Skip to content

Changes

https://www.mossandmolt.com
Compared to previous audit · 1 day ago View previous audit
23
New issues
35
Resolved
20
score changes
CategoryPreviousCurrentChange
CompositeB (83)B (84) +1.000
PerformanceB (87)B (86) -1.000
SecurityC (78)B (82) +4.000
AccessibilityC (79)B (80) +1.000
SEOA (93)A (92) -1.000
InfrastructureB (89)B (86) -3.000
ComplianceC (74)B (83) +9.000
ContentB (88)B (87) -1.000
SustainabilityB (81)B (81)—
MetricPreviousCurrentChange
Performance 51005200 +100
Accessibility 1000010000—
Best Practices 92009200—
SEO 1000010000—
PWA 00—
Desktop Performance 93009600 +300
Desktop Accessibility 97009700—
Desktop Best Practices 100009200 -800
Desktop SEO 1000010000—
FCP 4.42 s4.85 s +434 ms
LCP 13.15 s13.81 s +657 ms
TBT 340 ms294 ms -46 ms
CLS 0.0000.000—
Desktop FCP 665 ms663 ms—
Desktop LCP 1.11 s1.05 s -62 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0020.039 +0.037
TTFB †1.63 s139 ms -1.49 s
DNS †73 ms76 ms +3 ms
TLS †27 ms24 ms -3 ms
Connect 17 ms17 ms—
Total †1.65 s139 ms -1.51 s

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Content-Security-Policy header is missing security
CRITICAL og:image is not reachable content
CRITICAL HSTS header is missing security
CRITICAL Page weighs 6.3 MB (4.2 MB transferred) performance
WARNING 0.99g CO2 — above the median website (0.60g) sustainability
WARNING 421 HTTP requests — consider bundling or reducing performance
WARNING Unattributable: 1346ms CPU time performance
WARNING Compressed response missing `Vary` header performance
WARNING Total JS execution time is 8.1 s -- over the 3.5s budget performance
WARNING og:image dimensions 227×65 are below Facebook's 200×200 minimum content
WARNING JavaScript is 645 KB — consider code splitting or lazy loading performance
WARNING https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 460ms CPU time performance
WARNING Unexpected status code: HTTP 403 accessibility
WARNING Images are 1.5 MB — compress or use modern formats performance
WARNING https://www.mossandmolt.com/: 3926ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/ba415808dw2c13...: 723ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/ba415808dw2c13...: 39 KB unused (46%) performance
WARNING 22 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@a415808dw2c139137pa995880fm244b3dcf/cust…") accessibility
WARNING https://cdn.shopify.com/extensions/01a1ca44-d4c2-7...: 696ms CPU time performance
WARNING 9 images significantly larger than display size content
WARNING Page weight 4.2 MB exceeds 1 MB target by 3.2 MB performance
WARNING 1 `@font-face` rule(s) without `font-display` -- causes FOIT performance
CRITICAL Cookie 'localization' is missing the Secure flag security
CRITICAL Cookie 'cart_currency' is missing the Secure flag security
CRITICAL 2 link(s) with no accessible text accessibility
CRITICAL Page weighs 6.6 MB (4.6 MB transferred) performance
WARNING No Permissions-Policy header security
WARNING https://www.mossandmolt.com/cdn/wpm/b997f36b7wa91a...: 571ms CPU time performance
WARNING Referrer-Policy header is missing security
WARNING default-src directive is missing security
WARNING Unexpected status code: HTTP 429 accessibility
WARNING 453 HTTP requests — consider bundling or reducing performance
WARNING form-action directive is missing security
WARNING Cookie '_shopify_cmp' is missing the HttpOnly flag security
WARNING Page weight 4.6 MB exceeds 1 MB target by 3.6 MB performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING 1.09g CO2 — above the median website (0.60g) sustainability
WARNING https://www.mossandmolt.com/cdn/wpm/b997f36b7wa91a...: 39 KB unused (46%) performance
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Cookie 'cart_currency' is missing the HttpOnly flag security
WARNING https://cdn.shopify.com/extensions/01a1c64c-a0b8-7...: 551ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 524ms CPU time performance
WARNING HSTS is enabled but max-age is short (7889238s, should be >= 31536000s) security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cookie 'localization' is missing the HttpOnly flag security
WARNING JavaScript is 636 KB — consider code splitting or lazy loading performance
WARNING https://www.mossandmolt.com/: 3500ms CPU time performance
WARNING Permissions-Policy header is missing security
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@997f36b7wa91af9b9p0b3d274amb4b328d1/cust…") accessibility
WARNING Unattributable: 1267ms CPU time performance
WARNING 6 unclassified cookie(s) set before any consent step compliance
WARNING Missing og:image content
WARNING 171 inline style attribute(s) detected security
WARNING Images are 1.9 MB — compress or use modern formats performance
WARNING 1 images significantly larger than display size content
WARNING 1.09g CO2 per page view sustainability
WARNING base-uri directive is missing security
CRITICAL 5 publicly-accessible JavaScript source map(s) security
CRITICAL 196 of 200 links are healthy content
CRITICAL Canonical target returns 403 seo
WARNING Registrar lock is NOT enabled infrastructure
WARNING External link from cdn.shopify.com lacks integrity attribute security
WARNING Missing required property "name" for Organization content
WARNING CNAME record at zone apex infrastructure
WARNING No accessibility statement detected compliance
WARNING Broken link: https://www.mossandmolt.com/.well-known/ucp content
WARNING 1 link(s) open in a new tab without rel=noopener security
WARNING External script from cdn.shopify.com lacks integrity attribute security
WARNING No favicon.ico at site root accessibility
WARNING Broken link: https://monorail-edge.shopifysvc.com content
WARNING No DMARC record found security
WARNING Broken link: https://www.mossandmolt.com/checkouts/internal/preloads.j... content
WARNING SRI adoption: 1/26 third-party resources protected (3%) security
WARNING GraphQL introspection enabled at /api/graphql security
WARNING 30 link(s) open in new tab without warning accessibility
WARNING Multiple H1 headings (2 found) accessibility
WARNING Broken link: https://www.mossandmolt.com/ content
WARNING 26 images missing explicit width/height content
+ cross-origin-resource-policy same-origin
+ critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
+ referrer-policy same-origin
+ permissions-policy accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(...
+ cross-origin-opener-policy same-origin
+ cf-mitigated challenge
+ origin-agent-cluster ?1
+ cross-origin-embedder-policy require-corp
− vary accept-encoding
− cf-cache-status DYNAMIC
− shopify-complexity-score-v2 1445
− shopify-complexity-score 14450
− powered-by Shopify
− etag "sfr:computation:v2:52d4e24f1da3d83ad1d50a48ec527c1637349d839357eec030251f033...
− content-security-policy block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
− set-cookie _shopify_essential=:AaHIIebjAAEA8eqYe-QLkl9mHvwZ9nM-LodrgA9cKCoHY4pEwVCG_4h7g...
− cache-control private, max-age=0, must-revalidate
− product-filtering-backend bitset_roaring
− x-dc gcp-europe-west1,gcp-europe-west1,gcp-europe-west1
− strict-transport-security max-age=7889238
− content-length 118401
− link <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="...
− content-language en-US
− cdn-cache-control no-cache, no-store
accept-ch
Sec-CH-Viewport-Width → Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
x-frame-options
DENY → SAMEORIGIN
content-type
text/html; charset=utf-8 → text/html; charset=UTF-8

7 headers unchanged

− HSTS Security

13 technologies unchanged

Looking ahead

+13 pts
B (84) Could reach A+ (97)
Security +18Accessibility +16Performance +14Content +13Infrastructure +8SEO +8Compliance +4Sustainability +4

Estimate — actual results may vary (44 issues to fix)

Website improvement report — Mossandmolt

November 11, 2026 → November 12, 2026

B B 83 → 84 +1 pts

35

Resolved

23

New issues

21

Still remaining

Financial summary

Investment delivered

€3,726 in development time

Investment remaining

€4,555 to complete the remaining items

Ongoing risk

€1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score83 (B)84 (B)+1
Performance87 (B)86 (B)-1
Security78 (C)82 (B)+4
Accessibility79 (C)80 (B)+1
SEO93 (A)92 (A)-1
Infrastructure89 (B)86 (B)-3
Compliance74 (C)83 (B)+9
Content88 (B)87 (B)-1
Sustainability81 (B)81 (B)0

Resolved (35)

  • No Permissions-Policy header (Security)

    → Reduced attack surface for visitors

  • https://www.mossandmolt.com/cdn/wpm/b997f36b7wa91a...: 571ms CPU time (Performance)

    → Page loads faster for users

  • Referrer-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • default-src directive is missing (Security)

    → Reduced attack surface for visitors

  • Cookie 'localization' is missing the Secure flag (Security)

    → Reduced attack surface for visitors

  • Cookie 'cart_currency' is missing the Secure flag (Security)

    → Reduced attack surface for visitors

  • Unexpected status code: HTTP 429 (Accessibility)

    → Improved usability for assistive technology users

  • 453 HTTP requests — consider bundling or reducing (Performance)

    → Page loads faster for users

  • form-action directive is missing (Security)

    → Reduced attack surface for visitors

  • Cookie '_shopify_cmp' is missing the HttpOnly flag (Security)

    → Reduced attack surface for visitors

  • 2 link(s) with no accessible text (Accessibility)

    → Improved usability for assistive technology users

  • Page weight 4.6 MB exceeds 1 MB target by 3.6 MB (Performance)

    → Page loads faster for users

  • GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

    → Reduced regulatory exposure

  • 1.09g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • https://www.mossandmolt.com/cdn/wpm/b997f36b7wa91a...: 39 KB unused (46%) (Performance)

    → Page loads faster for users

…and 20 more resolved issue(s)

Recommended next steps (44)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    og:image is not reachable (Content)

  • Sprint 1

    HSTS header is missing (Security)

  • Sprint 1

    Page weighs 6.3 MB (4.2 MB transferred) (Performance)

  • Sprint 1

    5 publicly-accessible JavaScript source map(s) (Security)

  • Sprint 1

    196 of 200 links are healthy (Content)

  • Sprint 1

    Canonical target returns 403 (SEO)

  • Sprint 2

    0.99g CO2 — above the median website (0.60g) (Sustainability)

  • Sprint 2

    421 HTTP requests — consider bundling or reducing (Performance)

  • Sprint 1

    Unattributable: 1346ms CPU time (Performance)

  • Sprint 2

    Compressed response missing `Vary` header (Performance)

  • Sprint 2

    Total JS execution time is 8.1 s -- over the 3.5s budget (Performance)

  • Sprint 2

    og:image dimensions 227×65 are below Facebook's 200×200 minimum (Content)

  • Sprint 3

    JavaScript is 645 KB — consider code splitting or lazy loading (Performance)

  • Sprint 1

    https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 460ms CPU time (Performance)

…and 29 more recommended item(s)

Send Feedback