Changes
Madrid, Spain → New York, United Stated
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | B (88) | B (89) | +1.000 |
| Performance | A (95) | A+ (97) | +2.000 |
| Security | B (84) | B (85) | +1.000 |
| Accessibility | C (77) | C (77) | — |
| SEO | A (93) | A (93) | — |
| Infrastructure | A (94) | A (96) | +2.000 |
| Compliance | B (83) | B (85) | +2.000 |
| Content | B (80) | B (84) | +4.000 |
| Sustainability | A (93) | A (93) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 7700 | 9800 | +2100 |
| Accessibility | 10000 | 10000 | — |
| Best Practices | 10000 | 10000 | — |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 10000 | 10000 | — |
| Desktop Accessibility | 10000 | 10000 | — |
| Desktop Best Practices | 10000 | 10000 | — |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 1.36 s | 1.80 s | +447 ms |
| LCP | 1.83 s | 1.86 s | +26 ms |
| TBT | 2 ms | 32 ms | +29 ms |
| CLS | 0.565 | 0.000 | -0.565 |
| Desktop FCP | 404 ms | 361 ms | -43 ms |
| Desktop LCP | 418 ms | 375 ms | -44 ms |
| Desktop TBT | 0 ms | 0 ms | — |
| Desktop CLS | 0.000 | 0.000 | — |
| TTFB † | 1.13 s | 248 ms | -886 ms |
| DNS † | 1.13 s | 22 ms | -1.10 s |
| TLS † | 4 ms | 3 ms | -1 ms |
| Connect † | 1 ms | 1 ms | -0 ms |
| Total † | 1.13 s | 249 ms | -886 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
Projected vs. Actual
Estimate — actual results may vary
etag W/"69977e176e2723082f7854360947ea51" → W/"30f53ea406c15c8de48baa6c155a7f49"link </assets/frontend/views/_homepage-64a9f4f542bbda5bcdae1df09ea442583c3981460eb... → </assets/frontend/views/_homepage-64a9f4f542bbda5bcdae1df09ea442583c3981460eb...x-runtime 0.026437 → 0.034812content-security-policy default-src 'self'; base-uri 'none'; img-src 'self' *.publishing.service.gov.... → default-src 'self'; base-uri 'none'; script-src 'self' www.google-analytics.c...15 headers unchanged
Technology stack unchanged
12 technologies unchanged
Looking ahead
+6 ptsEstimate — actual results may vary (12 issues to fix)
Website improvement report — Gov
April 4, 2026 → April 21, 2026
6
Resolved
4
New issues
8
Still remaining
Financial summary
Investment delivered
£931 in development time
Investment remaining
£1,144 to complete the remaining items
Ongoing risk
£0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 88 (B) | 89 (B) | +1 |
| Performance | 95 (A) | 97 (A+) | +2 |
| Security | 84 (B) | 85 (B) | +1 |
| Accessibility | 77 (C) | 77 (C) | 0 |
| SEO | 93 (A) | 93 (A) | 0 |
| Infrastructure | 94 (A) | 96 (A) | +2 |
| Compliance | 83 (B) | 85 (B) | +2 |
| Content | 80 (B) | 84 (B) | +4 |
| Sustainability | 93 (A) | 93 (A) | 0 |
Resolved (6)
Skip link target(s) don't exist on page: #content (Accessibility)
→ Improved usability for assistive technology users
DNS resolution is slow (346 ms) (Infrastructure)
→ More reliable delivery
GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)
→ Reduced regulatory exposure
https://www.gov.uk/: 255ms CPU time (Performance)
→ Page loads faster for users
https://www.gov.uk/assets/frontend/application-527...: 26 KB unused (63%) (Performance)
→ Page loads faster for users
No meta description tag found (SEO)
→ Better search engine visibility
Recommended next steps (12)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)
- Sprint 1
https://www.gov.uk/: 259ms CPU time (Performance)
- Sprint 2
No privacy policy link detected (Compliance)
- Sprint 3
https://www.gov.uk/assets/frontend/application-760...: 26 KB unused (64%) (Performance)
- Sprint 1
Title is only 6 characters — consider expanding (SEO)
- Sprint 1
CNAME record at zone apex (Infrastructure)
- Sprint 1
Cross-Origin-Opener-Policy header is missing (Security)
- Sprint 1
1 link(s) open in new tab without warning (Accessibility)
- Sprint 1
HSTS is missing includeSubDomains (Security)
- Sprint 2
Cross-Origin-Embedder-Policy header is missing (Security)
- Sprint 1
form-action directive is missing (Security)
- Sprint 2
No DMARC record found (Security)