Skip to content

Changes

https://instagram.com
Compared to previous audit · 12 weeks ago View previous audit

Madrid, Spain Amsterdam, Netherlands

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

28
New issues
28
Resolved
23
score changes
CategoryPreviousCurrentChange
CompositeC (70)C (79) +9.000
PerformanceD (69)C (76) +7.000
SecurityD (66)B (80) +14.000
AccessibilityD (58)C (78) +20.000
SEOB (82)B (82)
InfrastructureC (70)B (85) +15.000
ComplianceB (84)C (73) -11.000
ContentB (82)B (86) +4.000
SustainabilityD (58)D (61) +3.000
MetricPreviousCurrentChange
Performance 32003500 +300
Accessibility 94009400
Best Practices 77008100 +400
SEO 1000010000
PWA 00
Desktop Performance 56007800 +2200
Desktop Accessibility 98009800
Desktop Best Practices 77008100 +400
Desktop SEO 1000010000
FCP 4.46 s4.75 s +285 ms
LCP 25.48 s23.35 s -2.12 s
TBT 3.43 s2.06 s -1.37 s
CLS 0.0590.059
Desktop FCP 1.29 s669 ms -619 ms
Desktop LCP 3.76 s3.48 s -285 ms
Desktop TBT 295 ms97 ms -198 ms
Desktop CLS 0.0000.000
TTFB 34 ms125 ms +91 ms
DNS 5 ms50 ms +45 ms
TLS 5 ms18 ms +13 ms
Connect 1 ms16 ms +15 ms
Total 34 ms125 ms +91 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 70
Projected
A 94
Actual
C 79
Fell short of projection
28 issues resolved since last audit
58 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

WARNING Certificate expires soon (7 days remaining) security
WARNING https://static.cdninstagram.com/rsrc.php/v4iwU34/y...: 866ms CPU time performance
WARNING Unattributable: 342ms CPU time performance
WARNING Third-party scripts: 4405ms (91% of total) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4iGtr4/y...: 211 KB unused (74%) performance
WARNING Third-party code accounts for 100% of page weight (3.5 MiB of 3.5 MiB) performance
WARNING GDPR Article 13 disclosure coverage: 1 / 8 categories compliance
WARNING Thin content — only 109 words seo
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING https://static.cdninstagram.com/rsrc.php/v4/yD/r/J...: 2532ms CPU time performance
WARNING Page weight 3.5 MB exceeds 1 MB target by 2.5 MB performance
WARNING Total JS execution time is 4.8 s -- over the 3.5s budget performance
WARNING Transfer efficiency: 53% sustainability
WARNING Page weighs 13.0 MB (3.5 MB transferred) performance
WARNING 43 third-party resources (100% of weight) performance
WARNING security.txt: Missing required 'Contact' field security
WARNING https://static.cdninstagram.com/rsrc.php/v4iG4V4/y...: 201 KB unused (84%) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4/yg/r/A...: 82 KB unused (100%) performance
WARNING 16 render-blocking <script src> tag(s) without async/defer performance
WARNING 0.98g CO2 — above the median website (0.60g) sustainability
WARNING https://static.cdninstagram.com/rsrc.php/v4iwU34/y...: 519 KB unused (66%) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4i26x4/y...: 113 KB unused (56%) performance
WARNING https://www.instagram.com/: 309ms CPU time performance
WARNING Login form does not contain a recognizable CSRF token security
WARNING Page has 109 words — thin content seo
WARNING 2 link(s) open in a new tab without rel=noopener security
WARNING SRI adoption: 0/21 third-party resources protected (0%) security
WARNING JavaScript is 2.2 MB — consider code splitting or lazy loading performance
CRITICAL Transfer efficiency: 49% sustainability
CRITICAL Broken link: https://instagram.com/accounts/password/reset/ content
WARNING Page weighs 14.4 MB (3.7 MB transferred) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4i_Kf4/y...: 83 KB unused (92%) performance
WARNING Page weight 3.7 MB exceeds 1 MB target by 2.7 MB performance
WARNING 1.05g CO2 per page view sustainability
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Certificate expires soon (8 days remaining) security
WARNING https://static.cdninstagram.com/rsrc.php/v4i1Ad4/y...: 619ms CPU time performance
WARNING 44 third-party resources (100% of weight) performance
WARNING Unattributable: 544ms CPU time performance
WARNING https://static.cdninstagram.com/rsrc.php/v4ieFP4/y...: 99 KB unused (89%) performance
WARNING 105 of 106 links are healthy content
WARNING 1.05g CO2 — above the median website (0.60g) sustainability
WARNING Third-party scripts: 8071ms (92% of total) performance
WARNING 1 field(s) missing recommended autocomplete attribute accessibility
WARNING https://static.cdninstagram.com/rsrc.php/v4/y8/r/c...: 3560ms CPU time performance
WARNING JavaScript is 2.4 MB — consider code splitting or lazy loading performance
WARNING Thin content — only 108 words seo
WARNING https://static.cdninstagram.com/rsrc.php/v4itz-4/y...: 108 KB unused (88%) performance
WARNING No meta description tag found seo
WARNING Page has 108 words — thin content seo
WARNING Third-party code accounts for 100% of page weight (3.7 MiB of 3.7 MiB) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4ixkH4/y...: 1577ms CPU time performance
WARNING https://www.instagram.com/: 1667ms CPU time performance
WARNING https://static.cdninstagram.com/rsrc.php/v4ixkH4/y...: 823 KB unused (71%) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4i1Ad4/y...: 279 KB unused (72%) performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
CRITICAL robots.txt blocks all crawlers infrastructure
CRITICAL 1 button(s) with no accessible text accessibility
CRITICAL robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals seo
CRITICAL No <main> landmark found accessibility
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL Content-Security-Policy header is missing security
CRITICAL 1 control(s) without accessible label accessibility
CRITICAL Both www and non-www versions serve content infrastructure
WARNING Permissions-Policy header is missing security
WARNING 9 link(s) open in new tab without warning accessibility
WARNING Manifest contains invalid JSON accessibility
WARNING Referrer-Policy header is missing security
WARNING Title is only 17 characters — consider expanding seo
WARNING No accessibility statement detected compliance
WARNING X-Content-Type-Options header is missing security
WARNING No <nav> landmark found accessibility
WARNING https://static.cdninstagram.com/rsrc.php/yb/r/SxCW... is missing width/height — may cause layout shift performance
WARNING External link from static.cdninstagram.com lacks integrity attribute security
WARNING Registrar lock is NOT enabled infrastructure
WARNING No headings found accessibility
WARNING sitemap.xml is empty — no URLs found infrastructure
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING External script from static.cdninstagram.com lacks integrity attribute security
WARNING No Permissions-Policy header security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Sitemap is empty -- 0 URLs listed seo
WARNING sitemap.xml contains invalid XML infrastructure
WARNING X-Frame-Options header is missing security
WARNING Missing og:description content
x-fb-connection-quality
UNKNOWN; q=-1, rtt=-1, rtx=0, c=14, mss=1380, tbw=4287, tp=-1, tpl=-1, uplat=... EXCELLENT; q=0.9, rtt=16, rtx=0, c=14, mss=1380, tbw=4285, tp=-1, tpl=-1, upl...
x-fb-debug
D9ksDdqdL84fVsHd+TIYNJ8VmaDU4xPPFGDoTG3eROV0PKW/uvU6s3CTA3krnD6NWjanGoDhsNoTE... ARYR0UKKIzVyLoa3rMbBPA7WhTRa22/c5hsW1dmp9DaMknlZtYsTY6ij6JIVDsFXQPXFS1f6VPOHu...

6 headers unchanged

+ React JavaScript frameworks
+ Webpack Miscellaneous
+ Next.js JavaScript frameworks

7 technologies unchanged

Looking ahead

+18 pts
C (79) Could reach A+ (97)
Performance +24Accessibility +22Security +20SEO +18Infrastructure +15Compliance +8Sustainability +8Content +4

Estimate — actual results may vary (58 issues to fix)

Website improvement report — Instagram

April 16, 2026 → July 10, 2026

C C 70 → 79 +9 pts

28

Resolved

28

New issues

30

Still remaining

Financial summary

Investment delivered

$9,075 in development time

Investment remaining

$10,758 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score70 (C)79 (C)+9
Performance69 (D)76 (C)+7
Security66 (D)80 (B)+14
Accessibility58 (D)78 (C)+20
SEO82 (B)82 (B)0
Infrastructure70 (C)85 (B)+15
Compliance84 (B)73 (C)-11
Content82 (B)86 (B)+4
Sustainability58 (D)61 (D)+3

Resolved (28)

  • Page weighs 14.4 MB (3.7 MB transferred) (Performance)

    → Page loads faster for users

  • https://static.cdninstagram.com/rsrc.php/v4i_Kf4/y...: 83 KB unused (92%) (Performance)

    → Page loads faster for users

  • Page weight 3.7 MB exceeds 1 MB target by 2.7 MB (Performance)

    → Page loads faster for users

  • Transfer efficiency: 49% (Sustainability)

    → Lower carbon footprint per page view

  • 1.05g CO2 per page view (Sustainability)

    → Lower carbon footprint per page view

  • GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

    → Reduced regulatory exposure

  • Certificate expires soon (8 days remaining) (Security)

    → Reduced attack surface for visitors

  • https://static.cdninstagram.com/rsrc.php/v4i1Ad4/y...: 619ms CPU time (Performance)

    → Page loads faster for users

  • 44 third-party resources (100% of weight) (Performance)

    → Page loads faster for users

  • Unattributable: 544ms CPU time (Performance)

    → Page loads faster for users

  • https://static.cdninstagram.com/rsrc.php/v4ieFP4/y...: 99 KB unused (89%) (Performance)

    → Page loads faster for users

  • 105 of 106 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • Broken link: https://instagram.com/accounts/password/reset/ (Content)

    → Stronger social sharing and on-page quality

  • 1.05g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • Third-party scripts: 8071ms (92% of total) (Performance)

    → Page loads faster for users

…and 13 more resolved issue(s)

Recommended next steps (58)

  • Sprint 1

    robots.txt blocks all crawlers (Infrastructure)

  • Sprint 1

    1 button(s) with no accessible text (Accessibility)

  • Sprint 1

    robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals (SEO)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 1

    Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 2

    1 control(s) without accessible label (Accessibility)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    Certificate expires soon (7 days remaining) (Security)

  • Sprint 1

    https://static.cdninstagram.com/rsrc.php/v4iwU34/y...: 866ms CPU time (Performance)

  • Sprint 1

    Unattributable: 342ms CPU time (Performance)

  • Sprint 3

    Third-party scripts: 4405ms (91% of total) (Performance)

  • Sprint 3

    https://static.cdninstagram.com/rsrc.php/v4iGtr4/y...: 211 KB unused (74%) (Performance)

  • Sprint 3

    Third-party code accounts for 100% of page weight (3.5 MiB of 3.5 MiB) (Performance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 1 / 8 categories (Compliance)

…and 43 more recommended item(s)

Send Feedback