Skip to content

Changes

https://www.snapchat.com
Compared to previous audit · 31 weeks ago View previous audit

Madrid, Spain → Sao Paulo, Brazil

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

36
New issues
39
Resolved
28
score changes
CategoryPreviousCurrentChange
CompositeC (74)B (85) +11.000
PerformanceC (71)B (84) +13.000
SecurityC (70)B (85) +15.000
AccessibilityD (65)B (86) +21.000
SEOB (85)A (92) +7.000
InfrastructureB (89)B (88) -1.000
ComplianceC (75)C (74) -1.000
ContentB (87)B (86) -1.000
SustainabilityF (46)C (78) +32.000
MetricPreviousCurrentChange
Performance 36006100 +2500
Accessibility 930010000 +700
Best Practices 92009600 +400
SEO 1000010000—
PWA 00—
Desktop Performance 37008000 +4300
Desktop Accessibility 80009600 +1600
Desktop Best Practices 92009600 +400
Desktop SEO 92009200—
FCP 1.97 s2.55 s +581 ms
LCP 11.12 s14.59 s +3.47 s
TBT 2.11 s430 ms -1.68 s
CLS 0.0010.002 +0.001
Desktop FCP 655 ms904 ms +249 ms
Desktop LCP 13.18 s2.93 s -10.25 s
Desktop TBT 998 ms149 ms -849 ms
Desktop CLS 0.0040.000 -0.004
TTFB †17 ms220 ms +203 ms
DNS †5 ms43 ms +38 ms
TLS †5 ms21 ms +16 ms
Connect †2 ms17 ms +15 ms
Total †19 ms243 ms +223 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 74
Projected
A 95
Actual
B 85
Close to projection — 10 points away
39 issues resolved since last audit
46 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL 128 of 132 links are healthy content
CRITICAL 'unsafe-inline' found in script source security
WARNING Registrar lock is NOT enabled infrastructure
WARNING 0.64g CO2 — above the median website (0.60g) sustainability
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING No SPF record found security
WARNING 1 link(s) with generic text accessibility
WARNING Third-party scripts: 1217ms (56% of total) performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING SRI adoption: 0/31 third-party resources protected (0%) security
WARNING Third-party code accounts for 98% of page weight (2.6 MiB of 2.7 MiB) performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 44 KB unused (39%) performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 21 KB unused (87%) performance
WARNING Broken link: https://www.snapchat.com/apple-touch-icon-yellow-192.png content
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 935ms CPU time performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 136 KB unused (74%) performance
WARNING 63 third-party resources (98% of weight) performance
WARNING Broken link: https://www.snapchat.com/favicon-192x192.png content
WARNING Broken link: https://cf-st.sc-cdn.net content
WARNING 4 link(s) open in new tab without warning accessibility
WARNING Title is only 17 characters — consider expanding seo
WARNING JavaScript is 640 KB — consider code splitting or lazy loading performance
WARNING 4 render-blocking <script src> tag(s) without async/defer performance
WARNING Cookie 'sc-wcid' is missing the HttpOnly flag security
WARNING Cookie 'sc-config-cache-key' is missing the HttpOnly flag security
WARNING 3 risky subdomain name(s) advertised in certificate SANs security
WARNING Unattributable: 499ms CPU time performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 67 KB unused (91%) performance
WARNING 2 unclassified cookie(s) set before any consent step compliance
WARNING Page weighs 5.0 MB (2.7 MB transferred) performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 20 KB unused (57%) performance
WARNING Page weight 2.7 MB exceeds 1 MB target by 1.7 MB performance
WARNING Broken link: https://www.snapchat.com/favicon.svg content
WARNING https://www.snapchat.com/: 466ms CPU time performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 282ms CPU time performance
WARNING 1 internal links use generic anchor text seo
CRITICAL 1 control(s) without accessible label accessibility
CRITICAL Viewport prevents user zooming compliance
CRITICAL Page weighs 14.9 MB (14.1 MB transferred) performance
CRITICAL Transfer efficiency: 38% sustainability
CRITICAL 3.34g CO2 per page view sustainability
CRITICAL No H1 heading found accessibility
WARNING https://www.snapchat.com/: 680ms CPU time performance
WARNING https://www.googletagmanager.com/gtag/js?id=G-DPDH...: 66 KB unused (40%) performance
WARNING Third-party code accounts for 100% of page weight (14.1 MiB of 14.1 MiB) performance
WARNING HSTS is missing includeSubDomains security
WARNING External script from www.googletagmanager.com lacks integrity attribute security
WARNING JavaScript is 12.0 MB — consider code splitting or lazy loading performance
WARNING https://static.snapchat.com/snapchat-dot-com/_next...: 8.6 MB unused (76%) performance
WARNING 66 third-party resources (100% of weight) performance
WARNING form-action directive is missing security
WARNING Page has 154 words — thin content seo
WARNING Terms of Service not detected compliance
WARNING X-Content-Type-Options header is missing security
WARNING Third-party scripts: 5403ms (80% of total) performance
WARNING https://static.snapchat.com/snapchat-dot-com/_next...: 27 KB unused (53%) performance
WARNING Main HTML cached for 180 minutes -- risks stale auth / SPA state performance
WARNING Page weight 14.1 MB exceeds 1 MB target by 13.1 MB performance
WARNING Thin content — only 154 words seo
WARNING Referrer-Policy header is missing security
WARNING No Permissions-Policy header security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING Unattributable: 696ms CPU time performance
WARNING https://static.snapchat.com/images/snapchatdotcom/... is missing width/height — may cause layout shift performance
WARNING 1 control(s) rely on placeholder only accessibility
WARNING https://www.googletagmanager.com/gtag/js?id=G-DPDH...: 565ms CPU time performance
WARNING No `<meta charset>` declaration in HTML seo
WARNING 3.34g CO2 — above the median website (0.60g) sustainability
WARNING External script from www.google-analytics.com lacks integrity attribute security
WARNING No meta description tag found seo
WARNING Permissions-Policy header is missing security
WARNING object-src allows plugin content security
WARNING base-uri directive is missing security
WARNING https://static.snapchat.com/snapchat-dot-com/_next...: 3208ms CPU time performance
WARNING https://static.snapchat.com/snapchat-dot-com/_next...: 1472ms CPU time performance
WARNING External script from static.snapchat.com lacks integrity attribute security
WARNING X-Powered-By header reveals technology stack security
WARNING Images are 1.5 MB — compress or use modern formats performance
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No accessibility statement detected compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No DMARC record found security
WARNING External link from static.snapchat.com lacks integrity attribute security
WARNING CNAME record at zone apex infrastructure
+ permissions-policy camera=(), microphone=(), geolocation=(), payment=()
+ link <https://cf-st.sc-cdn.net>; rel=preconnect, <https://bolt-gcdn.sc-cdn.net>; r...
+ content-encoding gzip
+ x-content-type-options nosniff
+ referrer-policy strict-origin-when-cross-origin
+ set-cookie sc-wcid=a4e849e1-714a-4d4a-9c33-fe9c96108211; Path=/; Max-Age=86400; SameSite...
− x-snap-client-country BR
− etag "jdcgyq567a1jx6"
− x-xss-protection 0
cache-control
public, max-age=10800, s-maxage=10800, stale-while-revalidate=5400 → no-store
x-frame-options
DENY → SAMEORIGIN
x-envoy-upstream-service-time
27 → 20
x-gcp-cache-status
hit → miss
vary
x-gcp-device-type, x-gcp-client-region, Accept-Encoding → rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefet...
alt-svc
h3=":443"; ma=2592000 → h3=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-security-policy
connect-src 'self' blob: https://gcp.api.snapchat.com https://aws.api.snapcha... → default-src 'self'; script-src 'wasm-unsafe-eval' 'unsafe-inline' 'self' http...
via
1.1 google → 1.1 google, 1.1 google
strict-transport-security
max-age=31536000, max-age=31536000; includeSubDomains → max-age=31536000; includeSubDomains

3 headers unchanged

+ Next.js App Router JavaScript frameworks
+ Turbopack Development
− Lodash JavaScript libraries
− Google Tag Manager Tag managers
− Google Analytics Analytics
Next.js v14.2.28 → v16.2.12

14 technologies unchanged

Looking ahead

+12 pts
B (85) Could reach A+ (97)
Performance +16Security +15Content +14Accessibility +10Compliance +10Infrastructure +8SEO +8Sustainability +4

Estimate — actual results may vary (46 issues to fix)

Website improvement report — Snapchat

April 7, 2026 → November 11, 2026

C B 74 → 85 +11 pts

39

Resolved

36

New issues

10

Still remaining

Financial summary

Investment delivered

$7,683 in development time

Investment remaining

$9,517 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score74 (C)85 (B)+11
Performance71 (C)84 (B)+13
Security70 (C)85 (B)+15
Accessibility65 (D)86 (B)+21
SEO85 (B)92 (A)+7
Infrastructure89 (B)88 (B)-1
Compliance75 (C)74 (C)-1
Content87 (B)86 (B)-1
Sustainability46 (F)78 (C)+32

Resolved (39)

  • https://www.snapchat.com/: 680ms CPU time (Performance)

    → Page loads faster for users

  • https://www.googletagmanager.com/gtag/js?id=G-DPDH...: 66 KB unused (40%) (Performance)

    → Page loads faster for users

  • Third-party code accounts for 100% of page weight (14.1 MiB of 14.1 MiB) (Performance)

    → Page loads faster for users

  • HSTS is missing includeSubDomains (Security)

    → Reduced attack surface for visitors

  • External script from www.googletagmanager.com lacks integrity attribute (Security)

    → Reduced attack surface for visitors

  • JavaScript is 12.0 MB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • https://static.snapchat.com/snapchat-dot-com/_next...: 8.6 MB unused (76%) (Performance)

    → Page loads faster for users

  • 66 third-party resources (100% of weight) (Performance)

    → Page loads faster for users

  • form-action directive is missing (Security)

    → Reduced attack surface for visitors

  • Page has 154 words — thin content (SEO)

    → Better search engine visibility

  • Terms of Service not detected (Compliance)

    → Reduced regulatory exposure

  • X-Content-Type-Options header is missing (Security)

    → Reduced attack surface for visitors

  • 1 control(s) without accessible label (Accessibility)

    → Improved usability for assistive technology users

  • Third-party scripts: 5403ms (80% of total) (Performance)

    → Page loads faster for users

  • https://static.snapchat.com/snapchat-dot-com/_next...: 27 KB unused (53%) (Performance)

    → Page loads faster for users

…and 24 more resolved issue(s)

Recommended next steps (46)

  • Sprint 1

    128 of 132 links are healthy (Content)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 2

    0.64g CO2 — above the median website (0.60g) (Sustainability)

  • Sprint 1

    security.txt: Missing required 'Expires' field (RFC 9116) (Security)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 2

    1 link(s) with generic text (Accessibility)

  • Sprint 3

    Third-party scripts: 1217ms (56% of total) (Performance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 1

    SRI adoption: 0/31 third-party resources protected (0%) (Security)

  • Sprint 3

    Third-party code accounts for 98% of page weight (2.6 MiB of 2.7 MiB) (Performance)

  • Sprint 3

    https://static.snapchat.com/sc-com/_next/static/ch...: 44 KB unused (39%) (Performance)

  • Sprint 3

    https://static.snapchat.com/sc-com/_next/static/ch...: 21 KB unused (87%) (Performance)

  • Sprint 1

    Broken link: https://www.snapchat.com/apple-touch-icon-yellow-192.png (Content)

  • Sprint 1

    https://static.snapchat.com/sc-com/_next/static/ch...: 935ms CPU time (Performance)

…and 31 more recommended item(s)

Send Feedback