Skip to content

Changes

https://cia.gov
Compared to previous audit · 11 weeks ago View previous audit

Madrid, Spain Amsterdam, Netherlands

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

24
New issues
16
Resolved
23
score changes
CategoryPreviousCurrentChange
CompositeC (74)B (80) +6.000
PerformanceC (77)B (81) +4.000
SecurityC (74)B (87) +13.000
AccessibilityD (56)C (71) +15.000
SEOC (74)B (84) +10.000
InfrastructureA (94)A (93) -1.000
ComplianceC (71)D (57) -14.000
ContentD (68)C (76) +8.000
SustainabilityC (74)C (73) -1.000
MetricPreviousCurrentChange
Performance 72006800 -400
Accessibility 96009600
Best Practices 1000010000
SEO 82008200
PWA 00
Desktop Performance 94009100 -300
Desktop Accessibility 1000010000
Desktop Best Practices 1000010000
Desktop SEO 82008200
FCP 2.35 s2.86 s +504 ms
LCP 4.57 s6.40 s +1.83 s
TBT 339 ms143 ms -196 ms
CLS 0.0170.002 -0.015
Desktop FCP 663 ms915 ms +252 ms
Desktop LCP 1.52 s1.51 s
Desktop TBT 14 ms0 ms -14 ms
Desktop CLS 0.0010.027 +0.026
TTFB 261 ms351 ms +90 ms
DNS 5 ms50 ms +45 ms
TLS 86 ms96 ms +10 ms
Connect 81 ms92 ms +12 ms
Total 262 ms351 ms +90 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 74
Projected
A 92
Actual
B 80
Fell short of projection
16 issues resolved since last audit
52 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL No favicon or icon links detected accessibility
WARNING 8 tap target(s) too small or too close to neighbors accessibility
WARNING https://www.cia.gov/static/Freedom250seal_Gold-New... is missing width/height — may cause layout shift performance
WARNING Page weight 3.1 MB exceeds 1 MB target by 2.1 MB performance
WARNING Cookie 'jsessionid' has no SameSite attribute security
WARNING Unattributable: 909ms CPU time performance
WARNING Third-party scripts: 2189ms (71% of total) performance
WARNING https://www.cia.gov/js2/verification.js: 21 KB unused (72%) performance
WARNING Bare server default 404 page accessibility
WARNING Images are 2.1 MB — compress or use modern formats performance
WARNING https://www.cia.gov/component---src-templates-page...: 61 KB unused (62%) performance
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING No favicon.ico at site root accessibility
WARNING https://www.cia.gov/framework-481beeb6bc5ccc2a4757...: 443ms CPU time performance
WARNING Unexpected status code: HTTP 403 accessibility
WARNING Page weighs 5.8 MB (3.1 MB transferred) performance
WARNING https://www.cia.gov/: 1293ms CPU time performance
WARNING https://www.cia.gov/commons-05cdedd53ab155243764.j...: 27 KB unused (48%) performance
WARNING Third-party code accounts for 100% of page weight (3.1 MiB of 3.1 MiB) performance
WARNING 61 third-party resources (100% of weight) performance
WARNING https://www.cia.gov/b637e9a5-e830966c7b78245dccc9....: 23 KB unused (76%) performance
WARNING 0.87g CO2 — above the median website (0.60g) sustainability
WARNING 66 inline style attribute(s) detected security
WARNING Domain expires in 60 days infrastructure
WARNING https://www.cia.gov/framework-481beeb6bc5ccc2a4757...: 670ms CPU time performance
WARNING 59 third-party resources (100% of weight) performance
WARNING Third-party code accounts for 100% of page weight (2.8 MiB of 2.8 MiB) performance
WARNING https://www.cia.gov/: 1464ms CPU time performance
WARNING Page weighs 5.0 MB (2.8 MB transferred) performance
WARNING https://www.cia.gov/component---src-templates-page...: 56 KB unused (61%) performance
WARNING https://www.cia.gov/js2/verification.js: 24 KB unused (90%) performance
WARNING Images are 2.0 MB — compress or use modern formats performance
WARNING https://www.cia.gov/b637e9a5-e830966c7b78245dccc9....: 22 KB unused (76%) performance
WARNING Unattributable: 659ms CPU time performance
WARNING Third-party scripts: 2928ms (82% of total) performance
WARNING Page weight 2.8 MB exceeds 1 MB target by 1.8 MB performance
WARNING https://www.cia.gov/commons-0c93c27e22e15f6b978b.j...: 29 KB unused (65%) performance
WARNING Domain expires in 59 days infrastructure
WARNING 0.80g CO2 — above the median website (0.60g) sustainability
WARNING https://www.cia.gov/app-bd3d900226fb938894f0.js: 456ms CPU time performance
CRITICAL Missing <html lang> attribute (WCAG 3.1.1) accessibility
CRITICAL Page has only 17 words — nearly empty seo
CRITICAL No Content-Security-Policy header found security
CRITICAL 1 non-essential cookie(s) set without consent banner compliance
CRITICAL Content-Security-Policy header is missing security
CRITICAL No <main> landmark found accessibility
CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL No viewport meta tag found compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cookie '_session_' has no SameSite attribute security
WARNING No <nav> landmark found accessibility
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Permissions-Policy header is missing security
WARNING No `<meta charset>` declaration in HTML seo
WARNING Registrar lock is NOT enabled infrastructure
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING No meta description tag found seo
WARNING No accessibility statement detected compliance
WARNING Terms of Service not detected compliance
WARNING No Open Graph meta tags found content
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING No privacy policy link detected compliance
WARNING Title is only 13 characters — consider expanding seo
WARNING Dead-end page — no outgoing internal links seo
WARNING No Permissions-Policy header security
WARNING No canonical tag found seo
WARNING Thin content — only 17 words seo
WARNING Privacy Policy not detected compliance
set-cookie
_session_=AAA2EF76D2E1E483FF59641B89B9E9B5; path=/; domain=cia.gov; secure; H... jsessionid=7B9C8491146A2FED3241EACFEAA73CA6qLSvXHT2dEytUvEbkOSVstziFoCa3amIti...

6 headers unchanged

+ Java Programming languages

1 technologies unchanged

Looking ahead

+17 pts
B (80) Could reach A+ (97)
Accessibility +29Compliance +24Performance +19SEO +16Security +13Infrastructure +7Content +4Sustainability +4

Estimate — actual results may vary (52 issues to fix)

Website improvement report — Cia

April 21, 2026 → July 10, 2026

C B 74 → 80 +6 pts

16

Resolved

24

New issues

28

Still remaining

Financial summary

Investment delivered

$5,600 in development time

Investment remaining

$10,167 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score74 (C)80 (B)+6
Performance77 (C)81 (B)+4
Security74 (C)87 (B)+13
Accessibility56 (D)71 (C)+15
SEO74 (C)84 (B)+10
Infrastructure94 (A)93 (A)-1
Compliance71 (C)57 (D)-14
Content68 (D)76 (C)+8
Sustainability74 (C)73 (C)-1

Resolved (16)

  • https://www.cia.gov/framework-481beeb6bc5ccc2a4757...: 670ms CPU time (Performance)

    → Page loads faster for users

  • 59 third-party resources (100% of weight) (Performance)

    → Page loads faster for users

  • Third-party code accounts for 100% of page weight (2.8 MiB of 2.8 MiB) (Performance)

    → Page loads faster for users

  • https://www.cia.gov/: 1464ms CPU time (Performance)

    → Page loads faster for users

  • Page weighs 5.0 MB (2.8 MB transferred) (Performance)

    → Page loads faster for users

  • https://www.cia.gov/component---src-templates-page...: 56 KB unused (61%) (Performance)

    → Page loads faster for users

  • https://www.cia.gov/js2/verification.js: 24 KB unused (90%) (Performance)

    → Page loads faster for users

  • Images are 2.0 MB — compress or use modern formats (Performance)

    → Page loads faster for users

  • https://www.cia.gov/b637e9a5-e830966c7b78245dccc9....: 22 KB unused (76%) (Performance)

    → Page loads faster for users

  • Unattributable: 659ms CPU time (Performance)

    → Page loads faster for users

  • Third-party scripts: 2928ms (82% of total) (Performance)

    → Page loads faster for users

  • Page weight 2.8 MB exceeds 1 MB target by 1.8 MB (Performance)

    → Page loads faster for users

  • https://www.cia.gov/commons-0c93c27e22e15f6b978b.j...: 29 KB unused (65%) (Performance)

    → Page loads faster for users

  • Domain expires in 59 days (Infrastructure)

    → More reliable delivery

  • 0.80g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

…and 1 more resolved issue(s)

Recommended next steps (52)

  • Sprint 1

    No favicon or icon links detected (Accessibility)

  • Sprint 1

    Missing <html lang> attribute (WCAG 3.1.1) (Accessibility)

  • Sprint 3

    Page has only 17 words — nearly empty (SEO)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 2

    1 non-essential cookie(s) set without consent banner (Compliance)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    No viewport meta tag found (Compliance)

  • Sprint 1

    8 tap target(s) too small or too close to neighbors (Accessibility)

  • Sprint 1

    https://www.cia.gov/static/Freedom250seal_Gold-New... is missing width/height — may cause layout shift (Performance)

  • Sprint 2

    Page weight 3.1 MB exceeds 1 MB target by 2.1 MB (Performance)

  • Sprint 1

    Cookie 'jsessionid' has no SameSite attribute (Security)

  • Sprint 1

    Unattributable: 909ms CPU time (Performance)

  • Sprint 3

    Third-party scripts: 2189ms (71% of total) (Performance)

…and 37 more recommended item(s)

Send Feedback