0
Sustainability98 (A+)98 (A+)0

Resolved (1)

  • https://costdown.org/: 333ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (15)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    https://costdown.org/: 931ms CPU time (Performance)

  • Sprint 1

    Unattributable: 269ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 2

    IPv6 DNS records exist but server is not reachable (Infrastructure)

  • Sprint 1

    https://costdown.org/_next/static/chunks/1255-fc6c...: 293ms CPU time (Performance)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 2

    All 1 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 2

    1 images significantly larger than display size (Content)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

Send Feedback