Skip to content

Changes

https://instagram.com
Compared to previous audit · 12 weeks ago View previous audit

Madrid, Spain Amsterdam, Netherlands

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

29
New issues
28
Resolved
23
score changes
CategoryPreviousCurrentChange
CompositeC (70)C (79) +9.000
PerformanceD (69)C (76) +7.000
SecurityD (66)B (80) +14.000
AccessibilityD (58)C (78) +20.000
SEOB (82)B (82)
InfrastructureC (70)B (85) +15.000
ComplianceB (84)C (73) -11.000
ContentB (82)B (86) +4.000
SustainabilityD (58)D (61) +3.000
MetricPreviousCurrentChange
Performance 32003500 +300
Accessibility 94009400
Best Practices 77008100 +400
SEO 1000010000
PWA 00
Desktop Performance 56007800 +2200
Desktop Accessibility 98009800
Desktop Best Practices 77008100 +400
Desktop SEO 1000010000
FCP 4.46 s4.75 s +285 ms
LCP 25.48 s23.35 s -2.12 s
TBT 3.43 s2.06 s -1.37 s
CLS 0.0590.059
Desktop FCP 1.29 s669 ms -619 ms
Desktop LCP 3.76 s3.48 s -285 ms
Desktop TBT 295 ms97 ms -198 ms
Desktop CLS 0.0000.000
TTFB 34 ms125 ms +91 ms
DNS 5 ms50 ms +45 ms
TLS 5 ms18 ms +13 ms
Connect 1 ms16 ms +15 ms
Total 34 ms125 ms +91 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 70
Projected
A 94
Actual
C 79
Fell short of projection
28 issues resolved since last audit
60 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

WARNING https://static.cdninstagram.com/rsrc.php/v4iG4V4/y...: 201 KB unused (84%) performance
WARNING Page weighs 13.0 MB (3.5 MB transferred) performance
WARNING Third-party scripts: 4405ms (91% of total) performance
WARNING 2 link(s) open in a new tab without rel=noopener security
WARNING SRI adoption: 0/21 third-party resources protected (0%) security
WARNING https://static.cdninstagram.com/rsrc.php/v4iwU34/y...: 866ms CPU time performance
WARNING Unattributable: 342ms CPU time performance
WARNING https://static.cdninstagram.com/rsrc.php/v4/yg/r/A...: 82 KB unused (100%) performance
WARNING GDPR Article 13 disclosure coverage: 1 / 8 categories compliance
WARNING https://static.cdninstagram.com/rsrc.php/v4iwU34/y...: 519 KB unused (66%) performance
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING https://www.instagram.com/: 309ms CPU time performance
WARNING https://static.cdninstagram.com/rsrc.php/v4iGtr4/y...: 211 KB unused (74%) performance
WARNING Total JS execution time is 4.8 s -- over the 3.5s budget performance
WARNING 43 third-party resources (100% of weight) performance
WARNING Third-party code accounts for 100% of page weight (3.5 MiB of 3.5 MiB) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4i26x4/y...: 113 KB unused (56%) performance
WARNING Certificate expires soon (7 days remaining) security
WARNING Page has 109 words — thin content seo
WARNING Transfer efficiency: 53% sustainability
WARNING security.txt: Missing required 'Contact' field security
WARNING 0.98g CO2 — above the median website (0.60g) sustainability
WARNING https://static.cdninstagram.com/rsrc.php/v4/yD/r/J...: 2532ms CPU time performance
WARNING Page weight 3.5 MB exceeds 1 MB target by 2.5 MB performance
WARNING 16 render-blocking <script src> tag(s) without async/defer performance
WARNING Thin content — only 109 words seo
WARNING Login form does not contain a recognizable CSRF token security
WARNING JavaScript is 2.2 MB — consider code splitting or lazy loading performance
CRITICAL Transfer efficiency: 49% sustainability
CRITICAL Broken link: https://instagram.com/accounts/password/reset/ content
WARNING https://www.instagram.com/: 1667ms CPU time performance
WARNING https://static.cdninstagram.com/rsrc.php/v4ixkH4/y...: 1577ms CPU time performance
WARNING https://static.cdninstagram.com/rsrc.php/v4ieFP4/y...: 99 KB unused (89%) performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING Third-party code accounts for 100% of page weight (3.7 MiB of 3.7 MiB) performance
WARNING 1 field(s) missing recommended autocomplete attribute accessibility
WARNING https://static.cdninstagram.com/rsrc.php/v4ixkH4/y...: 823 KB unused (71%) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4i_Kf4/y...: 83 KB unused (92%) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4i1Ad4/y...: 279 KB unused (72%) performance
WARNING Page weight 3.7 MB exceeds 1 MB target by 2.7 MB performance
WARNING 44 third-party resources (100% of weight) performance
WARNING https://static.cdninstagram.com/rsrc.php/v4i1Ad4/y...: 619ms CPU time performance
WARNING https://static.cdninstagram.com/rsrc.php/v4/y8/r/c...: 3560ms CPU time performance
WARNING Certificate expires soon (8 days remaining) security
WARNING JavaScript is 2.4 MB — consider code splitting or lazy loading performance
WARNING Unattributable: 544ms CPU time performance
WARNING https://static.cdninstagram.com/rsrc.php/v4itz-4/y...: 108 KB unused (88%) performance
WARNING Thin content — only 108 words seo
WARNING 1.05g CO2 per page view sustainability
WARNING Page weighs 14.4 MB (3.7 MB transferred) performance
WARNING 105 of 106 links are healthy content
WARNING No meta description tag found seo
WARNING Third-party scripts: 8071ms (92% of total) performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Page has 108 words — thin content seo
WARNING 1.05g CO2 — above the median website (0.60g) sustainability
CRITICAL robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals seo
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL No <main> landmark found accessibility
CRITICAL 1 control(s) without accessible label accessibility
CRITICAL 1 button(s) with no accessible text accessibility
CRITICAL No Content-Security-Policy header found security
CRITICAL Both www and non-www versions serve content infrastructure
CRITICAL Content-Security-Policy header is missing security
CRITICAL robots.txt blocks all crawlers infrastructure
WARNING X-Content-Type-Options header is missing security
WARNING External script from static.cdninstagram.com lacks integrity attribute security
WARNING No Permissions-Policy header security
WARNING Permissions-Policy header is missing security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No accessibility statement detected compliance
WARNING sitemap.xml contains invalid XML infrastructure
WARNING Registrar lock is NOT enabled infrastructure
WARNING Manifest contains invalid JSON accessibility
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Sitemap is empty -- 0 URLs listed seo
WARNING sitemap.xml is empty — no URLs found infrastructure
WARNING No <nav> landmark found accessibility
WARNING Referrer-Policy header is missing security
WARNING https://static.cdninstagram.com/rsrc.php/yb/r/SxCW... is missing width/height — may cause layout shift performance
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING External link from static.cdninstagram.com lacks integrity attribute security
WARNING 9 link(s) open in new tab without warning accessibility
WARNING X-Frame-Options header is missing security
WARNING Title is only 17 characters — consider expanding seo
WARNING No headings found accessibility
WARNING Missing og:description content
x-fb-debug
D9ksDdqdL84fVsHd+TIYNJ8VmaDU4xPPFGDoTG3eROV0PKW/uvU6s3CTA3krnD6NWjanGoDhsNoTE... ARYR0UKKIzVyLoa3rMbBPA7WhTRa22/c5hsW1dmp9DaMknlZtYsTY6ij6JIVDsFXQPXFS1f6VPOHu...
x-fb-connection-quality
UNKNOWN; q=-1, rtt=-1, rtx=0, c=14, mss=1380, tbw=4287, tp=-1, tpl=-1, uplat=... EXCELLENT; q=0.9, rtt=16, rtx=0, c=14, mss=1380, tbw=4285, tp=-1, tpl=-1, upl...

6 headers unchanged

+ Next.js JavaScript frameworks
+ Webpack Miscellaneous
+ React JavaScript frameworks

7 technologies unchanged

Looking ahead

+18 pts
C (79) Could reach A+ (97)
Performance +24Accessibility +22Security +20SEO +18Infrastructure +15Compliance +8Sustainability +8Content +4

Estimate — actual results may vary (60 issues to fix)

Website improvement report — Instagram

April 16, 2026 → July 10, 2026

C C 70 → 79 +9 pts

28

Resolved

29

New issues

31

Still remaining

Financial summary

Investment delivered

$9,075 in development time

Investment remaining

$11,108 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score70 (C)79 (C)+9
Performance69 (D)76 (C)+7
Security66 (D)80 (B)+14
Accessibility58 (D)78 (C)+20
SEO82 (B)82 (B)0
Infrastructure70 (C)85 (B)+15
Compliance84 (B)73 (C)-11
Content82 (B)86 (B)+4
Sustainability58 (D)61 (D)+3

Resolved (28)

  • https://www.instagram.com/: 1667ms CPU time (Performance)

    → Page loads faster for users

  • https://static.cdninstagram.com/rsrc.php/v4ixkH4/y...: 1577ms CPU time (Performance)

    → Page loads faster for users

  • https://static.cdninstagram.com/rsrc.php/v4ieFP4/y...: 99 KB unused (89%) (Performance)

    → Page loads faster for users

  • IPv6 DNS records exist but server is not reachable (Infrastructure)

    → More reliable delivery

  • Third-party code accounts for 100% of page weight (3.7 MiB of 3.7 MiB) (Performance)

    → Page loads faster for users

  • 1 field(s) missing recommended autocomplete attribute (Accessibility)

    → Improved usability for assistive technology users

  • https://static.cdninstagram.com/rsrc.php/v4ixkH4/y...: 823 KB unused (71%) (Performance)

    → Page loads faster for users

  • https://static.cdninstagram.com/rsrc.php/v4i_Kf4/y...: 83 KB unused (92%) (Performance)

    → Page loads faster for users

  • Transfer efficiency: 49% (Sustainability)

    → Lower carbon footprint per page view

  • https://static.cdninstagram.com/rsrc.php/v4i1Ad4/y...: 279 KB unused (72%) (Performance)

    → Page loads faster for users

  • Page weight 3.7 MB exceeds 1 MB target by 2.7 MB (Performance)

    → Page loads faster for users

  • 44 third-party resources (100% of weight) (Performance)

    → Page loads faster for users

  • https://static.cdninstagram.com/rsrc.php/v4i1Ad4/y...: 619ms CPU time (Performance)

    → Page loads faster for users

  • https://static.cdninstagram.com/rsrc.php/v4/y8/r/c...: 3560ms CPU time (Performance)

    → Page loads faster for users

  • Certificate expires soon (8 days remaining) (Security)

    → Reduced attack surface for visitors

…and 13 more resolved issue(s)

Recommended next steps (60)

  • Sprint 1

    robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals (SEO)

  • Sprint 1

    Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 2

    1 control(s) without accessible label (Accessibility)

  • Sprint 1

    1 button(s) with no accessible text (Accessibility)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    robots.txt blocks all crawlers (Infrastructure)

  • Sprint 3

    https://static.cdninstagram.com/rsrc.php/v4iG4V4/y...: 201 KB unused (84%) (Performance)

  • Sprint 1

    Page weighs 13.0 MB (3.5 MB transferred) (Performance)

  • Sprint 3

    Third-party scripts: 4405ms (91% of total) (Performance)

  • Sprint 1

    2 link(s) open in a new tab without rel=noopener (Security)

  • Sprint 1

    SRI adoption: 0/21 third-party resources protected (0%) (Security)

  • Sprint 1

    https://static.cdninstagram.com/rsrc.php/v4iwU34/y...: 866ms CPU time (Performance)

…and 45 more recommended item(s)

Send Feedback