Skip to content

Changes

https://www.mossandmolt.com
Compared to previous audit · 20 hours ago View previous audit
36
New issues
18
Resolved
21
score changes
CategoryPreviousCurrentChange
CompositeB (85)B (83) -2.000
PerformanceB (87)B (87)—
SecurityB (82)C (78) -4.000
AccessibilityC (79)C (79)—
SEOA (91)A (93) +2.000
InfrastructureB (86)B (89) +3.000
ComplianceB (83)C (74) -9.000
ContentA (90)B (88) -2.000
SustainabilityB (81)B (81)—
MetricPreviousCurrentChange
Performance 53005100 -200
Accessibility 1000010000—
Best Practices 100009200 -800
SEO 1000010000—
PWA 00—
Desktop Performance 96009300 -300
Desktop Accessibility 97009700—
Desktop Best Practices 920010000 +800
Desktop SEO 1000010000—
FCP 4.03 s4.42 s +392 ms
LCP 13.53 s13.15 s -377 ms
TBT 318 ms340 ms +22 ms
CLS 0.0000.000—
Desktop FCP 595 ms665 ms +70 ms
Desktop LCP 930 ms1.11 s +180 ms
Desktop TBT 1 ms0 ms -1 ms
Desktop CLS 0.0260.002 -0.024
TTFB †137 ms1.63 s +1.49 s
DNS †76 ms73 ms -2 ms
TLS †23 ms27 ms +4 ms
Connect 17 ms17 ms—
Total †138 ms1.65 s +1.51 s

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Cookie 'cart_currency' is missing the Secure flag security
CRITICAL Cookie 'localization' is missing the Secure flag security
CRITICAL Page weighs 6.6 MB (4.6 MB transferred) performance
WARNING base-uri directive is missing security
WARNING Total JS execution time is 7.8 s -- over the 3.5s budget performance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 524ms CPU time performance
WARNING Permissions-Policy header is missing security
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@997f36b7wa91af9b9p0b3d274amb4b328d1/cust…") accessibility
WARNING 1.09g CO2 — above the median website (0.60g) sustainability
WARNING Unexpected status code: HTTP 429 accessibility
WARNING 453 HTTP requests — consider bundling or reducing performance
WARNING Unattributable: 1267ms CPU time performance
WARNING https://cdn.shopify.com/extensions/01a1c64c-a0b8-7...: 551ms CPU time performance
WARNING Referrer-Policy header is missing security
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Cookie '_shopify_cmp' is missing the HttpOnly flag security
WARNING Cookie 'localization' is missing the HttpOnly flag security
WARNING Images are 1.9 MB — compress or use modern formats performance
WARNING 6 unclassified cookie(s) set before any consent step compliance
WARNING JavaScript is 636 KB — consider code splitting or lazy loading performance
WARNING 22 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING 1.09g CO2 per page view sustainability
WARNING Page weight 4.6 MB exceeds 1 MB target by 3.6 MB performance
WARNING Cookie 'cart_currency' is missing the HttpOnly flag security
WARNING No Permissions-Policy header security
WARNING 171 inline style attribute(s) detected security
WARNING https://www.mossandmolt.com/cdn/wpm/b997f36b7wa91a...: 571ms CPU time performance
WARNING 1 `@font-face` rule(s) without `font-display` -- causes FOIT performance
WARNING 1 images significantly larger than display size content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING form-action directive is missing security
WARNING HSTS is enabled but max-age is short (7889238s, should be >= 31536000s) security
WARNING default-src directive is missing security
WARNING https://www.mossandmolt.com/: 3500ms CPU time performance
WARNING https://www.mossandmolt.com/cdn/wpm/b997f36b7wa91a...: 39 KB unused (46%) performance
CRITICAL Content-Security-Policy header is missing security
CRITICAL HSTS header is missing security
WARNING Heading level skipped: H2 → H4 (missing H3) accessibility
WARNING Images are 1.8 MB — compress or use modern formats performance
WARNING JavaScript is 573 KB — consider code splitting or lazy loading performance
WARNING https://www.mossandmolt.com/cdn/wpm/bfe0cff12w3ebd...: 39 KB unused (46%) performance
WARNING https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 555ms CPU time performance
WARNING https://cdn.shopify.com/extensions/01a1c05e-97bc-7...: 547ms CPU time performance
WARNING Compressed response missing `Vary` header performance
WARNING Page weight 3.8 MB exceeds 1 MB target by 2.8 MB performance
WARNING <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@fe0cff12w3ebd43eapaab70107m6f8ccd4d/cust…") accessibility
WARNING Unattributable: 1387ms CPU time performance
WARNING https://www.mossandmolt.com/: 4116ms CPU time performance
WARNING Unexpected status code: HTTP 403 accessibility
WARNING 452 HTTP requests — consider bundling or reducing performance
WARNING https://www.mossandmolt.com/cdn/wpm/bfe0cff12w3ebd...: 575ms CPU time performance
WARNING Page weighs 5.8 MB (3.8 MB transferred) performance
WARNING 0.90g CO2 — above the median website (0.60g) sustainability
CRITICAL 5 publicly-accessible JavaScript source map(s) security
CRITICAL 2 link(s) with no accessible text accessibility
CRITICAL 196 of 200 links are healthy content
CRITICAL Canonical target returns 403 seo
WARNING No accessibility statement detected compliance
WARNING Broken link: https://www.mossandmolt.com/.well-known/ucp content
WARNING 30 link(s) open in new tab without warning accessibility
WARNING CNAME record at zone apex infrastructure
WARNING Multiple H1 headings (2 found) accessibility
WARNING Missing og:image content
WARNING Broken link: https://www.mossandmolt.com/ content
WARNING 1 link(s) open in a new tab without rel=noopener security
WARNING SRI adoption: 1/26 third-party resources protected (3%) security
WARNING Registrar lock is NOT enabled infrastructure
WARNING External script from cdn.shopify.com lacks integrity attribute security
WARNING No DMARC record found security
WARNING Broken link: https://www.mossandmolt.com/checkouts/internal/preloads.j... content
WARNING External link from cdn.shopify.com lacks integrity attribute security
WARNING GraphQL introspection enabled at /api/graphql security
WARNING No favicon.ico at site root accessibility
WARNING Broken link: https://monorail-edge.shopifysvc.com content
WARNING Missing required property "name" for Organization content
WARNING 26 images missing explicit width/height content
+ cdn-cache-control no-cache, no-store
+ link <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="...
+ content-length 118401
+ strict-transport-security max-age=7889238
+ vary accept-encoding
+ cf-cache-status DYNAMIC
+ powered-by Shopify
+ shopify-complexity-score 14450
+ content-language en-US
+ set-cookie _shopify_essential=:AaHIIebjAAEA8eqYe-QLkl9mHvwZ9nM-LodrgA9cKCoHY4pEwVCG_4h7g...
+ shopify-complexity-score-v2 1445
+ x-dc gcp-europe-west1,gcp-europe-west1,gcp-europe-west1
+ content-security-policy block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
+ product-filtering-backend bitset_roaring
+ cache-control private, max-age=0, must-revalidate
+ etag "sfr:computation:v2:52d4e24f1da3d83ad1d50a48ec527c1637349d839357eec030251f033...
− cross-origin-opener-policy same-origin
− cross-origin-resource-policy same-origin
− permissions-policy accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(...
− referrer-policy same-origin
− critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
− cross-origin-embedder-policy require-corp
− origin-agent-cluster ?1
− cf-mitigated challenge
content-type
text/html; charset=UTF-8 → text/html; charset=utf-8
accept-ch
Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ... → Sec-CH-Viewport-Width
x-frame-options
SAMEORIGIN → DENY

7 headers unchanged

+ HSTS Security

13 technologies unchanged

Looking ahead

+15 pts
B (83) Could reach A+ (98)
Security +22Accessibility +18Performance +13Content +12Compliance +10Infrastructure +8Sustainability +8SEO +7

Estimate — actual results may vary (59 issues to fix)

Website improvement report — Mossandmolt

November 10, 2026 → November 11, 2026

B B 85 → 83 -2 pts

18

Resolved

36

New issues

23

Still remaining

Financial summary

Investment delivered

€3,131 in development time

Investment remaining

€4,895 to complete the remaining items

Ongoing risk

€1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score85 (B)83 (B)-2
Performance87 (B)87 (B)0
Security82 (B)78 (C)-4
Accessibility79 (C)79 (C)0
SEO91 (A)93 (A)+2
Infrastructure86 (B)89 (B)+3
Compliance83 (B)74 (C)-9
Content90 (A)88 (B)-2
Sustainability81 (B)81 (B)0

Resolved (18)

  • Heading level skipped: H2 → H4 (missing H3) (Accessibility)

    → Improved usability for assistive technology users

  • Images are 1.8 MB — compress or use modern formats (Performance)

    → Page loads faster for users

  • JavaScript is 573 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • https://www.mossandmolt.com/cdn/wpm/bfe0cff12w3ebd...: 39 KB unused (46%) (Performance)

    → Page loads faster for users

  • https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 555ms CPU time (Performance)

    → Page loads faster for users

  • https://cdn.shopify.com/extensions/01a1c05e-97bc-7...: 547ms CPU time (Performance)

    → Page loads faster for users

  • Compressed response missing `Vary` header (Performance)

    → Page loads faster for users

  • Page weight 3.8 MB exceeds 1 MB target by 2.8 MB (Performance)

    → Page loads faster for users

  • <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@fe0cff12w3ebd43eapaab70107m6f8ccd4d/cust…") (Accessibility)

    → Improved usability for assistive technology users

  • Unattributable: 1387ms CPU time (Performance)

    → Page loads faster for users

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://www.mossandmolt.com/: 4116ms CPU time (Performance)

    → Page loads faster for users

  • Unexpected status code: HTTP 403 (Accessibility)

    → Improved usability for assistive technology users

  • 452 HTTP requests — consider bundling or reducing (Performance)

    → Page loads faster for users

  • https://www.mossandmolt.com/cdn/wpm/bfe0cff12w3ebd...: 575ms CPU time (Performance)

    → Page loads faster for users

…and 3 more resolved issue(s)

Recommended next steps (59)

  • Sprint 1

    Cookie 'cart_currency' is missing the Secure flag (Security)

  • Sprint 1

    Cookie 'localization' is missing the Secure flag (Security)

  • Sprint 1

    Page weighs 6.6 MB (4.6 MB transferred) (Performance)

  • Sprint 1

    5 publicly-accessible JavaScript source map(s) (Security)

  • Sprint 1

    2 link(s) with no accessible text (Accessibility)

  • Sprint 1

    196 of 200 links are healthy (Content)

  • Sprint 1

    Canonical target returns 403 (SEO)

  • Sprint 1

    base-uri directive is missing (Security)

  • Sprint 2

    Total JS execution time is 7.8 s -- over the 3.5s budget (Performance)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    https://www.mossandmolt.com/cdn/shop/t/18/assets/m...: 524ms CPU time (Performance)

  • Sprint 1

    Permissions-Policy header is missing (Security)

  • Sprint 1

    <iframe> missing title attribute (src="https://www.mossandmolt.com/web-pixels@997f36b7wa91af9b9p0b3d274amb4b328d1/cust…") (Accessibility)

  • Sprint 2

    1.09g CO2 — above the median website (0.60g) (Sustainability)

  • Sprint 2

    Unexpected status code: HTTP 429 (Accessibility)

…and 44 more recommended item(s)

Send Feedback