Skip to content

Changes

https://costdown.org
Compared to previous audit · 11 minutes ago View previous audit

Santa Clara, United States → Singapore, Singapore

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

4
New issues
3
Resolved
16
score changes
CategoryPreviousCurrentChange
CompositeB (89)B (89)—
PerformanceA+ (97)A+ (97)—
SecurityB (89)B (89)—
AccessibilityA (90)A (90)—
SEOA+ (97)A (95) -2.000
InfrastructureA (90)B (83) -7.000
ComplianceD (63)D (63)—
ContentC (75)B (87) +12.000
SustainabilityA+ (98)A+ (98)—
MetricPreviousCurrentChange
Performance 78006500 -1300
Accessibility 96009600—
Best Practices 1000010000—
SEO 91009100—
PWA 00—
Desktop Performance 980010000 +200
Desktop Accessibility 96009600—
Desktop Best Practices 1000010000—
Desktop SEO 92009200—
FCP 1.82 s2.70 s +888 ms
LCP 5.16 s5.26 s +96 ms
TBT 158 ms334 ms +176 ms
CLS 0.0000.000—
Desktop FCP 637 ms350 ms -287 ms
Desktop LCP 1.12 s662 ms -460 ms
Desktop TBT 3 ms30 ms +27 ms
Desktop CLS 0.0000.000—
TTFB †6.24 s824 ms -5.42 s
DNS †12 ms9 ms -2 ms
TLS †243 ms12 ms -232 ms
Connect †2 ms5 ms +3 ms
Total †8.15 s969 ms -7.18 s

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING https://costdown.org/: 574ms CPU time performance
WARNING Unattributable: 282ms CPU time performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING IPv6 DNS records exist but server is not reachable infrastructure
CRITICAL 'unsafe-inline' found in script source security
WARNING https://costdown.org/: 442ms CPU time performance
WARNING No Open Graph meta tags found content
CRITICAL Both www and non-www versions serve content infrastructure
WARNING No Permissions-Policy header security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING X-Powered-By header reveals technology stack security
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING No privacy policy link detected compliance
WARNING No accessibility statement detected compliance
WARNING Privacy Policy not detected compliance
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING Terms of Service not detected compliance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING No SPF record found security
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Permissions-Policy header is missing security
WARNING No DMARC record found security
link
</_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro... → </_next/static/media/62c97acc3aa63787-s.p.woff2>; rel=preload; as="font"; cro...
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudfla... → default-src 'self'; script-src 'self' 'nonce-+FMX5mJyWMw443NzqCuMBw==' https:...

13 headers unchanged

+ Open Graph Miscellaneous

10 technologies unchanged

Looking ahead

+7 pts
B (89) Could reach A (96)
Compliance +16Infrastructure +14Security +11Accessibility +4Content +4Performance +3

Estimate — actual results may vary (21 issues to fix)

Website improvement report — Costdown

August 27, 2026 → August 27, 2026

B B 89 → 89 0 pts

3

Resolved

4

New issues

17

Still remaining

Financial summary

Investment delivered

₫3,750,000 in development time

Investment remaining

₫9,600,000 to complete the remaining items

Ongoing risk

₫3,440/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score89 (B)89 (B)0
Performance97 (A+)97 (A+)0
Security89 (B)89 (B)0
Accessibility90 (A)90 (A)0
SEO97 (A+)95 (A)-2
Infrastructure90 (A)83 (B)-7
Compliance63 (D)63 (D)0
Content75 (C)87 (B)+12
Sustainability98 (A+)98 (A+)0

Resolved (3)

  • 'unsafe-inline' found in script source (Security)

    → Reduced attack surface for visitors

  • https://costdown.org/: 442ms CPU time (Performance)

    → Page loads faster for users

  • No Open Graph meta tags found (Content)

    → Stronger social sharing and on-page quality

Recommended next steps (21)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    https://costdown.org/: 574ms CPU time (Performance)

  • Sprint 1

    Unattributable: 282ms CPU time (Performance)

  • Sprint 2

    1 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 2

    IPv6 DNS records exist but server is not reachable (Infrastructure)

  • Sprint 1

    No Permissions-Policy header (Security)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    X-Powered-By header reveals technology stack (Security)

  • Sprint 1

    Permissions-Policy header not set -- features default to allow-on-same-origin (Security)

  • Sprint 2

    No privacy policy link detected (Compliance)

  • Sprint 1

    No accessibility statement detected (Compliance)

  • Sprint 1

    Privacy Policy not detected (Compliance)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

  • Sprint 1

    Registrar lock is NOT enabled (Infrastructure)

…and 6 more recommended item(s)

Send Feedback