Skip to content

Changes

https://creativecommons.org
Compared to previous audit · 13 weeks ago View previous audit

Madrid, Spain Sao Paulo, Brazil

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

23
New issues
14
Resolved
21
score changes
CategoryPreviousCurrentChange
CompositeC (77)B (84) +7.000
PerformanceB (81)B (84) +3.000
SecurityD (58)C (79) +21.000
AccessibilityC (70)B (83) +13.000
SEOA (96)A+ (98) +2.000
InfrastructureA+ (98)B (89) -9.000
ComplianceC (78)C (79) +1.000
ContentA (91)B (84) -7.000
SustainabilityD (66)C (70) +4.000
MetricPreviousCurrentChange
Performance 93006700 -2600
Accessibility 1000010000
Best Practices 1000010000
SEO 92009200
PWA 00
Desktop Performance 97009600 -100
Desktop Accessibility 1000010000
Desktop Best Practices 1000010000
Desktop SEO 92009200
FCP 1.56 s1.57 s
LCP 2.87 s82.77 s +79.90 s
TBT 168 ms316 ms +148 ms
CLS 0.0230.023
Desktop FCP 388 ms311 ms -77 ms
Desktop LCP 595 ms1.03 s +436 ms
Desktop TBT 12 ms14 ms +2 ms
Desktop CLS 0.1040.104
TTFB 31 ms97 ms +65 ms
DNS 5 ms29 ms +24 ms
TLS 9 ms23 ms +14 ms
Connect 2 ms17 ms +15 ms
Total 32 ms98 ms +66 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 77
Projected
A 94
Actual
B 84
Close to projection — 10 points away
14 issues resolved since last audit
49 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL Page weighs 23.0 MB (22.4 MB transferred) performance
CRITICAL Broken link: https://mail.creativecommons.org/subscribe content
CRITICAL Broken link: https://www.metmuseum.org/art/collection/search/39664 content
CRITICAL 5.30g CO2 per page view sustainability
CRITICAL 115 of 119 links are healthy content
WARNING SRI adoption: 0/1 third-party resources protected (0%) security
WARNING https://www.googletagmanager.com/gtag/js?id=G-J83G...: 426ms CPU time performance
WARNING 18 images missing explicit width/height content
WARNING Unattributable: 656ms CPU time performance
WARNING Page weight 22.4 MB exceeds 1 MB target by 21.4 MB performance
WARNING DMARC policy is none — monitoring only security
WARNING Images are 22.1 MB — compress or use modern formats performance
WARNING GDPR Article 13 disclosure coverage: 4 / 8 categories compliance
WARNING All 18 images use legacy formats (JPEG/PNG/GIF) content
WARNING 4 link(s) open in a new tab without rel=noopener security
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING https://www.googletagmanager.com/gtag/js?id=G-J83G...: 56 KB unused (33%) performance
WARNING 3 render-blocking <script src> tag(s) without async/defer performance
WARNING DNSSEC keys published but parent zone has no DS record infrastructure
WARNING 12 images significantly larger than display size content
WARNING Total image weight: 23915 KB (23.4 MB) content
WARNING https://creativecommons.org/: 341ms CPU time performance
WARNING 5.30g CO2 — above the median website (0.60g) sustainability
CRITICAL Page weighs 23.4 MB (22.9 MB transferred) performance
CRITICAL 5.42g CO2 per page view sustainability
CRITICAL Broken link: https://bsky.app/profile/creativecommons.bsky.social content
WARNING https://www.googletagmanager.com/gtag/js?id=G-J83G...: 447ms CPU time performance
WARNING No DMARC record found security
WARNING Images are 22.6 MB — compress or use modern formats performance
WARNING https://creativecommons.org/: 491ms CPU time performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING 106 of 109 links are healthy content
WARNING Unattributable: 734ms CPU time performance
WARNING https://www.googletagmanager.com/gtag/js?id=G-J83G...: 53 KB unused (32%) performance
WARNING 5.42g CO2 — above the median website (0.60g) sustainability
WARNING Page weight 22.9 MB exceeds 1 MB target by 21.9 MB performance
WARNING External script from googleads.g.doubleclick.net lacks integrity attribute security
CRITICAL No Content-Security-Policy header found security
CRITICAL Broken link: https://www.metmuseum.org/art/collection/search/714877 content
CRITICAL 1 control(s) without accessible label accessibility
CRITICAL HSTS header is missing security
CRITICAL Content-Security-Policy header is missing security
WARNING No meta description tag found seo
WARNING Registrar lock is NOT enabled infrastructure
WARNING Broken link: https://creativecommons.org/xmlrpc.php?rsd content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING 1 control(s) rely on placeholder only accessibility
WARNING Manifest is missing `display` -- defaults to browser, no PWA UX accessibility
WARNING Referrer-Policy header is missing security
WARNING https://creativecommons.org/wp-content/uploads/202... is missing width/height — may cause layout shift performance
WARNING HTTP→HTTPS redirect uses 302 instead of 301 infrastructure
WARNING External script from www.googletagmanager.com lacks integrity attribute security
WARNING 4 link(s) open in new tab without warning accessibility
WARNING No name or short_name accessibility
WARNING No accessibility statement detected compliance
WARNING Permissions-Policy header is missing security
WARNING Missing og:image content
WARNING X-Content-Type-Options header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No Permissions-Policy header security
WARNING X-Frame-Options header is missing security
WARNING Skip link target(s) don't exist on page: #main-content-marker accessibility
WARNING Missing og:description content
+ content-encoding br
last-modified
Thu, 16 Apr 2026 16:45:55 GMT Mon, 20 Jul 2026 12:01:29 GMT

5 headers unchanged

DoubleClick Floodlight Advertising

13 technologies unchanged

Looking ahead

+15 pts
B (84) Could reach A+ (99)
Security +21Accessibility +17Content +16Performance +16Sustainability +14Infrastructure +10Compliance +8SEO +2

Estimate — actual results may vary (49 issues to fix)

Website improvement report — Creativecommons

April 16, 2026 → July 20, 2026

C B 77 → 84 +7 pts

14

Resolved

23

New issues

26

Still remaining

Financial summary

Investment delivered

$2,150 in development time

Investment remaining

$4,500 to complete the remaining items

Ongoing risk

$6/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score77 (C)84 (B)+7
Performance81 (B)84 (B)+3
Security58 (D)79 (C)+21
Accessibility70 (C)83 (B)+13
SEO96 (A)98 (A+)+2
Infrastructure98 (A+)89 (B)-9
Compliance78 (C)79 (C)+1
Content91 (A)84 (B)-7
Sustainability66 (D)70 (C)+4

Resolved (14)

  • https://www.googletagmanager.com/gtag/js?id=G-J83G...: 447ms CPU time (Performance)

    → Page loads faster for users

  • No DMARC record found (Security)

    → Reduced attack surface for visitors

  • Images are 22.6 MB — compress or use modern formats (Performance)

    → Page loads faster for users

  • https://creativecommons.org/: 491ms CPU time (Performance)

    → Page loads faster for users

  • Page weighs 23.4 MB (22.9 MB transferred) (Performance)

    → Page loads faster for users

  • GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

    → Reduced regulatory exposure

  • 106 of 109 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • Unattributable: 734ms CPU time (Performance)

    → Page loads faster for users

  • https://www.googletagmanager.com/gtag/js?id=G-J83G...: 53 KB unused (32%) (Performance)

    → Page loads faster for users

  • 5.42g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • Page weight 22.9 MB exceeds 1 MB target by 21.9 MB (Performance)

    → Page loads faster for users

  • 5.42g CO2 per page view (Sustainability)

    → Lower carbon footprint per page view

  • External script from googleads.g.doubleclick.net lacks integrity attribute (Security)

    → Reduced attack surface for visitors

  • Broken link: https://bsky.app/profile/creativecommons.bsky.social (Content)

    → Stronger social sharing and on-page quality

Recommended next steps (49)

  • Sprint 1

    Page weighs 23.0 MB (22.4 MB transferred) (Performance)

  • Sprint 1

    Broken link: https://mail.creativecommons.org/subscribe (Content)

  • Sprint 1

    Broken link: https://www.metmuseum.org/art/collection/search/39664 (Content)

  • Sprint 1

    5.30g CO2 per page view (Sustainability)

  • Sprint 1

    115 of 119 links are healthy (Content)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 1

    Broken link: https://www.metmuseum.org/art/collection/search/714877 (Content)

  • Sprint 2

    1 control(s) without accessible label (Accessibility)

  • Sprint 1

    HSTS header is missing (Security)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    SRI adoption: 0/1 third-party resources protected (0%) (Security)

  • Sprint 1

    https://www.googletagmanager.com/gtag/js?id=G-J83G...: 426ms CPU time (Performance)

  • Sprint 1

    18 images missing explicit width/height (Content)

  • Sprint 1

    Unattributable: 656ms CPU time (Performance)

  • Sprint 2

    Page weight 22.4 MB exceeds 1 MB target by 21.4 MB (Performance)

…and 34 more recommended item(s)

Send Feedback