Performance

· 26 checks — Lighthouse + waterfall + sustainability rolled into one auditable list.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Performance-focused optimization plan with CWV assessment, top offenders, and time estimates

Mobile Desktop

Performance

100

Accessibility

Best Practices

100

SEO

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

1.74 s

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

1.97 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

6 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.000

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

4.47 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

5.02 s

Page Load Progression

558 ms

1.1 s

1.7 s

2.2 s

2.8 s

3.3 s

3.9 s

4.5 s

Checks

20 PASS 2 REVIEW 1 FIX

JS Execution Cost

Action

3989ms total JS execution

FIX

3989ms total JS execution

https://nu11cyber.com/assets/index-BywUXNAB.js: 2169ms CPU time

Unattributable: 904ms CPU time

https://nu11cyber.com/: 487ms CPU time

https://nu11cyber.com/assets/vendor-D3F3s8fL.js: 375ms CPU time

https://static.cloudflareinsights.com/beacon.min.j...: 54ms CPU time

Third-party scripts: 54ms (1% of total)

Main Thread Breakdown

Other 66% Script Evaluation 18% Style & Layout 10%

Script	Total	Scripting	Parse/Compile	Party
https://nu11cyber.com/assets/index-BywUXNAB.js	2169ms	232ms	4ms	1st
Unattributable	904ms	308ms	0ms	1st
https://nu11cyber.com/	487ms	8ms	1ms	1st
https://nu11cyber.com/assets/vendor-D3F3s8fL.js	375ms	143ms	1ms	1st
https://static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447	54ms	38ms	5ms	3rd

JavaScript Blocking

2 JS blocking issue(s) detected

REVIEW

2 JS blocking issue(s) detected

1 render-blocking <script src> tag(s) without async/defer

Each `<script src=...>` without `async`, `defer`, or `type="module"` blocks HTML parsing while the browser fetches and executes it. The block lasts the entire round-trip + execution time -- on slow networks this translates directly into LCP delay. Add `defer` (executes after parse, in source order) for scripts that interact with the DOM, or `async` (executes whenever ready) for analytics / independent scripts. Module scripts (`type="module"`) are deferred by default.

Total JS execution time is 4.0 s -- over the 3.5s budget

Total JavaScript execution (parse + compile + run) across all scripts exceeds 3.5 seconds. On low-end devices that becomes 7-15+ seconds and shows up directly in TBT and INP. Reduce by: tree-shaking unused dependencies, code-splitting (dynamic `import()`), removing or deferring third-party tracking, and replacing heavy frameworks where they're not needed.

HTTP Caching

public, max-age=0, must-revalidate

REVIEW

public, max-age=0, must-revalidate

Cache-Control header is set

Got: public, max-age=0, must-revalidate

No ETag or Last-Modified header

Conditional requests (304 Not Modified) are not possible without validators.

Cache-Control

public, max-age=0, must-revalidate

Directive	Value	Meaning
public	—	Any cache may store this response
max-age	0	Cache for 0 seconds
must-revalidate	—	Must recheck with server after expiry

A+

Page Weight Budget

584 KB transferred, 25 requests

PASS

584 KB transferred, 25 requests

Page weighs 1.6 MB (584 KB transferred)

25 HTTP requests

Estimated 0.12 g CO2 per page load

584 KB transferred

25 requests

0.12 g CO2 per page load

JavaScript 396.8 KiB 68%

Images 56.7 KiB 10%

Other 52.8 KiB 9%

Fonts 48.3 KiB 8%

CSS 17.1 KiB 3%

HTML 5.3 KiB 1%

Other 4.2 KiB 1%

Other 2.1 KiB 0%

Other 636 B 0%

0 2.4 MB 4.9 MB

Under budget

A+

Third-Party Impact

3% third-party, 0 ms blocking

PASS

3% third-party, 0 ms blocking

Third-party code accounts for 3% of page weight (18.5 KiB of 584.1 KiB)

Third-party blocking time is low (0 ms)

97%

First-party Third-party

A+

Text Compression

All text resources are compressed

PASS

All text resources are compressed

All text resources are properly compressed.

Image Optimization

3 images, 0 KB saveable

PASS

3 images, 0 KB saveable

All images are well-optimized

3 images 7 KB

0 oversized -0 KB

2 legacy format

0 missing dimensions CLS risk

A+

Font Loading

1 fonts (48 KB)

PASS

1 fonts (48 KB)

1 font(s) use font-display: swap (FOUT risk but functional)

Web fonts

48 KB total

Render-blocking

of 1

Dominant font-display

swap

Most common across fonts

Font loading timeline

Transfer FOIT (block) FOUT (swap)

UcC73FwrK3iLTeHuS_nVMrM... woff2 swap

Size 48 KB

Load time 1.2 s

Start 435 ms

Risk FOUT — text flashes from fallback to web font

Optimization checklist

Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)

A+

JS Bundles

6 scripts, 26 KB unused

PASS

6 scripts, 26 KB unused

https://nu11cyber.com/assets/index-BywUXNAB.js: 26 KB unused (8%)

Consider code splitting or tree shaking to reduce unused code.

Total unused JavaScript: 26 KB

26 KB unused JavaScript

Downloaded but never executed on this page.

Script	Size	Unused	Minified	Party
https://nu11cyber.com/assets/index-BywUXNAB.js	334 KB	26 KB (8%)	✓	1st
https://images.dmca.com/Badges/DMCABadgeHelper.min.js	0 KB	—	✓	3rd
https://nu11cyber.com/assets/vendor-D3F3s8fL.js	48 KB	—	✓	1st
https://nu11cyber.com/trusted-types.js	2 KB	—	✓	1st
https://static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447	11 KB	—	✓	3rd
https://nu11cyber.com/assets/HomePage-OyFdcs_d.js	2 KB	—	✓	1st

Consider code splitting or tree shaking to reduce unused code.

Why this matters

This bundle has high unused code — code-split or tree-shake to ship only what executes.

Source: web.dev / Lighthouse coverage

A+

Resource Caching

All resources properly cached

PASS

All resources properly cached

No caching issues found

All static resources have appropriate caching headers.

A+

Critical Rendering Path

No render-blocking resources

PASS

No render-blocking resources

No render-blocking resources detected

Resource Hints

1 hints, 0 missing preconnects

PASS

1 hints, 0 missing preconnects

1 font preload(s) missing `crossorigin` -- font will be downloaded twice

Fonts are always fetched as crossorigin=anonymous; a preload without the attribute creates a different cache key, so the browser refetches when the actual font request happens. Sample: /fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2. Add `crossorigin` (or `crossorigin="anonymous"`) to each preload.

Page uses 1 resource hint(s)

Current Resource Hints

preconnect

—

preload

dns-prefetch

—

prefetch

—

1 resource hints configured

Why this matters

Performance issues directly impact user engagement and conversion rates.

A+

HTTP/3 (QUIC)

HTTP/3 advertised via Alt-Svc

PASS

HTTP/3 advertised via Alt-Svc

HTTP/3 (QUIC) is supported

First-load mobile users on cellular networks see meaningful latency improvements with HTTP/3. The QUIC transport collapses TLS + TCP handshakes into one and recovers faster from packet loss.

A+

Compression Algorithm

Main response uses brotli

PASS

Main response uses brotli

Main HTML response uses brotli (Content-Encoding: br)

Brotli is the best text-compression algorithm for general use, ~20% smaller than gzip on average (40% on smaller files). Modern browsers all support it.

A+

LCP Image Preload

LCP preload audit not available

PASS

LCP preload audit not available

LCP image preload audit not available for this scan

A+

Main HTML Cache-Control

Main HTML max-age=0 (≤ 5min) is appropriate

PASS

Main HTML max-age=0 (≤ 5min) is appropriate

Got: public, max-age=0, must-revalidate

A+

Server-Timing Observability

3 Server-Timing entries advertised

PASS

3 Server-Timing entries advertised

Server-Timing header advertises 3 timing entries

A+

Server Response Intelligence

2 server-response signal(s) detected

PASS

2 server-response signal(s) detected

`Vary` header declared: Accept-Encoding

The page declares a `Vary` header, telling downstream caches which request headers the response varies on. Critical for content-negotiated responses (compression, language, cookies, device class).

No `ETag` or `Last-Modified` -- conditional GET not supported

Without either header, browsers can't issue conditional GETs and refresh always re-downloads the full response body even when nothing changed. Add `ETag: "<hash>"` (or `Last-Modified: <date>`) on cacheable responses; the server returns 304 Not Modified when the client's cached copy is still valid, saving bandwidth.

A+

Page Weight Inventory

25 resources · 584 KB · 26 KB savings available

PASS

25 resources · 584 KB · 26 KB savings available

Within 1MB page-weight target

Got: 584 KB

4 third-party resources (3% of weight)

1 resources over 200KB

25 resources · 584.1 KiB · 4 third-party Within 1MB page-weight target

JavaScript 68% · 396.8 KiB

Image 19% · 108.9 KiB

Font 8% · 48.3 KiB

CSS 3% · 17.1 KiB

Other 1% · 7.6 KiB

Document 1% · 5.3 KiB

~26.1 KiB of savings available

Remove unused JavaScript: 26.1 KiB

#	Resource	Type	Size	Cache	Unused	3rd party	Issues

25 resources			584.1 KiB

A+

Render-Blocking Resources

No render-blocking resources detected

PASS

No render-blocking resources detected

No render-blocking resources detected in <head>

A+

Third-Party Resources

No third-party resources detected

PASS

No third-party resources detected

A+

CSS Performance Depth

No CSS performance depth issues detected

PASS

No CSS performance depth issues detected

A+

Green Hosting

Whether the site is served from green-energy infrastructure

PASS

Green Hosting

This site is hosted on green energy infrastructure

Provider: Cloudflare

Network Waterfall

25 requests over 2509ms

INFO

HTML JavaScript CSS Images Fonts XHR/Fetch Other

Third-Party Script Cost

Per-script blocking time, transfer cost, and cache headers

INFO

1% of JavaScript execution is third-party

First-party Third-party 54ms · 11KB · ¥7/mo

Script	Category	Execution	Transfer	Unused	Monthly Cost	Verdict
static.cloudflareinsights.com static.cloudflareinsights.com	Other	54ms	11 KB	—	¥7/mo	Optional

static.cloudflareinsights.com

Other

Optional

Execution 54ms

Transfer 11 KB

Monthly Cost ¥7/mo

How third-party costs are calculated

Image Optimization

4 images, 97 KB total, 0 KB wasted

INFO

Image Optimization Audit

Total Images

Total Size

97 KB

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Browse & Analyze

Learn

Performance

Page Load Progression

Font loading timeline

Optimization checklist

Green Hosting

Image Optimization Audit