Skip to content

Changes

https://www.classicivivi.it
Compared to previous audit · 6 minutes ago View previous audit
10
New issues
10
Resolved
16
score changes
CategoryPreviousCurrentChange
CompositeC (77)B (80) +3.000
PerformanceA (94)A (93) -1.000
SecurityD (65)C (74) +9.000
AccessibilityD (57)D (57)—
SEOB (89)B (89)—
InfrastructureC (79)A (90) +11.000
ComplianceB (86)B (86)—
ContentD (66)D (57) -9.000
SustainabilityB (88)B (88)—
MetricPreviousCurrentChange
Performance 72006300 -900
Accessibility 93009300—
Best Practices 1000010000—
SEO 83008300—
PWA 00—
Desktop Performance 98009800—
Desktop Accessibility 93009300—
Desktop Best Practices 1000010000—
Desktop SEO 83008300—
FCP 2.89 s4.56 s +1.67 s
LCP 4.50 s4.56 s +53 ms
TBT 323 ms388 ms +65 ms
CLS 0.0040.004—
Desktop FCP 691 ms696 ms—
Desktop LCP 1.12 s1.14 s +26 ms
Desktop TBT 27 ms44 ms +17 ms
Desktop CLS 0.0100.010—
TTFB †720 ms432 ms -288 ms
DNS †169 ms5 ms -165 ms
TLS †7 ms8 ms +1 ms
Connect †1 ms2 ms +0 ms
Total †747 ms458 ms -288 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 77
Projected
A 93
Actual
B 80
Fell short of projection
10 issues resolved since last audit
29 issues remaining
Resolving remaining issues could reach A

Estimate — actual results may vary

CRITICAL 'unsafe-eval' found in script source security
CRITICAL 'unsafe-inline' found in script source security
WARNING form-action directive is missing security
WARNING https://scripts.clarity.ms/0.8.59/clarity.js: 618ms CPU time performance
WARNING Unattributable: 289ms CPU time performance
WARNING frame-ancestors directive is missing security
WARNING Third-party scripts: 964ms (56% of total) performance
WARNING base-uri directive is missing security
WARNING https://www.classicivivi.it/: 694ms CPU time performance
WARNING Session replay tool detected: Microsoft Clarity compliance
CRITICAL HSTS header is missing security
CRITICAL Content-Security-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING IPv6 DNS records exist but server is not reachable infrastructure
WARNING No accessibility statement detected compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Unattributable: 256ms CPU time performance
WARNING No meta description tag found seo
WARNING https://www.classicivivi.it/: 642ms CPU time performance
WARNING https://scripts.clarity.ms/0.8.59/clarity.js: 509ms CPU time performance
CRITICAL No <main> landmark found accessibility
CRITICAL Both www and non-www versions serve content infrastructure
WARNING External script from scripts.clarity.ms lacks integrity attribute security
WARNING No DMARC record found security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Broken link: https://fonts.googleapis.com content
WARNING Bare server default 404 page accessibility
WARNING Only 32% reduction on repeat visits sustainability
WARNING External script from www.clarity.ms lacks integrity attribute security
WARNING 1 control(s) rely on placeholder only accessibility
WARNING data:image/png;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/... is missing width/height — may cause layout shift performance
WARNING No canonical tag found seo
WARNING No Open Graph meta tags found content
WARNING 4 link(s) open in new tab without warning accessibility
WARNING 100% of images have non-descriptive filenames seo
WARNING 9 of 11 links are healthy content
WARNING Broken link: https://fonts.gstatic.com content
WARNING External link from fonts.googleapis.com lacks integrity attribute security
WARNING Terms of Service not detected compliance
+ strict-transport-security max-age=31536000; includeSubDomains
+ cross-origin-opener-policy same-origin
+ cross-origin-resource-policy cross-origin
+ content-security-policy default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:
+ cross-origin-embedder-policy unsafe-none

12 headers unchanged

+ HSTS Security

4 technologies unchanged

Looking ahead

+14 pts
B (80) Could reach A (94)
Security +26Accessibility +21Content +13Infrastructure +10Compliance +8SEO +8Performance +7Sustainability +4

Estimate — actual results may vary (29 issues to fix)

Website improvement report — Classicivivi

April 12, 2026 → April 12, 2026

C B 77 → 80 +3 pts

10

Resolved

10

New issues

19

Still remaining

Financial summary

Investment delivered

€371 in development time

Investment remaining

€1,746 to complete the remaining items

Ongoing risk

€0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score77 (C)80 (B)+3
Performance94 (A)93 (A)-1
Security65 (D)74 (C)+9
Accessibility57 (D)57 (D)0
SEO89 (B)89 (B)0
Infrastructure79 (C)90 (A)+11
Compliance86 (B)86 (B)0
Content66 (D)57 (D)-9
Sustainability88 (B)88 (B)0

Resolved (10)

  • Cross-Origin-Embedder-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • IPv6 DNS records exist but server is not reachable (Infrastructure)

    → More reliable delivery

  • HSTS header is missing (Security)

    → Reduced attack surface for visitors

  • No accessibility statement detected (Compliance)

    → Reduced regulatory exposure

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Unattributable: 256ms CPU time (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • https://www.classicivivi.it/: 642ms CPU time (Performance)

    → Page loads faster for users

  • https://scripts.clarity.ms/0.8.59/clarity.js: 509ms CPU time (Performance)

    → Page loads faster for users

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

Recommended next steps (29)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    form-action directive is missing (Security)

  • Sprint 1

    https://scripts.clarity.ms/0.8.59/clarity.js: 618ms CPU time (Performance)

  • Sprint 1

    Unattributable: 289ms CPU time (Performance)

  • Sprint 1

    frame-ancestors directive is missing (Security)

  • Sprint 3

    Third-party scripts: 964ms (56% of total) (Performance)

  • Sprint 1

    base-uri directive is missing (Security)

  • Sprint 1

    https://www.classicivivi.it/: 694ms CPU time (Performance)

  • Sprint 2

    Session replay tool detected: Microsoft Clarity (Compliance)

  • Sprint 1

    External script from scripts.clarity.ms lacks integrity attribute (Security)

  • Sprint 2

    No DMARC record found (Security)

  • Sprint 1

    Skip navigation link is missing (WCAG 2.4.1) (Accessibility)

…and 14 more recommended item(s)

Send Feedback