Skip to content

Changes

https://xpenv.com
Compared to previous audit · 9 hours ago View previous audit
11
New issues
5
Resolved
18
score changes
CategoryPreviousCurrentChange
CompositeB (89)B (88) -1.000
PerformanceA (94)A (94)—
SecurityB (86)B (86)—
AccessibilityB (83)B (81) -2.000
SEOA+ (97)A+ (97)—
InfrastructureA (94)B (86) -8.000
ComplianceD (69)D (69)—
ContentA+ (99)A+ (98) -1.000
SustainabilityB (88)B (88)—
MetricPreviousCurrentChange
Performance 70006400 -600
Accessibility 96009100 -500
Best Practices 73007300—
SEO 1000010000—
PWA 00—
Desktop Performance 99009900—
Desktop Accessibility 1000010000—
Desktop Best Practices 73007300—
Desktop SEO 1000010000—
FCP 3.32 s3.33 s—
LCP 3.77 s4.56 s +796 ms
TBT 466 ms487 ms +21 ms
CLS 0.0410.056 +0.015
Desktop FCP 695 ms685 ms -9 ms
Desktop LCP 986 ms765 ms -221 ms
Desktop TBT 60 ms65 ms +5 ms
Desktop CLS 0.0030.002 -0.000
TTFB †27 ms56 ms +28 ms
DNS †3 ms16 ms +13 ms
TLS †7 ms11 ms +4 ms
Connect †1 ms2 ms +0 ms
Total †28 ms56 ms +28 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Broken link: https://xpenv.com/cdn-cgi/content?id=H8NlDPw3OBxy0w4kab2z... content
CRITICAL 1 link(s) with no accessible text accessibility
WARNING https://xpenv.com/assets/index-Bv8_JCRD.js: 749ms CPU time performance
WARNING 1 internal links have no anchor text seo
WARNING No favicon.ico at site root accessibility
WARNING https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 404ms CPU time performance
WARNING Unattributable: 370ms CPU time performance
WARNING 10 of 11 links are healthy content
WARNING https://xpenv.com/assets/index-Bv8_JCRD.js: 259 KB unused (64%) performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING https://xpenv.com/: 339ms CPU time performance
WARNING https://xpenv.com/assets/index-22d4mitO.js: 715ms CPU time performance
WARNING Unattributable: 442ms CPU time performance
WARNING https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 400ms CPU time performance
WARNING https://xpenv.com/: 253ms CPU time performance
WARNING https://xpenv.com/assets/index-22d4mitO.js: 259 KB unused (64%) performance
CRITICAL No H1 heading found accessibility
CRITICAL Transfer efficiency: 41% sustainability
CRITICAL Content-Security-Policy header is missing security
CRITICAL No Content-Security-Policy header found security
WARNING HSTS max-age is too short (15552000s, should be ≥ 31536000s) security
WARNING No Permissions-Policy header security
WARNING Bare server default 404 page accessibility
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING X-Frame-Options header is missing security
WARNING Permissions-Policy header is missing security
WARNING 3 field(s) missing recommended autocomplete attribute accessibility
WARNING <iframe> missing title attribute (src="") accessibility
WARNING Main HTML cached for 1440 minutes -- risks stale auth / SPA state performance
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING 3 field(s) would benefit from inputmode attribute accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING No accessibility statement detected compliance
WARNING Referrer-Policy header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Login form does not contain a recognizable CSRF token security
WARNING No privacy policy link detected compliance
x-ipfs-roots
bafybeid5ruov7wg4rm4gbhqabmoxcrpactyqdxun6wp5fscpiikayrub5m → bafybeicaxpnqp5f6vy5yiln6xxf2vlgg4567cooygtw37ceot6glpw4cuu
last-modified
Mon, 25 May 2026 21:05:22 GMT → Tue, 26 May 2026 15:52:18 GMT

16 headers unchanged

+ PWA Miscellaneous

8 technologies unchanged

Looking ahead

+10 pts
B (88) Could reach A+ (98)
Accessibility +19Security +14Compliance +10Sustainability +10Infrastructure +8Performance +6SEO +3Content +2

Estimate — actual results may vary (33 issues to fix)

Website improvement report — Xpenv

May 26, 2026 → May 27, 2026

B B 89 → 88 -1 pts

5

Resolved

11

New issues

22

Still remaining

Financial summary

Investment delivered

€680 in development time

Investment remaining

€2,430 to complete the remaining items

Ongoing risk

€0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score89 (B)88 (B)-1
Performance94 (A)94 (A)0
Security86 (B)86 (B)0
Accessibility83 (B)81 (B)-2
SEO97 (A+)97 (A+)0
Infrastructure94 (A)86 (B)-8
Compliance69 (D)69 (D)0
Content99 (A+)98 (A+)-1
Sustainability88 (B)88 (B)0

Resolved (5)

  • https://xpenv.com/assets/index-22d4mitO.js: 715ms CPU time (Performance)

    → Page loads faster for users

  • Unattributable: 442ms CPU time (Performance)

    → Page loads faster for users

  • https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 400ms CPU time (Performance)

    → Page loads faster for users

  • https://xpenv.com/: 253ms CPU time (Performance)

    → Page loads faster for users

  • https://xpenv.com/assets/index-22d4mitO.js: 259 KB unused (64%) (Performance)

    → Page loads faster for users

Recommended next steps (33)

  • Sprint 1

    Broken link: https://xpenv.com/cdn-cgi/content?id=H8NlDPw3OBxy0w4kab2z... (Content)

  • Sprint 1

    1 link(s) with no accessible text (Accessibility)

  • Sprint 1

    No H1 heading found (Accessibility)

  • Sprint 1

    Transfer efficiency: 41% (Sustainability)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 1

    https://xpenv.com/assets/index-Bv8_JCRD.js: 749ms CPU time (Performance)

  • Sprint 1

    1 internal links have no anchor text (SEO)

  • Sprint 1

    No favicon.ico at site root (Accessibility)

  • Sprint 1

    https://xpenv.com/cdn-cgi/challenge-platform/scrip...: 404ms CPU time (Performance)

  • Sprint 1

    Unattributable: 370ms CPU time (Performance)

  • Sprint 1

    10 of 11 links are healthy (Content)

  • Sprint 3

    https://xpenv.com/assets/index-Bv8_JCRD.js: 259 KB unused (64%) (Performance)

  • Sprint 2

    IPv6 DNS records exist but server is not reachable (Infrastructure)

  • Sprint 1

    https://xpenv.com/: 339ms CPU time (Performance)

…and 18 more recommended item(s)

Send Feedback