Changes
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | B (87) | B (87) | — |
| Performance | A (92) | A (92) | — |
| Security | B (85) | B (86) | +1.000 |
| Accessibility | B (81) | B (81) | — |
| SEO | A+ (97) | A+ (97) | — |
| Infrastructure | B (88) | B (86) | -2.000 |
| Compliance | D (69) | D (69) | — |
| Content | A+ (98) | A+ (98) | — |
| Sustainability | B (88) | B (88) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 5700 | 6300 | +600 |
| Accessibility | 9600 | 9600 | — |
| Best Practices | 7300 | 7300 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 8500 | 8600 | +100 |
| Desktop Accessibility | 10000 | 10000 | — |
| Desktop Best Practices | 7300 | 7300 | — |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 4.20 s | 3.98 s | -216 ms |
| LCP | 4.50 s | 4.43 s | -66 ms |
| TBT | 460 ms | 460 ms | — |
| CLS | 0.056 | 0.056 | — |
| Desktop FCP | 1.39 s | 1.32 s | -67 ms |
| Desktop LCP | 1.88 s | 1.87 s | — |
| Desktop TBT | 56 ms | 44 ms | -12 ms |
| Desktop CLS | 0.002 | 0.002 | — |
| TTFB † | 1.31 s | 723 ms | -591 ms |
| DNS † | 13 ms | 12 ms | -1 ms |
| TLS | 12 ms | 12 ms | — |
| Connect † | 4 ms | 3 ms | -1 ms |
| Total † | 1.31 s | 724 ms | -591 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
HTTP headers unchanged
19 headers unchanged
Technology stack unchanged
7 technologies unchanged
Looking ahead
+11 ptsEstimate — actual results may vary (30 issues to fix)
Website improvement report — Xpenv
May 29, 2026 → May 29, 2026
6
Resolved
7
New issues
23
Still remaining
Financial summary
Investment delivered
€85 in development time
Investment remaining
€2,302 to complete the remaining items
Ongoing risk
€0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 87 (B) | 87 (B) | 0 |
| Performance | 92 (A) | 92 (A) | 0 |
| Security | 85 (B) | 86 (B) | +1 |
| Accessibility | 81 (B) | 81 (B) | 0 |
| SEO | 97 (A+) | 97 (A+) | 0 |
| Infrastructure | 88 (B) | 86 (B) | -2 |
| Compliance | 69 (D) | 69 (D) | 0 |
| Content | 98 (A+) | 98 (A+) | 0 |
| Sustainability | 88 (B) | 88 (B) | 0 |
Resolved (6)
https://xpenv.com/assets/index-PXmCayWQ.js: 713ms CPU time (Performance)
→ Page loads faster for users
https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 381ms CPU time (Performance)
→ Page loads faster for users
Unattributable: 374ms CPU time (Performance)
→ Page loads faster for users
2 publicly-accessible JavaScript source map(s) (Security)
→ Reduced attack surface for visitors
https://xpenv.com/: 271ms CPU time (Performance)
→ Page loads faster for users
Broken link: https://ipfs.io/cdn-cgi/content?id=uc1aXx.11fs8rvZ1dC6U3f... (Content)
→ Stronger social sharing and on-page quality
Recommended next steps (30)
- Sprint 1
Broken link: https://ipfs.io/cdn-cgi/content?id=4hA.0l9lIhfsdCeKx1S8qr... (Content)
- Sprint 1
Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)
- Sprint 1
Transfer efficiency: 41% (Sustainability)
- Sprint 1
2 link(s) with no accessible text (Accessibility)
- Sprint 2
Content-Security-Policy header is missing (Security)
- Sprint 1
No H1 heading found (Accessibility)
- Sprint 1
https://xpenv.com/assets/index-PXmCayWQ.js: 697ms CPU time (Performance)
- Sprint 1
https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 337ms CPU time (Performance)
- Sprint 1
Unattributable: 369ms CPU time (Performance)
- Sprint 1
1 publicly-accessible JavaScript source map(s) (Security)
- Sprint 1
https://xpenv.com/: 321ms CPU time (Performance)
- Sprint 2
1 render-blocking <script src> tag(s) without async/defer (Performance)
- Sprint 1
Login form does not contain a recognizable CSRF token (Security)
- Sprint 1
DMARC policy is none — monitoring only (Security)
- Sprint 1
Main HTML cached for 483840 minutes -- risks stale auth / SPA state (Performance)
…and 15 more recommended item(s)