Skip to content
HU · HUF (Ft) · Estimated Applicable regulations: GDPR · ePrivacy Directive · EAA Dev cost: HUF 14,000/hr How jurisdiction is detected
Scanned
2026-11-08 12:09 UTC
Worker
🇪🇸 Madrid
Duration
41.00s
Vs prev
—

Audit overview

Compliance needs attention; the rest of the categories are in good shape.

Fix Priority Matrix

5 findings

Quick Wins

4

High impact, low effort — start here.

Strategic

1

High impact, requires investment.

Easy Improvements

0

Small gains, minimal effort.

Nothing in this quadrant — good news.

Deprioritize

0

Low impact, high effort — do last.

Nothing in this quadrant — good news.

← Low effort High effort →

Screenshots

DESKTOP + MOBILE
Mobile
Mobile screenshot

Your mail setup has problems.

dunaujlangos.hu fails 1 mail check: No DMARC record found. This is the kind of misconfiguration that sends your mail to spam.

Get a full deliverability audit — €179, 48h →

Top Priorities (5)

Sorted by impact
Critical: 1

HSTS header is missing

Without HSTS, a network attacker can downgrade the very first connection to HTTP and steal the user's session.

Security › Security Headers
Critical: 2

Missing <html lang> attribute (WCAG 3.1.1)

Missing <html lang> attribute -- screen readers default to the user's system language and pronounce content with the wrong phonetics.

Accessibility › Document Language
Critical: 3

No <main> landmark found

Without a <main> landmark, screen-reader users can't skip past the navigation to the page content — every page starts with re-reading the menu.

Accessibility › Landmark Structure
Warning: 4

22 third-party resources (63% of weight)

Informational: third-party resource count and their share of page weight. High share caps perf gains from frontend optimization.

Performance › Page Weight Inventory
Warning: 5

Cross-Origin-Embedder-Policy header is missing

COEP enforces that all embedded resources opt-in to cross-origin embedding — required for cross-origin isolation features.

Security › Security Headers
What fixing these means. Your site performs reasonably well, but a few targeted fixes could meaningfully improve results. Your LCP of 4.4s exceeds Google's 2.5s 'Good' threshold and the 1 performance issue below directly contributes to it. Addressing the critical issues below would have the most immediate impact on your user trust.
2 security gaps detected — browsers may warn visitors about your site.
2 accessibility issues exclude users who rely on assistive technology.
Your LCP is 4.4s — fixing the 1 performance critical could bring it under Google's 2.5s 'Good' threshold.

Business case

What fixing the audit's findings is worth -- and what ignoring them keeps costing.

Return on investment

HUF 21,000 investment → HUF 3,257,551/month returns + EUR 120,500,000 risk avoided

Investment
HUF 21.000
1.5 h · 4 findings
Monthly returns
HUF 3.257.551
HUF 39.090.611/yr
Payback
0.0 mo
+186046% Y1
Regulatory risk avoided EUR 120.500.000
Or — fix only the top 3 findings
HUF 7.000 → 0.0 mo payback · +558337% Y1
Optimistic scenario assuming the top 3 capture most of the upside. Real-world recovery typically falls between this projection and the full-fix ROI above.
HUF 7.000 — in quick wins — start here for the fastest payback

Figures combine localized regulatory fine ceilings, search/conversion value priced against local CPC, and bandwidth waste estimates. Results depend on implementation quality and audience composition. Not legal or financial advice.

Conversion barriers

7 barrier(s) likely increasing bounce by ~35%.

Barriers
7
2 crit 5 warn
Bounce delta
+35pp
added vs baseline
Score
65
C
Speed
1
Trust
1
Usability
1
Content
3
Nav
1
  • Page takes 4.4s to load
    Users abandon at ~3s — you're 1.9s over the 2.5s threshold
    → Optimize render-blocking resources, preload the hero image, and compress images
  • No viewport meta tag
    Mobile browsers render at desktop width and shrink — text unreadable, tap targets miniature
    → Add <meta name="viewport" content="width=device-width, initial-scale=1">
  • No HSTS header
    Returning visitors are briefly exposed to downgrade attacks on first request
    → Set Strict-Transport-Security: max-age=31536000; includeSubDomains
  • No Open Graph tags
    Links shared on LinkedIn / Slack / Facebook show bare URLs — referral clicks drop
    → Add og:title, og:description, og:image, og:url to the page head
  • No structured data
    No rich-result eligibility in Google — lower SERP CTR vs competitors with stars and prices
    → Add JSON-LD for your page type (Product, Article, FAQPage, LocalBusiness, …)

Preliminary CRO audit — each barrier links to the tab with detailed analysis.

Remediation cost

Ft21,000 1.5 developer hours at Ft14000/hr
Quick wins
Ft7,000 3 fixes in ~30 minutes

Start here for the best return on investment

Cost by category

Cost by effort level

Adjust assumptions

Team composition

Multiplier applied to dev hours to reflect QA, design, and PM overhead. Use Dev only for solo work; Full team for projects with formal review processes.

Ft /hr

Rates reflect fully-loaded developer cost including overhead

How developer rates are sourced

Warning:Cost of inaction

HUF 2.445.899 / month at risk ~HUF 29.350.791 / year if left unfixed
Default is 10,000. Use your own number for accurate $-figures.

Compliance Risk

€120.500.000

ePrivacy DirectiveGDPREAA
  • Trackers detected but no cookie policy found
    GDPR: EUR 5.000 – EUR 10.000.000
  • Trackers detected but no cookie policy found
    GDPR: EUR 10.000 – EUR 20.000.000
  • Trackers detected but no cookie policy found
    ePrivacy Directive: EUR 5.000 – EUR 100.000.000

Bounce-Rate Cost

HUF 2.445.820 /mo

+34.9pp bounce · ~3,494 lost visitors/mo

CPC: HUF 700.00

Bandwidth Waste

HUF 79 /mo

2667.3 MB/mo × 29.630 HUF/GB

  • Optimize transfer: save ~267 KB per page load
    Saves HUF 79/mo

Compliance figures represent the statutory maximum fine for the most severe triggered category, capped per regulation — not the sum of per-finding penalties. Based on published regulatory fine ranges. This is not legal advice.

Compliance methodology · SEO assumptions · Bandwidth model

Your performance is already good — improvements may show diminishing returns

Unique monthly visitors from your analytics

Purchases, signups, or key actions

Optional — for revenue estimation

additional conversions/month

more engaged visitors from reduced bounce

potential monthly revenue
Current bounce (est.)
After fixes (est.)
Estimated bounce reduction

Fix 3 critical issues to capture this value

How this is calculated

Based on Google/Deloitte research ("Milliseconds Make Millions") showing a ~7% bounce rate increase per additional second of LCP above the 2.5s "Good" threshold.

Your site's LCP: → estimated after fixes.

These are estimates based on industry research — actual results vary

Bounce-rate model & assumptions

Your data stays in your browser — nothing is sent to our servers

Lighthouse

Categories

8
Avg score 80.0

How you compare

Where this site stands against peers running the same stack.

Google Search Console · 4610 peers
You 83
·
Avg 75
+8 above average
0 50 100
Compliance P1Security P92Performance P87Infrastructure P20Accessibility P79SEO P22Sustainability P74Content P34

Top 10% of Google Search Console sites score 86+ on Compliance; you're at 61 — closing this gap is the highest-leverage improvement.

Better than 86% of Google Search Console sites See full Google Search Console benchmark →

Technology stack

Google Search Console

1 technologies detected 1 stack layers Minimal

Stack Architecture

Framework
Google Search Console

All Detected Technologies (1)

Categories Analytics Detected by BeaverCheck · Medium Evidence TXT record: google-site-verification=QLbvSj2Ju9mL1Ts7hyPEtTRcMLbOkgLanSBtwPOhuGg

Observations (2)

No build tool detected

A framework (Google Search Console) was detected but no bundler was identified. The build tool may not be detectable from output patterns, or the site may use the framework's built-in bundler.

Minimal technology footprint

Only 1 technologies detected. This suggests a simple setup with minimal dependencies — excellent for performance and security.

Show your score

Drop this badge on your README, marketing site, or status page. It auto-updates every time the audit re-runs and links back to this report.

BeaverCheck badge

This badge auto-updates with your latest scan result.

[![BeaverCheck](https://beavercheck.com/badge?url=https%3A%2F%2Fdunaujlangos.hu)](https://beavercheck.com/sites/dunaujlangos.hu)
<a href="https://beavercheck.com/sites/dunaujlangos.hu"><img src="https://beavercheck.com/badge?url=https%3A%2F%2Fdunaujlangos.hu" alt="BeaverCheck Score"></a>
https://beavercheck.com/badge?url=https%3A%2F%2Fdunaujlangos.hu

Export & share

Download the audit, share with your team, or grab a fix plan ready to copy into your tracker.

Share

Copies markdown to clipboard

Export
Download Markdown Report Download JSON

Fix Plan

Three-week roadmap to ship the audit's findings, with one-click copy targets for your tracker.

Three-week fix plan

2 sprints · 2h total → projected A (90)

Sprint 1: Quick Wins

+6

Highest ROI — low effort, high impact

4 findings 0h → B (89)
  • · Missing <html lang> attribute (WCAG 3.1.1)
  • · No <main> landmark found
  • · HSTS header is missing
  • · 22 third-party resources (63% of weight)

Sprint 2: Core Fixes

+1

Medium effort, high structural impact

1 findings 1h → A (90)
  • · Cross-Origin-Embedder-Policy header is missing

Send Feedback