Changes
Madrid, Spain → New York, United Stated
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | D (69) | C (79) | +10.000 |
| Performance | D (65) | C (79) | +14.000 |
| Security | D (65) | B (80) | +15.000 |
| Accessibility | F (41) | D (68) | +27.000 |
| SEO | A (95) | A (94) | -1.000 |
| Infrastructure | B (87) | A (94) | +7.000 |
| Compliance | B (83) | D (63) | -20.000 |
| Content | C (77) | C (74) | -3.000 |
| Sustainability | D (66) | B (81) | +15.000 |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 2600 | 3400 | +800 |
| Accessibility | 9200 | 9900 | +700 |
| Best Practices | 7700 | 9200 | +1500 |
| SEO | 8500 | 8500 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 4800 | 6900 | +2100 |
| Desktop Accessibility | 8000 | 8700 | +700 |
| Desktop Best Practices | 7700 | 9600 | +1900 |
| Desktop SEO | 8500 | 8500 | — |
| FCP | 4.65 s | 4.04 s | -616 ms |
| LCP | 13.66 s | 18.12 s | +4.46 s |
| TBT | 12.77 s | 1.11 s | -11.66 s |
| CLS | 0.038 | 0.070 | +0.032 |
| Desktop FCP | 866 ms | 880 ms | +14 ms |
| Desktop LCP | 3.57 s | 4.45 s | +874 ms |
| Desktop TBT | 523 ms | 146 ms | -377 ms |
| Desktop CLS | 0.018 | 0.007 | -0.011 |
| TTFB † | 234 ms | 343 ms | +109 ms |
| DNS † | 5 ms | 36 ms | +31 ms |
| TLS † | 7 ms | 20 ms | +13 ms |
| Connect † | 1 ms | 16 ms | +15 ms |
| Total † | 248 ms | 364 ms | +117 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
Projected vs. Actual
Estimate — actual results may vary
content-security-policy-report-only script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri http...set-cookie cf_willow_version_key=ef144f27-e07a-4a75-9083-c353e1838353; Path=/; SameSite=... → cf_willow_version_key=409e3db5-3047-4621-af81-a9404b47a35a; Path=/; SameSite=...11 headers unchanged
13 technologies unchanged
Looking ahead
+18 ptsEstimate — actual results may vary (68 issues to fix)
Website improvement report — Cloudflare
April 4, 2026 → May 10, 2026
38
Resolved
41
New issues
27
Still remaining
Financial summary
Investment delivered
$8,375 in development time
Investment remaining
$9,900 to complete the remaining items
Ongoing risk
$1/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 69 (D) | 79 (C) | +10 |
| Performance | 65 (D) | 79 (C) | +14 |
| Security | 65 (D) | 80 (B) | +15 |
| Accessibility | 41 (F) | 68 (D) | +27 |
| SEO | 95 (A) | 94 (A) | -1 |
| Infrastructure | 87 (B) | 94 (A) | +7 |
| Compliance | 83 (B) | 63 (D) | -20 |
| Content | 77 (C) | 74 (C) | -3 |
| Sustainability | 66 (D) | 81 (B) | +15 |
Resolved (38)
3.19g CO2 per page view (Sustainability)
→ Lower carbon footprint per page view
Cookie '_ga' has no SameSite attribute (Security)
→ Reduced attack surface for visitors
https://www.googletagmanager.com/gtm.js?id=GTM-NDG...: 100 KB unused (62%) (Performance)
→ Page loads faster for users
No meta description tag found (SEO)
→ Better search engine visibility
Cookie 'kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity' is missing the HttpOnly flag (Security)
→ Reduced attack surface for visitors
https://www.cloudflare.com/: 33082ms CPU time (Performance)
→ Page loads faster for users
External script from snap.licdn.com lacks integrity attribute (Security)
→ Reduced attack surface for visitors
2 field(s) missing recommended autocomplete attribute (Accessibility)
→ Improved usability for assistive technology users
198 of 200 links are healthy (Content)
→ Stronger social sharing and on-page quality
https://www.cloudflare.com/go9u/?id=DC-9309168&cx=...: 65 KB unused (48%) (Performance)
→ Page loads faster for users
IPv6 DNS records exist but server is not reachable (Infrastructure)
→ More reliable delivery
https://js.qualified.com/qualified.js?token=37pXYr...: 962ms CPU time (Performance)
→ Page loads faster for users
Cookie '_ga' is missing the Secure flag (Security)
→ Reduced attack surface for visitors
External script from munchkin.marketo.net lacks integrity attribute (Security)
→ Reduced attack surface for visitors
JavaScript is 2.4 MB — consider code splitting or lazy loading (Performance)
→ Page loads faster for users
…and 23 more resolved issue(s)
Recommended next steps (68)
- Sprint 1
Broken link: https://www.cloudflare.com/plans/enterprise/demo/ (Content)
- Sprint 2
10 non-essential cookie(s) set without consent banner (Compliance)
- Sprint 1
Cookie 'cf_willow_version_key' is missing the Secure flag (Security)
- Sprint 1
Cookie '_cfms_willow' is missing the Secure flag (Security)
- Sprint 2
Content-Security-Policy header is missing (Security)
- Sprint 1
2 button(s) with no accessible text (Accessibility)
- Sprint 1
og:image is not reachable (Content)
- Sprint 2
No Content-Security-Policy header found (Security)
- Sprint 2
6 control(s) without accessible label (Accessibility)
- Sprint 2
14 images significantly larger than display size (Content)
- Sprint 1
Cookie '_cfms_willow' has no SameSite attribute (Security)
- Sprint 3
Third-party code accounts for 80% of page weight (3.1 MiB of 3.9 MiB) (Performance)
- Sprint 3
https://ot.www.cloudflare.com/ot/scripttemplates/2...: 66 KB unused (60%) (Performance)
- Sprint 1
Cookie 'cf_willow_version_key' is missing the HttpOnly flag (Security)
- Sprint 1
Permissions-Policy covers 3/10 high-risk features (30%) (Security)
…and 53 more recommended item(s)