Skip to content

Changes

https://costdown.org
Compared to previous audit · 18 hours ago View previous audit
3
New issues
1
Resolved
10
score changes
CategoryPreviousCurrentChange
CompositeA (92)A (92)—
PerformanceA+ (97)A+ (97)—
SecurityA (96)A (96)—
AccessibilityA (90)A (90)—
SEOA (96)A (94) -2.000
InfrastructureA (90)A (90)—
ComplianceC (74)C (74)—
ContentB (85)B (85)—
SustainabilityA+ (98)A+ (98)—
MetricPreviousCurrentChange
Performance 94009400—
Accessibility 96009600—
Best Practices 1000010000—
SEO 91009100—
PWA 00—
Desktop Performance 99009900—
Desktop Accessibility 96009600—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 1.09 s1.11 s +16 ms
LCP 3.04 s3.06 s—
TBT 63 ms76 ms +13 ms
CLS 0.0000.000—
Desktop FCP 526 ms508 ms -18 ms
Desktop LCP 914 ms896 ms -18 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0000.000—
TTFB †628 ms599 ms -29 ms
DNS †42 ms34 ms -8 ms
TLS †26 ms23 ms -4 ms
Connect †17 ms17 ms -0 ms
Total †829 ms765 ms -63 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://costdown.org/: 305ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING https://costdown.org/: 291ms CPU time performance
CRITICAL Both www and non-www versions serve content infrastructure
WARNING 1 images significantly larger than display size content
WARNING Registrar lock is NOT enabled infrastructure
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING X-Powered-By header reveals technology stack security
WARNING DMARC policy is none — monitoring only security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No accessibility statement detected compliance
link
</_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...
content-security-policy
default-src 'self'; script-src 'self' 'nonce-s8by8j68wKEhHkuYhDZ3OA==' https:... → default-src 'self'; script-src 'self' 'nonce-XsoD3R7+SKng8CllgsaUjg==' https:...

15 headers unchanged

Technology stack unchanged

11 technologies unchanged

Looking ahead

+5 pts
A (92) Could reach A+ (97)
Infrastructure +10Compliance +8Content +8Accessibility +4Security +4Performance +3

Estimate — actual results may vary (12 issues to fix)

Website improvement report — Costdown

August 29, 2026 → August 30, 2026

A A 92 → 92 0 pts

1

Resolved

3

New issues

9

Still remaining

Financial summary

Investment remaining

₫6,750,000 to complete the remaining items

Ongoing risk

₫2,884/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score92 (A)92 (A)0
Performance97 (A+)97 (A+)0
Security96 (A)96 (A)0
Accessibility90 (A)90 (A)0
SEO96 (A)94 (A)-2
Infrastructure90 (A)90 (A)0
Compliance74 (C)74 (C)0
Content85 (B)85 (B)0
Sustainability98 (A+)98 (A+)0

Resolved (1)

  • https://costdown.org/: 291ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (12)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    https://costdown.org/: 305ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 2

    1 images significantly larger than display size (Content)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 2

    All 1 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 1

    DMARC policy is none — monitoring only (Security)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 1

    No accessibility statement detected (Compliance)

Send Feedback