Skip to content

Changes

https://web.whatsapp.com
Compared to previous audit · 22 weeks ago View previous audit
26
New issues
18
Resolved
21
score changes
CategoryPreviousCurrentChange
CompositeC (75)B (80) +5.000
PerformanceB (82)B (85) +3.000
SecurityC (75)B (83) +8.000
AccessibilityD (66)B (83) +17.000
SEOD (67)C (77) +10.000
InfrastructureB (80)B (83) +3.000
ComplianceC (78)D (62) -16.000
ContentD (68)C (71) +3.000
SustainabilityC (72)C (72)—
MetricPreviousCurrentChange
Performance 58005800—
Accessibility 1000010000—
Best Practices 77007700—
SEO 58005800—
PWA 00—
Desktop Performance 50005100 +100
Desktop Accessibility 96009600—
Desktop Best Practices 77007700—
Desktop SEO 1000010000—
FCP 6.80 s7.78 s +978 ms
LCP 7.85 s8.36 s +507 ms
TBT 10 ms0 ms -10 ms
CLS 0.0800.000 -0.080
Desktop FCP 1.00 s1.30 s +297 ms
Desktop LCP 6.60 s3.32 s -3.28 s
Desktop TBT 505 ms658 ms +152 ms
Desktop CLS 0.0000.004 +0.003
TTFB †200 ms254 ms +54 ms
DNS †41 ms26 ms -15 ms
TLS †18 ms19 ms +1 ms
Connect 16 ms16 ms—
Total †203 ms261 ms +58 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 75
Projected
A 95
Actual
B 80
Fell short of projection
18 issues resolved since last audit
59 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL Page has only 26 words — nearly empty seo
CRITICAL 1 image(s) missing alt attribute accessibility
CRITICAL Page body has only 151 chars of text -- likely empty / placeholder security
WARNING https://static.whatsapp.net/rsrc.php/v4/yg/r/0Dr5E...: 49 KB unused (91%) performance
WARNING Thin content — only 26 words seo
WARNING Unattributable: 264ms CPU time performance
WARNING https://static.whatsapp.net/rsrc.php/v4is4J4/yp/l/...: 62 KB unused (90%) performance
WARNING 6 render-blocking <script src> tag(s) without async/defer performance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING SRI adoption: 0/10 third-party resources protected (0%) security
WARNING Transfer efficiency: 54% sustainability
WARNING https://static.whatsapp.net/rsrc.php/v4/yv/r/EH-Pq...: 66 KB unused (97%) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yA/r/yNZV7...: 429ms CPU time performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yJ/r/5S6jq...: 146 KB unused (78%) performance
WARNING Third-party scripts: 654ms (56% of total) performance
WARNING 28 third-party resources (98% of weight) performance
WARNING https://web.whatsapp.com/mobile/: 259ms CPU time performance
WARNING Certificate expires soon (7 days remaining) security
WARNING Page weight 1.5 MB exceeds 1 MB target by 543 KB performance
WARNING 1 images missing alt text content
WARNING JavaScript is 966 KB — consider code splitting or lazy loading performance
WARNING 1 images missing explicit width/height content
WARNING security.txt: Missing required 'Contact' field security
WARNING Third-party code accounts for 98% of page weight (1.5 MiB of 1.5 MiB) performance
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING https://static.whatsapp.net/rsrc.php/v4iB2m4/yB/l/...: 154 KB unused (83%) performance
CRITICAL 2 image(s) missing alt attribute accessibility
CRITICAL Transfer efficiency: 49% sustainability
CRITICAL Page has only 28 words — nearly empty seo
WARNING https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 45 KB unused (58%) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yP/r/TmE3j...: 43 KB unused (52%) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 253ms CPU time performance
WARNING https://static.whatsapp.net/rsrc.php/v4iSfE4/y0/l/...: 125 KB unused (88%) performance
WARNING Page weight 1.2 MB exceeds 1 MB target by 221 KB performance
WARNING Third-party scripts: 388ms (59% of total) performance
WARNING No meta description tag found seo
WARNING https://static.whatsapp.net/rsrc.php/v4/yJ/r/Wl_HC...: 123 KB unused (99%) performance
WARNING JavaScript is 873 KB — consider code splitting or lazy loading performance
WARNING 24 third-party resources (99% of weight) performance
WARNING Certificate expires soon (8 days remaining) security
WARNING https://static.whatsapp.net/rsrc.php/v4/yS/r/DXGWA...: 242 KB unused (97%) performance
WARNING No canonical tag found seo
WARNING Thin content — only 28 words seo
WARNING Third-party code accounts for 99% of page weight (1.2 MiB of 1.2 MiB) performance
CRITICAL No page title found seo
CRITICAL robots.txt blocks all crawlers infrastructure
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals seo
CRITICAL 'unsafe-eval' found in script source security
CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL No <main> landmark found accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING base-uri directive is missing security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING https://static.whatsapp.net/rsrc.php/yu/r/3IkZnQ5T... is missing width/height — may cause layout shift performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING External link from static.whatsapp.net lacks integrity attribute security
WARNING object-src allows plugin content security
WARNING 6 link(s) open in new tab without warning accessibility
WARNING No accessibility statement detected compliance
WARNING Dead-end page — no outgoing internal links seo
WARNING Referrer-Policy header is missing security
WARNING Sitemap is empty -- 0 URLs listed seo
WARNING No <nav> landmark found accessibility
WARNING sitemap.xml is empty — no URLs found infrastructure
WARNING frame-ancestors directive is missing security
WARNING X-Frame-Options header is missing security
WARNING Terms of Service not detected compliance
WARNING External script from static.whatsapp.net lacks integrity attribute security
WARNING No privacy policy found (page links and common paths checked) compliance
WARNING No DMARC record found security
WARNING No internal links found seo
WARNING CNAME record at zone apex infrastructure
WARNING 1 unclassified cookie(s) set before any consent step compliance
WARNING form-action directive is missing security
WARNING sitemap.xml contains invalid XML infrastructure
WARNING No Open Graph meta tags found content
+ content-encoding br
− origin-trial AojvwgvBFizBFcnJMB8LbCdT9eDSte7tVJfVLHoVJy1J/0/IZz8Fto9n7e3x2BE1Vu40AbDJwupVG...
x-fb-debug
YeEf/ag9QVIOcmVm7notx3Dl+4A22gZ3FgWS8NBByE8lVkE/cd631pqOI+4/pHJTqM9FuAu60JXoK... → IJkDnWxEwQsbpd/uMCO24GXP8ExqAD3jFUGHcevcpbhLkr/cHYsqNSAmR5BBkx5bgT8PC4NZgthTT...
set-cookie
wa_ul=a194c457-1f1d-4a70-8cb6-575f5d008a38; expires=Mon, 20-Jul-2026 18:49:24... → wa_ul=d072c408-243f-44e6-8d4f-ac863b24b082; expires=Tue, 22-Dec-2026 15:58:38...
content-security-policy
default-src 'self' blob:;script-src blob: 'self' 'nonce-rRH7TdQ4' 'report-sam... → default-src 'self' blob:;script-src blob: 'self' 'nonce-BzoHnNtJ' 'report-sam...
content-security-policy-report-only
default-src 'self' blob:;script-src blob: 'self' 'nonce-rRH7TdQ4' 'report-sam... → default-src 'self' blob:;script-src blob: 'self' 'nonce-BzoHnNtJ' 'report-sam...
x-fb-connection-quality
EXCELLENT; q=0.9, rtt=16, rtx=0, c=14, mss=1380, tbw=4296, tp=-1, tpl=-1, upl... → EXCELLENT; q=0.9, rtt=16, rtx=0, c=17, mss=1380, tbw=4450, tp=-1, tpl=-1, upl...
reporting-endpoints
coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", de... → coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", de...

17 headers unchanged

Technology stack unchanged

4 technologies unchanged

Looking ahead

+17 pts
B (80) Could reach A+ (97)
SEO +23Accessibility +17Infrastructure +17Security +17Compliance +16Performance +15Content +13Sustainability +4

Estimate — actual results may vary (59 issues to fix)

Website improvement report — Web.whatsapp

April 21, 2026 → September 23, 2026

C B 75 → 80 +5 pts

18

Resolved

26

New issues

33

Still remaining

Financial summary

Investment delivered

$8,442 in development time

Investment remaining

$11,275 to complete the remaining items

Ongoing risk

$0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score75 (C)80 (B)+5
Performance82 (B)85 (B)+3
Security75 (C)83 (B)+8
Accessibility66 (D)83 (B)+17
SEO67 (D)77 (C)+10
Infrastructure80 (B)83 (B)+3
Compliance78 (C)62 (D)-16
Content68 (D)71 (C)+3
Sustainability72 (C)72 (C)0

Resolved (18)

  • https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 45 KB unused (58%) (Performance)

    → Page loads faster for users

  • https://static.whatsapp.net/rsrc.php/v4/yP/r/TmE3j...: 43 KB unused (52%) (Performance)

    → Page loads faster for users

  • 2 image(s) missing alt attribute (Accessibility)

    → Improved usability for assistive technology users

  • https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 253ms CPU time (Performance)

    → Page loads faster for users

  • https://static.whatsapp.net/rsrc.php/v4iSfE4/y0/l/...: 125 KB unused (88%) (Performance)

    → Page loads faster for users

  • Page weight 1.2 MB exceeds 1 MB target by 221 KB (Performance)

    → Page loads faster for users

  • Third-party scripts: 388ms (59% of total) (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • Transfer efficiency: 49% (Sustainability)

    → Lower carbon footprint per page view

  • https://static.whatsapp.net/rsrc.php/v4/yJ/r/Wl_HC...: 123 KB unused (99%) (Performance)

    → Page loads faster for users

  • Page has only 28 words — nearly empty (SEO)

    → Better search engine visibility

  • JavaScript is 873 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • 24 third-party resources (99% of weight) (Performance)

    → Page loads faster for users

  • Certificate expires soon (8 days remaining) (Security)

    → Reduced attack surface for visitors

  • https://static.whatsapp.net/rsrc.php/v4/yS/r/DXGWA...: 242 KB unused (97%) (Performance)

    → Page loads faster for users

…and 3 more resolved issue(s)

Recommended next steps (59)

  • Sprint 3

    Page has only 26 words — nearly empty (SEO)

  • Sprint 2

    1 image(s) missing alt attribute (Accessibility)

  • Sprint 1

    Page body has only 151 chars of text -- likely empty / placeholder (Security)

  • Sprint 1

    No page title found (SEO)

  • Sprint 1

    robots.txt blocks all crawlers (Infrastructure)

  • Sprint 1

    Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

  • Sprint 1

    robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals (SEO)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 3

    https://static.whatsapp.net/rsrc.php/v4/yg/r/0Dr5E...: 49 KB unused (91%) (Performance)

  • Sprint 3

    Thin content — only 26 words (SEO)

  • Sprint 1

    Unattributable: 264ms CPU time (Performance)

  • Sprint 3

    https://static.whatsapp.net/rsrc.php/v4is4J4/yp/l/...: 62 KB unused (90%) (Performance)

  • Sprint 2

    6 render-blocking <script src> tag(s) without async/defer (Performance)

…and 44 more recommended item(s)

Send Feedback