Skip to content

Changes

https://costdown.org
Compared to previous audit · just now View previous audit

Singapore, Singapore → Santa Clara, United States

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

3
New issues
4
Resolved
13
score changes
CategoryPreviousCurrentChange
CompositeB (89)B (89)—
PerformanceA (96)A+ (97) +1.000
SecurityB (89)B (89)—
AccessibilityA (90)A (90)—
SEOA+ (97)A+ (97)—
InfrastructureB (83)A (90) +7.000
ComplianceD (63)D (63)—
ContentC (75)C (75)—
SustainabilityA+ (98)A+ (98)—
MetricPreviousCurrentChange
Performance 65007800 +1300
Accessibility 96009600—
Best Practices 1000010000—
SEO 91009100—
PWA 00—
Desktop Performance 98009800—
Desktop Accessibility 96009600—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 2.65 s1.82 s -836 ms
LCP 5.18 s5.16 s—
TBT 360 ms158 ms -202 ms
CLS 0.0000.000—
Desktop FCP 591 ms637 ms +46 ms
Desktop LCP 1.09 s1.12 s +29 ms
Desktop TBT 0 ms3 ms +3 ms
Desktop CLS 0.0000.000—
TTFB †1.05 s6.24 s +5.19 s
DNS †7 ms12 ms +5 ms
TLS †15 ms243 ms +228 ms
Connect †4 ms2 ms -2 ms
Total †1.22 s8.15 s +6.93 s

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://costdown.org/: 442ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Unattributable: 293ms CPU time performance
WARNING https://costdown.org/: 549ms CPU time performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 1109ms CPU time performance
CRITICAL 'unsafe-inline' found in script source security
CRITICAL Both www and non-www versions serve content infrastructure
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No accessibility statement detected compliance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING Permissions-Policy header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No Permissions-Policy header security
WARNING No Open Graph meta tags found content
WARNING No privacy policy link detected compliance
WARNING X-Powered-By header reveals technology stack security
WARNING No DMARC record found security
WARNING No SPF record found security
WARNING Registrar lock is NOT enabled infrastructure
WARNING Terms of Service not detected compliance
WARNING Cross-Origin-Embedder-Policy header is missing security

HTTP headers unchanged

15 headers unchanged

Technology stack unchanged

10 technologies unchanged

Looking ahead

+7 pts
B (89) Could reach A (96)
Compliance +13Security +11Infrastructure +10Content +8Accessibility +4Performance +3

Estimate — actual results may vary (19 issues to fix)

Website improvement report — Costdown

August 27, 2026 → August 27, 2026

B B 89 → 89 0 pts

4

Resolved

3

New issues

16

Still remaining

Financial summary

Investment delivered

₫600,000 in development time

Investment remaining

₫12,450,000 to complete the remaining items

Ongoing risk

₫3,446/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score89 (B)89 (B)0
Performance96 (A)97 (A+)+1
Security89 (B)89 (B)0
Accessibility90 (A)90 (A)0
SEO97 (A+)97 (A+)0
Infrastructure83 (B)90 (A)+7
Compliance63 (D)63 (D)0
Content75 (C)75 (C)0
Sustainability98 (A+)98 (A+)0

Resolved (4)

  • Unattributable: 293ms CPU time (Performance)

    → Page loads faster for users

  • https://costdown.org/: 549ms CPU time (Performance)

    → Page loads faster for users

  • IPv6 DNS records exist but server is not reachable (Infrastructure)

    → More reliable delivery

  • https://costdown.org/_next/static/chunks/1255-fc6c...: 1109ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (19)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    https://costdown.org/: 442ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 2

    All 1 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 1

    Permissions-Policy header is missing (Security)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    No Permissions-Policy header (Security)

  • Sprint 1

    No Open Graph meta tags found (Content)

  • Sprint 2

    No privacy policy link detected (Compliance)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 2

    No DMARC record found (Security)

…and 4 more recommended item(s)

Send Feedback