Skip to content
https://modsecurity.org

Performance

· 15 checks — Lighthouse + waterfall + sustainability rolled into one auditable list.
SCORE
92
GRADE
A
FIX
0
REVIEW
3
PASS
10
INFO
2

Performance-focused optimization plan with CWV assessment, top offenders, and time estimates

Mobile Desktop
95
Performance Overall performance score (0–100) based on Core Web Vitals and other metrics. 90+ is good.
83
Accessibility Measures how accessible the page is for users with disabilities. Checks color contrast, ARIA labels, and semantic HTML.
100
Best Practices Checks for modern web development best practices including HTTPS, no console errors, and secure JavaScript.
100
SEO Measures basic SEO optimizations: meta tags, crawlability, link text, and mobile friendliness.

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

248 ms

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

1.45 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

0 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.040

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

263 ms

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

1.45 s

Page Load Progression

375 ms
750 ms
1.1 s
1.5 s
1.9 s
2.2 s
2.6 s
3.0 s
Checks
15
10 PASS 3 REVIEW
B
Page Weight Budget
1.3 MB transferred, 20 requests
REVIEW
1.3 MB transferred, 20 requests
Info::
Page weighs 1.3 MB (1.3 MB transferred)
Warning::
Images are 1.1 MB — compress or use modern formats
Convert images to WebP/AVIF and resize to display dimensions to reduce transfer size.
Got: 1.1 MB
Info::
20 HTTP requests
Info::
Estimated 0.27 g CO2 per page load
1.3 MB / 2.4 MB budget
1.3 MB transferred
20 requests
0.27 g CO2 per page load
Images 1.1 MiB 87%
JavaScript 66.9 KiB 5%
Fonts 66.1 KiB 5%
Other 21.5 KiB 2%
CSS 6.9 KiB 1%
HTML 4.3 KiB 0%
Other 294 B 0%
0 2.4 MB 4.9 MB
Under budget

Convert images to WebP/AVIF and resize to display dimensions to reduce transfer size.

Why this matters

Image bandwidth is high — modern formats (WebP/AVIF) and resizing typically cut it 50%+.

Source: web.dev

C
Image Optimization
Action
8 images, 0 KB saveable
REVIEW
8 images, 0 KB saveable
Warning::
https://piwik.netnea.com/matomo/matomo.php?idsite=... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
https://modsecurity.org/images/owasp/logo.png is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
8 images 1.1 MB
0 oversized -0 KB
7 legacy format
2 missing dimensions CLS risk

Set explicit width and height to prevent CLS.

Why this matters

Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.

Source: web.dev / Core Web Vitals

Set explicit width and height to prevent CLS.

Why this matters

Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.

Source: web.dev / Core Web Vitals

B
Page Weight Inventory
20 resources · 1.3 MB · 38 KB savings available
REVIEW
20 resources · 1.3 MB · 38 KB savings available
Warning::
Page weight 276 KB over 1MB target
Got: 1.3 MB Expected: ≤ 1 MB
Info::
4 third-party resources (5% of weight)
Info::
1 resources over 200KB
20 resources · 1.3 MiB · 4 third-party 276.0 KiB over 1MB target
Image 89% · 1.1 MiB
JavaScript 5% · 66.9 KiB
Font 5% · 66.1 KiB
CSS 1% · 6.9 KiB
Document 0% · 4.3 KiB
Other 0% · 294 B

~38.2 KiB of savings available

Remove unused JavaScript: 38.2 KiB
A+
Third-Party Impact
5% third-party, 0 ms blocking
PASS
5% third-party, 0 ms blocking
Info::
Third-party code accounts for 5% of page weight (65.2 KiB of 1.3 MiB)
Info::
Third-party blocking time is low (0 ms)
95%
First-party Third-party
A+
Text Compression
All text resources are compressed
PASS
All text resources are compressed
Info::
All text resources are compressed
All text resources are properly compressed.
A+
JS Execution Cost
172ms total JS execution
PASS
172ms total JS execution
Info::
Unattributable: 102ms CPU time
Info::
https://modsecurity.org/: 70ms CPU time
Warning::
Third-party scripts: 102ms (59% of total)

Main Thread Breakdown

Other 49% Style & Layout 23% Script Evaluation 17% Rendering 5% Parse HTML & CSS 3%
ScriptTotalScriptingParse/CompileParty
Unattributable102ms7ms0ms3rd
https://modsecurity.org/70ms6ms1ms1st
A+
Font Loading
5 fonts (66 KB)
PASS
5 fonts (66 KB)
Info::
5 font(s) use font-display: swap (FOUT risk but functional)

Web fonts

5

66 KB total

Render-blocking

0

of 5

Dominant font-display

swap

Most common across fonts

Font loading timeline
Transfer FOIT (block) FOUT (swap)
0 ms 500 ms 1.0 s 1.5 s FCP 248 ms LCP 1.4 shttps://modsecurity.org/fonts/nunito-v25-latin-regular.woff2nunito-v25-latin-regula... https://modsecurity.org/fonts/nunito-v25-latin-regular.woff2 — 14.0 KiB — 11 ms — font-display: swaphttps://modsecurity.org/fonts/oswald-v49-latin-700.woff2oswald-v49-latin-700.woff2 https://modsecurity.org/fonts/oswald-v49-latin-700.woff2 — 10.1 KiB — 11 ms — font-display: swaphttps://modsecurity.org/fonts/nunito-v25-latin-700.woff2nunito-v25-latin-700.woff2 https://modsecurity.org/fonts/nunito-v25-latin-700.woff2 — 13.8 KiB — 18 ms — font-display: swaphttps://modsecurity.org/fonts/nunito-v25-latin-800.woff2nunito-v25-latin-800.woff2 https://modsecurity.org/fonts/nunito-v25-latin-800.woff2 — 14.0 KiB — 13 ms — font-display: swaphttps://modsecurity.org/fonts/nunito-v25-latin-900.woff2nunito-v25-latin-900.woff2 https://modsecurity.org/fonts/nunito-v25-latin-900.woff2 — 14.2 KiB — 10 ms — font-display: swap
nunito-v25-latin-regula... woff2 swap
Size 14 KB
Load time 11 ms
Start 48 ms
Risk FOUT — text flashes from fallback to web font
oswald-v49-latin-700.woff2 woff2 swap
Size 10 KB
Load time 11 ms
Start 51 ms
Risk FOUT — text flashes from fallback to web font
nunito-v25-latin-700.woff2 woff2 swap
Size 14 KB
Load time 18 ms
Start 51 ms
Risk FOUT — text flashes from fallback to web font
nunito-v25-latin-800.woff2 woff2 swap
Size 14 KB
Load time 13 ms
Start 51 ms
Risk FOUT — text flashes from fallback to web font
nunito-v25-latin-900.woff2 woff2 swap
Size 14 KB
Load time 10 ms
Start 152 ms
Risk FOUT — text flashes from fallback to web font
Optimization checklist
  • Preload critical fonts (priority=high)
  • Use woff2 format for all fonts
  • Set font-display to swap, optional, or fallback
  • Subset large fonts (≤100 KB each)
A+
JS Bundles
3 scripts, 38 KB unused
PASS
3 scripts, 38 KB unused
Warning::
https://piwik.netnea.com/matomo/matomo.js: 38 KB unused (59%)
Consider code splitting or tree shaking to reduce unused code.
Info::
Total unused JavaScript: 38 KB
38 KB unused JavaScript

Downloaded but never executed on this page.

ScriptSizeUnusedMinifiedParty
https://piwik.netnea.com/matomo/matomo.js65 KB38 KB (59%)✓3rd
https://modsecurity.org/js/hoverintent.min.js1 KB—✓1st
https://modsecurity.org/js/scripts.min.12be4f9e8cd7fb0a93337b3c49efe7788e7bb4a2b8fe248334502fe8549a78b2.js1 KB—✓1st

Consider code splitting or tree shaking to reduce unused code.

Why this matters

This bundle has high unused code — code-split or tree-shake to ship only what executes.

Source: web.dev / Lighthouse coverage

A+
Resource Caching
All resources properly cached
PASS
All resources properly cached
Info::
No caching issues found
All static resources have appropriate caching headers.
A+
Critical Rendering Path
No render-blocking resources
PASS
No render-blocking resources
Info::
No render-blocking resources detected
A+
Resource Hints
No optimization needed
PASS
No optimization needed
Info::
No resource hint issues
A+
Green Hosting
Whether the site is served from green-energy infrastructure
PASS

Green Hosting

This site is hosted on green energy infrastructure

Provider: Cloudflare

A+
HTTP Caching
max-age=600 (10 minutes)
PASS
max-age=600 (10 minutes)
Info::
Cache-Control header is set
Got: max-age=600
Info::
Effective TTL: 10 minutes (max-age=600)
Info::
Last-Modified header present
Cache-Control

max-age=600

DirectiveValueMeaning
max-age600Cache for 10 minutes
Effective TTL: 600 seconds
Network Waterfall
20 requests over 334ms
INFO
0 ms 500 ms 1.0 s 1.5 s FCP 248 ms LCP 1.4 shttps://modsecurity.org// https://modsecurity.org/ — 200 — 4.3 KiB — 26 ms — h2https://modsecurity.org/fonts/nunito-v25-latin-regular.woff2/fonts/nunito-v25-latin-regular.wof... https://modsecurity.org/fonts/nunito-v25-latin-regular.woff2 — 200 — 14.0 KiB — 11 ms — h2https://modsecurity.org/fonts/oswald-v49-latin-700.woff2/fonts/oswald-v49-latin-700.woff2 https://modsecurity.org/fonts/oswald-v49-latin-700.woff2 — 200 — 10.1 KiB — 11 ms — h2https://modsecurity.org/fonts/nunito-v25-latin-700.woff2/fonts/nunito-v25-latin-700.woff2 https://modsecurity.org/fonts/nunito-v25-latin-700.woff2 — 200 — 13.8 KiB — 18 ms — h2https://modsecurity.org/fonts/nunito-v25-latin-800.woff2/fonts/nunito-v25-latin-800.woff2 https://modsecurity.org/fonts/nunito-v25-latin-800.woff2 — 200 — 14.0 KiB — 13 ms — h2https://modsecurity.org/css/styles.bdc3a253969505a9c22873e97099b77c77b55f81243353b2c802f540c984c7dc91dba986eaf5c18916b1050b3b851209182c004c3cd04a0d8a73ee189c9fa894.css/css/styles.bdc3a253969505a9c22873e... https://modsecurity.org/css/styles.bdc3a253969505a9c22873e97099b77c77b55f81243353b2c802f540c984c7dc91dba986eaf5c18916b1050b3b851209182c004c3cd04a0d8a73ee189c9fa894.css — 200 — 6.9 KiB — 17 ms — h2https://piwik.netnea.com/matomo/matomo.jspiwik.netnea.com/matomo/matomo.js https://piwik.netnea.com/matomo/matomo.js — 200 — 64.6 KiB — 138 ms — http/1.1https://piwik.netnea.com/matomo/matomo.php?idsite=5&rec=1piwik.netnea.com/matomo/matomo.php?... https://piwik.netnea.com/matomo/matomo.php?idsite=5&rec=1 — 200 — 305 B — 148 ms — http/1.1https://modsecurity.org/images/logo/horizontal.png/images/logo/horizontal.png https://modsecurity.org/images/logo/horizontal.png — 200 — 46.3 KiB — 11 ms — h2https://modsecurity.org/images/plugged.png/images/plugged.png https://modsecurity.org/images/plugged.png — 200 — 1.0 MiB — 73 ms — h2https://modsecurity.org/images/owasp/logo.png/images/owasp/logo.png https://modsecurity.org/images/owasp/logo.png — 200 — 15.6 KiB — 13 ms — h2https://modsecurity.org/js/hoverintent.min.js/js/hoverintent.min.js https://modsecurity.org/js/hoverintent.min.js — 200 — 951 B — 21 ms — h2https://modsecurity.org/js/scripts.min.12be4f9e8cd7fb0a93337b3c49efe7788e7bb4a2b8fe248334502fe8549a78b2.js/js/scripts.min.12be4f9e8cd7fb0a933... https://modsecurity.org/js/scripts.min.12be4f9e8cd7fb0a93337b3c49efe7788e7bb4a2b8fe248334502fe8549a78b2.js — 200 — 1.4 KiB — 14 ms — h2data:image/svg+xml,%3Csvg width='9' height='6' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3C…www.w3.org/2000/svg'%3E%3C… data:image/svg+xml,%3Csvg width='9' height='6' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3C… — 200 — 0 B — 0 ms — datahttps://modsecurity.org/img/social-icons/github.svg/img/social-icons/github.svg https://modsecurity.org/img/social-icons/github.svg — 200 — 1006 B — 11 ms — h2https://modsecurity.org/img/social-icons/linkedin.svg/img/social-icons/linkedin.svg https://modsecurity.org/img/social-icons/linkedin.svg — 200 — 736 B — 16 ms — h2https://modsecurity.org/img/social-icons/slack.svg/img/social-icons/slack.svg https://modsecurity.org/img/social-icons/slack.svg — 200 — 1.4 KiB — 18 ms — h2https://modsecurity.org/fonts/nunito-v25-latin-900.woff2/fonts/nunito-v25-latin-900.woff2 https://modsecurity.org/fonts/nunito-v25-latin-900.woff2 — 200 — 14.2 KiB — 10 ms — h2https://piwik.netnea.com/matomo/matomo.php?action_name=Modsecurity%20Project&idsite=5&rec=1&r=425544&h=20&m=16&s=21&url=https%3A%2F%2Fmodsecurity.org%2F&_id=986c667bbb174abc&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=800x600&pv_id=OCpsmg&pf_net=13&pf_srv=12&pf_tfr=2&pf_dm1=44&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not-A.Brand%22%2C%22version%22%3A%2224.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22146.0.7680.164%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22macOS%22%2C%22platformVersion%22%3A%2210.15.7%22%7Dpiwik.netnea.com/matomo/matomo.php?... https://piwik.netnea.com/matomo/matomo.php?action_name=Modsecurity%20Project&idsite=5&rec=1&r=425544&h=20&m=16&s=21&url=https%3A%2F%2Fmodsecurity.org%2F&_id=986c667bbb174abc&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=800x600&pv_id=OCpsmg&pf_net=13&pf_srv=12&pf_tfr=2&pf_dm1=44&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not-A.Brand%22%2C%22version%22%3A%2224.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22146.0.7680.164%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22macOS%22%2C%22platformVersion%22%3A%2210.15.7%22%7D — 204 — 294 B — 84 ms — http/1.1https://modsecurity.org/favicon.svg/favicon.svg https://modsecurity.org/favicon.svg — 200 — 21.5 KiB — 14 ms — h2
HTML JavaScript CSS Images Fonts XHR/Fetch Other
Third-Party Script Cost
Per-script blocking time, transfer cost, and cache headers
INFO
59% of JavaScript execution is third-party
First-party Third-party 102ms · 0KB · $0/mo
Unattributable
Other
Optional
Execution 102ms
Transfer 0 KB
Monthly Cost $0/mo

59% of JavaScript execution time comes from third-party scripts.

Why this matters

Third-party scripts (analytics, ads, social, A/B testing) often dominate execution time — every one is a perf-and-privacy tax.

Learn more ▾

Each third-party script is a black box: you don't control when it loads, what it executes, or how much it grows. They often account for a major share of total blocking time on average sites (HTTP Archive's Web Almanac documents the trend). Audit which ones you actually need, defer the rest, and use facade patterns (lite-youtube, lite-vimeo) for embedded media.

Source: web.dev / HTTP Archive Web Almanac

How third-party costs are calculated

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback