Skip to content

Changes

https://vox.com
Compared to previous audit · 16 weeks ago View previous audit
35
New issues
22
Resolved
22
score changes
CategoryPreviousCurrentChange
CompositeC (73)C (78) +5.000
PerformanceD (67)C (74) +7.000
SecurityD (64)C (79) +15.000
AccessibilityD (62)C (74) +12.000
SEOA (94)A (94)—
InfrastructureB (83)B (82) -1.000
ComplianceA (91)D (67) -24.000
ContentA (96)A (91) -5.000
SustainabilityC (72)C (70) -2.000
MetricPreviousCurrentChange
Performance 32003100 -100
Accessibility 97009700—
Best Practices 96009600—
SEO 92009200—
PWA 00—
Desktop Performance 63006400 +100
Desktop Accessibility 1000010000—
Desktop Best Practices 96009600—
Desktop SEO 92009200—
FCP 2.80 s2.90 s +102 ms
LCP 34.11 s76.91 s +42.80 s
TBT 3.76 s3.46 s -298 ms
CLS 0.0350.044 +0.009
Desktop FCP 861 ms989 ms +128 ms
Desktop LCP 2.26 s2.24 s—
Desktop TBT 442 ms376 ms -65 ms
Desktop CLS 0.0000.010 +0.010
TTFB †44 ms41 ms -3 ms
DNS †38 ms37 ms -1 ms
TLS †4 ms2 ms -2 ms
Connect †1 ms0 ms -0 ms
Total †44 ms41 ms -3 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 73
Projected
A 95
Actual
C 78
Fell short of projection
22 issues resolved since last audit
84 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL Broken link: https://www.instagram.com/voxdotcom content
CRITICAL 8.67g CO2 per page view sustainability
CRITICAL Page weighs 46.2 MB (36.6 MB transferred) performance
WARNING https://www.vox.com/metrics/gtm.js?id=GTM-WQ5FM5W: 219 KB unused (30%) performance
WARNING 197 of 200 links are healthy content
WARNING 4 tap target(s) too small or too close to neighbors accessibility
WARNING Third-party scripts: 9858ms (83% of total) performance
WARNING Page weight 36.6 MB exceeds 1 MB target by 35.6 MB performance
WARNING All 134 images use legacy formats (JPEG/PNG/GIF) content
WARNING 8.67g CO2 — above the median website (0.60g) sustainability
WARNING https://www.vox.com/: 1292ms CPU time performance
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING 11 link(s) open in new tab without warning accessibility
WARNING 169 HTTP requests — consider bundling or reducing performance
WARNING https://www.vox.com/_next/static/chunks/pages/_app...: 3537ms CPU time performance
WARNING 115 inline style attribute(s) detected security
WARNING <iframe> missing title attribute (src="") accessibility
WARNING https://cdn.cookielaw.org/scripttemplates/202602.1...: 713ms CPU time performance
WARNING https://www.vox.com/_next/static/chunks/pages/_app...: 223 KB unused (44%) performance
WARNING JavaScript is 3.3 MB — consider code splitting or lazy loading performance
WARNING 155 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING https://www.gstatic.com/recaptcha/releases/XOqlk8P...: 181 KB unused (54%) performance
WARNING 168 third-party resources (100% of weight) performance
WARNING 3 advertising/retargeting trackers detected compliance
WARNING SRI adoption: 1/20 third-party resources protected (5%) security
WARNING Meta description is 455 characters — truncated on all platforms (320 char SERP cap) seo
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING Unattributable: 1997ms CPU time performance
WARNING Total JS execution time is 11.9 s -- over the 3.5s budget performance
WARNING https://www.vox.com/_next/static/chunks/framework-...: 1205ms CPU time performance
WARNING Referrer-Policy: `no-referrer-when-downgrade` -- leaky -- legacy default that sends full URL cross-origin on HTTPS-to-HTTPS security
WARNING OpenAPI / Swagger spec exposed at /swagger.json security
WARNING <iframe> missing title attribute (src="https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=rx_n-vmg_…") accessibility
WARNING Third-party code accounts for 100% of page weight (36.6 MiB of 36.6 MiB) performance
WARNING 137 images missing explicit width/height content
CRITICAL Page weighs 14.5 MB (5.8 MB transferred) performance
WARNING JavaScript is 3.0 MB — consider code splitting or lazy loading performance
WARNING Images are 1.9 MB — compress or use modern formats performance
WARNING https://securepubads.g.doubleclick.net/pagead/mana...: 933ms CPU time performance
WARNING https://www.vox.com/metrics/gtm.js?id=GTM-WQ5FM5W: 213 KB unused (31%) performance
WARNING https://www.gstatic.com/recaptcha/releases/gTpTIWh...: 177 KB unused (49%) performance
WARNING 155 third-party resources (100% of weight) performance
WARNING 198 of 200 links are healthy content
WARNING https://www.vox.com/_next/static/chunks/pages/_app...: 2469ms CPU time performance
WARNING 1.37g CO2 per page view sustainability
WARNING 1.37g CO2 — above the median website (0.60g) sustainability
WARNING Third-party scripts: 10396ms (85% of total) performance
WARNING 156 HTTP requests — consider bundling or reducing performance
WARNING https://www.vox.com/: 1499ms CPU time performance
WARNING Third-party code accounts for 100% of page weight (5.8 MiB of 5.8 MiB) performance
WARNING https://cdn.cookielaw.org/scripttemplates/202602.1...: 919ms CPU time performance
WARNING 3 link(s) open in new tab without warning accessibility
WARNING https://www.vox.com/_next/static/chunks/pages/_app...: 172 KB unused (39%) performance
WARNING Page weight 5.8 MB exceeds 1 MB target by 4.8 MB performance
WARNING Skip link target(s) don't exist on page: #content accessibility
WARNING Unattributable: 1833ms CPU time performance
WARNING No meta description tag found seo
CRITICAL 1 control(s) without accessible label accessibility
CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL Cookie '_vm_consent_type' is missing the Secure flag security
CRITICAL Content-Security-Policy header is missing security
CRITICAL Both www and non-www versions serve content infrastructure
CRITICAL No Content-Security-Policy header found security
CRITICAL No H1 heading found accessibility
CRITICAL og:image is not reachable content
CRITICAL 10 button(s) with no accessible text accessibility
CRITICAL 2 non-essential cookie(s) set without consent banner compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING X-Content-Type-Options header is missing security
WARNING External script from sb.scorecardresearch.com lacks integrity attribute security
WARNING External script from apps.voxmedia.com lacks integrity attribute security
WARNING External script from btloader.com lacks integrity attribute security
WARNING Registrar lock is NOT enabled infrastructure
WARNING Cookie 'vmidv1' is missing the HttpOnly flag security
WARNING External script from www.vox.com lacks integrity attribute security
WARNING Domain expires in 42 days infrastructure
WARNING HSTS is missing includeSubDomains security
WARNING External script from www.googletagmanager.com lacks integrity attribute security
WARNING GDPR Article 13 disclosure coverage: 1 / 8 categories compliance
WARNING External script from cdnjs.cloudflare.com lacks integrity attribute security
WARNING 2 of 4 <nav> elements are unlabeled accessibility
WARNING External script from cdn.cookielaw.org lacks integrity attribute security
WARNING External script from pub.doubleverify.com lacks integrity attribute security
WARNING External script from www.googletagservices.com lacks integrity attribute security
WARNING 1 field(s) would benefit from inputmode attribute accessibility
WARNING Broken link: https://securepubads.g.doubleclick.net content
WARNING X-Frame-Options header is missing security
WARNING Cookie '_vm_consent_type' is missing the HttpOnly flag security
WARNING External script from www.google.com lacks integrity attribute security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING External script from securepubads.g.doubleclick.net lacks integrity attribute security
WARNING Broken link: https://pagead2.googlesyndication.com content
WARNING No Permissions-Policy header security
WARNING External script from assets.zephr.com lacks integrity attribute security
WARNING Cookie '_vm_consent_type' has no SameSite attribute security
WARNING External script from config.aps.amazon-adsystem.com lacks integrity attribute security
WARNING External script from secure.cdn.fastclick.net lacks integrity attribute security
WARNING Main HTML cached for 1440 minutes -- risks stale auth / SPA state performance
WARNING External script from c.amazon-adsystem.com lacks integrity attribute security
WARNING 1 field(s) missing recommended autocomplete attribute accessibility
WARNING No favicon.ico at site root accessibility
WARNING 6 link(s) with generic text accessibility
WARNING Title is only 11 characters — consider expanding seo
WARNING Permissions-Policy header is missing security
WARNING External script from cdn.concert.io lacks integrity attribute security
WARNING is missing width/height — may cause layout shift performance
set-cookie
vmidv1=51c18a84-3c93-4e08-9a6e-159da5262bb3;Expires=Sun, 20 Apr 2031 19:02:54... → vmidv1=f630d37d-67b1-4071-9ab5-c9022676399e;Expires=Sat, 16 Aug 2031 17:11:07...

9 headers unchanged

core-js v2.5.7 → v3.36.1

28 technologies unchanged

Looking ahead

+20 pts
C (78) Could reach A+ (98)
Accessibility +26Performance +26Security +21Infrastructure +18Compliance +14Sustainability +14Content +9SEO +6

Estimate — actual results may vary (84 issues to fix)

Website improvement report — Vox

April 21, 2026 → August 17, 2026

C C 73 → 78 +5 pts

22

Resolved

35

New issues

49

Still remaining

Financial summary

Investment delivered

$6,042 in development time

Investment remaining

$11,108 to complete the remaining items

Ongoing risk

$9/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score73 (C)78 (C)+5
Performance67 (D)74 (C)+7
Security64 (D)79 (C)+15
Accessibility62 (D)74 (C)+12
SEO94 (A)94 (A)0
Infrastructure83 (B)82 (B)-1
Compliance91 (A)67 (D)-24
Content96 (A)91 (A)-5
Sustainability72 (C)70 (C)-2

Resolved (22)

  • JavaScript is 3.0 MB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • Images are 1.9 MB — compress or use modern formats (Performance)

    → Page loads faster for users

  • https://securepubads.g.doubleclick.net/pagead/mana...: 933ms CPU time (Performance)

    → Page loads faster for users

  • https://www.vox.com/metrics/gtm.js?id=GTM-WQ5FM5W: 213 KB unused (31%) (Performance)

    → Page loads faster for users

  • https://www.gstatic.com/recaptcha/releases/gTpTIWh...: 177 KB unused (49%) (Performance)

    → Page loads faster for users

  • 155 third-party resources (100% of weight) (Performance)

    → Page loads faster for users

  • 198 of 200 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • https://www.vox.com/_next/static/chunks/pages/_app...: 2469ms CPU time (Performance)

    → Page loads faster for users

  • 1.37g CO2 per page view (Sustainability)

    → Lower carbon footprint per page view

  • 1.37g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • Third-party scripts: 10396ms (85% of total) (Performance)

    → Page loads faster for users

  • Page weighs 14.5 MB (5.8 MB transferred) (Performance)

    → Page loads faster for users

  • 156 HTTP requests — consider bundling or reducing (Performance)

    → Page loads faster for users

  • https://www.vox.com/: 1499ms CPU time (Performance)

    → Page loads faster for users

  • Third-party code accounts for 100% of page weight (5.8 MiB of 5.8 MiB) (Performance)

    → Page loads faster for users

…and 7 more resolved issue(s)

Recommended next steps (84)

  • Sprint 1

    Broken link: https://www.instagram.com/voxdotcom (Content)

  • Sprint 1

    8.67g CO2 per page view (Sustainability)

  • Sprint 1

    Page weighs 46.2 MB (36.6 MB transferred) (Performance)

  • Sprint 2

    1 control(s) without accessible label (Accessibility)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    Cookie '_vm_consent_type' is missing the Secure flag (Security)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 1

    No H1 heading found (Accessibility)

  • Sprint 1

    og:image is not reachable (Content)

  • Sprint 1

    10 button(s) with no accessible text (Accessibility)

  • Sprint 2

    2 non-essential cookie(s) set without consent banner (Compliance)

  • Sprint 3

    https://www.vox.com/metrics/gtm.js?id=GTM-WQ5FM5W: 219 KB unused (30%) (Performance)

  • Sprint 1

    197 of 200 links are healthy (Content)

…and 69 more recommended item(s)

Send Feedback