Skip to content

Changes

https://nyazd.ir
Compared to previous audit · 10 hours ago View previous audit
13
New issues
15
Resolved
17
score changes
CategoryPreviousCurrentChange
CompositeB (82)B (84) +2.000
PerformanceB (89)B (89)—
SecurityC (78)B (85) +7.000
AccessibilityC (73)C (73)—
SEOA (95)A (95)—
InfrastructureB (85)B (85)—
ComplianceD (69)D (69)—
ContentB (84)B (84)—
SustainabilityB (85)B (85)—
MetricPreviousCurrentChange
Performance 63006200 -100
Accessibility 92009200—
Best Practices 100009200 -800
SEO 92009200—
PWA 00—
Desktop Performance 79009000 +1100
Desktop Accessibility 92009200—
Desktop Best Practices 100009200 -800
Desktop SEO 92009200—
FCP 3.91 s2.54 s -1.36 s
LCP 5.30 s6.65 s +1.35 s
TBT 13 ms126 ms +112 ms
CLS 0.0120.000 -0.012
Desktop FCP 1.64 s996 ms -640 ms
Desktop LCP 2.14 s1.42 s -722 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0090.014 +0.005
TTFB †2.97 s2.10 s -874 ms
DNS †144 ms112 ms -32 ms
TLS †105 ms98 ms -7 ms
Connect 1.11 s1.12 s—
Total †3.09 s2.10 s -986 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL 109 of 115 links are healthy content
CRITICAL 3 button(s) with no accessible text accessibility
CRITICAL 'unsafe-eval' found in script source security
CRITICAL 'unsafe-inline' found in script source security
WARNING Unattributable: 289ms CPU time performance
WARNING 8 render-blocking stylesheet(s) -- recommended: <=3 performance
WARNING 1 software version(s) disclosed in HTML: Redux 4.5.15 security
WARNING https://nyazd.ir/: 2301ms CPU time performance
WARNING https://nyazd.ir/wp-content/themes/nyazd-theme/ass...: 255ms CPU time performance
WARNING Total JS execution time is 4.6 s -- over the 3.5s budget performance
WARNING 60 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING https://nyazd.ir/wp-content/themes/nyazd-theme/ass...: 1760ms CPU time performance
WARNING 5 images significantly larger than display size content
CRITICAL Content-Security-Policy header is missing security
CRITICAL 106 of 112 links are healthy content
CRITICAL 4 button(s) with no accessible text accessibility
CRITICAL HSTS header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING 2 software version(s) disclosed in HTML: Redux 4.5.15, WordPress 7.1.3 security
WARNING https://nyazd.ir/: 3626ms CPU time performance
WARNING X-Content-Type-Options header is missing security
WARNING DNS resolution is slow (206 ms) infrastructure
WARNING X-Frame-Options header is missing security
WARNING Permissions-Policy header is missing security
WARNING Referrer-Policy header is missing security
WARNING https://nyazd.ir/wp-includes/js/wp-emoji-release.m...: 1343ms CPU time performance
WARNING 6 images significantly larger than display size content
WARNING No Permissions-Policy header security
CRITICAL Broken link: https://edu.uast.ac.ir/CAS/Account/Login?ReturnUrl=Education content
CRITICAL Broken link: https://office.uast.ac.ir/Didgah/UserLogin/Login content
CRITICAL Broken link: https://www.uast.ac.ir/fa content
CRITICAL HTTP version does not redirect to HTTPS infrastructure
WARNING No meta description tag found seo
WARNING Heading level skipped: H2 → H4 (missing H3) accessibility
WARNING 4 field(s) would benefit from inputmode attribute accessibility
WARNING Broken link: https://cdn.fontcdn.ir content
WARNING Broken link: https://nyazd.ir/xmlrpc.php?rsd content
WARNING Missing og:image content
WARNING All 12 images use legacy formats (JPEG/PNG/GIF) content
WARNING Heading level skipped: H3 → H6 (missing H4) accessibility
WARNING No privacy policy found (page links and common paths checked) compliance
WARNING No accessibility statement detected compliance
WARNING 18 link(s) open in new tab without warning accessibility
WARNING 67% of images have non-descriptive filenames seo
WARNING Heading level skipped: H1 → H6 (missing H2) accessibility
WARNING 6 control(s) rely on placeholder only accessibility
WARNING 4 field(s) missing recommended autocomplete attribute accessibility
WARNING Terms of Service not detected compliance
WARNING External link from cdn.jsdelivr.net lacks integrity attribute security
WARNING 12 images missing explicit width/height content
WARNING Title is 72 characters — will be truncated in search results seo
WARNING Missing required property "name" for Organization content
WARNING 26 inline style attribute(s) detected security
WARNING SRI adoption: 0/2 third-party resources protected (0%) security
WARNING External link from cdn.fontcdn.ir lacks integrity attribute security
WARNING Heading level skipped: H3 → H5 (missing H4) accessibility
WARNING Missing og:description content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Login form does not contain a recognizable CSRF token security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING No favicon.ico at site root accessibility
+ content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://c...
+ referrer-policy strict-origin-when-cross-origin
+ x-frame-options SAMEORIGIN
+ x-content-type-options nosniff
+ permissions-policy geolocation=(), microphone=(), camera=(), payment=(), interest-cohort=()
+ x-xss-protection 1; mode=block
+ cross-origin-opener-policy same-origin
+ strict-transport-security max-age=31536000; includeSubDomains; preload

5 headers unchanged

+ HSTS Security
− Twitter Emoji (Twemoji) Font scripts
WordPress v7.1.3 → v

10 technologies unchanged

Looking ahead

+14 pts
B (84) Could reach A+ (98)
Accessibility +27Content +16Security +15Performance +11Compliance +10Infrastructure +10SEO +5

Estimate — actual results may vary (46 issues to fix)

Website improvement report — Nyazd

October 10, 2026 → October 11, 2026

B B 82 → 84 +2 pts

15

Resolved

13

New issues

33

Still remaining

Financial summary

Investment delivered

﷼13,000,000 in development time

Investment remaining

﷼64,750,000 to complete the remaining items

Ongoing risk

﷼10,307/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score82 (B)84 (B)+2
Performance89 (B)89 (B)0
Security78 (C)85 (B)+7
Accessibility73 (C)73 (C)0
SEO95 (A)95 (A)0
Infrastructure85 (B)85 (B)0
Compliance69 (D)69 (D)0
Content84 (B)84 (B)0
Sustainability85 (B)85 (B)0

Resolved (15)

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • 2 software version(s) disclosed in HTML: Redux 4.5.15, WordPress 7.1.3 (Security)

    → Reduced attack surface for visitors

  • https://nyazd.ir/: 3626ms CPU time (Performance)

    → Page loads faster for users

  • X-Content-Type-Options header is missing (Security)

    → Reduced attack surface for visitors

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • DNS resolution is slow (206 ms) (Infrastructure)

    → More reliable delivery

  • 106 of 112 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • X-Frame-Options header is missing (Security)

    → Reduced attack surface for visitors

  • Permissions-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • 4 button(s) with no accessible text (Accessibility)

    → Improved usability for assistive technology users

  • Referrer-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://nyazd.ir/wp-includes/js/wp-emoji-release.m...: 1343ms CPU time (Performance)

    → Page loads faster for users

  • 6 images significantly larger than display size (Content)

    → Stronger social sharing and on-page quality

  • HSTS header is missing (Security)

    → Reduced attack surface for visitors

  • No Permissions-Policy header (Security)

    → Reduced attack surface for visitors

Recommended next steps (46)

  • Sprint 1

    109 of 115 links are healthy (Content)

  • Sprint 1

    3 button(s) with no accessible text (Accessibility)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    Broken link: https://edu.uast.ac.ir/CAS/Account/Login?ReturnUrl=Education (Content)

  • Sprint 1

    Broken link: https://office.uast.ac.ir/Didgah/UserLogin/Login (Content)

  • Sprint 1

    Broken link: https://www.uast.ac.ir/fa (Content)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    Unattributable: 289ms CPU time (Performance)

  • Sprint 1

    8 render-blocking stylesheet(s) -- recommended: <=3 (Performance)

  • Sprint 1

    1 software version(s) disclosed in HTML: Redux 4.5.15 (Security)

  • Sprint 1

    https://nyazd.ir/: 2301ms CPU time (Performance)

  • Sprint 1

    https://nyazd.ir/wp-content/themes/nyazd-theme/ass...: 255ms CPU time (Performance)

  • Sprint 2

    Total JS execution time is 4.6 s -- over the 3.5s budget (Performance)

  • Sprint 1

    60 text node(s) render below 12 CSS pixels on mobile (Accessibility)

…and 31 more recommended item(s)

Send Feedback