Changes
Madrid, Spain → New York, United Stated
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | B (88) | B (84) | -4.000 |
| Performance | A (95) | A (94) | -1.000 |
| Security | B (85) | C (77) | -8.000 |
| Accessibility | B (81) | B (83) | +2.000 |
| SEO | A+ (97) | B (85) | -12.000 |
| Infrastructure | A (92) | A (90) | -2.000 |
| Compliance | D (69) | C (70) | +1.000 |
| Content | A+ (98) | C (76) | -22.000 |
| Sustainability | B (88) | B (88) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 6400 | 7700 | +1300 |
| Accessibility | 9100 | 9100 | — |
| Best Practices | 7300 | 7300 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9900 | 9900 | — |
| Desktop Accessibility | 10000 | 10000 | — |
| Desktop Best Practices | 7300 | 7300 | — |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 3.01 s | 3.02 s | — |
| LCP | 4.29 s | 3.62 s | -664 ms |
| TBT | 508 ms | 327 ms | -181 ms |
| CLS | 0.056 | 0.056 | — |
| Desktop FCP | 569 ms | 686 ms | +117 ms |
| Desktop LCP | 944 ms | 977 ms | +33 ms |
| Desktop TBT | 43 ms | 13 ms | -30 ms |
| Desktop CLS | 0.002 | 0.002 | — |
| TTFB † | 425 ms | 119 ms | -306 ms |
| DNS † | 71 ms | 52 ms | -19 ms |
| TLS † | 11 ms | 22 ms | +12 ms |
| Connect † | 2 ms | 17 ms | +15 ms |
| Total † | 425 ms | 119 ms | -306 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
cache-control no-store → max-age=86400cf-cache-status EXPIRED → HITx-ipfs-roots QmdHsq1s3zm4QqttXqUgyVwHzbqhcrsrbUJ4rSVfiaDYmc → bafybeif6ith6wkvlu377yemxqdng6v2wwpt7plfmug3tw5bywxwzxhevjilast-modified Wed, 27 May 2026 19:46:39 GMT → Thu, 28 May 2026 02:39:10 GMTx-cf-ipfs-cache-status miss → hit13 headers unchanged
4 technologies unchanged
Looking ahead
+13 ptsEstimate — actual results may vary (36 issues to fix)
Website improvement report — Xpenv
May 27, 2026 → May 28, 2026
16
Resolved
23
New issues
13
Still remaining
Financial summary
Investment delivered
$1,525 in development time
Investment remaining
$4,133 to complete the remaining items
Ongoing risk
$0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 88 (B) | 84 (B) | -4 |
| Performance | 95 (A) | 94 (A) | -1 |
| Security | 85 (B) | 77 (C) | -8 |
| Accessibility | 81 (B) | 83 (B) | +2 |
| SEO | 97 (A+) | 85 (B) | -12 |
| Infrastructure | 92 (A) | 90 (A) | -2 |
| Compliance | 69 (D) | 70 (C) | +1 |
| Content | 98 (A+) | 76 (C) | -22 |
| Sustainability | 88 (B) | 88 (B) | 0 |
Resolved (16)
3 field(s) would benefit from inputmode attribute (Accessibility)
→ Improved usability for assistive technology users
1 link(s) with no accessible text (Accessibility)
→ Improved usability for assistive technology users
<iframe> missing title attribute (src="") (Accessibility)
→ Improved usability for assistive technology users
No DMARC record found (Security)
→ Reduced attack surface for visitors
No privacy policy link detected in the page (Compliance)
→ Reduced regulatory exposure
Transfer efficiency: 41% (Sustainability)
→ Lower carbon footprint per page view
https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 330ms CPU time (Performance)
→ Page loads faster for users
Broken link: https://xpenv.com/cdn-cgi/content?id=r4byGY5pr3i99gcdfsBk... (Content)
→ Stronger social sharing and on-page quality
Unattributable: 338ms CPU time (Performance)
→ Page loads faster for users
https://xpenv.com/assets/index-BK0LHtJ6.js: 621ms CPU time (Performance)
→ Page loads faster for users
https://xpenv.com/assets/index-BK0LHtJ6.js: 254 KB unused (64%) (Performance)
→ Page loads faster for users
1 internal links have no anchor text (SEO)
→ Better search engine visibility
10 of 11 links are healthy (Content)
→ Stronger social sharing and on-page quality
3 field(s) missing recommended autocomplete attribute (Accessibility)
→ Improved usability for assistive technology users
Login form does not contain a recognizable CSRF token (Security)
→ Reduced attack surface for visitors
…and 1 more resolved issue(s)
Recommended next steps (36)
- Sprint 1
Transfer efficiency: 40% (Sustainability)
- Sprint 1
Scan returned a Cloudflare bot-protection interstitial, not the actual page (Security)
- Sprint 3
Page has only 47 words — nearly empty (SEO)
- Sprint 2
Content-Security-Policy header is missing (Security)
- Sprint 1
No Open Graph meta tags found (Content)
- Sprint 1
External script from challenges.cloudflare.com lacks integrity attribute (Security)
- Sprint 1
SRI adoption: 0/1 third-party resources protected (0%) (Security)
- Sprint 1
No <nav> landmark found (Accessibility)
- Sprint 1
Main HTML cached for 1440 minutes -- risks stale auth / SPA state (Performance)
- Sprint 1
No SPF record found (Security)
- Sprint 1
No meta description tag found (SEO)
- Sprint 1
Dead-end page — no outgoing internal links (SEO)
- Sprint 1
2 link(s) open in new tab without warning (Accessibility)
- Sprint 2
1 render-blocking <script src> tag(s) without async/defer (Performance)
- Sprint 1
DMARC policy is none — monitoring only (Security)
…and 21 more recommended item(s)