Changes
Madrid, Spain → Sao Paulo, Brazil
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | A (94) | A (94) | — |
| Performance | A+ (97) | A+ (97) | — |
| Security | A (96) | A (96) | — |
| Accessibility | A (91) | A (91) | — |
| SEO | A+ (97) | A+ (97) | — |
| Infrastructure | B (87) | A (90) | +3.000 |
| Compliance | B (85) | B (85) | — |
| Content | A (95) | A (95) | — |
| Sustainability | A+ (98) | A+ (98) | — |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 8200 | 9500 | +1300 |
| Accessibility | 9600 | 9600 | — |
| Best Practices | 10000 | 10000 | — |
| SEO | 9100 | 9100 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 9900 | 9900 | — |
| Desktop Accessibility | 9600 | 9600 | — |
| Desktop Best Practices | 10000 | 10000 | — |
| Desktop SEO | 9200 | 9200 | — |
| FCP | 2.65 s | 1.23 s | -1.41 s |
| LCP | 3.98 s | 2.90 s | -1.08 s |
| TBT | 116 ms | 32 ms | -84 ms |
| CLS | 0.000 | 0.000 | — |
| Desktop FCP | 646 ms | 561 ms | -85 ms |
| Desktop LCP | 964 ms | 901 ms | -63 ms |
| Desktop TBT | 7 ms | 0 ms | -7 ms |
| Desktop CLS | 0.000 | 0.000 | — |
| TTFB † | 926 ms | 888 ms | -38 ms |
| DNS † | 117 ms | 35 ms | -82 ms |
| TLS † | 12 ms | 24 ms | +12 ms |
| Connect † | 1 ms | 17 ms | +15 ms |
| Total † | 1.17 s | 1.04 s | -129 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
content-security-policy default-src 'self'; script-src 'self' 'nonce-kU1dY2Lsn1j1wcELSf6O1Q==' https:... → default-src 'self'; script-src 'self' 'nonce-iUgfo/0CmqLzwl/+7aRkFg==' https:...link </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...14 headers unchanged
Technology stack unchanged
12 technologies unchanged
Looking ahead
+3 ptsEstimate — actual results may vary (9 issues to fix)
Website improvement report — Costdown
September 5, 2026 → September 5, 2026
4
Resolved
2
New issues
7
Still remaining
Financial summary
Investment delivered
€170 in development time
Investment remaining
€730 to complete the remaining items
Ongoing risk
€0/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 94 (A) | 94 (A) | 0 |
| Performance | 97 (A+) | 97 (A+) | 0 |
| Security | 96 (A) | 96 (A) | 0 |
| Accessibility | 91 (A) | 91 (A) | 0 |
| SEO | 97 (A+) | 97 (A+) | 0 |
| Infrastructure | 87 (B) | 90 (A) | +3 |
| Compliance | 85 (B) | 85 (B) | 0 |
| Content | 95 (A) | 95 (A) | 0 |
| Sustainability | 98 (A+) | 98 (A+) | 0 |
Resolved (4)
https://costdown.org/: 700ms CPU time (Performance)
→ Page loads faster for users
Unattributable: 308ms CPU time (Performance)
→ Page loads faster for users
DNS resolution is slow (223 ms) (Infrastructure)
→ More reliable delivery
https://costdown.org/_next/static/chunks/1255-fc6c...: 539ms CPU time (Performance)
→ Page loads faster for users
Recommended next steps (9)
- Sprint 1
Both www and non-www versions serve content (Infrastructure)
- Sprint 2
1 render-blocking <script src> tag(s) without async/defer (Performance)
- Sprint 1
https://costdown.org/: 340ms CPU time (Performance)
- Sprint 2
All 1 images use legacy formats (JPEG/PNG/GIF) (Content)
- Sprint 2
Cross-Origin-Embedder-Policy header is missing (Security)
- Sprint 1
DMARC policy is none — monitoring only (Security)
- Sprint 1
Registrar lock is NOT enabled (Infrastructure)
- Sprint 1
No accessibility statement detected (Compliance)
- Sprint 2
1 images significantly larger than display size (Content)