Adding a Cache-Control header can significantly improve repeat-visit performance.
B
Third-Party Impact
44% third-party, 0 ms blocking
REVIEW
44% third-party, 0 ms blocking
Info::
i
Third-party code accounts for 44% of page weight (1.3 MiB of 2.9 MiB)
Info::
✓
Third-party blocking time is low (0 ms)
56%
44%
First-party Third-party
B
HTTP/3 (QUIC)
HTTP/3 not advertised
REVIEW
HTTP/3 not advertised
Info::
i
HTTP/3 (QUIC) is not advertised
HTTP/3 isn't advertised via Alt-Svc and the worker didn't negotiate h3. HTTP/3 reduces handshake latency (1-RTT instead of 2-3 RTTs) and is more resilient on lossy connections. Most modern CDNs (Cloudflare, Fastly, AWS CloudFront, Google Cloud CDN) support HTTP/3 with a single config switch -- consider enabling for mobile-heavy workloads.
C
Document Compression
Action
Document response served uncompressed
REVIEW
Document response served uncompressed
Info::
i
Main HTML response has no Content-Encoding (uncompressed)
The main HTML document is served without compression. The Text Compression section above lists the broader picture; for the main response specifically, even gzip would shave ~70-80% off most text payloads.
B
Main HTML Cache-Control
No Cache-Control header on main HTML response
REVIEW
No Cache-Control header on main HTML response
Info::
i
Main HTML response has no Cache-Control header
Without an explicit Cache-Control, browsers fall back to heuristic caching (~10% of Last-Modified age). Set `Cache-Control: no-cache` or `max-age=300` for HTML to control freshness explicitly -- prevents stale auth state and SPA shell drift.
B
Server-Timing Observability
No Server-Timing header found
REVIEW
No Server-Timing header found
Info::
i
No Server-Timing header found
Server-Timing exposes backend timing breakdowns to browser DevTools (e.g., `db: 45ms; render: 120ms; cache: 2ms`). Useful for diagnosing slow pages without backend log access. Most modern frameworks (Next.js, Cloudflare Workers, Fastly) emit it automatically; absence on a managed platform usually means telemetry headers are stripped at the edge.
B
JavaScript Blocking
1 JS blocking issue(s) detected
REVIEW
1 JS blocking issue(s) detected
Warning::
!
5 render-blocking <script src> tag(s) without async/defer
Each `<script src=...>` without `async`, `defer`, or `type="module"` blocks HTML parsing while the browser fetches and executes it. The block lasts the entire round-trip + execution time -- on slow networks this translates directly into LCP delay. Add `defer` (executes after parse, in source order) for scripts that interact with the DOM, or `async` (executes whenever ready) for analytics / independent scripts. Module scripts (`type="module"`) are deferred by default.
C
Green Hosting
Action
Whether the site is served from green-energy infrastructure
REVIEW
Green Hosting
No green hosting detected
A+
Text Compression
All text resources are compressed
PASS
All text resources are compressed
Info::
✓
All text resources are compressed
All text resources are properly compressed.
A+
Image Optimization
4 images, 0 KB saveable
PASS
4 images, 0 KB saveable
Info::
✓
All images are well-optimized
4images152 KB
0oversized-0 KB
0legacy format
0missing dimensionsCLS risk
A+
Font Loading
4 fonts (280 KB)
PASS
4 fonts (280 KB)
Info::
i
4 font(s) use font-display: swap (FOUT risk but functional)
Web fonts
4
280 KB total
Render-blocking
0
of 4
Dominant font-display
swap
Most common across fonts
Font loading timeline
TransferFOIT (block)FOUT (swap)
5d39360912ab897b-s.p.woff2woff2swap
Size67 KB
Load time44 ms
Start74 ms
RiskFOUT — text flashes from fallback to web font
acc997c86979663b-s.p.woff2woff2swap
Size70 KB
Load time50 ms
Start76 ms
RiskFOUT — text flashes from fallback to web font
cb8d34571a43f897-s.p.woff2woff2swap
Size70 KB
Load time67 ms
Start79 ms
RiskFOUT — text flashes from fallback to web font
f7a9b128ae841a36-s.p.woff2woff2swap
Size73 KB
Load time53 ms
Start79 ms
RiskFOUT — text flashes from fallback to web font
Optimization checklist
Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)
A+
Resource Caching
All resources properly cached
PASS
All resources properly cached
Info::
✓
No caching issues found
All static resources have appropriate caching headers.
Each preconnect eagerly opens a TCP+TLS connection. On slow networks or low-end devices, too many parallel connections cause head-of-line blocking and starve the connections that matter for LCP. Trim to the 4-6 highest-value origins (the ones serving render-blocking or LCP resources).
Info::
i
1 URL(s) appear in multiple hints
The same href shouldn't appear in multiple hint rels -- one wins, the others are wasted markup and may confuse cache behavior. Sample: https://edge.cdn-vitals.com (preconnect+preconnect).
Info::
✓
Page uses 17 resource hint(s)
Current Resource Hints
preconnect
+1
11
preload
6
dns-prefetch—
prefetch—
17 resource hints configured
Each preconnect eagerly opens a TCP+TLS connection. On slow networks or low-end devices, too many parallel connections cause head-of-line blocking and starve the connections that matter for LCP. Trim to the 4-6 highest-value origins (the ones serving render-blocking or LCP resources).
Why this matters
Informational: a labeled value pair from the audit.
The same href shouldn't appear in multiple hint rels -- one wins, the others are wasted markup and may confuse cache behavior. Sample: https://edge.cdn-vitals.com (preconnect+preconnect).
Why this matters
Performance issues directly impact user engagement and conversion rates.
A+
Asset Compression
All 2 asset hosts use brotli
PASS
All 2 asset hosts use brotli
Info::
✓
a.pub.network serves assets with brotli (assets: 4)
Got: a.pub.network (application/javascript)
Info::
✓
cdn.privacy-mgmt.com serves assets with brotli (assets: 3)
Got: cdn.privacy-mgmt.com (text/javascript)
A+
LCP Image Preload
LCP preload audit not available
PASS
LCP preload audit not available
Info::
✓
LCP image preload audit not available for this scan
A+
Server Response Intelligence
1 server-response signal(s) detected
PASS
1 server-response signal(s) detected
Info::
✓
Both `ETag` and `Last-Modified` present -- efficient revalidation supported
The page returns both `ETag` (content hash) and `Last-Modified` (timestamp) headers. Browsers can issue conditional GETs with `If-None-Match` or `If-Modified-Since`; the server returns 304 Not Modified for unchanged content, saving bandwidth. ETag is the more reliable of the two (timestamps fail in DST transitions and clock skew).
A+
Render-Blocking Resources
No render-blocking resources detected
PASS
No render-blocking resources detected
Info::
✓
No render-blocking resources detected in <head>
A+
Third-Party Resources
No third-party resources detected
PASS
No third-party resources detected
A+
CSS Performance Depth
No CSS performance depth issues detected
PASS
No CSS performance depth issues detected
Info::
✓
No CSS performance depth issues detected
Network Waterfall
62 requests over 2680ms
INFO
HTML JavaScript CSS Images Fonts XHR/Fetch Other
Third-Party Script Cost
Per-script blocking time, transfer cost, and cache headers
INFO
53%of JavaScript execution is third-party
First-party Third-party1421ms · 941KB · $19/mo
Script
Category
Execution
Transfer
Unused
Monthly Cost
Verdict
Google Tag Manager
www.googletagmanager.com
Tag Manager
276ms
164 KB
43%
$4/mo
Costly
a.pub.network
a.pub.network
Other
234ms
192 KB
81%
$3/mo
Costly
securepubads.g.doubleclick.net
securepubads.g.doubleclick.net
Other
213ms
212 KB
77%
$3/mo
Costly
a.pub.network
a.pub.network
Other
205ms
195 KB
80%
$3/mo
Costly
cdn.privacy-mgmt.com
cdn.privacy-mgmt.com
Other
170ms
41 KB
—
$2/mo
Optional
cdn.privacy-mgmt.com
cdn.privacy-mgmt.com
Other
117ms
34 KB
—
$2/mo
Optional
securepubads.g.doubleclick.net
securepubads.g.doubleclick.net
Other
76ms
37 KB
—
$1/mo
Optional
a.pub.network
a.pub.network
Other
67ms
32 KB
—
$1/mo
Optional
a.pub.network
a.pub.network
Other
63ms
33 KB
—
$1/mo
Optional
Google Tag Manager
Tag Manager
Costly
Execution276ms
Transfer164 KB
Unused43%
Monthly Cost$4/mo
a.pub.network
Other
Costly
Execution234ms
Transfer192 KB
Unused81%
Monthly Cost$3/mo
securepubads.g.doubleclick.net
Other
Costly
Execution213ms
Transfer212 KB
Unused77%
Monthly Cost$3/mo
a.pub.network
Other
Costly
Execution205ms
Transfer195 KB
Unused80%
Monthly Cost$3/mo
cdn.privacy-mgmt.com
Other
Optional
Execution170ms
Transfer41 KB
Monthly Cost$2/mo
cdn.privacy-mgmt.com
Other
Optional
Execution117ms
Transfer34 KB
Monthly Cost$2/mo
securepubads.g.doubleclick.net
Other
Optional
Execution76ms
Transfer37 KB
Monthly Cost$1/mo
a.pub.network
Other
Optional
Execution67ms
Transfer32 KB
Monthly Cost$1/mo
a.pub.network
Other
Optional
Execution63ms
Transfer33 KB
Monthly Cost$1/mo
These scripts may cost more than they're worth
Google Tag Manager adds 276ms and costs ~$4/month
a.pub.network adds 234ms and costs ~$3/month
securepubads.g.doubleclick.net adds 213ms and costs ~$3/month
a.pub.network adds 205ms and costs ~$3/month
53% of JavaScript execution time comes from third-party scripts.
Why this matters
Third-party scripts (analytics, ads, social, A/B testing) often dominate execution time — every one is a perf-and-privacy tax.
Learn more ▾▴
Each third-party script is a black box: you don't control when it loads, what it executes, or how much it grows. They often account for a major share of total blocking time on average sites (HTTP Archive's Web Almanac documents the trend). Audit which ones you actually need, defer the rest, and use facade patterns (lite-youtube, lite-vimeo) for embedded media.
Source: web.dev / HTTP Archive Web Almanac
Google Tag Manager takes 276ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
a.pub.network takes 234ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
81% of a.pub.network's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
securepubads.g.doubleclick.net takes 213ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
77% of securepubads.g.doubleclick.net's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
a.pub.network takes 205ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
80% of a.pub.network's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.