Changes
Sao Paulo, Brazil → Santa Clara, United States
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | B (86) | B (89) | +3.000 |
| Performance | A (96) | A+ (97) | +1.000 |
| Security | B (88) | B (89) | +1.000 |
| Accessibility | C (79) | A (90) | +11.000 |
| SEO | A (95) | A (95) | — |
| Infrastructure | B (83) | B (88) | +5.000 |
| Compliance | D (63) | D (63) | — |
| Content | C (75) | C (75) | — |
| Sustainability | A+ (98) | A+ (98) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 6200 | 7500 | +1300 |
| Accessibility | 9000 | 9600 | +600 |
| Best Practices | 10000 | 10000 | — |
| SEO | 9100 | 9100 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9800 | 9000 | -800 |
| Desktop Accessibility | 9100 | 9600 | +500 |
| Desktop Best Practices | 10000 | 10000 | — |
| Desktop SEO | 9200 | 9200 | — |
| FCP | 3.75 s | 2.72 s | -1.03 s |
| LCP | 7.06 s | 4.12 s | -2.94 s |
| TBT | 208 ms | 243 ms | +35 ms |
| CLS | 0.000 | 0.079 | +0.079 |
| Desktop FCP | 585 ms | 1.12 s | +537 ms |
| Desktop LCP | 1.04 s | 1.74 s | +692 ms |
| Desktop TBT | 0 ms | 14 ms | +14 ms |
| Desktop CLS | 0.000 | 0.011 | +0.011 |
| TTFB † | 976 ms | 951 ms | -25 ms |
| DNS † | 11 ms | 115 ms | +103 ms |
| TLS † | 11 ms | 18 ms | +7 ms |
| Connect † | 4 ms | 8 ms | +4 ms |
| Total † | 1.15 s | 1.12 s | -37 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
link </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://c... → default-src 'self'; script-src 'self' 'nonce-ZpaIpGLbwZ3rV1BEG4uqMA==' https:...13 headers unchanged
Technology stack unchanged
10 technologies unchanged
Looking ahead
+7 ptsEstimate — actual results may vary (19 issues to fix)
Website improvement report — Costdown
August 27, 2026 → August 27, 2026
11
Resolved
4
New issues
15
Still remaining
Financial summary
Investment delivered
₫9,150,000 in development time
Investment remaining
₫8,850,000 to complete the remaining items
Ongoing risk
₫3,461/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 86 (B) | 89 (B) | +3 |
| Performance | 96 (A) | 97 (A+) | +1 |
| Security | 88 (B) | 89 (B) | +1 |
| Accessibility | 79 (C) | 90 (A) | +11 |
| SEO | 95 (A) | 95 (A) | 0 |
| Infrastructure | 83 (B) | 88 (B) | +5 |
| Compliance | 63 (D) | 63 (D) | 0 |
| Content | 75 (C) | 75 (C) | 0 |
| Sustainability | 98 (A+) | 98 (A+) | 0 |
Resolved (11)
'unsafe-inline' found in script source (Security)
→ Reduced attack surface for visitors
security.txt: Missing required 'Contact' field (Security)
→ Reduced attack surface for visitors
3 control(s) without accessible label (Accessibility)
→ Improved usability for assistive technology users
Manifest contains invalid JSON (Accessibility)
→ Improved usability for assistive technology users
IPv6 DNS records exist but server is not reachable (Infrastructure)
→ More reliable delivery
1 control(s) rely on placeholder only (Accessibility)
→ Improved usability for assistive technology users
'unsafe-eval' found in script source (Security)
→ Reduced attack surface for visitors
security.txt: Missing required 'Expires' field (RFC 9116) (Security)
→ Reduced attack surface for visitors
https://costdown.org/_next/static/chunks/1255-fc6c...: 666ms CPU time (Performance)
→ Page loads faster for users
https://costdown.org/: 857ms CPU time (Performance)
→ Page loads faster for users
Unattributable: 353ms CPU time (Performance)
→ Page loads faster for users
Recommended next steps (19)
- Sprint 1
Both www and non-www versions serve content (Infrastructure)
- Sprint 1
https://costdown.org/: 798ms CPU time (Performance)
- Sprint 2
1 render-blocking <script src> tag(s) without async/defer (Performance)
- Sprint 1
Unattributable: 320ms CPU time (Performance)
- Sprint 2
GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)
- Sprint 1
Permissions-Policy header is missing (Security)
- Sprint 1
Cross-Origin-Opener-Policy header is missing (Security)
- Sprint 2
No DMARC record found (Security)
- Sprint 1
No SPF record found (Security)
- Sprint 1
Skip navigation link is missing (WCAG 2.4.1) (Accessibility)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)
- Sprint 2
No privacy policy link detected (Compliance)
- Sprint 1
Terms of Service not detected (Compliance)
- Sprint 2
Cross-Origin-Embedder-Policy header is missing (Security)
- Sprint 1
X-Powered-By header reveals technology stack (Security)
…and 4 more recommended item(s)