Changes
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | B (85) | B (89) | +4.000 |
| Performance | A (94) | A (94) | — |
| Security | C (79) | B (85) | +6.000 |
| Accessibility | C (77) | B (82) | +5.000 |
| SEO | A (93) | A (93) | — |
| Infrastructure | A (90) | A (90) | — |
| Compliance | C (71) | A (91) | +20.000 |
| Content | A (96) | A (96) | — |
| Sustainability | B (80) | B (80) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 8400 | 8300 | -100 |
| Accessibility | 9300 | 9500 | +200 |
| Best Practices | 9600 | 9200 | -400 |
| SEO | 10000 | 10000 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 8200 | 8400 | +200 |
| Desktop Accessibility | 9300 | 9500 | +200 |
| Desktop Best Practices | 9600 | 9200 | -400 |
| Desktop SEO | 10000 | 10000 | — |
| FCP | 3.41 s | 3.40 s | — |
| LCP | 3.41 s | 3.40 s | — |
| TBT | 8 ms | 0 ms | -8 ms |
| CLS | 0.060 | 0.070 | +0.010 |
| Desktop FCP | 1.87 s | 1.59 s | -281 ms |
| Desktop LCP | 1.87 s | 1.94 s | +68 ms |
| Desktop TBT | 0 ms | 0 ms | — |
| Desktop CLS | 0.003 | 0.007 | +0.004 |
| TTFB | 719 ms | 717 ms | — |
| DNS † | 34 ms | 35 ms | +1 ms |
| TLS | 174 ms | 173 ms | — |
| Connect | 170 ms | 171 ms | — |
| Total † | 1.14 s | 1.07 s | -76 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
strict-transport-security max-age=31536000; includeSubDomainscontent-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' https://www.paypal.com ...x-content-type-options nosniffpermissions-policy camera=(), microphone=(), geolocation=()x-frame-options DENYx-xss-protection 0referrer-policy strict-origin-when-cross-originx-powered-by PHP/8.2.33set-cookie PHPSESSID=65okujoebbsjs5sud9j4ulr1fo; path=/; secure; HttpOnly; SameSite=Lax → PHPSESSID=e5vketml3g6qloq1i2cf4ugo73; path=/; secure; HttpOnly; SameSite=Lax8 headers unchanged
3 technologies unchanged
Looking ahead
+8 ptsEstimate — actual results may vary (20 issues to fix)
Website improvement report — Quietad
September 15, 2026 → September 15, 2026
16
Resolved
5
New issues
15
Still remaining
Financial summary
Investment delivered
$967 in development time
Investment remaining
$1,858 to complete the remaining items
Ongoing risk
$0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 85 (B) | 89 (B) | +4 |
| Performance | 94 (A) | 94 (A) | 0 |
| Security | 79 (C) | 85 (B) | +6 |
| Accessibility | 77 (C) | 82 (B) | +5 |
| SEO | 93 (A) | 93 (A) | 0 |
| Infrastructure | 90 (A) | 90 (A) | 0 |
| Compliance | 71 (C) | 91 (A) | +20 |
| Content | 96 (A) | 96 (A) | 0 |
| Sustainability | 80 (B) | 80 (B) | 0 |
Resolved (16)
X-Content-Type-Options header is missing (Security)
→ Reduced attack surface for visitors
No Permissions-Policy header (Security)
→ Reduced attack surface for visitors
2 control(s) rely on placeholder only (Accessibility)
→ Improved usability for assistive technology users
No favicon or icon links detected (Accessibility)
→ Improved usability for assistive technology users
https://quietad.online/: 481ms CPU time (Performance)
→ Page loads faster for users
GDPR Article 13 disclosure coverage: 1 / 8 categories (Compliance)
→ Reduced regulatory exposure
Only 39% reduction on repeat visits (Sustainability)
→ Lower carbon footprint per page view
Referrer-Policy header is missing (Security)
→ Reduced attack surface for visitors
No favicon.ico at site root (Accessibility)
→ Improved usability for assistive technology users
HSTS header is missing (Security)
→ Reduced attack surface for visitors
Content-Security-Policy header is missing (Security)
→ Reduced attack surface for visitors
1 field(s) would benefit from inputmode attribute (Accessibility)
→ Improved usability for assistive technology users
X-Frame-Options header is missing (Security)
→ Reduced attack surface for visitors
Permissions-Policy header is missing (Security)
→ Reduced attack surface for visitors
No <main> landmark found (Accessibility)
→ Improved usability for assistive technology users
…and 1 more resolved issue(s)
Recommended next steps (20)
- Sprint 3
'unsafe-inline' found in script source (Security)
- Sprint 2
1 control(s) without accessible label (Accessibility)
- Sprint 1
Only 38% reduction on repeat visits (Sustainability)
- Sprint 1
https://quietad.online/: 507ms CPU time (Performance)
- Sprint 1
frame-ancestors directive is missing (Security)
- Sprint 1
Permissions-Policy covers 3/10 high-risk features (30%) (Security)
- Sprint 1
External script from get.microsoft.com lacks integrity attribute (Security)
- Sprint 1
DMARC policy is none — monitoring only (Security)
- Sprint 1
6 images missing explicit width/height (Content)
- Sprint 1
Skip navigation link is missing (WCAG 2.4.1) (Accessibility)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)
- Sprint 1
Cross-Origin-Opener-Policy header is missing (Security)
- Sprint 1
SRI adoption: 0/1 third-party resources protected (0%) (Security)
- Sprint 2
Heading level skipped: H2 → H4 (missing H3) (Accessibility)
- Sprint 1
data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABA0A... is missing width/height — may cause layout shift (Performance)
…and 5 more recommended item(s)