Skip to content

Changes

https://costdown.org
Compared to previous audit · just now View previous audit

Singapore, Singapore Santa Clara, United States

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

2
New issues
4
Resolved
13
score changes
CategoryPreviousCurrentChange
CompositeB (89)B (89)
PerformanceA (96)A+ (97) +1.000
SecurityB (89)B (89)
AccessibilityA (90)A (90)
SEOA+ (97)A+ (97)
InfrastructureB (83)A (90) +7.000
ComplianceD (63)D (63)
ContentC (75)C (75)
SustainabilityA+ (98)A+ (98)
MetricPreviousCurrentChange
Performance 65007800 +1300
Accessibility 96009600
Best Practices 1000010000
SEO 91009100
PWA 00
Desktop Performance 98009800
Desktop Accessibility 96009600
Desktop Best Practices 1000010000
Desktop SEO 92009200
FCP 2.65 s1.82 s -836 ms
LCP 5.18 s5.16 s
TBT 360 ms158 ms -202 ms
CLS 0.0000.000
Desktop FCP 591 ms637 ms +46 ms
Desktop LCP 1.09 s1.12 s +29 ms
Desktop TBT 0 ms3 ms +3 ms
Desktop CLS 0.0000.000
TTFB 1.05 s6.24 s +5.19 s
DNS 7 ms12 ms +5 ms
TLS 15 ms243 ms +228 ms
Connect 4 ms2 ms -2 ms
Total 1.22 s8.15 s +6.93 s

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://costdown.org/: 442ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING https://costdown.org/: 549ms CPU time performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 1109ms CPU time performance
WARNING Unattributable: 293ms CPU time performance
CRITICAL 'unsafe-inline' found in script source security
CRITICAL Both www and non-www versions serve content infrastructure
WARNING Registrar lock is NOT enabled infrastructure
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Terms of Service not detected compliance
WARNING Permissions-Policy header is missing security
WARNING No DMARC record found security
WARNING No Permissions-Policy header security
WARNING No accessibility statement detected compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING X-Powered-By header reveals technology stack security
WARNING No Open Graph meta tags found content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No SPF record found security
WARNING No privacy policy link detected compliance
WARNING Privacy Policy not detected compliance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility

HTTP headers unchanged

15 headers unchanged

Technology stack unchanged

10 technologies unchanged

Looking ahead

+7 pts
B (89) Could reach A (96)
Compliance +16Security +11Infrastructure +10Content +8Accessibility +4Performance +3

Estimate — actual results may vary (21 issues to fix)

Website improvement report — Costdown

August 27, 2026 → August 27, 2026

B B 89 → 89 0 pts

4

Resolved

2

New issues

19

Still remaining

Financial summary

Investment delivered

₫600,000 in development time

Investment remaining

₫12,750,000 to complete the remaining items

Ongoing risk

₫3,446/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score89 (B)89 (B)0
Performance96 (A)97 (A+)+1
Security89 (B)89 (B)0
Accessibility90 (A)90 (A)0
SEO97 (A+)97 (A+)0
Infrastructure83 (B)90 (A)+7
Compliance63 (D)63 (D)0
Content75 (C)75 (C)0
Sustainability98 (A+)98 (A+)0

Resolved (4)

  • https://costdown.org/: 549ms CPU time (Performance)

    → Page loads faster for users

  • IPv6 DNS records exist but server is not reachable (Infrastructure)

    → More reliable delivery

  • https://costdown.org/_next/static/chunks/1255-fc6c...: 1109ms CPU time (Performance)

    → Page loads faster for users

  • Unattributable: 293ms CPU time (Performance)

    → Page loads faster for users

Recommended next steps (21)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    https://costdown.org/: 442ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 1

    Terms of Service not detected (Compliance)

  • Sprint 1

    Permissions-Policy header is missing (Security)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 1

    No Permissions-Policy header (Security)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 1

    No Open Graph meta tags found (Content)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

…and 6 more recommended item(s)

Send Feedback