Lighthouse Mobile

· 0 checks — Mobile Lighthouse audit -- Performance, Accessibility, Best Practices, and SEO category breakdown.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Detailed Report

Audit breakdown by category with detailed findings.

Performance

Insights

Remove large, duplicate JavaScript modules from bundles to reduce unnecessary bytes consumed by network activity.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile Baseline features, unless you know you must support older browsers. Learn why most sites can deploy ES6+ code without transpiling

Why this matters

Performance issues directly impact user engagement and conversion rates.

3rd party code can significantly impact load performance. Reduce and defer loading of 3rd party code to prioritize your page's content.

Why this matters

Performance issues directly impact user engagement and conversion rates.

A long cache lifetime can speed up repeat visits to your page. Learn more about caching.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Request	Cache TTL	Transfer Size
owasp.org/assets/images/content/are-you-a-member.png	14400.0 s	3.1 MiB
owasp.org/assets/images/content/interview-abh7as3.png	14400.0 s	1.7 MiB
owasp.org/assets/images/events/2026/appsec_vienna_2026_launch.jpg	14400.0 s	356.6 KiB
owasp.org/assets/fontawesome/fa-solid-900.woff2	14400.0 s	153.3 KiB
owasp.org/assets/images/content/basc.png	14400.0 s	147.2 KiB
owasp.org/assets/fontawesome/fa-brands-400.woff2	14400.0 s	116.6 KiB
owasp.org/assets/images/corp-member-logo/Adobe.png	14400.0 s	52.1 KiB
owasp.org/www--site-theme/assets/css/styles.css	14400.0 s	37.8 KiB
owasp.org/assets/images/content/ams-preso-new.jpg	14400.0 s	36.1 KiB
owasp.org/assets/images/corp-member-logo/UnboundSecurity.png	14400.0 s	31.3 KiB
owasp.org/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg	14400.0 s	30.5 KiB
owasp.org/www--site-theme/assets/js/jquery-3.7.1.min.js	14400.0 s	30.3 KiB
owasp.org/assets/font/ubuntu-regular.woff2	14400.0 s	29.1 KiB
owasp.org/assets/font/ubuntu-medium.woff2	14400.0 s	28.3 KiB
owasp.org/assets/fontawesome/fa-regular-400.woff2	14400.0 s	26.8 KiB
www.google-analytics.com/analytics.js	7200.0 s	20.9 KiB
/assets/images/corp-member-logo/mindsetters_logo_transpar...	14400.0 s	21.3 KiB
owasp.org/assets/images/corp-member-logo/blended_logoowasp.png	14400.0 s	15.9 KiB
owasp.org/assets/images/logo.png	14400.0 s	12.7 KiB
owasp.org/www--site-theme/assets/js/yaml.min.js	14400.0 s	12.4 KiB
owasp.org/www--site-theme/assets/js/kjua.min.js	14400.0 s	12.3 KiB
owasp.org/assets/images/corp-member-logo/PhoenixSecurity.svg	14400.0 s	11.8 KiB
owasp.org/assets/images/corp-member-logo/sq1_logo_dark_version.png	14400.0 s	9.3 KiB
owasp.org/assets/images/corp-member-logo/SecureFlag.png	14400.0 s	7.0 KiB
owasp.org/assets/images/corp-member-logo/fortify__logo__normal2x_1.png	14400.0 s	6.5 KiB
owasp.org/assets/images/corp-member-logo/invicti_logo_300x90_black.png	14400.0 s	6.4 KiB
owasp.org/assets/images/corp-member-logo/GuardSquare.png	14400.0 s	5.4 KiB
owasp.org/www--site-theme/assets/js/util.js	14400.0 s	1.3 KiB
owasp.org/www--site-theme/assets/js/js.cookie.min.js	14400.0 s	1.2 KiB

Layout shifts occur when elements move absent any user interaction. Investigate the causes of layout shifts, such as elements being added, removed, or their fonts changing as the page loads.

Why this matters

Performance issues directly impact user engagement and conversion rates.

headings: [map[key:node label:Element subItemsHeading:map[key:extra] valueType:node] map[granularity:0.001 key:score label:Layout shift score subItemsHeading:map[key:cause valueType:text] valueType:numeric]]

items: [map[node:map[type:text value:Total] score:0.226439] map[node:map[boundingRect:map[bottom:4609 height:4345 left:0 right:412 top:264 width:412] lhId:page-12-MAIN nodeLabel:Explore the world of cyber security Driven by volunteers, OWASP resources are … path:1,HTML,1,BODY,3,MAIN selector:body.base-grid > main snippet:<main role="main"> type:node] score:0.126444 subItems:map[items:[map[cause:Unsized image element extra:map[boundingRect:map[bottom:205 height:52 left:138 right:288 top:153 width:150] lhId:page-6-IMG nodeLabel:OWASP logo path:1,HTML,1,BODY,2,HEADER,6,DIV,0,NAV,1,A,0,IMG selector:div.header-wrapper > nav.alt-nav > a.alt-logo > img snippet:<img src="https://owasp.org/assets/images/logo.png" alt="OWASP logo"> type:node]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/fontawesome/fa-solid-900.woff2]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/font/ubuntu-regular.woff2]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/fontawesome/fa-regular-400.woff2]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/fontawesome/fa-brands-400.woff2]]] type:subitems]] map[node:map[boundingRect:map[bottom:1745 height:482 left:18 right:382 top:1264 width:364] lhId:page-15-SECTION nodeLabel:Bridging the Gap in Product Lifecycle Management: How OpenEoX and CLE Work Toge… path:1,HTML,1,BODY,3,MAIN,1,DIV,14,SECTION selector:body.base-grid > main > div.main-wrapper > section.homepage-blog snippet:<section class="homepage-blog"> type:node] score:0.095556 subItems:map[items:[map[cause:Unsized image element extra:map[boundingRect:map[bottom:1479 height:46 left:282 right:372 top:1433 width:90] lhId:page-3-IMG nodeLabel:image path:1,HTML,1,BODY,3,MAIN,1,DIV,14,SECTION,1,A,0,IMG selector:div.main-wrapper > section.homepage-blog > a > img snippet:<img src="/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg" alt="image"> type:node]] map[cause:Web font extra:map[type:url value:https://owasp.org/assets/font/ubuntu-medium.woff2]]] type:subitems]] map[node:map[boundingRect:map[bottom:1507 height:20 left:98 right:218 top:1487 width:120] lhId:page-10-SPAN nodeLabel:, April 15, 2026 path:1,HTML,1,BODY,3,MAIN,1,DIV,14,SECTION,2,P,1,SPAN selector:div.main-wrapper > section.homepage-blog > p.author > span snippet:<span style="color:#7C7C7C"> type:node] score:0.004439 subItems:map[items:[map[cause:Unsized image element extra:map[boundingRect:map[bottom:1479 height:46 left:282 right:372 top:1433 width:90] lhId:page-3-IMG nodeLabel:image path:1,HTML,1,BODY,3,MAIN,1,DIV,14,SECTION,1,A,0,IMG selector:div.main-wrapper > section.homepage-blog > a > img snippet:<img src="/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg" alt="image"> type:node]]] type:subitems]]]

Consider setting font-display to swap or optional to ensure text is consistently visible. swap can be further optimized to mitigate layout shifts with font metric overrides.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Est Savings
owasp.org/assets/font/ubuntu-medium.woff2	130 ms
owasp.org/assets/fontawesome/fa-solid-900.woff2	90 ms
owasp.org/assets/font/ubuntu-regular.woff2	85 ms
owasp.org/assets/fontawesome/fa-regular-400.woff2	85 ms
owasp.org/assets/fontawesome/fa-brands-400.woff2	85 ms
/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq...	45 ms

Reducing the download time of images can improve the perceived load time of the page and LCP. Learn more about optimizing image size

Why this matters

Performance issues directly impact user engagement and conversion rates.

	URL	Resource Size	Est Savings
Are you an OWASP Member? `div#ev0 > p > a > img`	owasp.org/assets/images/content/are-you-a-member.png	3.1 MiB	3.0 MiB
image `div.member-wrapper > section.member-spotlight > a > img`	owasp.org/assets/images/corp-member-logo/Adobe.png	50.2 KiB	49.5 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/UnboundSecurity.png	29.4 KiB	28.7 KiB
image `div.main-wrapper > section.homepage-blog > a > img`	owasp.org/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg	28.6 KiB	26.6 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	/assets/images/corp-member-logo/mindsetters_logo_transpar...	21.0 KiB	19.3 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/blended_logoowasp.png	15.6 KiB	14.0 KiB
OWASP logo `div.header-wrapper > nav.alt-nav > a.alt-logo > img`	owasp.org/assets/images/logo.png	10.8 KiB	10.1 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/sq1_logo_dark_version.png	9.0 KiB	7.4 KiB
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/fortify__logo__normal2x_1.png	6.2 KiB	5.3 KiB

Avoid chaining critical requests by reducing the length of chains, reducing the download size of resources, or deferring the download of unnecessary resources to improve page load.

Why this matters

Performance issues directly impact user engagement and conversion rates.

description: [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints help the browser establish a connection earlier in the page load, saving time when the first request for that origin is made. The following are the origins that the page preconnected to.

title: Preconnected origins

description: Add [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints to your most important origins, but try to use no more than 4.

title: Preconnect candidates

value: No additional origins are good candidates for preconnecting

Requests are blocking the page's initial render, which may delay LCP. Deferring or inlining can move these network requests out of the critical path.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Transfer Size	Duration
owasp.org/www--site-theme/assets/js/kjua.min.js	12.3 KiB
owasp.org/www--site-theme/assets/css/styles.css	37.8 KiB	333 ms
owasp.org/www--site-theme/assets/js/js.cookie.min.js	1.2 KiB
owasp.org/www--site-theme/assets/js/jquery-3.7.1.min.js	30.3 KiB	167 ms
owasp.org/www--site-theme/assets/js/util.js	1.3 KiB
owasp.org/www--site-theme/assets/js/yaml.min.js	12.4 KiB	167 ms

These insights are also available in the Chrome DevTools Performance Panel - record a trace to view more detailed information.

These are the largest layout shifts observed on the page. Each table item represents a single layout shift, and shows the element that shifted the most. Below each item are possible root causes that led to the layout shift. Some of these layout shifts may not be included in the CLS metric value due to windowing. Learn how to improve CLS

Why this matters

Performance issues directly impact user engagement and conversion rates.

Element	Layout shift score
Explore the world of cyber security Driven by volunteers, OWASP resources are … `body.base-grid > main`	0.126
Bridging the Gap in Product Lifecycle Management: How OpenEoX and CLE Work Toge… `body.base-grid > main > div.main-wrapper > section.homepage-blog`	0.096
, April 15, 2026 `div.main-wrapper > section.homepage-blog > p.author > span`	0.004

The maximum potential First Input Delay that your users could experience is the duration of the longest task. Learn more about the Maximum Potential First Input Delay metric.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Time to Interactive is the amount of time it takes for the page to become fully interactive. Learn more about the Time to Interactive metric.

Why this matters

Performance issues directly impact user engagement and conversion rates.

TTI

Diagnostics

Reduce unused rules from stylesheets and defer CSS not used for above-the-fold content to decrease bytes consumed by network activity. Learn how to reduce unused CSS.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 330 ms 33.5 KiB

URL	Transfer Size	Est Savings
owasp.org/www--site-theme/assets/css/styles.css	35.9 KiB	33.5 KiB

Large network payloads cost users real money and are highly correlated with long load times. Learn how to reduce payload sizes.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URL	Transfer Size
owasp.org/assets/images/content/are-you-a-member.png	3.1 MiB
owasp.org/assets/images/content/interview-abh7as3.png	1.7 MiB
owasp.org/assets/images/events/2026/appsec_vienna_2026_launch.jpg	356.6 KiB
/_/mss/boq-calendar/_/js/k=boq-calendar.CalendarEmbed.en_...	189.7 KiB
owasp.org/assets/fontawesome/fa-solid-900.woff2	153.3 KiB
owasp.org/assets/images/content/basc.png	147.2 KiB
owasp.org/assets/fontawesome/fa-brands-400.woff2	116.6 KiB
/_/scs/abc-static/_/js/k=gapi.lb.en.PJsh2cctCQI.O/m=clien...	108.3 KiB
/_/mss/boq-calendar/_/js/k=boq-calendar.CalendarEmbed.en_...	72.6 KiB
owasp.org/assets/images/corp-member-logo/Adobe.png	52.1 KiB

Set an explicit width and height on image elements to reduce layout shifts and improve CLS. Learn how to set image dimensions

Why this matters

Performance issues directly impact user engagement and conversion rates.

	URL
Are you an OWASP Member? `div#ev0 > p > a > img`	owasp.org/assets/images/content/are-you-a-member.png
image `div.member-wrapper > section.member-spotlight > a > img`	owasp.org/assets/images/corp-member-logo/Adobe.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/PhoenixSecurity.svg
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/UnboundSecurity.png
OWASP logo `div.header-wrapper > nav.alt-nav > a.alt-logo > img`	owasp.org/assets/images/logo.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/fortify__logo__normal2x_1.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/SecureFlag.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/sq1_logo_dark_version.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/blended_logoowasp.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/invicti_logo_300x90_black.png
image `section.member-list > div#corp_member_div > a.member-logo > img`	/assets/images/corp-member-logo/mindsetters_logo_transpar...
image `div.main-wrapper > section.homepage-blog > a > img`	owasp.org/assets/images/people/Jordan_Harband_and_Przemyslaw_Roguski.jpg
image `section.member-list > div#corp_member_div > a.member-logo > img`	owasp.org/assets/images/corp-member-logo/GuardSquare.png

More information about the performance of your application. These numbers don't directly affect the Performance score.

●Document request latency

●Optimize DOM size

●Forced reflow

●LCP breakdown

●Modern HTTP

●Optimize viewport for mobile

●Minify CSS

●Minify JavaScript

●Reduce unused JavaScript

●JavaScript execution time 0.8 s

●Minimizes main-thread work 1.4 s

●Avoid long main-thread tasks 4 long tasks found

●Page didn't prevent back/forward cache restoration

●Network Requests

●Network Round Trip Times 20 ms

●Server Backend Latencies 400 ms

●Tasks

●Diagnostics

●Metrics

●Screenshot Thumbnails

●Final Screenshot

●Script Treemap Data

●Resources Summary

●Avoid multiple page redirects

●Initial server response time was short Root document took 40 ms

○INP breakdown

○LCP request discovery

○User Timing marks and measures

○Avoid non-composited animations

Accessibility

These checks highlight opportunities to improve the accessibility of your web app. Automatic detection can only detect a subset of issues and does not guarantee the accessibility of your web app, so manual testing is also encouraged.

ARIA

Focusable descendents within an `[aria-hidden="true"]` element prevent those interactive elements from being available to users of assistive technologies like screen readers. Learn how `aria-hidden` affects focusable elements.

Why this matters

Informational: a Permissions-Policy directive showing feature -> allowed origins.

Source: MDN Permissions-Policy

Failing Elements
header > div.header-wrapper > nav.alt-nav > a.menu-toggler `header > div.header-wrapper > nav.alt-nav > a.menu-toggler`
nav.alt-nav > ul.mobile-menu > li > a.menu-toggler `nav.alt-nav > ul.mobile-menu > li > a.menu-toggler`

These are opportunities to improve the usage of ARIA in your application which may enhance the experience for users of assistive technology, like a screen reader.

Names and labels

When a button doesn't have an accessible name, screen readers announce it as "button", making it unusable for users who rely on screen readers. Learn how to make buttons more accessible.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
div > form > div.search-div > button#search-button `div > form > div.search-div > button#search-button`

Screen reader users rely on frame titles to describe the contents of frames. Learn more about frame titles.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
div.main-wrapper > div > section#upcoming > iframe `div.main-wrapper > div > section#upcoming > iframe`

These are opportunities to improve the semantics of the controls in your application. This may enhance the experience for users of assistive technology, like a screen reader.

Contrast

Low-contrast text is difficult or impossible for many users to read. Learn how to provide sufficient color contrast.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
Donate Now! `header > div#banner > p > a`
Donate `header > div.mobile > div > a.cta-button`
Join `header > div.mobile > div > a.cta-button`
More details `section#featured_events > div#ev0 > p > a`
Jordan Harband and Przemyslaw (Rogue) Roguski `div.main-wrapper > section.homepage-blog > p.author > a`
, April 15, 2026 `div.main-wrapper > section.homepage-blog > p.author > span`
...read more `main > div.main-wrapper > section.homepage-blog > a`
Start a project `div > div.idea-container > div.start > a.cta-button`
Announcing the Retirement of OWASP Meetup Platform `section.news-events > ul > li > a`
, January 13, 2026 `section.news-events > ul > li > span`
The OWASP Foundation appoints Stacey Ebbs as Communications & Marketing Manager `section.news-events > ul > li > a`
, November 19, 2025 `section.news-events > ul > li > span`
OWASP Certified Secure Software Developer `section.news-events > ul > li > a`
, October 3, 2025 `section.news-events > ul > li > span`
GSoC 2025 Recap `section.news-events > ul > li > a`
, October 1, 2025 `section.news-events > ul > li > span`
OWASP Global AppSec EU 2026 - Vienna, Austria `section.news-events > ul > li > a`
, June 22-26, 2026 `section.news-events > ul > li > span`
OWASP Global AppSec USA 2026 - San Francisco, CA `section.news-events > ul > li > a`
, November 2-6, 2026 `section.news-events > ul > li > span`
OWASP Global AppSec EU 2027 - Vienna, Austria `section.news-events > ul > li > a`
, June 21-25, 2027 `section.news-events > ul > li > span`
OWASP Global AppSec USA 2027 - Atlanta, GA `section.news-events > ul > li > a`
, September 20-24, 2027 `section.news-events > ul > li > span`
Edit on GitHub `div.repo > a > div.reset-3c756112--menuItemIcon-206eb252 > span`
Become a corporate supporter `div.member-wrapper > section.member-list > div.member-cta > a.callout-link`
General Disclaimer `footer > section.footer-wrapper > p.disclaimer > a`

These are opportunities to improve the legibility of your content.

Tables and lists

Screen readers require list items (`<li>`) to be contained within a parent `<ul>`, `<ol>` or `<menu>` to be announced properly. Learn more about proper list structure.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
div.header-wrapper > nav.alt-nav > ul.mobile-menu > li `div.header-wrapper > nav.alt-nav > ul.mobile-menu > li`
search input `div.header-wrapper > nav.alt-nav > ul.mobile-menu > li`
MAKE A DONATION `div.header-wrapper > nav.alt-nav > ul.mobile-menu > li`
BECOME A MEMBER `div.header-wrapper > nav.alt-nav > ul.mobile-menu > li`
SITEMAP `div.header-wrapper > nav.alt-nav > ul.mobile-menu > li`

These are opportunities to improve the experience of reading tabular or list data using assistive technology, like a screen reader.

Best practices

Touch targets with sufficient size and spacing help users who may have difficulty targeting small controls to activate the targets. Learn more about touch targets.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Failing Elements
div > form > div.search-div > button#search-button `div > form > div.search-div > button#search-button`

These items highlight common accessibility best practices.

○Interactive controls are keyboard focusable

○Interactive elements indicate their purpose and state

○The page has a logical tab order

○Visual order on the page follows DOM order

○User focus is not accidentally trapped in a region

○The user's focus is directed to new content added to the page

○HTML5 landmark elements are used to improve navigation

○Offscreen content is hidden from assistive technology

○Custom controls have associated labels

○Custom controls have ARIA roles

●`[aria-*]` attributes match their roles

●`[aria-hidden="true"]` is not present on the document `<body>`

●`[role]`s have all required `[aria-*]` attributes

●`[role]` values are valid

●`[aria-*]` attributes have valid values

●`[aria-*]` attributes are valid and not misspelled

●Image elements have `[alt]` attributes

●Form elements have associated labels

●`[user-scalable="no"]` is not used in the `<meta name="viewport">` element and the `[maximum-scale]` attribute is not less than 5.

●ARIA attributes are used as specified for the element's role

●Elements use only permitted ARIA attributes

●Document has a `<title>` element

●`<html>` element has a `[lang]` attribute

●`<html>` element has a valid value for its `[lang]` attribute

●Links are distinguishable without relying on color.

●Links have a discernible name

●Lists contain only `<li>` elements and script supporting elements (`<script>` and `<template>`).

●Heading elements appear in a sequentially-descending order

●Document has a main landmark.

●Deprecated ARIA roles were not used

●Uses ARIA roles only on compatible elements

●Identical links have the same purpose.

○`[accesskey]` values are unique

○`button`, `link`, and `menuitem` elements have accessible names

○Elements with `role="dialog"` or `role="alertdialog"` have accessible names.

○ARIA input fields have accessible names

○ARIA `meter` elements have accessible names

○ARIA `progressbar` elements have accessible names

○Elements with an ARIA `[role]` that require children to contain a specific `[role]` have all required children.

○`[role]`s are contained by their required parent element

○Elements with the `role=text` attribute do not have focusable descendents.

○ARIA toggle fields have accessible names

○ARIA `tooltip` elements have accessible names

○ARIA `treeitem` elements have accessible names

○The page contains a heading, skip link, or landmark region

○`<dl>`'s contain only properly-ordered `<dt>` and `<dd>` groups, `<script>`, `<template>` or `<div>` elements.

○Definition list items are wrapped in `<dl>` elements

○ARIA IDs are unique

○No form fields have multiple labels

○`<html>` element has an `[xml:lang]` attribute with the same base language as the `[lang]` attribute.

○Input buttons have discernible text.

○`<input type="image">` elements have `[alt]` text

○The document does not use `<meta http-equiv="refresh">`

○`<object>` elements have alternate text

○Select elements have associated label elements.

○Skip links are focusable.

○No element has a `[tabindex]` value greater than 0

○Cells in a `<table>` element that use the `[headers]` attribute refer to table cells within the same table.

○`<th>` elements and elements with `[role="columnheader"/"rowheader"]` have data cells they describe.

○`[lang]` attributes have a valid value

○`<video>` elements contain a `<track>` element with `[kind="captions"]`

○Tables have different content in the summary attribute and `<caption>`.

○All heading elements contain content.

○Image elements do not have `[alt]` attributes that are redundant text.

○Elements with visible text labels have matching accessible names.

○Tables use `<caption>` instead of cells with the `[colspan]` attribute to indicate a caption.

○`<td>` elements in a large `<table>` have one or more table headers.

Best Practices

User Experience

Image display dimensions should match natural aspect ratio. Learn more about image aspect ratio.

Why this matters

Performance issues directly impact user engagement and conversion rates.

	URL	Aspect Ratio (Displayed)	Aspect Ratio (Actual)
7A Security Interview `div#ev2 > p > a > img`	owasp.org/assets/images/content/interview-abh7as3.png	100 x 1080 (0.09)	1920 x 1080 (1.78)
OWASP Global Appsec EU Conference 2026 `div#ev3 > p > a > img`	owasp.org/assets/images/events/2026/appsec_vienna_2026_launch.jpg	100 x 675 (0.15)	1200 x 675 (1.78)
BASC 2026 `div#ev1 > p > a > img`	owasp.org/assets/images/content/basc.png	100 x 470 (0.21)	940 x 470 (2.00)

General

Deprecated APIs will eventually be removed from the browser. Learn more about deprecated APIs.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Deprecation / Warning	Source
Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check https://xhr.spec.whatwg.org/.	owasp.org/www--site-theme/assets/js/yaml.min.js

●Uses HTTPS

●Avoids third-party cookies

●Allows users to paste into input fields

●Avoids requesting the geolocation permission on page load

●Avoids requesting the notification permission on page load

●Serves images with appropriate resolution

●Page has the HTML doctype

●Properly defines charset

●No browser errors logged to the console

●No issues in the `Issues` panel in Chrome Devtools

●Ensure CSP is effective against XSS attacks

●Use a strong HSTS policy

●Ensure proper origin isolation with COOP

●Mitigate DOM-based XSS with Trusted Types

●Detected JavaScript libraries

●Page has valid source maps

○Redirects HTTP traffic to HTTPS

○Mitigate clickjacking with XFO or CSP

SEO

These checks ensure that your page is following basic search engine optimization advice. There are many additional factors Lighthouse does not score here that may affect your search ranking, including performance on Core Web Vitals. Learn more about Google Search Essentials.

Crawling and Indexing

Search engines may use `href` attributes on links to crawl websites. Ensure that the `href` attribute of anchor elements links to an appropriate destination, so more pages of the site can be discovered. Learn how to make links crawlable

Why this matters

Performance issues directly impact user engagement and conversion rates.

Uncrawlable Link
Accept `div.header-wrapper > div#disclaimer-container > div#disclaimer > a.disclaimerOK`

To appear in search results, crawlers need access to your app.

○Structured data is valid

●Page isn’t blocked from indexing

●Document has a `<title>` element

●Document has a meta description

●Page has successful HTTP status code

●Links have descriptive text

●robots.txt is valid

●Image elements have `[alt]` attributes

●Document has a valid `hreflang`

●Document has a valid `rel=canonical`