Skip to content

Changes

https://cia.gov
Compared to previous audit · 11 weeks ago View previous audit

Madrid, Spain → Amsterdam, Netherlands

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

24
New issues
16
Resolved
23
score changes
CategoryPreviousCurrentChange
CompositeC (74)B (80) +6.000
PerformanceC (77)B (81) +4.000
SecurityC (74)B (87) +13.000
AccessibilityD (56)C (71) +15.000
SEOC (74)B (84) +10.000
InfrastructureA (94)A (93) -1.000
ComplianceC (71)D (57) -14.000
ContentD (68)C (76) +8.000
SustainabilityC (74)C (73) -1.000
MetricPreviousCurrentChange
Performance 72006800 -400
Accessibility 96009600—
Best Practices 1000010000—
SEO 82008200—
PWA 00—
Desktop Performance 94009100 -300
Desktop Accessibility 1000010000—
Desktop Best Practices 1000010000—
Desktop SEO 82008200—
FCP 2.35 s2.86 s +504 ms
LCP 4.57 s6.40 s +1.83 s
TBT 339 ms143 ms -196 ms
CLS 0.0170.002 -0.015
Desktop FCP 663 ms915 ms +252 ms
Desktop LCP 1.52 s1.51 s—
Desktop TBT 14 ms0 ms -14 ms
Desktop CLS 0.0010.027 +0.026
TTFB †261 ms351 ms +90 ms
DNS †5 ms50 ms +45 ms
TLS †86 ms96 ms +10 ms
Connect †81 ms92 ms +12 ms
Total †262 ms351 ms +90 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 74
Projected
A 92
Actual
B 80
Fell short of projection
16 issues resolved since last audit
52 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL No favicon or icon links detected accessibility
WARNING https://www.cia.gov/static/Freedom250seal_Gold-New... is missing width/height — may cause layout shift performance
WARNING Unexpected status code: HTTP 403 accessibility
WARNING Images are 2.1 MB — compress or use modern formats performance
WARNING Cookie 'jsessionid' has no SameSite attribute security
WARNING https://www.cia.gov/: 1293ms CPU time performance
WARNING https://www.cia.gov/framework-481beeb6bc5ccc2a4757...: 443ms CPU time performance
WARNING Third-party code accounts for 100% of page weight (3.1 MiB of 3.1 MiB) performance
WARNING https://www.cia.gov/commons-05cdedd53ab155243764.j...: 27 KB unused (48%) performance
WARNING https://www.cia.gov/b637e9a5-e830966c7b78245dccc9....: 23 KB unused (76%) performance
WARNING 61 third-party resources (100% of weight) performance
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING 8 tap target(s) too small or too close to neighbors accessibility
WARNING Unattributable: 909ms CPU time performance
WARNING https://www.cia.gov/js2/verification.js: 21 KB unused (72%) performance
WARNING Page weight 3.1 MB exceeds 1 MB target by 2.1 MB performance
WARNING Domain expires in 60 days infrastructure
WARNING Bare server default 404 page accessibility
WARNING Third-party scripts: 2189ms (71% of total) performance
WARNING 66 inline style attribute(s) detected security
WARNING Page weighs 5.8 MB (3.1 MB transferred) performance
WARNING https://www.cia.gov/component---src-templates-page...: 61 KB unused (62%) performance
WARNING 0.87g CO2 — above the median website (0.60g) sustainability
WARNING No favicon.ico at site root accessibility
WARNING Images are 2.0 MB — compress or use modern formats performance
WARNING Domain expires in 59 days infrastructure
WARNING https://www.cia.gov/: 1464ms CPU time performance
WARNING https://www.cia.gov/app-bd3d900226fb938894f0.js: 456ms CPU time performance
WARNING https://www.cia.gov/component---src-templates-page...: 56 KB unused (61%) performance
WARNING https://www.cia.gov/commons-0c93c27e22e15f6b978b.j...: 29 KB unused (65%) performance
WARNING 0.80g CO2 — above the median website (0.60g) sustainability
WARNING Page weight 2.8 MB exceeds 1 MB target by 1.8 MB performance
WARNING Page weighs 5.0 MB (2.8 MB transferred) performance
WARNING Third-party code accounts for 100% of page weight (2.8 MiB of 2.8 MiB) performance
WARNING https://www.cia.gov/framework-481beeb6bc5ccc2a4757...: 670ms CPU time performance
WARNING https://www.cia.gov/b637e9a5-e830966c7b78245dccc9....: 22 KB unused (76%) performance
WARNING 59 third-party resources (100% of weight) performance
WARNING https://www.cia.gov/js2/verification.js: 24 KB unused (90%) performance
WARNING Unattributable: 659ms CPU time performance
WARNING Third-party scripts: 2928ms (82% of total) performance
CRITICAL Content-Security-Policy header is missing security
CRITICAL No <main> landmark found accessibility
CRITICAL Page has only 17 words — nearly empty seo
CRITICAL No Content-Security-Policy header found security
CRITICAL 1 non-essential cookie(s) set without consent banner compliance
CRITICAL Missing <html lang> attribute (WCAG 3.1.1) accessibility
CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL No viewport meta tag found compliance
WARNING Terms of Service not detected compliance
WARNING No Open Graph meta tags found content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Privacy Policy not detected compliance
WARNING No Permissions-Policy header security
WARNING No <nav> landmark found accessibility
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No `<meta charset>` declaration in HTML seo
WARNING Title is only 13 characters — consider expanding seo
WARNING No privacy policy link detected compliance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Dead-end page — no outgoing internal links seo
WARNING No meta description tag found seo
WARNING Thin content — only 17 words seo
WARNING Registrar lock is NOT enabled infrastructure
WARNING Permissions-Policy header is missing security
WARNING Cookie '_session_' has no SameSite attribute security
WARNING No canonical tag found seo
WARNING No accessibility statement detected compliance
set-cookie
_session_=AAA2EF76D2E1E483FF59641B89B9E9B5; path=/; domain=cia.gov; secure; H... → jsessionid=7B9C8491146A2FED3241EACFEAA73CA6qLSvXHT2dEytUvEbkOSVstziFoCa3amIti...

6 headers unchanged

+ Java Programming languages

1 technologies unchanged

Looking ahead

+17 pts
B (80) Could reach A+ (97)
Accessibility +29Compliance +24Performance +19SEO +16Security +13Infrastructure +7Content +4Sustainability +4

Estimate — actual results may vary (52 issues to fix)

Website improvement report — Cia

April 21, 2026 → July 10, 2026

C B 74 → 80 +6 pts

16

Resolved

24

New issues

28

Still remaining

Financial summary

Investment delivered

$5,600 in development time

Investment remaining

$10,167 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score74 (C)80 (B)+6
Performance77 (C)81 (B)+4
Security74 (C)87 (B)+13
Accessibility56 (D)71 (C)+15
SEO74 (C)84 (B)+10
Infrastructure94 (A)93 (A)-1
Compliance71 (C)57 (D)-14
Content68 (D)76 (C)+8
Sustainability74 (C)73 (C)-1

Resolved (16)

  • Images are 2.0 MB — compress or use modern formats (Performance)

    → Page loads faster for users

  • Domain expires in 59 days (Infrastructure)

    → More reliable delivery

  • https://www.cia.gov/: 1464ms CPU time (Performance)

    → Page loads faster for users

  • https://www.cia.gov/app-bd3d900226fb938894f0.js: 456ms CPU time (Performance)

    → Page loads faster for users

  • https://www.cia.gov/component---src-templates-page...: 56 KB unused (61%) (Performance)

    → Page loads faster for users

  • https://www.cia.gov/commons-0c93c27e22e15f6b978b.j...: 29 KB unused (65%) (Performance)

    → Page loads faster for users

  • 0.80g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • Page weight 2.8 MB exceeds 1 MB target by 1.8 MB (Performance)

    → Page loads faster for users

  • Page weighs 5.0 MB (2.8 MB transferred) (Performance)

    → Page loads faster for users

  • Third-party code accounts for 100% of page weight (2.8 MiB of 2.8 MiB) (Performance)

    → Page loads faster for users

  • https://www.cia.gov/framework-481beeb6bc5ccc2a4757...: 670ms CPU time (Performance)

    → Page loads faster for users

  • https://www.cia.gov/b637e9a5-e830966c7b78245dccc9....: 22 KB unused (76%) (Performance)

    → Page loads faster for users

  • 59 third-party resources (100% of weight) (Performance)

    → Page loads faster for users

  • https://www.cia.gov/js2/verification.js: 24 KB unused (90%) (Performance)

    → Page loads faster for users

  • Unattributable: 659ms CPU time (Performance)

    → Page loads faster for users

…and 1 more resolved issue(s)

Recommended next steps (52)

  • Sprint 1

    No favicon or icon links detected (Accessibility)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 3

    Page has only 17 words — nearly empty (SEO)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 2

    1 non-essential cookie(s) set without consent banner (Compliance)

  • Sprint 1

    Missing <html lang> attribute (WCAG 3.1.1) (Accessibility)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    No viewport meta tag found (Compliance)

  • Sprint 1

    https://www.cia.gov/static/Freedom250seal_Gold-New... is missing width/height — may cause layout shift (Performance)

  • Sprint 2

    Unexpected status code: HTTP 403 (Accessibility)

  • Sprint 2

    Images are 2.1 MB — compress or use modern formats (Performance)

  • Sprint 1

    Cookie 'jsessionid' has no SameSite attribute (Security)

  • Sprint 1

    https://www.cia.gov/: 1293ms CPU time (Performance)

  • Sprint 1

    https://www.cia.gov/framework-481beeb6bc5ccc2a4757...: 443ms CPU time (Performance)

…and 37 more recommended item(s)

Send Feedback