Skip to content

Changes

https://nextjs.org
Compared to previous audit · 6 minutes ago View previous audit

Madrid, Spain → Santa Clara, United States

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

7
New issues
6
Resolved
9
score changes
CategoryPreviousCurrentChange
CompositeB (81)B (82) +1.000
PerformanceB (88)B (89) +1.000
SecurityB (85)B (85)—
AccessibilityC (75)C (75)—
SEOC (76)C (76)—
InfrastructureB (88)B (88)—
ComplianceD (63)D (63)—
ContentC (73)C (73)—
SustainabilityA (92)A (92)—
MetricPreviousCurrentChange
Performance 48006100 +1300
Accessibility 96009600—
Best Practices 92009200—
SEO 1000010000—
PWA 00—
FCP 3.08 s3.08 s—
LCP 5.73 s5.75 s—
TBT 1.05 s389 ms -662 ms
CLS 0.0000.000—
TTFB †169 ms111 ms -59 ms
DNS †6 ms29 ms +23 ms
TLS †9 ms35 ms +26 ms
Connect †3 ms1 ms -3 ms
Total †185 ms116 ms -69 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://nextjs.org/_next/static/chunks/0a1x1u7w7w_...: 1545ms CPU time performance
WARNING JavaScript is 510 KB — consider code splitting or lazy loading performance
WARNING HTTP→HTTPS redirect uses 302 instead of 301 infrastructure
WARNING Unattributable: 329ms CPU time performance
WARNING Trackers detected but no privacy policy found compliance
WARNING https://nextjs.org/: 936ms CPU time performance
WARNING Trackers detected but no cookie policy found compliance
WARNING JavaScript is 515 KB — consider code splitting or lazy loading performance
WARNING HTTP→HTTPS redirect is not permanent infrastructure
WARNING https://nextjs.org/: 1782ms CPU time performance
WARNING No SPF record found security
WARNING Unattributable: 519ms CPU time performance
WARNING https://nextjs.org/_next/static/chunks/0a1x1u7w7w_...: 2460ms CPU time performance
CRITICAL Page has only 18 words — nearly empty seo
CRITICAL 'unsafe-eval' found in script source security
CRITICAL 'unsafe-inline' found in script source security
WARNING Referrer-Policy has a weak value security
WARNING Permissions-Policy header is missing security
WARNING frame-ancestors directive is missing security
WARNING Dead-end page — no outgoing internal links seo
WARNING base-uri directive is missing security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING Title is only 26 characters — consider expanding seo
WARNING Thin content — only 18 words seo
WARNING Registrar lock is NOT enabled infrastructure
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING https://nextjs.org/_next/static/chunks/3u6nxjif50j...: 35 KB unused (99%) performance
WARNING No accessibility statement detected compliance
WARNING No <nav> landmark found accessibility
WARNING https://nextjs.org/_next/static/chunks/0la2krl14st...: 28 KB unused (58%) performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING https://nextjs.org/_next/static/chunks/0a1x1u7w7w_...: 23 KB unused (32%) performance
WARNING Terms of Service not detected compliance
WARNING No Open Graph meta tags found content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING form-action directive is missing security
WARNING No headings found accessibility
WARNING No canonical tag found seo
WARNING No meta description tag found seo
WARNING No internal links found seo
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING X-Powered-By header reveals technology stack security
WARNING No privacy policy link detected compliance
x-vercel-id
sfo1::pdx1::vwrww-1778264796947-f35b9ba70570 → cdg1::pdx1::77jgq-1778265152395-382bd28bd3e2

19 headers unchanged

Technology stack unchanged

8 technologies unchanged

Looking ahead

+12 pts
B (82) Could reach A (94)
SEO +20Security +15Compliance +14Accessibility +13Performance +11Infrastructure +8Content +4

Estimate — actual results may vary (37 issues to fix)

Website improvement report — Nextjs

May 8, 2026 → May 8, 2026

B B 81 → 82 +1 pts

6

Resolved

7

New issues

30

Still remaining

Financial summary

Investment delivered

$858 in development time

Investment remaining

$8,192 to complete the remaining items

Ongoing risk

$0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score81 (B)82 (B)+1
Performance88 (B)89 (B)+1
Security85 (B)85 (B)0
Accessibility75 (C)75 (C)0
SEO76 (C)76 (C)0
Infrastructure88 (B)88 (B)0
Compliance63 (D)63 (D)0
Content73 (C)73 (C)0
Sustainability92 (A)92 (A)0

Resolved (6)

  • JavaScript is 515 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • HTTP→HTTPS redirect is not permanent (Infrastructure)

    → More reliable delivery

  • https://nextjs.org/: 1782ms CPU time (Performance)

    → Page loads faster for users

  • No SPF record found (Security)

    → Reduced attack surface for visitors

  • Unattributable: 519ms CPU time (Performance)

    → Page loads faster for users

  • https://nextjs.org/_next/static/chunks/0a1x1u7w7w_...: 2460ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (37)

  • Sprint 3

    Page has only 18 words — nearly empty (SEO)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    https://nextjs.org/_next/static/chunks/0a1x1u7w7w_...: 1545ms CPU time (Performance)

  • Sprint 3

    JavaScript is 510 KB — consider code splitting or lazy loading (Performance)

  • Sprint 3

    HTTP→HTTPS redirect uses 302 instead of 301 (Infrastructure)

  • Sprint 1

    Unattributable: 329ms CPU time (Performance)

  • Sprint 2

    Trackers detected but no privacy policy found (Compliance)

  • Sprint 1

    https://nextjs.org/: 936ms CPU time (Performance)

  • Sprint 2

    Trackers detected but no cookie policy found (Compliance)

  • Sprint 1

    Referrer-Policy has a weak value (Security)

  • Sprint 1

    Permissions-Policy header is missing (Security)

  • Sprint 1

    frame-ancestors directive is missing (Security)

  • Sprint 1

    Dead-end page — no outgoing internal links (SEO)

  • Sprint 1

    base-uri directive is missing (Security)

…and 22 more recommended item(s)

Send Feedback