Skip to content

Changes

https://xdroid-gpt.great-site.net
Compared to previous audit · 15 minutes ago View previous audit

Madrid, Spain → New York, United Stated

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

3
New issues
0
Resolved
15
score changes
CategoryPreviousCurrentChange
CompositeB (81)B (80) -1.000
PerformanceA (95)A (91) -4.000
SecurityC (74)C (74)—
AccessibilityC (72)C (72)—
SEOB (82)B (82)—
InfrastructureB (80)B (82) +2.000
ComplianceC (71)C (71)—
ContentB (86)B (86)—
SustainabilityB (85)B (85)—
MetricPreviousCurrentChange
Performance 85009700 +1200
Accessibility 97009700—
Best Practices 1000010000—
SEO 1000010000—
PWA 00—
Desktop Performance 960010000 +400
Desktop Accessibility 97009700—
Desktop Best Practices 1000010000—
Desktop SEO 1000010000—
FCP 3.28 s2.06 s -1.22 s
LCP 3.28 s2.06 s -1.22 s
TBT 0 ms0 ms—
CLS 0.0000.000—
Desktop FCP 1.12 s618 ms -501 ms
Desktop LCP 1.12 s618 ms -501 ms
Desktop TBT 18 ms0 ms -18 ms
Desktop CLS 0.0000.000—
TTFB †634 ms102 ms -532 ms
DNS †369 ms1 ms -367 ms
TLS †93 ms38 ms -55 ms
Connect †85 ms31 ms -54 ms
Total †634 ms102 ms -532 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://xdroid-gpt.great-site.net/login.php: 3578ms CPU time performance
WARNING Unattributable: 322ms CPU time performance
WARNING Total JS execution time is 3.9 s -- over the 3.5s budget performance

No issues were resolved

CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL HSTS header is missing security
CRITICAL Page has only 13 words — nearly empty seo
CRITICAL Content-Security-Policy header is missing security
CRITICAL /.svn/entries is publicly accessible security
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL Page body has only 87 chars of text -- likely empty / placeholder security
CRITICAL No <main> landmark found accessibility
WARNING X-Content-Type-Options header is missing security
WARNING X-Frame-Options header is missing security
WARNING Referrer-Policy header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No <nav> landmark found accessibility
WARNING No canonical tag found seo
WARNING Meta description is 506 characters — truncated on all platforms (320 char SERP cap) seo
WARNING Sitemap is empty -- 0 URLs listed seo
WARNING Registrar lock is NOT enabled infrastructure
WARNING Permissions-Policy header is missing security
WARNING No headings found accessibility
WARNING No SPF record found security
WARNING Manifest contains invalid JSON accessibility
WARNING sitemap.xml contains invalid XML infrastructure
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING External link from cdnjs.cloudflare.com lacks integrity attribute security
WARNING No DMARC record found security
WARNING No Permissions-Policy header security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 2 control(s) rely on placeholder only accessibility
WARNING Thin content — only 13 words seo
WARNING sitemap.xml is empty — no URLs found infrastructure
WARNING No accessibility statement detected compliance
WARNING Terms of Service not detected compliance
WARNING Missing og:image content
WARNING SRI adoption: 0/1 third-party resources protected (0%) security
WARNING /phpinfo.php is publicly accessible security
WARNING 1 field(s) missing recommended autocomplete attribute accessibility
WARNING Title is only 27 characters — consider expanding seo

HTTP headers unchanged

5 headers unchanged

Technology stack unchanged

6 technologies unchanged

Looking ahead

+17 pts
B (80) Could reach A+ (97)
Accessibility +26Security +26Infrastructure +18SEO +18Performance +9Compliance +8Content +4

Estimate — actual results may vary (40 issues to fix)

Website improvement report — Xdroid-gpt.great-site

September 9, 2026 → September 9, 2026

B B 81 → 80 -1 pts

0

Resolved

3

New issues

37

Still remaining

Financial summary

Investment remaining

£2,694 to complete the remaining items

Ongoing risk

£0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score81 (B)80 (B)-1
Performance95 (A)91 (A)-4
Security74 (C)74 (C)0
Accessibility72 (C)72 (C)0
SEO82 (B)82 (B)0
Infrastructure80 (B)82 (B)+2
Compliance71 (C)71 (C)0
Content86 (B)86 (B)0
Sustainability85 (B)85 (B)0

Recommended next steps (40)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    HSTS header is missing (Security)

  • Sprint 3

    Page has only 13 words — nearly empty (SEO)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 2

    /.svn/entries is publicly accessible (Security)

  • Sprint 1

    Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

  • Sprint 1

    Page body has only 87 chars of text -- likely empty / placeholder (Security)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 1

    https://xdroid-gpt.great-site.net/login.php: 3578ms CPU time (Performance)

  • Sprint 1

    Unattributable: 322ms CPU time (Performance)

  • Sprint 2

    Total JS execution time is 3.9 s -- over the 3.5s budget (Performance)

  • Sprint 1

    X-Content-Type-Options header is missing (Security)

  • Sprint 1

    X-Frame-Options header is missing (Security)

  • Sprint 1

    Referrer-Policy header is missing (Security)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

…and 25 more recommended item(s)

Send Feedback