Skip to content

Changes

https://web.whatsapp.com
Compared to previous audit · 22 weeks ago View previous audit
26
New issues
18
Resolved
21
score changes
CategoryPreviousCurrentChange
CompositeC (75)B (80) +5.000
PerformanceB (82)B (85) +3.000
SecurityC (75)B (83) +8.000
AccessibilityD (66)B (83) +17.000
SEOD (67)C (77) +10.000
InfrastructureB (80)B (83) +3.000
ComplianceC (78)D (62) -16.000
ContentD (68)C (71) +3.000
SustainabilityC (72)C (72)—
MetricPreviousCurrentChange
Performance 58005800—
Accessibility 1000010000—
Best Practices 77007700—
SEO 58005800—
PWA 00—
Desktop Performance 50005100 +100
Desktop Accessibility 96009600—
Desktop Best Practices 77007700—
Desktop SEO 1000010000—
FCP 6.80 s7.78 s +978 ms
LCP 7.85 s8.36 s +507 ms
TBT 10 ms0 ms -10 ms
CLS 0.0800.000 -0.080
Desktop FCP 1.00 s1.30 s +297 ms
Desktop LCP 6.60 s3.32 s -3.28 s
Desktop TBT 505 ms658 ms +152 ms
Desktop CLS 0.0000.004 +0.003
TTFB †200 ms254 ms +54 ms
DNS †41 ms26 ms -15 ms
TLS †18 ms19 ms +1 ms
Connect 16 ms16 ms—
Total †203 ms261 ms +58 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 75
Projected
A 95
Actual
B 80
Fell short of projection
18 issues resolved since last audit
59 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL 1 image(s) missing alt attribute accessibility
CRITICAL Page has only 26 words — nearly empty seo
CRITICAL Page body has only 151 chars of text -- likely empty / placeholder security
WARNING https://static.whatsapp.net/rsrc.php/v4is4J4/yp/l/...: 62 KB unused (90%) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yg/r/0Dr5E...: 49 KB unused (91%) performance
WARNING 28 third-party resources (98% of weight) performance
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING Third-party scripts: 654ms (56% of total) performance
WARNING https://static.whatsapp.net/rsrc.php/v4iB2m4/yB/l/...: 154 KB unused (83%) performance
WARNING SRI adoption: 0/10 third-party resources protected (0%) security
WARNING Third-party code accounts for 98% of page weight (1.5 MiB of 1.5 MiB) performance
WARNING https://web.whatsapp.com/mobile/: 259ms CPU time performance
WARNING 6 render-blocking <script src> tag(s) without async/defer performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yv/r/EH-Pq...: 66 KB unused (97%) performance
WARNING Certificate expires soon (7 days remaining) security
WARNING https://static.whatsapp.net/rsrc.php/v4/yA/r/yNZV7...: 429ms CPU time performance
WARNING Transfer efficiency: 54% sustainability
WARNING Thin content — only 26 words seo
WARNING 1 images missing explicit width/height content
WARNING 1 images missing alt text content
WARNING https://static.whatsapp.net/rsrc.php/v4/yJ/r/5S6jq...: 146 KB unused (78%) performance
WARNING JavaScript is 966 KB — consider code splitting or lazy loading performance
WARNING security.txt: Missing required 'Contact' field security
WARNING Page weight 1.5 MB exceeds 1 MB target by 543 KB performance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING Unattributable: 264ms CPU time performance
CRITICAL Page has only 28 words — nearly empty seo
CRITICAL 2 image(s) missing alt attribute accessibility
CRITICAL Transfer efficiency: 49% sustainability
WARNING https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 45 KB unused (58%) performance
WARNING Third-party scripts: 388ms (59% of total) performance
WARNING No meta description tag found seo
WARNING Certificate expires soon (8 days remaining) security
WARNING https://static.whatsapp.net/rsrc.php/v4/yS/r/DXGWA...: 242 KB unused (97%) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yJ/r/Wl_HC...: 123 KB unused (99%) performance
WARNING No canonical tag found seo
WARNING Third-party code accounts for 99% of page weight (1.2 MiB of 1.2 MiB) performance
WARNING JavaScript is 873 KB — consider code splitting or lazy loading performance
WARNING Page weight 1.2 MB exceeds 1 MB target by 221 KB performance
WARNING Thin content — only 28 words seo
WARNING https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 253ms CPU time performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yP/r/TmE3j...: 43 KB unused (52%) performance
WARNING 24 third-party resources (99% of weight) performance
WARNING https://static.whatsapp.net/rsrc.php/v4iSfE4/y0/l/...: 125 KB unused (88%) performance
CRITICAL robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals seo
CRITICAL No page title found seo
CRITICAL No <main> landmark found accessibility
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL robots.txt blocks all crawlers infrastructure
CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL 'unsafe-eval' found in script source security
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING form-action directive is missing security
WARNING External script from static.whatsapp.net lacks integrity attribute security
WARNING Registrar lock is NOT enabled infrastructure
WARNING 1 unclassified cookie(s) set before any consent step compliance
WARNING object-src allows plugin content security
WARNING sitemap.xml contains invalid XML infrastructure
WARNING External link from static.whatsapp.net lacks integrity attribute security
WARNING frame-ancestors directive is missing security
WARNING No DMARC record found security
WARNING No <nav> landmark found accessibility
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 6 link(s) open in new tab without warning accessibility
WARNING base-uri directive is missing security
WARNING sitemap.xml is empty — no URLs found infrastructure
WARNING CNAME record at zone apex infrastructure
WARNING No accessibility statement detected compliance
WARNING No Open Graph meta tags found content
WARNING https://static.whatsapp.net/rsrc.php/yu/r/3IkZnQ5T... is missing width/height — may cause layout shift performance
WARNING Sitemap is empty -- 0 URLs listed seo
WARNING X-Frame-Options header is missing security
WARNING Terms of Service not detected compliance
WARNING No internal links found seo
WARNING Dead-end page — no outgoing internal links seo
WARNING Referrer-Policy header is missing security
WARNING No privacy policy found (page links and common paths checked) compliance
+ content-encoding br
− origin-trial AojvwgvBFizBFcnJMB8LbCdT9eDSte7tVJfVLHoVJy1J/0/IZz8Fto9n7e3x2BE1Vu40AbDJwupVG...
x-fb-connection-quality
EXCELLENT; q=0.9, rtt=16, rtx=0, c=14, mss=1380, tbw=4296, tp=-1, tpl=-1, upl... → EXCELLENT; q=0.9, rtt=16, rtx=0, c=17, mss=1380, tbw=4450, tp=-1, tpl=-1, upl...
x-fb-debug
YeEf/ag9QVIOcmVm7notx3Dl+4A22gZ3FgWS8NBByE8lVkE/cd631pqOI+4/pHJTqM9FuAu60JXoK... → IJkDnWxEwQsbpd/uMCO24GXP8ExqAD3jFUGHcevcpbhLkr/cHYsqNSAmR5BBkx5bgT8PC4NZgthTT...
content-security-policy-report-only
default-src 'self' blob:;script-src blob: 'self' 'nonce-rRH7TdQ4' 'report-sam... → default-src 'self' blob:;script-src blob: 'self' 'nonce-BzoHnNtJ' 'report-sam...
set-cookie
wa_ul=a194c457-1f1d-4a70-8cb6-575f5d008a38; expires=Mon, 20-Jul-2026 18:49:24... → wa_ul=d072c408-243f-44e6-8d4f-ac863b24b082; expires=Tue, 22-Dec-2026 15:58:38...
content-security-policy
default-src 'self' blob:;script-src blob: 'self' 'nonce-rRH7TdQ4' 'report-sam... → default-src 'self' blob:;script-src blob: 'self' 'nonce-BzoHnNtJ' 'report-sam...
reporting-endpoints
coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", de... → coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", de...

17 headers unchanged

Technology stack unchanged

4 technologies unchanged

Looking ahead

+17 pts
B (80) Could reach A+ (97)
SEO +23Accessibility +17Infrastructure +17Security +17Compliance +16Performance +15Content +13Sustainability +4

Estimate — actual results may vary (59 issues to fix)

Website improvement report — Web.whatsapp

April 21, 2026 → September 23, 2026

C B 75 → 80 +5 pts

18

Resolved

26

New issues

33

Still remaining

Financial summary

Investment delivered

$8,442 in development time

Investment remaining

$11,275 to complete the remaining items

Ongoing risk

$0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score75 (C)80 (B)+5
Performance82 (B)85 (B)+3
Security75 (C)83 (B)+8
Accessibility66 (D)83 (B)+17
SEO67 (D)77 (C)+10
Infrastructure80 (B)83 (B)+3
Compliance78 (C)62 (D)-16
Content68 (D)71 (C)+3
Sustainability72 (C)72 (C)0

Resolved (18)

  • https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 45 KB unused (58%) (Performance)

    → Page loads faster for users

  • Third-party scripts: 388ms (59% of total) (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • Page has only 28 words — nearly empty (SEO)

    → Better search engine visibility

  • Certificate expires soon (8 days remaining) (Security)

    → Reduced attack surface for visitors

  • https://static.whatsapp.net/rsrc.php/v4/yS/r/DXGWA...: 242 KB unused (97%) (Performance)

    → Page loads faster for users

  • https://static.whatsapp.net/rsrc.php/v4/yJ/r/Wl_HC...: 123 KB unused (99%) (Performance)

    → Page loads faster for users

  • No canonical tag found (SEO)

    → Better search engine visibility

  • Third-party code accounts for 99% of page weight (1.2 MiB of 1.2 MiB) (Performance)

    → Page loads faster for users

  • 2 image(s) missing alt attribute (Accessibility)

    → Improved usability for assistive technology users

  • JavaScript is 873 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • Page weight 1.2 MB exceeds 1 MB target by 221 KB (Performance)

    → Page loads faster for users

  • Thin content — only 28 words (SEO)

    → Better search engine visibility

  • https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 253ms CPU time (Performance)

    → Page loads faster for users

  • https://static.whatsapp.net/rsrc.php/v4/yP/r/TmE3j...: 43 KB unused (52%) (Performance)

    → Page loads faster for users

…and 3 more resolved issue(s)

Recommended next steps (59)

  • Sprint 2

    1 image(s) missing alt attribute (Accessibility)

  • Sprint 3

    Page has only 26 words — nearly empty (SEO)

  • Sprint 1

    Page body has only 151 chars of text -- likely empty / placeholder (Security)

  • Sprint 1

    robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals (SEO)

  • Sprint 1

    No page title found (SEO)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 1

    Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

  • Sprint 1

    robots.txt blocks all crawlers (Infrastructure)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 3

    https://static.whatsapp.net/rsrc.php/v4is4J4/yp/l/...: 62 KB unused (90%) (Performance)

  • Sprint 3

    https://static.whatsapp.net/rsrc.php/v4/yg/r/0Dr5E...: 49 KB unused (91%) (Performance)

  • Sprint 1

    28 third-party resources (98% of weight) (Performance)

  • Sprint 1

    security.txt: Missing required 'Expires' field (RFC 9116) (Security)

  • Sprint 3

    Third-party scripts: 654ms (56% of total) (Performance)

…and 44 more recommended item(s)

Send Feedback