Changes
Madrid, Spain → New York, United Stated
These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.
| Category | Previous | Current | Change |
|---|---|---|---|
| Composite | D (69) | C (79) | +10.000 |
| Performance | D (65) | C (79) | +14.000 |
| Security | D (65) | B (80) | +15.000 |
| Accessibility | F (41) | D (68) | +27.000 |
| SEO | A (95) | A (94) | -1.000 |
| Infrastructure | B (87) | A (94) | +7.000 |
| Compliance | B (83) | D (63) | -20.000 |
| Content | C (77) | C (74) | -3.000 |
| Sustainability | D (66) | B (81) | +15.000 |
| Metric | Previous | Current | Change |
|---|---|---|---|
| Performance | 2600 | 3400 | +800 |
| Accessibility | 9200 | 9900 | +700 |
| Best Practices | 7700 | 9200 | +1500 |
| SEO | 8500 | 8500 | — |
| PWA | 0 | 0 | — |
| Desktop Performance | 4800 | 6900 | +2100 |
| Desktop Accessibility | 8000 | 8700 | +700 |
| Desktop Best Practices | 7700 | 9600 | +1900 |
| Desktop SEO | 8500 | 8500 | — |
| FCP | 4.65 s | 4.04 s | -616 ms |
| LCP | 13.66 s | 18.12 s | +4.46 s |
| TBT | 12.77 s | 1.11 s | -11.66 s |
| CLS | 0.038 | 0.070 | +0.032 |
| Desktop FCP | 866 ms | 880 ms | +14 ms |
| Desktop LCP | 3.57 s | 4.45 s | +874 ms |
| Desktop TBT | 523 ms | 146 ms | -377 ms |
| Desktop CLS | 0.018 | 0.007 | -0.011 |
| TTFB † | 234 ms | 343 ms | +109 ms |
| DNS † | 5 ms | 36 ms | +31 ms |
| TLS † | 7 ms | 20 ms | +13 ms |
| Connect † | 1 ms | 16 ms | +15 ms |
| Total † | 248 ms | 364 ms | +117 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
Projected vs. Actual
Estimate — actual results may vary
content-security-policy-report-only script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri http...set-cookie cf_willow_version_key=ef144f27-e07a-4a75-9083-c353e1838353; Path=/; SameSite=... → cf_willow_version_key=409e3db5-3047-4621-af81-a9404b47a35a; Path=/; SameSite=...11 headers unchanged
13 technologies unchanged
Looking ahead
+18 ptsEstimate — actual results may vary (67 issues to fix)
Website improvement report — Cloudflare
April 4, 2026 → May 10, 2026
37
Resolved
40
New issues
27
Still remaining
Financial summary
Investment delivered
$7,975 in development time
Investment remaining
$9,600 to complete the remaining items
Ongoing risk
$1/month in ongoing exposure
Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.
Performance by category
| Metric | Before | After | Change |
|---|---|---|---|
| Overall score | 69 (D) | 79 (C) | +10 |
| Performance | 65 (D) | 79 (C) | +14 |
| Security | 65 (D) | 80 (B) | +15 |
| Accessibility | 41 (F) | 68 (D) | +27 |
| SEO | 95 (A) | 94 (A) | -1 |
| Infrastructure | 87 (B) | 94 (A) | +7 |
| Compliance | 83 (B) | 63 (D) | -20 |
| Content | 77 (C) | 74 (C) | -3 |
| Sustainability | 66 (D) | 81 (B) | +15 |
Resolved (37)
Cookie '_ga' has no SameSite attribute (Security)
→ Reduced attack surface for visitors
279 HTTP requests — consider bundling or reducing (Performance)
→ Page loads faster for users
Cookie '_ga' is missing the HttpOnly flag (Security)
→ Reduced attack surface for visitors
https://www.googletagmanager.com/gtm.js?id=GTM-NDG...: 100 KB unused (62%) (Performance)
→ Page loads faster for users
https://www.cloudflare.com/go9u/gtd?id=G-SQCRB0TXZ...: 70 KB unused (41%) (Performance)
→ Page loads faster for users
Cookie '_ga' is missing the Secure flag (Security)
→ Reduced attack surface for visitors
External script from js.adsrvr.org lacks integrity attribute (Security)
→ Reduced attack surface for visitors
Page weight 13.5 MB exceeds 1 MB target by 12.5 MB (Performance)
→ Page loads faster for users
3.19g CO2 — above the median website (0.60g) (Sustainability)
→ Lower carbon footprint per page view
External script from snap.licdn.com lacks integrity attribute (Security)
→ Reduced attack surface for visitors
External script from munchkin.marketo.net lacks integrity attribute (Security)
→ Reduced attack surface for visitors
No meta description tag found (SEO)
→ Better search engine visibility
https://www.cloudflare.com/go9u/?id=DC-9309168&cx=...: 65 KB unused (48%) (Performance)
→ Page loads faster for users
1 heading(s) are over 120 characters -- likely a misformatted paragraph (Accessibility)
→ Improved usability for assistive technology users
Unattributable: 5183ms CPU time (Performance)
→ Page loads faster for users
…and 22 more resolved issue(s)
Recommended next steps (67)
- Sprint 1
Broken link: https://www.cloudflare.com/plans/enterprise/demo/ (Content)
- Sprint 1
Cookie '_cfms_willow' is missing the Secure flag (Security)
- Sprint 1
Cookie 'cf_willow_version_key' is missing the Secure flag (Security)
- Sprint 2
6 control(s) without accessible label (Accessibility)
- Sprint 1
2 button(s) with no accessible text (Accessibility)
- Sprint 2
Content-Security-Policy header is missing (Security)
- Sprint 2
10 non-essential cookie(s) set without consent banner (Compliance)
- Sprint 1
og:image is not reachable (Content)
- Sprint 1
https://www.cloudflare.com/_willow/index.astro_ast...: 7327ms CPU time (Performance)
- Sprint 2
Total JS execution time is 13.8 s -- over the 3.5s budget (Performance)
- Sprint 2
Hreflang cluster missing self-reference (Compliance)
- Sprint 1
Cookie 'cf_willow_version_key' is missing the HttpOnly flag (Security)
- Sprint 2
1455 inline style attribute(s) detected (Security)
- Sprint 1
https://www.cloudflare.com/: 2781ms CPU time (Performance)
- Sprint 1
Page weighs 8.5 MB (3.9 MB transferred) (Performance)
…and 52 more recommended item(s)