Skip to content

Changes

https://costdown.org
Compared to previous audit · 23 minutes ago View previous audit

Santa Clara, United States → Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

5
New issues
2
Resolved
15
score changes
CategoryPreviousCurrentChange
CompositeB (87)B (86) -1.000
PerformanceA+ (97)A (96) -1.000
SecurityB (88)B (88)—
AccessibilityC (79)C (79)—
SEOA (95)A (95)—
InfrastructureA (90)B (83) -7.000
ComplianceD (63)D (63)—
ContentC (75)C (75)—
SustainabilityA+ (98)A+ (98)—
MetricPreviousCurrentChange
Performance 89006200 -2700
Accessibility 90009000—
Best Practices 1000010000—
SEO 91009100—
PWA 00—
Desktop Performance 100009800 -200
Desktop Accessibility 91009100—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 1.38 s3.75 s +2.36 s
LCP 3.67 s7.06 s +3.39 s
TBT 108 ms208 ms +100 ms
CLS 0.0000.000—
Desktop FCP 483 ms585 ms +101 ms
Desktop LCP 785 ms1.04 s +259 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0000.000—
TTFB †395 ms976 ms +581 ms
DNS †39 ms11 ms -28 ms
TLS †24 ms11 ms -13 ms
Connect †17 ms4 ms -13 ms
Total †453 ms1.15 s +702 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 666ms CPU time performance
WARNING https://costdown.org/: 857ms CPU time performance
WARNING Unattributable: 353ms CPU time performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 271ms CPU time performance
WARNING https://costdown.org/: 259ms CPU time performance
CRITICAL Both www and non-www versions serve content infrastructure
CRITICAL 'unsafe-eval' found in script source security
CRITICAL 'unsafe-inline' found in script source security
CRITICAL 3 control(s) without accessible label accessibility
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING No Permissions-Policy header security
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING Privacy Policy not detected compliance
WARNING Permissions-Policy header is missing security
WARNING X-Powered-By header reveals technology stack security
WARNING security.txt: Missing required 'Contact' field security
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING No privacy policy link detected compliance
WARNING No DMARC record found security
WARNING Registrar lock is NOT enabled infrastructure
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No accessibility statement detected compliance
WARNING 1 control(s) rely on placeholder only accessibility
WARNING Manifest contains invalid JSON accessibility
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Terms of Service not detected compliance
WARNING No Open Graph meta tags found content
WARNING No SPF record found security
WARNING Cross-Origin-Opener-Policy header is missing security

HTTP headers unchanged

15 headers unchanged

Technology stack unchanged

10 technologies unchanged

Looking ahead

+10 pts
B (86) Could reach A (96)
Accessibility +18Compliance +16Infrastructure +14Security +12Content +8Performance +4

Estimate — actual results may vary (30 issues to fix)

Website improvement report — Costdown

August 27, 2026 → August 27, 2026

B B 87 → 86 -1 pts

2

Resolved

5

New issues

25

Still remaining

Financial summary

Investment remaining

₫18,300,000 to complete the remaining items

Ongoing risk

₫3,490/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score87 (B)86 (B)-1
Performance97 (A+)96 (A)-1
Security88 (B)88 (B)0
Accessibility79 (C)79 (C)0
SEO95 (A)95 (A)0
Infrastructure90 (A)83 (B)-7
Compliance63 (D)63 (D)0
Content75 (C)75 (C)0
Sustainability98 (A+)98 (A+)0

Resolved (2)

  • https://costdown.org/_next/static/chunks/1255-fc6c...: 271ms CPU time (Performance)

    → Page loads faster for users

  • https://costdown.org/: 259ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (30)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 2

    3 control(s) without accessible label (Accessibility)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 1

    https://costdown.org/_next/static/chunks/1255-fc6c...: 666ms CPU time (Performance)

  • Sprint 1

    https://costdown.org/: 857ms CPU time (Performance)

  • Sprint 1

    Unattributable: 353ms CPU time (Performance)

  • Sprint 2

    IPv6 DNS records exist but server is not reachable (Infrastructure)

  • Sprint 1

    Permissions-Policy header not set -- features default to allow-on-same-origin (Security)

  • Sprint 1

    No Permissions-Policy header (Security)

  • Sprint 2

    All 1 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 1

    Privacy Policy not detected (Compliance)

  • Sprint 1

    Permissions-Policy header is missing (Security)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

…and 15 more recommended item(s)

Send Feedback