Changes
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | A (91) | A (93) | +2.000 |
| Performance | A+ (97) | A+ (97) | — |
| Security | B (89) | A (93) | +4.000 |
| Accessibility | A (90) | A (90) | — |
| SEO | A (95) | A+ (97) | +2.000 |
| Infrastructure | B (88) | A (90) | +2.000 |
| Compliance | B (85) | B (85) | — |
| Content | B (85) | B (85) | — |
| Sustainability | A+ (98) | A+ (98) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 8600 | 9500 | +900 |
| Accessibility | 9600 | 9600 | — |
| Best Practices | 10000 | 10000 | — |
| SEO | 9100 | 9100 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9800 | 9800 | — |
| Desktop Accessibility | 9600 | 9600 | — |
| Desktop Best Practices | 10000 | 10000 | — |
| Desktop SEO | 9200 | 9200 | — |
| FCP | 1.49 s | 1.25 s | -247 ms |
| LCP | 3.81 s | 2.82 s | -984 ms |
| TBT | 134 ms | 58 ms | -76 ms |
| CLS | 0.000 | 0.000 | — |
| Desktop FCP | 558 ms | 548 ms | -10 ms |
| Desktop LCP | 1.06 s | 1.05 s | — |
| Desktop TBT | 0 ms | 0 ms | — |
| Desktop CLS | 0.000 | 0.000 | — |
| TTFB † | 341 ms | 332 ms | -9 ms |
| DNS † | 37 ms | 39 ms | +3 ms |
| TLS † | 28 ms | 22 ms | -6 ms |
| Connect † | 16 ms | 17 ms | +0 ms |
| Total † | 357 ms | 458 ms | +101 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
cross-origin-opener-policy same-originpermissions-policy accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture...content-security-policy default-src 'self'; script-src 'self' 'nonce-qahhE5l5vHRP+Ponwit1aw==' https:... → default-src 'self'; script-src 'self' 'nonce-KaLZNAgMuQ5N2C5RGOXh5A==' https:...link </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...13 headers unchanged
Technology stack unchanged
11 technologies unchanged
Looking ahead
+5 ptsEstimate — actual results may vary (13 issues to fix)
Website improvement report — Costdown
August 27, 2026 → August 27, 2026
4
Resolved
3
New issues
10
Still remaining
Financial summary
Investment delivered
₫450,000 in development time
Investment remaining
₫6,150,000 to complete the remaining items
Ongoing risk
₫3,361/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 91 (A) | 93 (A) | +2 |
| Performance | 97 (A+) | 97 (A+) | 0 |
| Security | 89 (B) | 93 (A) | +4 |
| Accessibility | 90 (A) | 90 (A) | 0 |
| SEO | 95 (A) | 97 (A+) | +2 |
| Infrastructure | 88 (B) | 90 (A) | +2 |
| Compliance | 85 (B) | 85 (B) | 0 |
| Content | 85 (B) | 85 (B) | 0 |
| Sustainability | 98 (A+) | 98 (A+) | 0 |
Resolved (4)
Permissions-Policy header is missing (Security)
→ Reduced attack surface for visitors
Cross-Origin-Opener-Policy header is missing (Security)
→ Reduced attack surface for visitors
No Permissions-Policy header (Security)
→ Reduced attack surface for visitors
https://costdown.org/: 254ms CPU time (Performance)
→ Page loads faster for users
Recommended next steps (13)
- Sprint 1
Both www and non-www versions serve content (Infrastructure)
- Sprint 1
https://costdown.org/: 373ms CPU time (Performance)
- Sprint 2
1 render-blocking <script src> tag(s) without async/defer (Performance)
- Sprint 1
https://costdown.org/_next/static/chunks/1255-fc6c...: 263ms CPU time (Performance)
- Sprint 2
All 1 images use legacy formats (JPEG/PNG/GIF) (Content)
- Sprint 1
X-Powered-By header reveals technology stack (Security)
- Sprint 2
No DMARC record found (Security)
- Sprint 1
No SPF record found (Security)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)
- Sprint 1
No accessibility statement detected (Compliance)
- Sprint 2
1 images significantly larger than display size (Content)
- Sprint 2
Cross-Origin-Embedder-Policy header is missing (Security)
- Sprint 1
Skip navigation link is missing (WCAG 2.4.1) (Accessibility)