Lighthouse Desktop

· 0 checks — Desktop Lighthouse audit -- Performance, Accessibility, Best Practices, and SEO category breakdown.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Detailed Report

Audit breakdown by category with detailed findings.

Performance

Insights

Remove large, duplicate JavaScript modules from bundles to reduce unnecessary bytes consumed by network activity.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile Baseline features, unless you know you must support older browsers. Learn why most sites can deploy ES6+ code without transpiling

Why this matters

Performance issues directly impact user engagement and conversion rates.

3rd party code can significantly impact load performance. Reduce and defer loading of 3rd party code to prioritize your page's content.

Why this matters

Performance issues directly impact user engagement and conversion rates.

A long cache lifetime can speed up repeat visits to your page. Learn more about caching.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Request	Cache TTL	Transfer Size
owasp.org/assets/images/content/are-you-a-member.png	14400.0 s	3.1 MiB
owasp.org/assets/images/content/interview-abh7as3.png	14400.0 s	1.7 MiB
owasp.org/assets/images/events/2026/appsec_vienna_2026_launch.jpg	14400.0 s	355.1 KiB
owasp.org/assets/fontawesome/fa-solid-900.woff2	14400.0 s	154.9 KiB
owasp.org/assets/images/content/basc.png	14400.0 s	147.2 KiB
owasp.org/assets/fontawesome/fa-brands-400.woff2	14400.0 s	116.7 KiB
owasp.org/assets/images/corp-member-logo/Adobe.png	14400.0 s	50.5 KiB
owasp.org/www--site-theme/assets/css/styles.css	14400.0 s	37.8 KiB
owasp.org/assets/images/content/ams-preso-new.jpg	14400.0 s	36.1 KiB
owasp.org/assets/font/ubuntu-regular.woff2	14400.0 s	30.7 KiB
owasp.org/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg	14400.0 s	30.5 KiB
owasp.org/www--site-theme/assets/js/jquery-3.7.1.min.js	14400.0 s	30.2 KiB
owasp.org/assets/font/ubuntu-medium.woff2	14400.0 s	28.2 KiB
owasp.org/assets/fontawesome/fa-regular-400.woff2	14400.0 s	25.1 KiB
owasp.org/assets/images/corp-member-logo/Zimperiumlogo_300x90px.jpeg	14400.0 s	24.0 KiB
www.google-analytics.com/analytics.js	7200.0 s	20.9 KiB
owasp.org/www--site-theme/assets/js/kjua.min.js	14400.0 s	12.3 KiB
owasp.org/assets/images/logo.png	14400.0 s	11.1 KiB
owasp.org/www--site-theme/assets/js/yaml.min.js	14400.0 s	10.8 KiB
owasp.org/assets/images/corp-member-logo/Checkmarxn-NewLogo2024.jpg	14400.0 s	8.9 KiB
owasp.org/assets/images/corp-member-logo/fortify__logo__normal2x_1.png	14400.0 s	8.1 KiB
owasp.org/assets/images/corp-member-logo/SecureCodeWarrior.png	14400.0 s	7.9 KiB
owasp.org/assets/images/corp-member-logo/SecureFlag.png	14400.0 s	7.0 KiB
owasp.org/assets/images/corp-member-logo/salesforce.png	14400.0 s	6.6 KiB
owasp.org/assets/images/corp-member-logo/promon_logo_dark.png	14400.0 s	5.6 KiB
owasp.org/assets/images/corp-member-logo/FujitsuLimited.png	14400.0 s	5.6 KiB
owasp.org/assets/images/corp-member-logo/GuardSquare.png	14400.0 s	5.4 KiB
owasp.org/www--site-theme/assets/js/js.cookie.min.js	14400.0 s	2.7 KiB
owasp.org/www--site-theme/assets/js/util.js	14400.0 s	1.2 KiB

Layout shifts occur when elements move absent any user interaction. Investigate the causes of layout shifts, such as elements being added, removed, or their fonts changing as the page loads.

Why this matters

Performance issues directly impact user engagement and conversion rates.

headings: [map[key:node label:Element subItemsHeading:map[key:extra] valueType:node] map[granularity:0.001 key:score label:Layout shift score subItemsHeading:map[key:cause valueType:text] valueType:numeric]]

items: [map[node:map[type:text value:Total] score:0.150123] map[node:map[boundingRect:map[bottom:1856 height:354 left:18 right:654 top:1501 width:636] lhId:page-15-SECTION nodeLabel:Bridging the Gap in Product Lifecycle Management: How OpenEoX and CLE Work Toge… path:1,HTML,1,BODY,3,MAIN,1,DIV,14,SECTION selector:body.base-grid > main > div.main-wrapper > section.homepage-blog snippet:<section class="homepage-blog"> type:node] score:0.122649 subItems:map[items:[map[cause:Unsized image element extra:map[boundingRect:map[bottom:1286 height:732 left:18 right:1320 top:554 width:1302] lhId:page-0-IMG nodeLabel:Are you an OWASP Member? path:1,HTML,1,BODY,3,MAIN,1,DIV,12,DIV,0,SECTION,0,DIV,0,P,0,A,0,IMG selector:div#ev0 > p > a > img snippet:<img src="/assets/images/content/are-you-a-member.png" alt="Are you an OWASP Member?" width="100%" height="auto"> type:node]]] type:subitems]] map[node:map[boundingRect:map[bottom:3732 height:3587 left:0 right:1350 top:145 width:1350] lhId:page-13-MAIN nodeLabel:Explore the world of cyber security Driven by volunteers, OWASP resources are … path:1,HTML,1,BODY,3,MAIN selector:body.base-grid > main snippet:<main role="main"> type:node] score:0.019362 subItems:map[items:[map[cause:Unsized image element extra:map[boundingRect:map[bottom:132 height:70 left:18 right:218 top:62 width:200] lhId:page-4-IMG nodeLabel:div.header-wrapper > nav.top-nav > a.desktop-logo > img path:1,HTML,1,BODY,2,HEADER,6,DIV,1,NAV,0,A,0,IMG selector:div.header-wrapper > nav.top-nav > a.desktop-logo > img snippet:<img src="https://owasp.org/assets/images/logo.png" alt=""> type:node]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/fontawesome/fa-solid-900.woff2]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/font/ubuntu-regular.woff2]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/fontawesome/fa-regular-400.woff2]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/font/ubuntu-medium.woff2]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/fontawesome/fa-brands-400.woff2]]] type:subitems]] map[node:map[boundingRect:map[bottom:1811 height:108 left:18 right:654 top:1703 width:636] lhId:page-10-P nodeLabel:OpenEoX and CLE are two emerging standards that work together to solve a critic… path:1,HTML,1,BODY,3,MAIN,1,DIV,14,SECTION,4,P selector:main > div.main-wrapper > section.homepage-blog > p snippet:<p> type:node] score:0.008112 subItems:map[items:[map[cause:Unsized image element extra:map[boundingRect:map[bottom:1688 height:46 left:554 right:644 top:1642 width:90] lhId:page-2-IMG nodeLabel:image path:1,HTML,1,BODY,3,MAIN,1,DIV,14,SECTION,1,A,0,IMG selector:div.main-wrapper > section.homepage-blog > a > img snippet:<img src="/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg" alt="image"> type:node]]] type:subitems]]]

Consider setting font-display to swap or optional to ensure text is consistently visible. swap can be further optimized to mitigate layout shifts with font metric overrides.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Est Savings
owasp.org/assets/fontawesome/fa-solid-900.woff2	75 ms
owasp.org/assets/font/ubuntu-regular.woff2	75 ms
owasp.org/assets/fontawesome/fa-regular-400.woff2	75 ms
owasp.org/assets/font/ubuntu-medium.woff2	65 ms
owasp.org/assets/fontawesome/fa-brands-400.woff2	65 ms
/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq...	45 ms

Reducing the download time of images can improve the perceived load time of the page and LCP. Learn more about optimizing image size

Why this matters

Performance issues directly impact user engagement and conversion rates.

	URL	Resource Size	Est Savings
Are you an OWASP Member? `div#ev0 > p > a > img`	owasp.org/assets/images/content/are-you-a-member.png	3.1 MiB	2.9 MiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/Adobe.png	50.2 KiB	50.1 KiB
image `div.main-wrapper > section.homepage-blog > a > img`	owasp.org/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg	28.6 KiB	27.9 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/Zimperiumlogo_300x90px.jpeg	23.7 KiB	23.2 KiB
div.header-wrapper > nav.top-nav > a.desktop-logo > img `div.header-wrapper > nav.top-nav > a.desktop-logo > img`	owasp.org/assets/images/logo.png	10.8 KiB	10.4 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/SecureCodeWarrior.png	7.6 KiB	7.0 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/Checkmarxn-NewLogo2024.jpg	7.0 KiB	6.5 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/fortify__logo__normal2x_1.png	6.2 KiB	5.9 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/GuardSquare.png	5.1 KiB	4.8 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/SecureFlag.png	5.1 KiB	4.6 KiB

Optimize LCP by making the LCP image discoverable from the HTML immediately, and avoiding lazy-loading

Why this matters

Performance issues directly impact user engagement and conversion rates.

lhId: page-0-IMG

nodeLabel: Are you an OWASP Member?

path: 1,HTML,1,BODY,3,MAIN,1,DIV,12,DIV,0,SECTION,0,DIV,0,P,0,A,0,IMG

selector: div#ev0 > p > a > img

snippet: <img src="/assets/images/content/are-you-a-member.png" alt="Are you an OWASP Member?" width="100%" height="auto">

Avoid chaining critical requests by reducing the length of chains, reducing the download size of resources, or deferring the download of unnecessary resources to improve page load.

Why this matters

Performance issues directly impact user engagement and conversion rates.

description: [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints help the browser establish a connection earlier in the page load, saving time when the first request for that origin is made. The following are the origins that the page preconnected to.

title: Preconnected origins

description: Add [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints to your most important origins, but try to use no more than 4.

title: Preconnect candidates

Requests are blocking the page's initial render, which may delay LCP. Deferring or inlining can move these network requests out of the critical path.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Transfer Size	Duration
owasp.org/www--site-theme/assets/js/jquery-3.7.1.min.js	30.2 KiB
owasp.org/www--site-theme/assets/js/util.js	1.2 KiB
owasp.org/www--site-theme/assets/js/js.cookie.min.js	2.7 KiB
owasp.org/www--site-theme/assets/js/kjua.min.js	12.3 KiB
owasp.org/www--site-theme/assets/css/styles.css	37.8 KiB	113 ms
owasp.org/www--site-theme/assets/js/yaml.min.js	10.8 KiB

These insights are also available in the Chrome DevTools Performance Panel - record a trace to view more detailed information.

These are the largest layout shifts observed on the page. Each table item represents a single layout shift, and shows the element that shifted the most. Below each item are possible root causes that led to the layout shift. Some of these layout shifts may not be included in the CLS metric value due to windowing. Learn how to improve CLS

Why this matters

Performance issues directly impact user engagement and conversion rates.

Element	Layout shift score
Bridging the Gap in Product Lifecycle Management: How OpenEoX and CLE Work Toge… `body.base-grid > main > div.main-wrapper > section.homepage-blog`	0.123
Explore the world of cyber security Driven by volunteers, OWASP resources are … `body.base-grid > main`	0.019
OpenEoX and CLE are two emerging standards that work together to solve a critic… `main > div.main-wrapper > section.homepage-blog > p`	0.008

Time to Interactive is the amount of time it takes for the page to become fully interactive. Learn more about the Time to Interactive metric.

Why this matters

Performance issues directly impact user engagement and conversion rates.

TTI

The maximum potential First Input Delay that your users could experience is the duration of the longest task. Learn more about the Maximum Potential First Input Delay metric.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Diagnostics

Reduce unused rules from stylesheets and defer CSS not used for above-the-fold content to decrease bytes consumed by network activity. Learn how to reduce unused CSS.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 60 ms 33.8 KiB

URL	Transfer Size	Est Savings
owasp.org/www--site-theme/assets/css/styles.css	35.9 KiB	33.8 KiB

Large network payloads cost users real money and are highly correlated with long load times. Learn how to reduce payload sizes.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Transfer Size
owasp.org/assets/images/content/are-you-a-member.png	3.1 MiB
owasp.org/assets/images/content/interview-abh7as3.png	1.7 MiB
owasp.org/assets/images/events/2026/appsec_vienna_2026_launch.jpg	355.1 KiB
/_/mss/boq-calendar/_/js/k=boq-calendar.CalendarEmbed.en_...	189.7 KiB
owasp.org/assets/fontawesome/fa-solid-900.woff2	154.9 KiB
owasp.org/assets/images/content/basc.png	147.2 KiB
owasp.org/assets/fontawesome/fa-brands-400.woff2	116.7 KiB
/_/scs/abc-static/_/js/k=gapi.lb.en.PJsh2cctCQI.O/m=clien...	108.3 KiB
/_/mss/boq-calendar/_/js/k=boq-calendar.CalendarEmbed.en_...	72.6 KiB
/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq...	51.1 KiB

Set an explicit width and height on image elements to reduce layout shifts and improve CLS. Learn how to set image dimensions

Why this matters

Performance issues directly impact user engagement and conversion rates.

	URL
Are you an OWASP Member? `div#ev0 > p > a > img`	owasp.org/assets/images/content/are-you-a-member.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/Adobe.png
div.header-wrapper > nav.top-nav > a.desktop-logo > img `div.header-wrapper > nav.top-nav > a.desktop-logo > img`	owasp.org/assets/images/logo.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/Checkmarxn-NewLogo2024.jpg
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/fortify__logo__normal2x_1.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/FujitsuLimited.png
image `div.member-wrapper > section.member-spotlight > a > img`	owasp.org/assets/images/corp-member-logo/salesforce.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/SecureCodeWarrior.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/SecureFlag.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/Zimperiumlogo_300x90px.jpeg
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/promon_logo_dark.png
image `div.main-wrapper > section.homepage-blog > a > img`	owasp.org/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/GuardSquare.png

More information about the performance of your application. These numbers don't directly affect the Performance score.

●Document request latency

●Optimize DOM size

●Forced reflow

●LCP breakdown

●Modern HTTP

●Optimize viewport for mobile

●Minify CSS

●Minify JavaScript

●Reduce unused JavaScript

●JavaScript execution time 0.4 s

●Minimizes main-thread work 0.6 s

●Avoid long main-thread tasks 3 long tasks found

●Page didn't prevent back/forward cache restoration

●Network Requests

●Network Round Trip Times 20 ms

●Server Backend Latencies 450 ms

●Tasks

●Diagnostics

●Metrics

●Screenshot Thumbnails

●Final Screenshot

●Script Treemap Data

●Resources Summary

●Avoid multiple page redirects

●Initial server response time was short Root document took 50 ms

○INP breakdown

○User Timing marks and measures

○Avoid non-composited animations

Accessibility

These checks highlight opportunities to improve the accessibility of your web app. Automatic detection can only detect a subset of issues and does not guarantee the accessibility of your web app, so manual testing is also encouraged.

Names and labels

When a button doesn't have an accessible name, screen readers announce it as "button", making it unusable for users who rely on screen readers. Learn how to make buttons more accessible.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
div > form > div.search-div > button#search-button `div > form > div.search-div > button#search-button`

Screen reader users rely on frame titles to describe the contents of frames. Learn more about frame titles.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
div.main-wrapper > div > section#upcoming > iframe `div.main-wrapper > div > section#upcoming > iframe`

Link text (and alternate text for images, when used as links) that is discernible, unique, and focusable improves the navigation experience for screen reader users. Learn how to make links accessible.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
div#midmenu > ul > li > a `div#midmenu > ul > li > a`

These are opportunities to improve the semantics of the controls in your application. This may enhance the experience for users of assistive technology, like a screen reader.

Contrast

Low-contrast text is difficult or impossible for many users to read. Learn how to provide sufficient color contrast.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
Donate Now! `header > div#banner > p > a`
Donate `nav.top-nav > div.interactive-wrapper > div.nav-button > a.cta-button`
Join `nav.top-nav > div.interactive-wrapper > div.nav-button > a.cta-button`
More details `section#featured_events > div#ev0 > p > a`
Jordan Harband and Przemyslaw (Rogue) Roguski `div.main-wrapper > section.homepage-blog > p.author > a`
, April 15, 2026 `div.main-wrapper > section.homepage-blog > p.author > span`
...read more `main > div.main-wrapper > section.homepage-blog > a`
Start a project `div > div.idea-container > div.start > a.cta-button`
Announcing the Retirement of OWASP Meetup Platform `section.news-events > ul > li > a`
, January 13, 2026 `section.news-events > ul > li > span`
The OWASP Foundation appoints Stacey Ebbs as Communications & Marketing Manager `section.news-events > ul > li > a`
, November 19, 2025 `section.news-events > ul > li > span`
OWASP Certified Secure Software Developer `section.news-events > ul > li > a`
, October 3, 2025 `section.news-events > ul > li > span`
GSoC 2025 Recap `section.news-events > ul > li > a`
, October 1, 2025 `section.news-events > ul > li > span`
OWASP Global AppSec EU 2026 - Vienna, Austria `section.news-events > ul > li > a`
, June 22-26, 2026 `section.news-events > ul > li > span`
OWASP Global AppSec USA 2026 - San Francisco, CA `section.news-events > ul > li > a`
, November 2-6, 2026 `section.news-events > ul > li > span`
OWASP Global AppSec EU 2027 - Vienna, Austria `section.news-events > ul > li > a`
, June 21-25, 2027 `section.news-events > ul > li > span`
OWASP Global AppSec USA 2027 - Atlanta, GA `section.news-events > ul > li > a`
, September 20-24, 2027 `section.news-events > ul > li > span`
Edit on GitHub `div.repo > a > div.reset-3c756112--menuItemIcon-206eb252 > span`
Become a corporate supporter `div.member-wrapper > section.member-list > div.member-cta > a.callout-link`
General Disclaimer `footer > section.footer-wrapper > p.disclaimer > a`

These are opportunities to improve the legibility of your content.

Best practices

Touch targets with sufficient size and spacing help users who may have difficulty targeting small controls to activate the targets. Learn more about touch targets.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
div > form > div.search-div > button#search-button `div > form > div.search-div > button#search-button`

These items highlight common accessibility best practices.

○Interactive controls are keyboard focusable

○Interactive elements indicate their purpose and state

○The page has a logical tab order

○Visual order on the page follows DOM order

○User focus is not accidentally trapped in a region

○The user's focus is directed to new content added to the page

○HTML5 landmark elements are used to improve navigation

○Offscreen content is hidden from assistive technology

○Custom controls have associated labels

○Custom controls have ARIA roles

●`[aria-*]` attributes match their roles

●`[aria-hidden="true"]` is not present on the document `<body>`

●`[role]`s have all required `[aria-*]` attributes

●`[role]` values are valid

●`[aria-*]` attributes have valid values

●`[aria-*]` attributes are valid and not misspelled

●Image elements have `[alt]` attributes

●Form elements have associated labels

●`[user-scalable="no"]` is not used in the `<meta name="viewport">` element and the `[maximum-scale]` attribute is not less than 5.

●ARIA attributes are used as specified for the element's role

●`[aria-hidden="true"]` elements do not contain focusable descendents

●Elements use only permitted ARIA attributes

●Document has a `<title>` element

●`<html>` element has a `[lang]` attribute

●`<html>` element has a valid value for its `[lang]` attribute

●Links are distinguishable without relying on color.

●Lists contain only `<li>` elements and script supporting elements (`<script>` and `<template>`).

●List items (`<li>`) are contained within `<ul>`, `<ol>` or `<menu>` parent elements

●Heading elements appear in a sequentially-descending order

●Document has a main landmark.

●Deprecated ARIA roles were not used

●Uses ARIA roles only on compatible elements

●Identical links have the same purpose.

○`[accesskey]` values are unique

○`button`, `link`, and `menuitem` elements have accessible names

○Elements with `role="dialog"` or `role="alertdialog"` have accessible names.

○ARIA input fields have accessible names

○ARIA `meter` elements have accessible names

○ARIA `progressbar` elements have accessible names

○Elements with an ARIA `[role]` that require children to contain a specific `[role]` have all required children.

○`[role]`s are contained by their required parent element

○Elements with the `role=text` attribute do not have focusable descendents.

○ARIA toggle fields have accessible names

○ARIA `tooltip` elements have accessible names

○ARIA `treeitem` elements have accessible names

○The page contains a heading, skip link, or landmark region

○`<dl>`'s contain only properly-ordered `<dt>` and `<dd>` groups, `<script>`, `<template>` or `<div>` elements.

○Definition list items are wrapped in `<dl>` elements

○ARIA IDs are unique

○No form fields have multiple labels

○`<html>` element has an `[xml:lang]` attribute with the same base language as the `[lang]` attribute.

○Input buttons have discernible text.

○`<input type="image">` elements have `[alt]` text

○The document does not use `<meta http-equiv="refresh">`

○`<object>` elements have alternate text

○Select elements have associated label elements.

○Skip links are focusable.

○No element has a `[tabindex]` value greater than 0

○Cells in a `<table>` element that use the `[headers]` attribute refer to table cells within the same table.

○`<th>` elements and elements with `[role="columnheader"/"rowheader"]` have data cells they describe.

○`[lang]` attributes have a valid value

○`<video>` elements contain a `<track>` element with `[kind="captions"]`

○Tables have different content in the summary attribute and `<caption>`.

○All heading elements contain content.

○Image elements do not have `[alt]` attributes that are redundant text.

○Elements with visible text labels have matching accessible names.

○Tables use `<caption>` instead of cells with the `[colspan]` attribute to indicate a caption.

○`<td>` elements in a large `<table>` have one or more table headers.

Best Practices

User Experience

Image display dimensions should match natural aspect ratio. Learn more about image aspect ratio.

Why this matters

Performance issues directly impact user engagement and conversion rates.

	URL	Aspect Ratio (Displayed)	Aspect Ratio (Actual)
7A Security Interview `div#ev2 > p > a > img`	owasp.org/assets/images/content/interview-abh7as3.png	100 x 1080 (0.09)	1920 x 1080 (1.78)
OWASP Global Appsec EU Conference 2026 `div#ev3 > p > a > img`	owasp.org/assets/images/events/2026/appsec_vienna_2026_launch.jpg	100 x 675 (0.15)	1200 x 675 (1.78)
BASC 2026 `div#ev1 > p > a > img`	owasp.org/assets/images/content/basc.png	100 x 470 (0.21)	940 x 470 (2.00)

General

Deprecated APIs will eventually be removed from the browser. Learn more about deprecated APIs.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Deprecation / Warning	Source
Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check https://xhr.spec.whatwg.org/.	owasp.org/www--site-theme/assets/js/yaml.min.js

Errors logged to the console indicate unresolved problems. They can come from network request failures and other browser concerns. Learn more about this errors in console diagnostic audit

Why this matters

Performance issues directly impact user engagement and conversion rates.

Description
`Framing 'https://calendar.google.com/' violates the following report-only Content Security Policy directive: "frame-ancestors 'self'". The violation has been logged, but no further action has been taken.`

Issues logged to the `Issues` panel in Chrome Devtools indicate unresolved problems. They can come from network request failures, insufficient security controls, and other browser concerns. Open up the Issues panel in Chrome DevTools for more details on each issue.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Issue type
Content security policy

●Uses HTTPS

●Avoids third-party cookies

●Allows users to paste into input fields

●Avoids requesting the geolocation permission on page load

●Avoids requesting the notification permission on page load

●Serves images with appropriate resolution

●Page has the HTML doctype

●Properly defines charset

●Ensure CSP is effective against XSS attacks

●Use a strong HSTS policy

●Ensure proper origin isolation with COOP

●Mitigate DOM-based XSS with Trusted Types

●Detected JavaScript libraries

●Page has valid source maps

○Redirects HTTP traffic to HTTPS

○Mitigate clickjacking with XFO or CSP

SEO

These checks ensure that your page is following basic search engine optimization advice. There are many additional factors Lighthouse does not score here that may affect your search ranking, including performance on Core Web Vitals. Learn more about Google Search Essentials.

Crawling and Indexing

Search engines may use `href` attributes on links to crawl websites. Ensure that the `href` attribute of anchor elements links to an appropriate destination, so more pages of the site can be discovered. Learn how to make links crawlable

Why this matters

Performance issues directly impact user engagement and conversion rates.

Uncrawlable Link
Accept `div.header-wrapper > div#disclaimer-container > div#disclaimer > a.disclaimerOK`

To appear in search results, crawlers need access to your app.

○Structured data is valid

●Page isn’t blocked from indexing

●Document has a `<title>` element

●Document has a meta description

●Page has successful HTTP status code

●Links have descriptive text

●robots.txt is valid

●Image elements have `[alt]` attributes

●Document has a valid `hreflang`

●Document has a valid `rel=canonical`