Skip to content
https://modsecurity.org

Performance

· 17 checks — Lighthouse + waterfall + sustainability rolled into one auditable list.
SCORE
92
GRADE
A
FIX
0
REVIEW
4
PASS
11
INFO
2

Performance-focused optimization plan with CWV assessment, top offenders, and time estimates

Mobile Desktop
77
Performance Overall performance score (0–100) based on Core Web Vitals and other metrics. 90+ is good.
89
Accessibility Measures how accessible the page is for users with disabilities. Checks color contrast, ARIA labels, and semantic HTML.
100
Best Practices Checks for modern web development best practices including HTTPS, no console errors, and secure JavaScript.
100
SEO Measures basic SEO optimizations: meta tags, crawlability, link text, and mobile friendliness.

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

864 ms

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

6.84 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

29 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.029

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

864 ms

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

6.85 s

Page Load Progression

375 ms
750 ms
1.1 s
1.5 s
1.9 s
2.2 s
2.6 s
3.0 s
Checks
17
11 PASS 4 REVIEW
B
Page Weight Budget
1.3 MB transferred, 20 requests
REVIEW
1.3 MB transferred, 20 requests
Info::
Page weighs 1.3 MB (1.3 MB transferred)
Warning::
Images are 1.1 MB — compress or use modern formats
Convert images to WebP/AVIF and resize to display dimensions to reduce transfer size.
Got: 1.1 MB
Info::
20 HTTP requests
Info::
Estimated 0.27 g CO2 per page load
1.3 MB / 2.4 MB budget
1.3 MB transferred
20 requests
0.27 g CO2 per page load
Images 1.1 MiB 87%
JavaScript 66.9 KiB 5%
Fonts 66.1 KiB 5%
Other 21.5 KiB 2%
CSS 6.9 KiB 1%
HTML 4.3 KiB 0%
Other 294 B 0%
0 2.4 MB 4.9 MB
Under budget

Convert images to WebP/AVIF and resize to display dimensions to reduce transfer size.

Why this matters

Image bandwidth is high — modern formats (WebP/AVIF) and resizing typically cut it 50%+.

Source: web.dev

C
Image Optimization
Action
8 images, 0 KB saveable
REVIEW
8 images, 0 KB saveable
Warning::
https://piwik.netnea.com/matomo/matomo.php?idsite=... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
https://modsecurity.org/images/owasp/logo.png is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
8 images 1.1 MB
0 oversized -0 KB
7 legacy format
2 missing dimensions CLS risk

Set explicit width and height to prevent CLS.

Why this matters

Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.

Source: web.dev / Core Web Vitals

Set explicit width and height to prevent CLS.

Why this matters

Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.

Source: web.dev / Core Web Vitals

B
JS Execution Cost
722ms total JS execution
REVIEW
722ms total JS execution
Warning::
Unattributable: 333ms CPU time
Warning::
https://modsecurity.org/: 307ms CPU time
Info::
https://piwik.netnea.com/matomo/matomo.js: 82ms CPU time
Warning::
Third-party scripts: 415ms (58% of total)

Main Thread Breakdown

Other 51% Style & Layout 23% Script Evaluation 16% Rendering 5% Parse HTML & CSS 3%
ScriptTotalScriptingParse/CompileParty
Unattributable333ms25ms0ms3rd
https://modsecurity.org/307ms18ms2ms1st
https://piwik.netnea.com/matomo/matomo.js82ms67ms12ms3rd
B
Page Weight Inventory
20 resources · 1.3 MB · 38 KB savings available
REVIEW
20 resources · 1.3 MB · 38 KB savings available
Warning::
Page weight 276 KB over 1MB target
Got: 1.3 MB Expected: ≤ 1 MB
Info::
4 third-party resources (5% of weight)
Info::
1 resources over 200KB
20 resources · 1.3 MiB · 4 third-party 275.9 KiB over 1MB target
Image 89% · 1.1 MiB
JavaScript 5% · 66.9 KiB
Font 5% · 66.1 KiB
CSS 1% · 6.9 KiB
Document 0% · 4.3 KiB
Other 0% · 294 B

~38.2 KiB of savings available

Remove unused JavaScript: 38.2 KiB
A+
Third-Party Impact
5% third-party, 0 ms blocking
PASS
5% third-party, 0 ms blocking
Info::
Third-party code accounts for 5% of page weight (65.2 KiB of 1.3 MiB)
Info::
Third-party blocking time is low (0 ms)
95%
First-party Third-party
A+
Text Compression
All text resources are compressed
PASS
All text resources are compressed
Info::
All text resources are compressed
All text resources are properly compressed.
A+
Font Loading
5 fonts (66 KB)
PASS
5 fonts (66 KB)
Info::
5 font(s) use font-display: swap (FOUT risk but functional)

Web fonts

5

66 KB total

Render-blocking

0

of 5

Dominant font-display

swap

Most common across fonts

Font loading timeline
Transfer FOIT (block) FOUT (swap)
0 ms 1.0 s 2.0 s 3.0 s 4.0 s 5.0 s 6.0 s 7.0 s FCP 864 ms LCP 6.8 shttps://modsecurity.org/fonts/nunito-v25-latin-regular.woff2nunito-v25-latin-regula... https://modsecurity.org/fonts/nunito-v25-latin-regular.woff2 — 14.0 KiB — 11 ms — font-display: swaphttps://modsecurity.org/fonts/oswald-v49-latin-700.woff2oswald-v49-latin-700.woff2 https://modsecurity.org/fonts/oswald-v49-latin-700.woff2 — 10.1 KiB — 13 ms — font-display: swaphttps://modsecurity.org/fonts/nunito-v25-latin-700.woff2nunito-v25-latin-700.woff2 https://modsecurity.org/fonts/nunito-v25-latin-700.woff2 — 13.8 KiB — 15 ms — font-display: swaphttps://modsecurity.org/fonts/nunito-v25-latin-800.woff2nunito-v25-latin-800.woff2 https://modsecurity.org/fonts/nunito-v25-latin-800.woff2 — 14.0 KiB — 23 ms — font-display: swaphttps://modsecurity.org/fonts/nunito-v25-latin-900.woff2nunito-v25-latin-900.woff2 https://modsecurity.org/fonts/nunito-v25-latin-900.woff2 — 14.2 KiB — 22 ms — font-display: swap
nunito-v25-latin-regula... woff2 swap
Size 14 KB
Load time 11 ms
Start 62 ms
Risk FOUT — text flashes from fallback to web font
oswald-v49-latin-700.woff2 woff2 swap
Size 10 KB
Load time 13 ms
Start 64 ms
Risk FOUT — text flashes from fallback to web font
nunito-v25-latin-700.woff2 woff2 swap
Size 14 KB
Load time 15 ms
Start 65 ms
Risk FOUT — text flashes from fallback to web font
nunito-v25-latin-800.woff2 woff2 swap
Size 14 KB
Load time 23 ms
Start 66 ms
Risk FOUT — text flashes from fallback to web font
nunito-v25-latin-900.woff2 woff2 swap
Size 14 KB
Load time 22 ms
Start 141 ms
Risk FOUT — text flashes from fallback to web font
Optimization checklist
  • Preload critical fonts (priority=high)
  • Use woff2 format for all fonts
  • Set font-display to swap, optional, or fallback
  • Subset large fonts (≤100 KB each)
A+
JS Bundles
3 scripts, 38 KB unused
PASS
3 scripts, 38 KB unused
Warning::
https://piwik.netnea.com/matomo/matomo.js: 38 KB unused (59%)
Consider code splitting or tree shaking to reduce unused code.
Info::
Total unused JavaScript: 38 KB
38 KB unused JavaScript

Downloaded but never executed on this page.

ScriptSizeUnusedMinifiedParty
https://piwik.netnea.com/matomo/matomo.js65 KB38 KB (59%)✓3rd
https://modsecurity.org/js/hoverintent.min.js1 KB—✓1st
https://modsecurity.org/js/scripts.min.12be4f9e8cd7fb0a93337b3c49efe7788e7bb4a2b8fe248334502fe8549a78b2.js1 KB—✓1st

Consider code splitting or tree shaking to reduce unused code.

Why this matters

This bundle has high unused code — code-split or tree-shake to ship only what executes.

Source: web.dev / Lighthouse coverage

A+
Resource Caching
All resources properly cached
PASS
All resources properly cached
Info::
No caching issues found
All static resources have appropriate caching headers.
A+
Critical Rendering Path
No render-blocking resources
PASS
No render-blocking resources
Info::
No render-blocking resources detected
A+
Resource Hints
4 hints, 0 missing preconnects
PASS
4 hints, 0 missing preconnects
Info::
Page uses 4 resource hint(s)

Current Resource Hints

preconnect
—
preload
4
dns-prefetch
—
prefetch
—

4 resource hints configured

A+
Render-Blocking Resources
No render-blocking resources detected
PASS
No render-blocking resources detected
Info::
No render-blocking resources detected in <head>
A+
Third-Party Resources
No third-party resources detected
PASS
No third-party resources detected
A+
Green Hosting
Whether the site is served from green-energy infrastructure
PASS

Green Hosting

This site is hosted on green energy infrastructure

Provider: Cloudflare

A+
HTTP Caching
max-age=600 (10 minutes)
PASS
max-age=600 (10 minutes)
Info::
Cache-Control header is set
Got: max-age=600
Info::
Effective TTL: 10 minutes (max-age=600)
Info::
Last-Modified header present
Cache-Control

max-age=600

DirectiveValueMeaning
max-age600Cache for 10 minutes
Effective TTL: 600 seconds
Network Waterfall
20 requests over 347ms
INFO
0 ms 1.0 s 2.0 s 3.0 s 4.0 s 5.0 s 6.0 s 7.0 s FCP 864 ms LCP 6.8 shttps://modsecurity.org// https://modsecurity.org/ — 200 — 4.3 KiB — 40 ms — h2https://modsecurity.org/fonts/nunito-v25-latin-regular.woff2/fonts/nunito-v25-latin-regular.wof... https://modsecurity.org/fonts/nunito-v25-latin-regular.woff2 — 200 — 14.0 KiB — 11 ms — h2https://modsecurity.org/fonts/oswald-v49-latin-700.woff2/fonts/oswald-v49-latin-700.woff2 https://modsecurity.org/fonts/oswald-v49-latin-700.woff2 — 200 — 10.1 KiB — 13 ms — h2https://modsecurity.org/fonts/nunito-v25-latin-700.woff2/fonts/nunito-v25-latin-700.woff2 https://modsecurity.org/fonts/nunito-v25-latin-700.woff2 — 200 — 13.8 KiB — 15 ms — h2https://modsecurity.org/fonts/nunito-v25-latin-800.woff2/fonts/nunito-v25-latin-800.woff2 https://modsecurity.org/fonts/nunito-v25-latin-800.woff2 — 200 — 14.0 KiB — 23 ms — h2https://modsecurity.org/css/styles.bdc3a253969505a9c22873e97099b77c77b55f81243353b2c802f540c984c7dc91dba986eaf5c18916b1050b3b851209182c004c3cd04a0d8a73ee189c9fa894.css/css/styles.bdc3a253969505a9c22873e... https://modsecurity.org/css/styles.bdc3a253969505a9c22873e97099b77c77b55f81243353b2c802f540c984c7dc91dba986eaf5c18916b1050b3b851209182c004c3cd04a0d8a73ee189c9fa894.css — 200 — 6.9 KiB — 19 ms — h2https://piwik.netnea.com/matomo/matomo.jspiwik.netnea.com/matomo/matomo.js https://piwik.netnea.com/matomo/matomo.js — 200 — 64.6 KiB — 168 ms — http/1.1https://piwik.netnea.com/matomo/matomo.php?idsite=5&rec=1piwik.netnea.com/matomo/matomo.php?... https://piwik.netnea.com/matomo/matomo.php?idsite=5&rec=1 — 200 — 305 B — 187 ms — http/1.1https://modsecurity.org/images/logo/horizontal.png/images/logo/horizontal.png https://modsecurity.org/images/logo/horizontal.png — 200 — 46.2 KiB — 25 ms — h2https://modsecurity.org/images/plugged.png/images/plugged.png https://modsecurity.org/images/plugged.png — 200 — 1.0 MiB — 79 ms — h2https://modsecurity.org/images/owasp/logo.png/images/owasp/logo.png https://modsecurity.org/images/owasp/logo.png — 200 — 15.6 KiB — 16 ms — h2https://modsecurity.org/js/hoverintent.min.js/js/hoverintent.min.js https://modsecurity.org/js/hoverintent.min.js — 200 — 951 B — 29 ms — h2https://modsecurity.org/js/scripts.min.12be4f9e8cd7fb0a93337b3c49efe7788e7bb4a2b8fe248334502fe8549a78b2.js/js/scripts.min.12be4f9e8cd7fb0a933... https://modsecurity.org/js/scripts.min.12be4f9e8cd7fb0a93337b3c49efe7788e7bb4a2b8fe248334502fe8549a78b2.js — 200 — 1.3 KiB — 29 ms — h2data:image/svg+xml,%3Csvg width='9' height='6' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3C…www.w3.org/2000/svg'%3E%3C… data:image/svg+xml,%3Csvg width='9' height='6' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3C… — 200 — 0 B — 0 ms — datahttps://modsecurity.org/img/social-icons/github.svg/img/social-icons/github.svg https://modsecurity.org/img/social-icons/github.svg — 200 — 995 B — 23 ms — h2https://modsecurity.org/img/social-icons/linkedin.svg/img/social-icons/linkedin.svg https://modsecurity.org/img/social-icons/linkedin.svg — 200 — 836 B — 26 ms — h2https://modsecurity.org/img/social-icons/slack.svg/img/social-icons/slack.svg https://modsecurity.org/img/social-icons/slack.svg — 200 — 1.3 KiB — 28 ms — h2https://modsecurity.org/fonts/nunito-v25-latin-900.woff2/fonts/nunito-v25-latin-900.woff2 https://modsecurity.org/fonts/nunito-v25-latin-900.woff2 — 200 — 14.2 KiB — 22 ms — h2https://piwik.netnea.com/matomo/matomo.php?action_name=Modsecurity%20Project&idsite=5&rec=1&r=585354&h=20&m=16&s=5&url=https%3A%2F%2Fmodsecurity.org%2F&_id=7960bf46d88367f5&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=412x823&pv_id=Wmr7yo&pf_net=24&pf_srv=15&pf_tfr=2&pf_dm1=44&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not-A.Brand%22%2C%22version%22%3A%2224.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22146.0.7680.164%22%7D%5D%2C%22mobile%22%3Atrue%2C%22model%22%3A%22moto%20g%20power%20(2022)%22%2C%22platform%22%3A%22Android%22%2C%22platformVersion%22%3A%2211.0%22%7Dpiwik.netnea.com/matomo/matomo.php?... https://piwik.netnea.com/matomo/matomo.php?action_name=Modsecurity%20Project&idsite=5&rec=1&r=585354&h=20&m=16&s=5&url=https%3A%2F%2Fmodsecurity.org%2F&_id=7960bf46d88367f5&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=412x823&pv_id=Wmr7yo&pf_net=24&pf_srv=15&pf_tfr=2&pf_dm1=44&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not-A.Brand%22%2C%22version%22%3A%2224.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22146.0.7680.164%22%7D%5D%2C%22mobile%22%3Atrue%2C%22model%22%3A%22moto%20g%20power%20(2022)%22%2C%22platform%22%3A%22Android%22%2C%22platformVersion%22%3A%2211.0%22%7D — 204 — 294 B — 61 ms — http/1.1https://modsecurity.org/favicon.svg/favicon.svg https://modsecurity.org/favicon.svg — 200 — 21.5 KiB — 12 ms — h2
HTML JavaScript CSS Images Fonts XHR/Fetch Other
Third-Party Script Cost
Per-script blocking time, transfer cost, and cache headers
INFO
58% of JavaScript execution is third-party
First-party Third-party 415ms · 65KB · $1/mo
Unattributable
Other
Costly
Execution 333ms
Transfer 0 KB
Monthly Cost $1/mo
piwik.netnea.com
Other
Optional
Execution 82ms
Transfer 65 KB
Unused 59%
Monthly Cost $0/mo

These scripts may cost more than they're worth

  • Unattributable adds 333ms and costs ~$1/month

58% of JavaScript execution time comes from third-party scripts.

Why this matters

Third-party scripts (analytics, ads, social, A/B testing) often dominate execution time — every one is a perf-and-privacy tax.

Learn more ▾

Each third-party script is a black box: you don't control when it loads, what it executes, or how much it grows. They often account for a major share of total blocking time on average sites (HTTP Archive's Web Almanac documents the trend). Audit which ones you actually need, defer the rest, and use facade patterns (lite-youtube, lite-vimeo) for embedded media.

Source: web.dev / HTTP Archive Web Almanac

Unattributable takes 333ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.

Why this matters

This script has high main-thread execution time — optimize hot paths or defer.

Source: web.dev

59% of piwik.netnea.com's code is unused. The script may be loading features you don't use.

Why this matters

Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.

Source: web.dev

How third-party costs are calculated

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback