Skip to content

Changes

https://costdown.org
Compared to previous audit · 1 day ago View previous audit
2
New issues
1
Resolved
11
score changes
CategoryPreviousCurrentChange
CompositeA (92)A (92)
PerformanceA+ (97)A+ (97)
SecurityA (96)A (96)
AccessibilityA (90)A (90)
SEOA (94)A (96) +2.000
InfrastructureA (90)A (90)
ComplianceC (74)C (74)
ContentB (85)B (85)
SustainabilityA+ (98)A+ (98)
MetricPreviousCurrentChange
Performance 90009300 +300
Accessibility 96009600
Best Practices 1000010000
SEO 91009100
PWA 00
Desktop Performance 99009900
Desktop Accessibility 96009600
Desktop Best Practices 1000010000
Desktop SEO 92009200
FCP 1.09 s1.13 s +40 ms
LCP 3.19 s3.19 s
TBT 182 ms71 ms -111 ms
CLS 0.0000.000
Desktop FCP 526 ms544 ms +18 ms
Desktop LCP 938 ms968 ms +30 ms
Desktop TBT 0 ms0 ms
Desktop CLS 0.0000.000
TTFB 376 ms321 ms -55 ms
DNS 30 ms40 ms +10 ms
TLS 23 ms23 ms -0 ms
Connect 16 ms17 ms +0 ms
Total 532 ms488 ms -44 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://costdown.org/: 457ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING https://costdown.org/: 454ms CPU time performance
CRITICAL Both www and non-www versions serve content infrastructure
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING DMARC policy is none — monitoring only security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No accessibility statement detected compliance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING X-Powered-By header reveals technology stack security
WARNING Registrar lock is NOT enabled infrastructure
WARNING 1 images significantly larger than display size content
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
content-security-policy
default-src 'self'; script-src 'self' 'nonce-0XfcYy3dr9N+iYF07572Qg==' https:... default-src 'self'; script-src 'self' 'nonce-/bgybEQOqJiRD4tyJeQBFQ==' https:...
link
</_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...

15 headers unchanged

Technology stack unchanged

11 technologies unchanged

Looking ahead

+5 pts
A (92) Could reach A+ (97)
Infrastructure +10Compliance +8Content +8Accessibility +4Security +4Performance +3

Estimate — actual results may vary (12 issues to fix)

Website improvement report — Costdown

August 30, 2026 → September 1, 2026

A A 92 → 92 0 pts

1

Resolved

2

New issues

10

Still remaining

Financial summary

Investment remaining

₫6,750,000 to complete the remaining items

Ongoing risk

₫2,968/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score92 (A)92 (A)0
Performance97 (A+)97 (A+)0
Security96 (A)96 (A)0
Accessibility90 (A)90 (A)0
SEO94 (A)96 (A)+2
Infrastructure90 (A)90 (A)0
Compliance74 (C)74 (C)0
Content85 (B)85 (B)0
Sustainability98 (A+)98 (A+)0

Resolved (1)

  • https://costdown.org/: 454ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (12)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    https://costdown.org/: 457ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    DMARC policy is none — monitoring only (Security)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 2

    1 images significantly larger than display size (Content)

  • Sprint 2

    All 1 images use legacy formats (JPEG/PNG/GIF) (Content)

Send Feedback