Skip to content

Changes

https://ttmb-coffee.surge.sh
Compared to previous audit · 24 minutes ago View previous audit
8
New issues
12
Resolved
17
score changes
CategoryPreviousCurrentChange
CompositeC (79)B (81) +2.000
PerformanceB (87)B (87)—
SecurityC (78)C (79) +1.000
AccessibilityC (74)B (82) +8.000
SEOA (92)A (92)—
InfrastructureC (74)C (74)—
ComplianceD (65)D (65)—
ContentC (77)C (77)—
SustainabilityC (70)C (70)—
MetricPreviousCurrentChange
Performance 43006500 +2200
Accessibility 79009500 +1600
Best Practices 1000010000—
SEO 66006600—
PWA 00—
Desktop Performance 83008900 +600
Desktop Accessibility 88009500 +700
Desktop Best Practices 1000010000—
Desktop SEO 66006600—
FCP 4.41 s4.61 s +195 ms
LCP 12.89 s6.21 s -6.69 s
TBT 845 ms0 ms -845 ms
CLS 0.0000.000—
Desktop FCP 1.30 s1.45 s +154 ms
Desktop LCP 2.38 s1.51 s -866 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0230.023—
TTFB †216 ms154 ms -61 ms
DNS †113 ms33 ms -80 ms
TLS †37 ms40 ms +4 ms
Connect †31 ms38 ms +7 ms
Total †260 ms196 ms -64 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING HSTS is enabled but missing includeSubDomains security
WARNING 34 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING Page weighs 3.8 MB (3.0 MB transferred) performance
WARNING https://cdn.tailwindcss.com/: 268ms CPU time performance
WARNING 2 render-blocking <script src> tag(s) without async/defer performance
WARNING https://ttmb-coffee.surge.sh/: 1901ms CPU time performance
WARNING DNS resolution is slow (332 ms) infrastructure
WARNING Unattributable: 253ms CPU time performance
CRITICAL HSTS header is missing security
CRITICAL 1 button(s) with no accessible text accessibility
CRITICAL No <main> landmark found accessibility
CRITICAL 3 control(s) without accessible label accessibility
WARNING 1 field(s) missing recommended autocomplete attribute accessibility
WARNING 4 control(s) rely on placeholder only accessibility
WARNING https://ttmb-coffee.surge.sh/: 2029ms CPU time performance
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Unattributable: 312ms CPU time performance
WARNING DNS resolution is slow (441 ms) infrastructure
WARNING 1 field(s) would benefit from inputmode attribute accessibility
WARNING Page weighs 3.7 MB (3.0 MB transferred) performance
CRITICAL Content-Security-Policy header is missing security
CRITICAL robots.txt blocks all crawlers infrastructure
WARNING SRI adoption: 0/3 third-party resources protected (0%) security
WARNING No Permissions-Policy header security
WARNING Page weight 3.0 MB exceeds 1 MB target by 2.0 MB performance
WARNING Total image weight: 3549 KB (3.5 MB) content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING External script from unpkg.com lacks integrity attribute security
WARNING Heading level skipped: H2 → H4 (missing H3) accessibility
WARNING No favicon.ico at site root accessibility
WARNING No privacy policy found (page links and common paths checked) compliance
WARNING X-Frame-Options header is missing security
WARNING External link from fonts.googleapis.com lacks integrity attribute security
WARNING No accessibility statement detected compliance
WARNING Broken link: https://fonts.googleapis.com content
WARNING All 63 images use legacy formats (JPEG/PNG/GIF) content
WARNING 21 font weights loaded -- likely 100+ KB of unused payload sustainability
WARNING X-Content-Type-Options header is missing security
WARNING Permissions-Policy header is missing security
WARNING External script from cdn.tailwindcss.com lacks integrity attribute security
WARNING 2 of 2 <nav> elements are unlabeled accessibility
WARNING 69 of 72 links are healthy content
WARNING 6 images significantly larger than display size content
WARNING No SPF record found security
WARNING 2 empty heading(s) accessibility
WARNING Images are 2.6 MB — compress or use modern formats performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Broken link: https://fonts.gstatic.com content
WARNING Referrer-Policy header is missing security
WARNING Heading level skipped: H1 → H5 (missing H2) accessibility
WARNING 17 link(s) open in new tab without warning accessibility
WARNING No canonical tag found seo
WARNING Title is 72 characters — will be truncated in search results seo
WARNING 0.85g CO2 — above the median website (0.60g) sustainability
WARNING No DMARC record found security
WARNING Terms of Service not detected compliance
WARNING 65 images missing explicit width/height content
+ strict-transport-security max-age=31536000
surge-stamp
3877426::1793591783349-55c0bc52d6600e96740466e67f12f3d2 → 3877417::1793627208568-721d4ab0cf33181172d63dcb45ea3b56
etag
"15ebe46036bc4a35911825184484ccde4455699ee1ff3e04d15a399c2131ce49" → "d0430aa69312b028b14fc1ab154d483eb26270d7fab79bd19a6fccc4dda9a7f4"
response-time
2ms → 3ms

7 headers unchanged

+ HSTS Security

7 technologies unchanged

Looking ahead

+15 pts
B (81) Could reach A (96)
Security +21Accessibility +17Content +17Infrastructure +14Compliance +13Performance +13SEO +8Sustainability +8

Estimate — actual results may vary (46 issues to fix)

Website improvement report — Ttmb-coffee.surge

November 2, 2026 → November 2, 2026

C B 79 → 81 +2 pts

12

Resolved

8

New issues

38

Still remaining

Financial summary

Investment delivered

$642 in development time

Investment remaining

$3,900 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score79 (C)81 (B)+2
Performance87 (B)87 (B)0
Security78 (C)79 (C)+1
Accessibility74 (C)82 (B)+8
SEO92 (A)92 (A)0
Infrastructure74 (C)74 (C)0
Compliance65 (D)65 (D)0
Content77 (C)77 (C)0
Sustainability70 (C)70 (C)0

Resolved (12)

  • HSTS header is missing (Security)

    → Reduced attack surface for visitors

  • 1 button(s) with no accessible text (Accessibility)

    → Improved usability for assistive technology users

  • No <main> landmark found (Accessibility)

    → Improved usability for assistive technology users

  • 1 field(s) missing recommended autocomplete attribute (Accessibility)

    → Improved usability for assistive technology users

  • 4 control(s) rely on placeholder only (Accessibility)

    → Improved usability for assistive technology users

  • https://ttmb-coffee.surge.sh/: 2029ms CPU time (Performance)

    → Page loads faster for users

  • Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

    → Improved usability for assistive technology users

  • Unattributable: 312ms CPU time (Performance)

    → Page loads faster for users

  • DNS resolution is slow (441 ms) (Infrastructure)

    → More reliable delivery

  • 1 field(s) would benefit from inputmode attribute (Accessibility)

    → Improved usability for assistive technology users

  • 3 control(s) without accessible label (Accessibility)

    → Improved usability for assistive technology users

  • Page weighs 3.7 MB (3.0 MB transferred) (Performance)

    → Page loads faster for users

Recommended next steps (46)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    robots.txt blocks all crawlers (Infrastructure)

  • Sprint 1

    HSTS is enabled but missing includeSubDomains (Security)

  • Sprint 1

    34 text node(s) render below 12 CSS pixels on mobile (Accessibility)

  • Sprint 1

    Page weighs 3.8 MB (3.0 MB transferred) (Performance)

  • Sprint 1

    https://cdn.tailwindcss.com/: 268ms CPU time (Performance)

  • Sprint 2

    2 render-blocking <script src> tag(s) without async/defer (Performance)

  • Sprint 1

    https://ttmb-coffee.surge.sh/: 1901ms CPU time (Performance)

  • Sprint 2

    DNS resolution is slow (332 ms) (Infrastructure)

  • Sprint 1

    Unattributable: 253ms CPU time (Performance)

  • Sprint 1

    SRI adoption: 0/3 third-party resources protected (0%) (Security)

  • Sprint 1

    No Permissions-Policy header (Security)

  • Sprint 2

    Page weight 3.0 MB exceeds 1 MB target by 2.0 MB (Performance)

  • Sprint 1

    Total image weight: 3549 KB (3.5 MB) (Content)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

…and 31 more recommended item(s)

Send Feedback