Skip to content

Changes

https://www.classicivivi.it
Compared to previous audit · 6 minutes ago View previous audit
10
New issues
12
Resolved
16
score changes
CategoryPreviousCurrentChange
CompositeC (77)B (80) +3.000
PerformanceA (94)A (93) -1.000
SecurityD (65)C (74) +9.000
AccessibilityD (57)D (57)—
SEOB (89)B (89)—
InfrastructureC (79)A (90) +11.000
ComplianceB (86)B (86)—
ContentD (66)D (57) -9.000
SustainabilityB (88)B (88)—
MetricPreviousCurrentChange
Performance 72006300 -900
Accessibility 93009300—
Best Practices 1000010000—
SEO 83008300—
PWA 00—
Desktop Performance 98009800—
Desktop Accessibility 93009300—
Desktop Best Practices 1000010000—
Desktop SEO 83008300—
FCP 2.89 s4.56 s +1.67 s
LCP 4.50 s4.56 s +53 ms
TBT 323 ms388 ms +65 ms
CLS 0.0040.004—
Desktop FCP 691 ms696 ms—
Desktop LCP 1.12 s1.14 s +26 ms
Desktop TBT 27 ms44 ms +17 ms
Desktop CLS 0.0100.010—
TTFB †720 ms432 ms -288 ms
DNS †169 ms5 ms -165 ms
TLS †7 ms8 ms +1 ms
Connect †1 ms2 ms +0 ms
Total †747 ms458 ms -288 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 77
Projected
A 93
Actual
B 80
Fell short of projection
12 issues resolved since last audit
29 issues remaining
Resolving remaining issues could reach A

Estimate — actual results may vary

CRITICAL 'unsafe-eval' found in script source security
CRITICAL 'unsafe-inline' found in script source security
WARNING base-uri directive is missing security
WARNING frame-ancestors directive is missing security
WARNING https://scripts.clarity.ms/0.8.59/clarity.js: 618ms CPU time performance
WARNING Third-party scripts: 964ms (56% of total) performance
WARNING Unattributable: 289ms CPU time performance
WARNING form-action directive is missing security
WARNING https://www.classicivivi.it/: 694ms CPU time performance
WARNING Session replay tool detected: Microsoft Clarity compliance
CRITICAL Content-Security-Policy header is missing security
CRITICAL No Content-Security-Policy header found security
CRITICAL HSTS header is missing security
WARNING Unattributable: 256ms CPU time performance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING No accessibility statement detected compliance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING https://scripts.clarity.ms/0.8.59/clarity.js: 509ms CPU time performance
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING https://www.classicivivi.it/: 642ms CPU time performance
WARNING No meta description tag found seo
WARNING IPv6 DNS records exist but server is not reachable infrastructure
CRITICAL No <main> landmark found accessibility
CRITICAL Both www and non-www versions serve content infrastructure
WARNING External link from fonts.googleapis.com lacks integrity attribute security
WARNING 100% of images have non-descriptive filenames seo
WARNING Terms of Service not detected compliance
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 9 of 11 links are healthy content
WARNING Only 32% reduction on repeat visits sustainability
WARNING External script from www.clarity.ms lacks integrity attribute security
WARNING 4 link(s) open in new tab without warning accessibility
WARNING Broken link: https://fonts.googleapis.com content
WARNING No canonical tag found seo
WARNING Broken link: https://fonts.gstatic.com content
WARNING No Open Graph meta tags found content
WARNING External script from scripts.clarity.ms lacks integrity attribute security
WARNING No DMARC record found security
WARNING Bare server default 404 page accessibility
WARNING data:image/png;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/... is missing width/height — may cause layout shift performance
WARNING 1 control(s) rely on placeholder only accessibility
+ content-security-policy default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:
+ strict-transport-security max-age=31536000; includeSubDomains
+ cross-origin-opener-policy same-origin
+ cross-origin-resource-policy cross-origin
+ cross-origin-embedder-policy unsafe-none

12 headers unchanged

+ HSTS Security

4 technologies unchanged

Looking ahead

+14 pts
B (80) Could reach A (94)
Security +26Accessibility +21Content +13Infrastructure +10Compliance +8SEO +8Performance +7Sustainability +4

Estimate — actual results may vary (29 issues to fix)

Website improvement report — Classicivivi

April 12, 2026 → April 12, 2026

C B 77 → 80 +3 pts

12

Resolved

10

New issues

19

Still remaining

Financial summary

Investment delivered

€646 in development time

Investment remaining

€1,746 to complete the remaining items

Ongoing risk

€0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score77 (C)80 (B)+3
Performance94 (A)93 (A)-1
Security65 (D)74 (C)+9
Accessibility57 (D)57 (D)0
SEO89 (B)89 (B)0
Infrastructure79 (C)90 (A)+11
Compliance86 (B)86 (B)0
Content66 (D)57 (D)-9
Sustainability88 (B)88 (B)0

Resolved (12)

  • Unattributable: 256ms CPU time (Performance)

    → Page loads faster for users

  • Cross-Origin-Opener-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • Content-Security-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • No accessibility statement detected (Compliance)

    → Reduced regulatory exposure

  • GDPR Article 13 disclosure coverage: 0 / 8 categories (Compliance)

    → Reduced regulatory exposure

  • No Content-Security-Policy header found (Security)

    → Reduced attack surface for visitors

  • https://scripts.clarity.ms/0.8.59/clarity.js: 509ms CPU time (Performance)

    → Page loads faster for users

  • HSTS header is missing (Security)

    → Reduced attack surface for visitors

  • Cross-Origin-Embedder-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • https://www.classicivivi.it/: 642ms CPU time (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • IPv6 DNS records exist but server is not reachable (Infrastructure)

    → More reliable delivery

Recommended next steps (29)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 1

    base-uri directive is missing (Security)

  • Sprint 1

    frame-ancestors directive is missing (Security)

  • Sprint 1

    https://scripts.clarity.ms/0.8.59/clarity.js: 618ms CPU time (Performance)

  • Sprint 3

    Third-party scripts: 964ms (56% of total) (Performance)

  • Sprint 1

    Unattributable: 289ms CPU time (Performance)

  • Sprint 1

    form-action directive is missing (Security)

  • Sprint 1

    https://www.classicivivi.it/: 694ms CPU time (Performance)

  • Sprint 2

    Session replay tool detected: Microsoft Clarity (Compliance)

  • Sprint 1

    External link from fonts.googleapis.com lacks integrity attribute (Security)

  • Sprint 1

    100% of images have non-descriptive filenames (SEO)

  • Sprint 1

    Terms of Service not detected (Compliance)

…and 14 more recommended item(s)

Send Feedback