Skip to content

Changes

https://canva.com
Compared to previous audit · 30 weeks ago View previous audit

Madrid, Spain → Amsterdam, Netherlands

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

26
New issues
24
Resolved
24
score changes
CategoryPreviousCurrentChange
CompositeC (70)B (80) +10.000
PerformanceC (75)C (79) +4.000
SecurityD (69)C (79) +10.000
AccessibilityD (56)B (80) +24.000
SEOD (69)B (85) +16.000
InfrastructureA (92)A (95) +3.000
ComplianceD (65)D (63) -2.000
ContentD (60)C (76) +16.000
SustainabilityB (83)C (75) -8.000
MetricPreviousCurrentChange
Performance 54005600 +200
Accessibility 100009700 -300
Best Practices 81008100—
SEO 1000010000—
PWA 00—
Desktop Performance 89008700 -200
Desktop Accessibility 1000010000—
Desktop Best Practices 77007700—
Desktop SEO 1000010000—
FCP 3.37 s3.30 s -70 ms
LCP 3.80 s5.09 s +1.29 s
TBT 1.55 s616 ms -933 ms
CLS 0.0000.000—
Desktop FCP 1.05 s1.10 s +54 ms
Desktop LCP 1.25 s1.90 s +646 ms
Desktop TBT 160 ms116 ms -44 ms
Desktop CLS 0.0020.003 +0.000
TTFB †351 ms105 ms -245 ms
DNS †279 ms52 ms -226 ms
TLS †27 ms19 ms -8 ms
Connect †21 ms16 ms -5 ms
Total †351 ms106 ms -245 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 70
Projected
A 92
Actual
B 80
Fell short of projection
24 issues resolved since last audit
57 issues remaining
Resolving remaining issues could reach A

Estimate — actual results may vary

CRITICAL Page has only 35 words — nearly empty seo
CRITICAL Scan returned a Cloudflare bot-protection interstitial, not the actual page security
WARNING Unattributable: 561ms CPU time performance
WARNING Third-party code accounts for 100% of page weight (1.8 MiB of 1.8 MiB) performance
WARNING https://static.canva.com/web/b2b75586778cc603.s4le...: 763ms CPU time performance
WARNING Registrar lock is NOT enabled infrastructure
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING Unexpected status code: HTTP 403 accessibility
WARNING Thin content — only 35 words seo
WARNING https://static.canva.com/web/c21f6f054c15db53.js: 161 KB unused (48%) performance
WARNING https://static.canva.com/web/706d60db64c317b6.sent...: 22 KB unused (61%) performance
WARNING 3 `@font-face` rule(s) without `font-display` -- causes FOIT performance
WARNING Trackers detected but no privacy policy found compliance
WARNING Third-party scripts: 5464ms (91% of total) performance
WARNING https://static.canva.com/web/b2b75586778cc603.s4le...: 30 KB unused (35%) performance
WARNING https://static.canva.com/web/07d90a51a2b3b024.1ul0...: 25 KB unused (63%) performance
WARNING 61 third-party resources (100% of weight) performance
WARNING SRI adoption: 0/1 third-party resources protected (0%) security
WARNING JavaScript is 658 KB — consider code splitting or lazy loading performance
WARNING https://www.canva.com/: 1625ms CPU time performance
WARNING Trackers detected but no cookie policy found compliance
WARNING https://static.canva.com/web/706d60db64c317b6.sent...: 799ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING https://static.canva.com/web/c21f6f054c15db53.js: 1610ms CPU time performance
WARNING Page weight 1.8 MB exceeds 1 MB target by 793 KB performance
WARNING Total JS execution time is 6.0 s -- over the 3.5s budget performance
CRITICAL No H1 heading found accessibility
CRITICAL Both www and non-www versions serve content infrastructure
CRITICAL Viewport prevents user zooming compliance
CRITICAL Missing <html lang> attribute (WCAG 3.1.1) accessibility
CRITICAL Page has only 46 words — nearly empty seo
CRITICAL 1 image(s) missing alt attribute accessibility
WARNING https://static.canva.com/web/ad1181f53942b02c.s4le...: 24 KB unused (31%) performance
WARNING https://static.canva.com/web/f3cf4411110060c6.sent...: 22 KB unused (61%) performance
WARNING width=device-width is not set compliance
WARNING Third-party code accounts for 100% of page weight (2.1 MiB of 2.1 MiB) performance
WARNING https://static.canva.com/web/f3cf4411110060c6.sent...: 1472ms CPU time performance
WARNING Thin content — only 46 words seo
WARNING JavaScript is 622 KB — consider code splitting or lazy loading performance
WARNING https://static.canva.com/web/a2ac72e9800c50ea.1ul0...: 22 KB unused (56%) performance
WARNING https://www.canva.com/: 3390ms CPU time performance
WARNING https://static.canva.com/web/ad1181f53942b02c.s4le...: 1535ms CPU time performance
WARNING Page weight 2.1 MB exceeds 1 MB target by 1.1 MB performance
WARNING Unattributable: 643ms CPU time performance
WARNING Third-party scripts: 9738ms (94% of total) performance
WARNING https://static.canva.com/web/243a21c2549ef88e.vend...: 30 KB unused (90%) performance
WARNING 59 third-party resources (100% of weight) performance
WARNING https://static.canva.com/web/a6a5714cc6dea6f4.js: 147 KB unused (48%) performance
WARNING DNS resolution is slow (822 ms) infrastructure
WARNING https://static.canva.com/web/a6a5714cc6dea6f4.js: 2576ms CPU time performance
CRITICAL HSTS header is missing security
CRITICAL Content-Security-Policy header is missing security
WARNING X-Frame-Options header is missing security
WARNING Referrer-Policy header is missing security
WARNING No canonical tag found seo
WARNING No accessibility statement detected compliance
WARNING No Open Graph meta tags found content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING https://content-management-files.canva.com/ad62b20... is missing width/height — may cause layout shift performance
WARNING 1 empty heading(s) accessibility
WARNING No meta description tag found seo
WARNING Terms of Service not detected compliance
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING https://content-management-files.canva.com/4ef9c76... is missing width/height — may cause layout shift performance
WARNING https://content-management-files.canva.com/6122da4... is missing width/height — may cause layout shift performance
WARNING No internal links found seo
WARNING Dead-end page — no outgoing internal links seo
WARNING No privacy policy found (page links and common paths checked) compliance
WARNING X-Content-Type-Options header is missing security
WARNING No Permissions-Policy header security
WARNING https://content-management-files.canva.com/5647f18... is missing width/height — may cause layout shift performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING External script from challenges.cloudflare.com lacks integrity attribute security
WARNING https://content-management-files.canva.com/67d58c3... is missing width/height — may cause layout shift performance
WARNING Title is only 16 characters — consider expanding seo
WARNING Permissions-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No <nav> landmark found accessibility
WARNING https://content-management-files.canva.com/de024e4... is missing width/height — may cause layout shift performance
WARNING https://content-management-files.canva.com/ef8d0b0... is missing width/height — may cause layout shift performance
WARNING https://content-management-files.canva.com/38c1cf7... is missing width/height — may cause layout shift performance
via
1.1 32faa10ab992db5a72631cfdcea29184.cloudfront.net (CloudFront) → 1.1 78a48d8d46b0e5cf69ec8a7f633776e0.cloudfront.net (CloudFront)

3 headers unchanged

+ Three.js JavaScript graphics v182

13 technologies unchanged

Looking ahead

+16 pts
B (80) Could reach A (96)
Performance +21Security +21SEO +15Compliance +14Accessibility +13Content +4Infrastructure +4

Estimate — actual results may vary (57 issues to fix)

Website improvement report — Canva

April 4, 2026 → November 7, 2026

C B 70 → 80 +10 pts

24

Resolved

26

New issues

31

Still remaining

Financial summary

Investment delivered

$8,650 in development time

Investment remaining

$10,217 to complete the remaining items

Ongoing risk

$0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score70 (C)80 (B)+10
Performance75 (C)79 (C)+4
Security69 (D)79 (C)+10
Accessibility56 (D)80 (B)+24
SEO69 (D)85 (B)+16
Infrastructure92 (A)95 (A)+3
Compliance65 (D)63 (D)-2
Content60 (D)76 (C)+16
Sustainability83 (B)75 (C)-8

Resolved (24)

  • https://static.canva.com/web/ad1181f53942b02c.s4le...: 24 KB unused (31%) (Performance)

    → Page loads faster for users

  • https://static.canva.com/web/f3cf4411110060c6.sent...: 22 KB unused (61%) (Performance)

    → Page loads faster for users

  • width=device-width is not set (Compliance)

    → Reduced regulatory exposure

  • Third-party code accounts for 100% of page weight (2.1 MiB of 2.1 MiB) (Performance)

    → Page loads faster for users

  • https://static.canva.com/web/f3cf4411110060c6.sent...: 1472ms CPU time (Performance)

    → Page loads faster for users

  • Thin content — only 46 words (SEO)

    → Better search engine visibility

  • No H1 heading found (Accessibility)

    → Improved usability for assistive technology users

  • JavaScript is 622 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • https://static.canva.com/web/a2ac72e9800c50ea.1ul0...: 22 KB unused (56%) (Performance)

    → Page loads faster for users

  • Both www and non-www versions serve content (Infrastructure)

    → More reliable delivery

  • https://www.canva.com/: 3390ms CPU time (Performance)

    → Page loads faster for users

  • https://static.canva.com/web/ad1181f53942b02c.s4le...: 1535ms CPU time (Performance)

    → Page loads faster for users

  • Viewport prevents user zooming (Compliance)

    → Reduced regulatory exposure

  • Page weight 2.1 MB exceeds 1 MB target by 1.1 MB (Performance)

    → Page loads faster for users

  • Missing <html lang> attribute (WCAG 3.1.1) (Accessibility)

    → Improved usability for assistive technology users

…and 9 more resolved issue(s)

Recommended next steps (57)

  • Sprint 3

    Page has only 35 words — nearly empty (SEO)

  • Sprint 1

    Scan returned a Cloudflare bot-protection interstitial, not the actual page (Security)

  • Sprint 1

    HSTS header is missing (Security)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    Unattributable: 561ms CPU time (Performance)

  • Sprint 3

    Third-party code accounts for 100% of page weight (1.8 MiB of 1.8 MiB) (Performance)

  • Sprint 1

    https://static.canva.com/web/b2b75586778cc603.s4le...: 763ms CPU time (Performance)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 1

    security.txt: Missing required 'Expires' field (RFC 9116) (Security)

  • Sprint 2

    Unexpected status code: HTTP 403 (Accessibility)

  • Sprint 3

    Thin content — only 35 words (SEO)

  • Sprint 3

    https://static.canva.com/web/c21f6f054c15db53.js: 161 KB unused (48%) (Performance)

  • Sprint 3

    https://static.canva.com/web/706d60db64c317b6.sent...: 22 KB unused (61%) (Performance)

  • Sprint 2

    3 `@font-face` rule(s) without `font-display` -- causes FOIT (Performance)

  • Sprint 2

    Trackers detected but no privacy policy found (Compliance)

…and 42 more recommended item(s)

Send Feedback