Skip to content

Changes

https://www.mossandmolt.com
Compared to previous audit · 3 hours ago View previous audit
13
New issues
12
Resolved
14
score changes
CategoryPreviousCurrentChange
CompositeB (84)B (84)—
PerformanceB (88)B (88)—
SecurityC (78)C (78)—
AccessibilityC (79)C (79)—
SEOA (94)A (94)—
InfrastructureB (89)B (89)—
ComplianceB (82)B (82)—
ContentB (85)B (85)—
SustainabilityB (85)B (85)—
MetricPreviousCurrentChange
Performance 29003200 +300
Accessibility 95009500—
Best Practices 1000010000—
SEO 85008500—
PWA 00—
Desktop Performance 86008500 -100
Desktop Accessibility 92009200—
Desktop Best Practices 1000010000—
Desktop SEO 85008500—
FCP 4.93 s5.33 s +401 ms
LCP 11.61 s12.60 s +993 ms
TBT 458 ms337 ms -121 ms
CLS 0.3380.338—
Desktop FCP 728 ms749 ms +21 ms
Desktop LCP 1.33 s1.65 s +321 ms
Desktop TBT 0 ms8 ms +8 ms
Desktop CLS 0.1000.075 -0.025
TTFB †176 ms1.08 s +904 ms
DNS †1 ms204 ms +203 ms
TLS †28 ms30 ms +2 ms
Connect †17 ms17 ms -0 ms
Total †218 ms1.12 s +898 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://cdn.shopify.com/extensions/01a18241-b12a-7...: 627ms CPU time performance
WARNING Unattributable: 1282ms CPU time performance
WARNING Page weight 3.1 MB exceeds 1 MB target by 2.1 MB performance
WARNING Page weighs 5.4 MB (3.1 MB transferred) performance
WARNING 428 HTTP requests — consider bundling or reducing performance
WARNING 230 inline style attribute(s) detected security
WARNING Total JS execution time is 9.0 s -- over the 3.5s budget performance
WARNING 22 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING Images are 1.0 MB — compress or use modern formats performance
WARNING 1 `@font-face` rule(s) without `font-display` -- causes FOIT performance
WARNING https://www.mossandmolt.com/: 5595ms CPU time performance
WARNING JavaScript is 676 KB — consider code splitting or lazy loading performance
WARNING 0.74g CO2 — above the median website (0.60g) sustainability
WARNING Cookie 'cart_currency' has no SameSite attribute security
WARNING 231 inline style attribute(s) detected security
WARNING https://cdn.shopify.com/extensions/01a18241-b12a-7...: 623ms CPU time performance
WARNING Cookie 'localization' has no SameSite attribute security
WARNING Images are 1.1 MB — compress or use modern formats performance
WARNING Page weight 3.2 MB exceeds 1 MB target by 2.2 MB performance
WARNING Unattributable: 1359ms CPU time performance
WARNING https://www.mossandmolt.com/: 5617ms CPU time performance
WARNING 0.77g CO2 — above the median website (0.60g) sustainability
WARNING Page weighs 5.5 MB (3.2 MB transferred) performance
WARNING JavaScript is 668 KB — consider code splitting or lazy loading performance
WARNING 446 HTTP requests — consider bundling or reducing performance
CRITICAL Cookie 'localization' is missing the Secure flag security
CRITICAL 9 publicly-accessible JavaScript source map(s) security
CRITICAL 2 image(s) missing alt attribute accessibility
CRITICAL Cookie 'cart_currency' is missing the Secure flag security
WARNING 198 of 200 links are healthy content
WARNING 2 images missing alt text content
WARNING 24 link(s) open in new tab without warning accessibility
WARNING default-src directive is missing security
WARNING base-uri directive is missing security
WARNING form-action directive is missing security
WARNING No Permissions-Policy header security
WARNING https://www.mossandmolt.com/cdn/wpm/b264bf420w2e16...: 706ms CPU time performance
WARNING Permissions-Policy header is missing security
WARNING Cookie 'localization' is missing the HttpOnly flag security
WARNING Cookie 'cart_currency' is missing the HttpOnly flag security
WARNING No favicon.ico at site root accessibility
WARNING External script from shop.app lacks integrity attribute security
WARNING 5 unclassified cookie(s) set before any consent step compliance
WARNING Broken link: https://shop.app content
WARNING Missing required property "name" for Organization content
WARNING Referrer-Policy header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING External script from cdn.shopify.com lacks integrity attribute security
WARNING No DMARC record found security
WARNING Registrar lock is NOT enabled infrastructure
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Heading level skipped: H2 → H4 (missing H3) accessibility
WARNING 3 link(s) with generic text accessibility
WARNING Broken link: https://monorail-edge.shopifysvc.com content
WARNING 25 images missing explicit width/height content
WARNING Total image weight: 1216 KB (1.2 MB) content
WARNING HSTS is enabled but max-age is short (7889238s, should be >= 31536000s) security
WARNING 1 link(s) open in a new tab without rel=noopener security
WARNING External link from cdn.shopify.com lacks integrity attribute security
WARNING https://www.mossandmolt.com/cdn/wpm/b264bf420w2e16...: 37 KB unused (44%) performance
WARNING No accessibility statement detected compliance
WARNING Missing og:image content
WARNING 2 Organization blocks on the page -- only one should describe the publishing entity content
WARNING 3 above-fold image(s) marked loading="lazy" (LCP anti-pattern) content
WARNING SRI adoption: 1/27 third-party resources protected (3%) security
WARNING GraphQL introspection enabled at /api/graphql security
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@264bf420w2e1681cap8d55857fm7d879f9c/cust…") accessibility
WARNING CNAME record at zone apex infrastructure
+ product-filtering-backend bitset_roaring
link
<https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="... → <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="...
content-length
217933 → 217333
shopify-complexity-score
530 → 7530
set-cookie
localization=US; path=/; expires=Thu, 28 Oct 2027 17:21:09 GMT, cart_currency... → localization=US; path=/; expires=Thu, 28 Oct 2027 20:27:19 GMT; SameSite=Lax,...
etag
"page_cache:85653029085:IndexController:15050b09f47873a548dc76a6398729c6:944f... → "page_cache:85653029085:IndexController:feb080af161c4cdf21b947d485990695:6830...
shopify-complexity-score-v2
53 → 753

19 headers unchanged

Technology stack unchanged

16 technologies unchanged

Looking ahead

+14 pts
B (84) Could reach A+ (98)
Security +22Accessibility +18Content +15Performance +12Compliance +8Infrastructure +8Sustainability +4

Estimate — actual results may vary (56 issues to fix)

Website improvement report — Mossandmolt

October 28, 2026 → October 28, 2026

B B 84 → 84 0 pts

12

Resolved

13

New issues

43

Still remaining

Financial summary

Investment delivered

€2,210 in development time

Investment remaining

€4,937 to complete the remaining items

Ongoing risk

€1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score84 (B)84 (B)0
Performance88 (B)88 (B)0
Security78 (C)78 (C)0
Accessibility79 (C)79 (C)0
SEO94 (A)94 (A)0
Infrastructure89 (B)89 (B)0
Compliance82 (B)82 (B)0
Content85 (B)85 (B)0
Sustainability85 (B)85 (B)0

Resolved (12)

  • Cookie 'cart_currency' has no SameSite attribute (Security)

    → Reduced attack surface for visitors

  • 231 inline style attribute(s) detected (Security)

    → Reduced attack surface for visitors

  • https://cdn.shopify.com/extensions/01a18241-b12a-7...: 623ms CPU time (Performance)

    → Page loads faster for users

  • Cookie 'localization' has no SameSite attribute (Security)

    → Reduced attack surface for visitors

  • Images are 1.1 MB — compress or use modern formats (Performance)

    → Page loads faster for users

  • Page weight 3.2 MB exceeds 1 MB target by 2.2 MB (Performance)

    → Page loads faster for users

  • Unattributable: 1359ms CPU time (Performance)

    → Page loads faster for users

  • https://www.mossandmolt.com/: 5617ms CPU time (Performance)

    → Page loads faster for users

  • 0.77g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • Page weighs 5.5 MB (3.2 MB transferred) (Performance)

    → Page loads faster for users

  • JavaScript is 668 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • 446 HTTP requests — consider bundling or reducing (Performance)

    → Page loads faster for users

Recommended next steps (56)

  • Sprint 1

    Cookie 'localization' is missing the Secure flag (Security)

  • Sprint 1

    9 publicly-accessible JavaScript source map(s) (Security)

  • Sprint 2

    2 image(s) missing alt attribute (Accessibility)

  • Sprint 1

    Cookie 'cart_currency' is missing the Secure flag (Security)

  • Sprint 1

    https://cdn.shopify.com/extensions/01a18241-b12a-7...: 627ms CPU time (Performance)

  • Sprint 1

    Unattributable: 1282ms CPU time (Performance)

  • Sprint 2

    Page weight 3.1 MB exceeds 1 MB target by 2.1 MB (Performance)

  • Sprint 1

    Page weighs 5.4 MB (3.1 MB transferred) (Performance)

  • Sprint 2

    428 HTTP requests — consider bundling or reducing (Performance)

  • Sprint 2

    230 inline style attribute(s) detected (Security)

  • Sprint 2

    Total JS execution time is 9.0 s -- over the 3.5s budget (Performance)

  • Sprint 1

    22 render-blocking stylesheet(s) -- recommended: <=3 (Performance)

  • Sprint 2

    Images are 1.0 MB — compress or use modern formats (Performance)

  • Sprint 2

    1 `@font-face` rule(s) without `font-display` -- causes FOIT (Performance)

  • Sprint 1

    https://www.mossandmolt.com/: 5595ms CPU time (Performance)

…and 41 more recommended item(s)

Send Feedback