Skip to content

Changes

https://costdown.org
Compared to previous audit · 9 minutes ago View previous audit

New York, United Stated → Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

5
New issues
6
Resolved
16
score changes
CategoryPreviousCurrentChange
CompositeA (90)A (91) +1.000
PerformanceA (96)A+ (97) +1.000
SecurityB (89)B (89)—
AccessibilityA (90)A (90)—
SEOA (95)A (95)—
InfrastructureA (90)B (89) -1.000
ComplianceD (63)B (82) +19.000
ContentB (85)B (85)—
SustainabilityA+ (98)A+ (98)—
MetricPreviousCurrentChange
Performance 90006200 -2800
Accessibility 96009600—
Best Practices 1000010000—
SEO 91009100—
PWA 00—
Desktop Performance 99009900—
Desktop Accessibility 96009600—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 1.10 s2.66 s +1.56 s
LCP 3.58 s5.15 s +1.57 s
TBT 89 ms445 ms +356 ms
CLS 0.0000.000—
Desktop FCP 541 ms588 ms +47 ms
Desktop LCP 893 ms951 ms +58 ms
Desktop TBT 0 ms4 ms +4 ms
Desktop CLS 0.0000.000—
TTFB †286 ms537 ms +251 ms
DNS †36 ms10 ms -25 ms
TLS †23 ms11 ms -11 ms
Connect †17 ms2 ms -15 ms
Total †532 ms629 ms +97 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING Unattributable: 346ms CPU time performance
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 255ms CPU time performance
WARNING https://costdown.org/: 570ms CPU time performance
WARNING https://costdown.org/_next/static/chunks/webpack-a...: 305ms CPU time performance
WARNING https://costdown.org/_next/static/chunks/1255-fc6c...: 889ms CPU time performance
WARNING Privacy Policy not detected compliance
WARNING No privacy policy link detected compliance
WARNING https://costdown.org/: 304ms CPU time performance
WARNING Terms of Service not detected compliance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
CRITICAL Both www and non-www versions serve content infrastructure
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No DMARC record found security
WARNING No Permissions-Policy header security
WARNING Registrar lock is NOT enabled infrastructure
WARNING Permissions-Policy header is missing security
WARNING No SPF record found security
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING X-Powered-By header reveals technology stack security
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 1 images significantly larger than display size content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No accessibility statement detected compliance
content-security-policy
default-src 'self'; script-src 'self' 'nonce-JIdDQnx5Sdh/YXfVkX7jzg==' https:... → default-src 'self'; script-src 'self' 'nonce-fY8UdcavBgndB53IyUTo2A==' https:...
link
</_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...

13 headers unchanged

Technology stack unchanged

11 technologies unchanged

Looking ahead

+6 pts
A (91) Could reach A+ (97)
Infrastructure +11Security +11Content +8Accessibility +4Compliance +4Performance +3

Estimate — actual results may vary (19 issues to fix)

Website improvement report — Costdown

August 27, 2026 → August 27, 2026

A A 90 → 91 +1 pts

6

Resolved

5

New issues

14

Still remaining

Financial summary

Investment delivered

₫3,000,000 in development time

Investment remaining

₫6,900,000 to complete the remaining items

Ongoing risk

₫3,437/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score90 (A)91 (A)+1
Performance96 (A)97 (A+)+1
Security89 (B)89 (B)0
Accessibility90 (A)90 (A)0
SEO95 (A)95 (A)0
Infrastructure90 (A)89 (B)-1
Compliance63 (D)82 (B)+19
Content85 (B)85 (B)0
Sustainability98 (A+)98 (A+)0

Resolved (6)

  • https://costdown.org/_next/static/chunks/1255-fc6c...: 889ms CPU time (Performance)

    → Page loads faster for users

  • Privacy Policy not detected (Compliance)

    → Reduced regulatory exposure

  • No privacy policy link detected (Compliance)

    → Reduced regulatory exposure

  • https://costdown.org/: 304ms CPU time (Performance)

    → Page loads faster for users

  • Terms of Service not detected (Compliance)

    → Reduced regulatory exposure

  • GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

    → Reduced regulatory exposure

Recommended next steps (19)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 1

    Unattributable: 346ms CPU time (Performance)

  • Sprint 1

    https://costdown.org/_next/static/chunks/1255-fc6c...: 255ms CPU time (Performance)

  • Sprint 1

    https://costdown.org/: 570ms CPU time (Performance)

  • Sprint 1

    https://costdown.org/_next/static/chunks/webpack-a...: 305ms CPU time (Performance)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 1

    No Permissions-Policy header (Security)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 1

    Permissions-Policy header is missing (Security)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 2

    All 1 images use legacy formats (JPEG/PNG/GIF) (Content)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 1

    Permissions-Policy header not set -- features default to allow-on-same-origin (Security)

…and 4 more recommended item(s)

Send Feedback