Skip to content

Changes

https://costdown.org
Compared to previous audit · 11 minutes ago View previous audit

Santa Clara, United States → Singapore, Singapore

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

5
New issues
3
Resolved
16
score changes
CategoryPreviousCurrentChange
CompositeB (89)B (89)—
PerformanceA+ (97)A+ (97)—
SecurityB (89)B (89)—
AccessibilityA (90)A (90)—
SEOA+ (97)A (95) -2.000
InfrastructureA (90)B (83) -7.000
ComplianceD (63)D (63)—
ContentC (75)B (87) +12.000
SustainabilityA+ (98)A+ (98)—
MetricPreviousCurrentChange
Performance 78006500 -1300
Accessibility 96009600—
Best Practices 1000010000—
SEO 91009100—
PWA 00—
Desktop Performance 980010000 +200
Desktop Accessibility 96009600—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 1.82 s2.70 s +888 ms
LCP 5.16 s5.26 s +96 ms
TBT 158 ms334 ms +176 ms
CLS 0.0000.000—
Desktop FCP 637 ms350 ms -287 ms
Desktop LCP 1.12 s662 ms -460 ms
Desktop TBT 3 ms30 ms +27 ms
Desktop CLS 0.0000.000—
TTFB †6.24 s824 ms -5.42 s
DNS †12 ms9 ms -2 ms
TLS †243 ms12 ms -232 ms
Connect †2 ms5 ms +3 ms
Total †8.15 s969 ms -7.18 s

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING https://costdown.org/: 574ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING Unattributable: 282ms CPU time performance
CRITICAL 'unsafe-inline' found in script source security
WARNING https://costdown.org/: 442ms CPU time performance
WARNING No Open Graph meta tags found content
CRITICAL Both www and non-www versions serve content infrastructure
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Registrar lock is NOT enabled infrastructure
WARNING No privacy policy link detected compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING X-Powered-By header reveals technology stack security
WARNING No SPF record found security
WARNING Terms of Service not detected compliance
WARNING Permissions-Policy header is missing security
WARNING No Permissions-Policy header security
WARNING No accessibility statement detected compliance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING No DMARC record found security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudfla... → default-src 'self'; script-src 'self' 'nonce-+FMX5mJyWMw443NzqCuMBw==' https:...
link
</_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...

13 headers unchanged

+ Open Graph Miscellaneous

10 technologies unchanged

Looking ahead

+7 pts
B (89) Could reach A (96)
Infrastructure +14Compliance +13Security +11Accessibility +4Content +4Performance +3

Estimate — actual results may vary (19 issues to fix)

Website improvement report — Costdown

August 27, 2026 → August 27, 2026

B B 89 → 89 0 pts

3

Resolved

5

New issues

14

Still remaining

Financial summary

Investment delivered

₫3,750,000 in development time

Investment remaining

₫9,300,000 to complete the remaining items

Ongoing risk

₫3,440/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score89 (B)89 (B)0
Performance97 (A+)97 (A+)0
Security89 (B)89 (B)0
Accessibility90 (A)90 (A)0
SEO97 (A+)95 (A)-2
Infrastructure90 (A)83 (B)-7
Compliance63 (D)63 (D)0
Content75 (C)87 (B)+12
Sustainability98 (A+)98 (A+)0

Resolved (3)

  • https://costdown.org/: 442ms CPU time (Performance)

    → Page loads faster for users

  • 'unsafe-inline' found in script source (Security)

    → Reduced attack surface for visitors

  • No Open Graph meta tags found (Content)

    → Stronger social sharing and on-page quality

Recommended next steps (19)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 2

    GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

  • Sprint 1

    https://costdown.org/: 574ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 2

    IPv6 DNS records exist but server is not reachable (Infrastructure)

  • Sprint 1

    Unattributable: 282ms CPU time (Performance)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

  • Sprint 2

    No privacy policy link detected (Compliance)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 1

    Terms of Service not detected (Compliance)

  • Sprint 1

    Permissions-Policy header is missing (Security)

  • Sprint 1

    No Permissions-Policy header (Security)

…and 4 more recommended item(s)

Send Feedback