Skip to content

Changes

https://bytespc.es
Compared to previous audit · 21 minutes ago View previous audit
7
New issues
10
Resolved
16
score changes
CategoryPreviousCurrentChange
CompositeB (84)B (86) +2.000
PerformanceB (89)B (89)—
SecurityC (78)B (83) +5.000
AccessibilityB (80)B (80)—
SEOA (94)A (94)—
InfrastructureA (91)A (91)—
ComplianceC (73)C (73)—
ContentA (90)A (90)—
SustainabilityA (95)A (95)—
MetricPreviousCurrentChange
Performance 70009000 +2000
Accessibility 96009600—
Best Practices 1000010000—
SEO 1000010000—
PWA 00—
Desktop Performance 59009500 +3600
Desktop Accessibility 96009600—
Desktop Best Practices 100009600 -400
Desktop SEO 1000010000—
FCP 3.97 s2.42 s -1.55 s
LCP 4.01 s2.61 s -1.40 s
TBT 88 ms94 ms +7 ms
CLS 0.0150.000 -0.015
Desktop FCP 4.47 s916 ms -3.55 s
Desktop LCP 4.47 s1.06 s -3.41 s
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0020.001 -0.001
TTFB †1.46 s1.57 s +105 ms
DNS †1 ms1 ms +0 ms
TLS †30 ms28 ms -2 ms
Connect 17 ms17 ms—
Total †1.49 s1.59 s +104 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING 8 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING Unattributable: 368ms CPU time performance
WARNING HSTS is enabled but missing includeSubDomains security
WARNING https://www.googletagmanager.com/gtag/js?id=GT-TBZ...: 288ms CPU time performance
WARNING https://www.bytespc.es/: 619ms CPU time performance
WARNING 18 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING Third-party code accounts for 54% of page weight (308.2 KiB of 570.8 KiB) performance
CRITICAL HSTS header is missing security
WARNING https://www.bytespc.es/: 574ms CPU time performance
WARNING Unattributable: 302ms CPU time performance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING https://www.googletagmanager.com/gtag/js?id=GT-TBZ...: 285ms CPU time performance
WARNING X-Frame-Options header is missing security
WARNING Permissions-Policy covers 0/10 high-risk features (0%) security
WARNING X-Content-Type-Options header is missing security
WARNING Referrer-Policy header is missing security
WARNING Third-party code accounts for 54% of page weight (308.2 KiB of 572.0 KiB) performance
CRITICAL 4 button(s) with no accessible text accessibility
CRITICAL 4 link(s) with no accessible text accessibility
CRITICAL Content-Security-Policy header is missing security
WARNING 2 link(s) open in new tab without warning accessibility
WARNING No accessibility statement detected compliance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Terms of Service not detected compliance
WARNING Broken link: https://www.googletagmanager.com content
WARNING Broken link: https://fonts.gstatic.com content
WARNING Twitter card is `summary_large_image` but OG image is 1200×896 (ratio 1.34:1) -- closer to square content
WARNING 17 images missing explicit width/height content
WARNING X-Powered-By header reveals technology stack security
WARNING No SPF record found security
WARNING 21 third-party resources (54% of weight) performance
WARNING Broken link: https://fonts.googleapis.com content
WARNING All 2 images use legacy formats (JPEG/PNG/GIF) content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING SRI adoption: 0/3 third-party resources protected (0%) security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 83 of 86 links are healthy content
WARNING s.w.org serves text assets uncompressed (assets: 7) performance
WARNING External script from cdn.trustindex.io lacks integrity attribute security
WARNING External script from www.paypalobjects.com lacks integrity attribute security
WARNING https://www.googletagmanager.com/gtag/js?id=GT-TBZ...: 74 KB unused (42%) performance
WARNING 109 inline style attribute(s) detected security
WARNING 57% of images have non-descriptive filenames seo
WARNING External script from www.googletagmanager.com lacks integrity attribute security
WARNING No DMARC record found security
+ x-frame-options SAMEORIGIN
+ cross-origin-opener-policy same-origin-allow-popups
+ content-security-policy-report-only default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; s...
+ x-permitted-cross-domain-policies none
+ strict-transport-security max-age=31536000
+ reporting-endpoints kareva-sh="https://www.bytespc.es/wp-json/kareva-sh/v1/report"
+ cross-origin-resource-policy same-site
+ x-content-type-options nosniff
+ x-xss-protection 0
+ referrer-policy strict-origin-when-cross-origin
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gs... → accelerometer=(), camera=(), display-capture=(), geolocation=(), gyroscope=()...
x-powered-by
PHP/8.5.12, PleskLin → PleskLin

7 headers unchanged

+ HSTS Security
+ Plesk Hosting panels
PHP v8.5.12 → v

18 technologies unchanged

Looking ahead

+11 pts
B (86) Could reach A+ (97)
Accessibility +20Security +17Performance +11Compliance +10Content +10SEO +4

Estimate — actual results may vary (35 issues to fix)

Website improvement report — Bytespc

November 3, 2026 → November 3, 2026

B B 84 → 86 +2 pts

10

Resolved

7

New issues

28

Still remaining

Financial summary

Investment delivered

€490 in development time

Investment remaining

€2,278 to complete the remaining items

Ongoing risk

€0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score84 (B)86 (B)+2
Performance89 (B)89 (B)0
Security78 (C)83 (B)+5
Accessibility80 (B)80 (B)0
SEO94 (A)94 (A)0
Infrastructure91 (A)91 (A)0
Compliance73 (C)73 (C)0
Content90 (A)90 (A)0
Sustainability95 (A)95 (A)0

Resolved (10)

  • https://www.bytespc.es/: 574ms CPU time (Performance)

    → Page loads faster for users

  • Unattributable: 302ms CPU time (Performance)

    → Page loads faster for users

  • HSTS header is missing (Security)

    → Reduced attack surface for visitors

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://www.googletagmanager.com/gtag/js?id=GT-TBZ...: 285ms CPU time (Performance)

    → Page loads faster for users

  • X-Frame-Options header is missing (Security)

    → Reduced attack surface for visitors

  • Permissions-Policy covers 0/10 high-risk features (0%) (Security)

    → Reduced attack surface for visitors

  • X-Content-Type-Options header is missing (Security)

    → Reduced attack surface for visitors

  • Referrer-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Third-party code accounts for 54% of page weight (308.2 KiB of 572.0 KiB) (Performance)

    → Page loads faster for users

Recommended next steps (35)

  • Sprint 1

    4 button(s) with no accessible text (Accessibility)

  • Sprint 1

    4 link(s) with no accessible text (Accessibility)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    8 text node(s) render below 12 CSS pixels on mobile (Accessibility)

  • Sprint 1

    Unattributable: 368ms CPU time (Performance)

  • Sprint 1

    HSTS is enabled but missing includeSubDomains (Security)

  • Sprint 1

    https://www.googletagmanager.com/gtag/js?id=GT-TBZ...: 288ms CPU time (Performance)

  • Sprint 1

    https://www.bytespc.es/: 619ms CPU time (Performance)

  • Sprint 1

    18 render-blocking stylesheet(s) -- recommended: <=3 (Performance)

  • Sprint 3

    Third-party code accounts for 54% of page weight (308.2 KiB of 570.8 KiB) (Performance)

  • Sprint 1

    2 link(s) open in new tab without warning (Accessibility)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 1

    Terms of Service not detected (Compliance)

  • Sprint 1

    Broken link: https://www.googletagmanager.com (Content)

…and 20 more recommended item(s)

Send Feedback