Skip to content
DE · EUR (€) · Estimated Applicable regulations: DSGVO · ePrivacy Directive · EAA Dev cost: €90/hr How jurisdiction is detected
Scanned
2026-04-21 22:07 UTC
Worker
🇺🇸 New York
Duration
159.1m
Vs prev

Audit overview

Compliance needs attention; the rest of the categories are in good shape.

Fix Priority Matrix

5 findings

Quick Wins

2

High impact, low effort — start here.

Strategic

3

High impact, requires investment.

Easy Improvements

0

Small gains, minimal effort.

Nothing in this quadrant — good news.

Deprioritize

0

Low impact, high effort — do last.

Nothing in this quadrant — good news.

← Low effort High effort →

Screenshots

DESKTOP + MOBILE
Desktop
Desktop screenshot
Mobile
Mobile screenshot

Top Priorities (5)

Sorted by impact
Critical: 1

Content-Security-Policy header is missing

Without a CSP, a single XSS bug can exfiltrate everything your users type — including credentials.

Security › Security Headers
Critical: 2

HSTS header is missing

Without HSTS, a network attacker can downgrade the very first connection to HTTP and steal the user's session.

Security › Security Headers
Critical: 3

No Content-Security-Policy header found

Without a CSP, a single XSS bug can exfiltrate everything users type — credentials, payment data, session tokens.

Security › Content Security Policy
Critical: 4

10 button(s) with no accessible text

Buttons with no accessible text (icon-only, no aria-label) can't be activated by voice control or understood by screen readers.

Accessibility › Link & Button Quality
Critical: 5

17 image(s) missing alt attribute

Each image without alt text is a WCAG 1.1.1 failure — invisible to screen-reader users, lost from Google Image Search.

Accessibility › Alt Text Quality
What fixing these means. Your site performs reasonably well, but a few targeted fixes could meaningfully improve results. Addressing the critical issues below would have the most immediate impact on your user trust.
3 security gaps detected — browsers may warn visitors about your site.
2 accessibility issues exclude users who rely on assistive technology.
Your performance is already good — improvements may show diminishing returns

Unique monthly visitors from your analytics

Purchases, signups, or key actions

Optional — for revenue estimation

additional conversions/month

more engaged visitors from reduced bounce

potential monthly revenue
Current bounce (est.)
After fixes (est.)
Estimated bounce reduction

Fix 5 critical issues to capture this value

How this is calculated

Based on Google/Deloitte research ("Milliseconds Make Millions") showing a ~7% bounce rate increase per additional second of LCP above the 2.5s "Good" threshold.

Your site's LCP: → estimated after fixes.

These are estimates based on industry research — actual results vary

Bounce-rate model & assumptions

Your data stays in your browser — nothing is sent to our servers

Lighthouse

Mobile

75
Performance Overall performance score (0–100) based on Core Web Vitals and other metrics. 90+ is good.
91
Accessibility Measures how accessible the page is for users with disabilities. Checks color contrast, ARIA labels, and semantic HTML.
92
Best Practices Checks for modern web development best practices including HTTPS, no console errors, and secure JavaScript.
100
SEO Measures basic SEO optimizations: meta tags, crawlability, link text, and mobile friendliness.

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

2.25 s

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

2.25 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

869 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.010

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

3.13 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

7.23 s

Desktop

97
Performance Overall performance score (0–100) based on Core Web Vitals and other metrics. 90+ is good.
97
Accessibility Measures how accessible the page is for users with disabilities. Checks color contrast, ARIA labels, and semantic HTML.
100
Best Practices Checks for modern web development best practices including HTTPS, no console errors, and secure JavaScript.
100
SEO Measures basic SEO optimizations: meta tags, crawlability, link text, and mobile friendliness.

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

987 ms

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

987 ms

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

63 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.017

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

1.23 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

2.14 s

Categories

8
Avg score 78.0

How you compare

Where this site stands against peers running the same stack.

core-js · 1610 peers
You 77
·
Avg 73
At average
0 50 100
Sustainability P92SEO P9Compliance P12Security P85Performance P82Content P34Accessibility P61Infrastructure P41

Top 10% of core-js sites score 96+ on SEO; you're at 84 — closing this gap is the highest-leverage improvement.

Better than 83% of core-js sites See full core-js benchmark →
Facebook · 1424 peers
You 77
·
Avg 73
At average
0 50 100
Sustainability P88Compliance P14Security P82Performance P79SEO P30Accessibility P65Infrastructure P36Content P44

Top 10% of Facebook sites score 85+ on Compliance; you're at 72 — closing this gap is the highest-leverage improvement.

Better than 84% of Facebook sites See full Facebook benchmark →

Technology stack

Facebook

8 technologies detected 1 stack layers 1 with CPE identifier Complex

Stack Architecture

Framework
Facebook Google Search Console HTTP/3 Open Graph React React Router 6 Swiper core-js 3.46.0

All Detected Technologies (8)

Categories Analytics Detected by BeaverCheck · Medium Evidence TXT record: facebook-domain-verification=jn1ndse4dzkoi6w9jsyiow6sv1umf6
Categories Analytics Detected by BeaverCheck · Medium Evidence TXT record: google-site-verification=t5lsu4OuoXS30daCkp9HP2tBSQi7FUBBKfnpJUch3HM

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

Categories Miscellaneous Website https://httpwg.org/ Detected by BeaverCheck

Open Graph is a protocol that is used to integrate any web page into the social graph.

Categories Miscellaneous Website https://ogp.me Detected by BeaverCheck

React is an open-source JavaScript library for building user interfaces or UI components.

Categories JavaScript frameworks Website https://reactjs.org Detected by BeaverCheck
This technology has a CPE identifier — check for known vulnerabilities Search NVD →

React Router provides declarative routing for React.

Categories JavaScript frameworks Website https://reactrouter.com Detected by BeaverCheck

Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.

Categories JavaScript libraries Website https://swiperjs.com Detected by BeaverCheck

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

Categories JavaScript libraries Website https://github.com/zloirock/core-js Detected by BeaverCheck

Observations (2)

No build tool detected

A framework (Facebook) was detected but no bundler was identified. The build tool may not be detectable from output patterns, or the site may use the framework's built-in bundler.

Complex technology stack detected

8 technologies identified. A complex stack increases maintenance burden and attack surface. Consider whether all components are actively needed.

Show your score

Drop this badge on your README, marketing site, or status page. It auto-updates every time the audit re-runs and links back to this report.

BeaverCheck badge

This badge auto-updates with your latest scan result.

[![BeaverCheck](https://beavercheck.com/badge?url=https%3A%2F%2Fardmediathek.de)](https://beavercheck.com/sites/ardmediathek.de)
<a href="https://beavercheck.com/sites/ardmediathek.de"><img src="https://beavercheck.com/badge?url=https%3A%2F%2Fardmediathek.de" alt="BeaverCheck Score"></a>
https://beavercheck.com/badge?url=https%3A%2F%2Fardmediathek.de

Export & share

Download the audit, share with your team, or grab a fix plan ready to copy into your tracker.

Send Feedback