Skip to content
Audit Complete

Results for https://flowerfarmspain.es

Visit site
ES · EUR (€) · Estimated Applicable regulations: RGPD · ePrivacy Directive · EAA Dev cost: €55/hr How jurisdiction is detected
Singapore Singapore · Singapore Completed: Apr 30, 2026 09:49 UTC
Share card preview
Share on X Share on LinkedIn Share on Reddit Share on Hacker News Share via Email Download share image Embed Badge
Download Markdown Report

Three-week fix plan

1 sprints · 2h total → projected C (74)

Sprint 1: Quick Wins

+12

Highest ROI — low effort, high impact

5 findings 2h → C (74)
  • · Content-Security-Policy header is missing
  • · Cookie 'wcboost_wishlist_hash' is missing the Secure flag
  • · HSTS header is missing

+2 more in plan export

AI remediation plan Ask AI about this audit
Focus mode
Focus mode: Accessibility
Clear ×
D62
Fix top 3 → C (72, +10)

Site Health

Score: 62 / 100

Based on 4 categories, 26 sections

Several missing protections leave your users and data exposed.

Major barriers for users with disabilities — up to 15% of your audience.

Solid infrastructure — fast server responses across the board.

Several regulatory requirements are not yet met.

How is this calculated?

The overall score is a weighted average of individual category scores. Categories with more impact on user experience and security carry more weight.

Security 25%Accessibility 15%Infrastructure 10%Compliance 8%

Weights reflect general web best practices. Individual needs may differ.

How the composite score is calculated

How you compare

WordPress · 716 peers
You 62
·
Avg 74
-12 below average
0 50 100
Accessibility P1Compliance P1Security P41Infrastructure P54

Top 10% of WordPress sites score 70+ on Accessibility; you're at 37 — closing this gap is the highest-leverage improvement.

See full WordPress benchmark →
Google Search Console · 3608 peers
You 62
·
Avg 73
-11 below average
0 50 100
Accessibility P1Compliance P1Security P31Infrastructure P68

Top 10% of Google Search Console sites score 69+ on Accessibility; you're at 37 — closing this gap is the highest-leverage improvement.

See full Google Search Console benchmark →

Top Priorities (5)

Critical: 1

Content-Security-Policy header is missing

Security gaps expose your site and users to attacks, eroding trust.

Security › Security Headers· 30m · €28· +4 pts
Critical: 2

Cookie 'wcboost_wishlist_hash' is missing the Secure flag

Security gaps expose your site and users to attacks, eroding trust.

Security › Cookie Security· 30m · €28· +4 pts
Critical: 3

HSTS header is missing

Security gaps expose your site and users to attacks, eroding trust.

Security › Security Headers· 30m · €28· +4 pts
Critical: 4

No Content-Security-Policy header found

Security gaps expose your site and users to attacks, eroding trust.

Security › Content Security Policy· 30m · €28· +4 pts
Warning: 5

Cookie 'wcboost_wishlist_hash' has no SameSite attribute

Security gaps expose your site and users to attacks, eroding trust.

Security › Cookie Security· 30m · €28· +1 pts
View fix priority matrix

Fix Priority Matrix

5 findings

Quick Wins

5

High impact, low effort — start here.

Strategic

0

High impact, requires investment.

Nothing in this quadrant — good news.

Easy Improvements

0

Small gains, minimal effort.

Nothing in this quadrant — good news.

Deprioritize

0

Low impact, high effort — do last.

Nothing in this quadrant — good news.

← Low effort High effort →
BeaverCheck badge
Embed this badge
[![BeaverCheck](https://beavercheck.com/badge?url=https%3A%2F%2Fflowerfarmspain.es)](https://beavercheck.com/results/a3063cff-beaf-4a06-8fa2-7ddeea7e8b03)
<a href="https://beavercheck.com/results/a3063cff-beaf-4a06-8fa2-7ddeea7e8b03"><img src="https://beavercheck.com/badge?url=https%3A%2F%2Fflowerfarmspain.es" alt="BeaverCheck Score"></a>
https://beavercheck.com/badge?url=https%3A%2F%2Fflowerfarmspain.es

This badge auto-updates with your latest scan result.

match(es)
·

What fixing these means

Your site has several issues that may be affecting user experience and business outcomes. Addressing the critical issues below would have the most immediate impact on your user trust.

5 security gaps detected — browsers may warn visitors about your site.

Return on Investment

€138 investment → €4,758/month returns + EUR 20,000,000 risk avoided

Payback period: < 1 month First-year ROI: +41428%
Investment

€138

2h · 5 findings

Monthly returns

€4,758 /mo

~€57,101 / year

Regulatory risk avoided

EUR 20,000,000

if kept compliant

Payback period

0 12mo 24mo

Or — fix only the top 3 findings

€83 → < 1 month payback · +69114% first-year ROI

Optimistic scenario assuming the top 3 capture most of the upside. Real-world recovery typically falls between this projection and the full-fix ROI above.

Figures combine localized regulatory fine ceilings, search/conversion value priced against local CPC, and bandwidth waste estimates. Results depend on implementation quality and audience composition. Not legal or financial advice.

Full methodology & sourcesCompare with peers ↓

Conversion Barriers

1 critical 2 warning

3 barrier(s) likely increasing bounce by ~22%.

Trust (2)

No HSTS header

+1% bounce

Returning visitors are briefly exposed to downgrade attacks on first request

Fix: Set Strict-Transport-Security: max-age=31536000; includeSubDomains

No Content-Security-Policy header

+1% bounce

Higher XSS blast radius — one compromised script can exfiltrate the checkout form

Fix: Ship a reporting-only CSP first, then enforce once violations are clean

Usability (1)

No viewport meta tag

+15% bounce

Mobile browsers render at desktop width and shrink — text unreadable, tap targets miniature

Fix: Add <meta name="viewport" content="width=device-width, initial-scale=1">

Preliminary CRO audit — each barrier links to the tab with detailed analysis.

Estimated Remediation Cost

€138

2.5 developer hours at €55/hr

Based on Spain rates (€55/hr)

Quick wins
€138 5 fixes in ~150 minutes

Start here for the best return on investment

Cost by category

Cost by effort level

Adjust assumptions

Team composition

Multiplier applied to dev hours to reflect QA, design, and PM overhead. Use Dev only for solo work; Full team for projects with formal review processes.

€ /hr

Rates reflect fully-loaded developer cost including overhead

How developer rates are sourcedCompare with peers ↑

What Inaction Is Costing You

€1,671,425 / month at risk

~€20,057,101 / year if left unfixed

Default is 10,000. Use your own number for accurate $-figures.

Compliance Risk

€20,000,000

RGPD
  • No privacy policy link detected
    RGPD: EUR 10,000 – EUR 20,000,000

Bounce-Rate Cost

€4,758 /mo

+21.6pp bounce · ~2,163 lost visitors/mo

CPC: EUR 2.20

Compliance figures represent the statutory maximum fine for the most severe triggered category, capped per regulation — not the sum of per-finding penalties. Based on published regulatory fine ranges. This is not legal advice.

Compliance methodology · SEO assumptions · Bandwidth model ·Compare with peers ↑

Was this report useful?

Thanks for your feedback!

Global Performance 6/6 locations ✓
UN New York
Full audit
1854ms
DNS 52ms · TLS 162ms
NL Amsterdam
1319ms
DNS 22ms · TLS 13ms
ES Madrid
1511ms
DNS 55ms · TLS 72ms
US Santa Clara
2538ms
DNS 12ms · TLS 316ms
SG Singapore
2363ms
DNS 8ms · TLS 547ms
BR Sao Paulo
2300ms
DNS 6ms · TLS 394ms
CDN: No CDN · Avg TTFB: 1981ms · Cache: No cache headers

Compare with a competitor

Stack yourself against any competitor — score, Core Web Vitals, and the financial gap.

We'll use a cached audit if available, or offer to scan.

Checking for existing audit...

Lighthouse Scores

Industry-standard audits powered by Google Lighthouse.

Core Web Vitals

Key metrics that affect user experience.

Desktop audit not available for this result.

Send Feedback