Main HTML cached for 240 minutes -- risks stale auth / SPA state
Long max-age on the main HTML document means users may see outdated auth state, SPA shells, or A/B variants until the cache expires. Consider Cache-Control: no-cache (or max-age=300) for HTML and let your hashed assets (JS/CSS/images) carry the long cache instead.
Got: public, max-age=14400, s-maxage=3600
B
Server-Timing Observability
No Server-Timing header found
REVIEW
No Server-Timing header found
Info::
i
No Server-Timing header found
Server-Timing exposes backend timing breakdowns to browser DevTools (e.g., `db: 45ms; render: 120ms; cache: 2ms`). Useful for diagnosing slow pages without backend log access. Most modern frameworks (Next.js, Cloudflare Workers, Fastly) emit it automatically; absence on a managed platform usually means telemetry headers are stripped at the edge.
A
Page Weight Budget
807 KB transferred, 48 requests
PASS
807 KB transferred, 48 requests
Info::
✓
Page weighs 1.3 MB (807 KB transferred)
Info::
✓
48 HTTP requests
Info::
i
Estimated 0.17 g CO2 per page load
807 KBtransferred
48 requests
0.17 g CO2 per page load
Images530.4 KiB66%
JavaScript148.7 KiB18%
Fonts72.0 KiB9%
HTML20.6 KiB3%
CSS18.0 KiB2%
Other9.0 KiB1%
Other7.1 KiB1%
Other867 B0%
Other0 B0%
02.4 MB4.9 MB
Under budget
A+
Third-Party Impact
1% third-party, 0 ms blocking
PASS
1% third-party, 0 ms blocking
Info::
i
Third-party code accounts for 1% of page weight (4.1 KiB of 806.6 KiB)
Info::
✓
Third-party blocking time is low (0 ms)
99%
First-party Third-party
A+
Text Compression
All text resources are compressed
PASS
All text resources are compressed
Info::
✓
All text resources are compressed
All text resources are properly compressed.
A+
Font Loading
2 fonts (72 KB)
PASS
2 fonts (72 KB)
Info::
i
2 font(s) use font-display: swap (FOUT risk but functional)
All static resources have appropriate caching headers.
A+
Critical Rendering Path
No render-blocking resources
PASS
No render-blocking resources
Info::
✓
No render-blocking resources detected
A+
Resource Hints
4 hints, 0 missing preconnects
PASS
4 hints, 0 missing preconnects
Info::
✓
Page uses 4 resource hint(s)
Current Resource Hints
preconnect—
preload
4
dns-prefetch—
prefetch—
4 resource hints configured
A+
HTTP/3 (QUIC)
HTTP/3 advertised via Alt-Svc
PASS
HTTP/3 advertised via Alt-Svc
Info::
✓
HTTP/3 (QUIC) is supported
First-load mobile users on cellular networks see meaningful latency improvements with HTTP/3. The QUIC transport collapses TLS + TCP handshakes into one and recovers faster from packet loss.
A+
Document Compression
Document response uses brotli
PASS
Document response uses brotli
Info::
✓
Main HTML response uses brotli (Content-Encoding: br)
Brotli is the best text-compression algorithm for general use, ~20% smaller than gzip on average (40% on smaller files). Modern browsers all support it.
A+
LCP Image Preload
LCP preload audit not available
PASS
LCP preload audit not available
Info::
✓
LCP image preload audit not available for this scan
The page declares a `Vary` header, telling downstream caches which request headers the response varies on. Critical for content-negotiated responses (compression, language, cookies, device class).
Info::
i
No `ETag` or `Last-Modified` -- conditional GET not supported
Without either header, browsers can't issue conditional GETs and refresh always re-downloads the full response body even when nothing changed. Add `ETag: "<hash>"` (or `Last-Modified: <date>`) on cacheable responses; the server returns 304 Not Modified when the client's cached copy is still valid, saving bandwidth.
2 render-blocking <script src> tag(s) without async/defer
Each `<script src=...>` without `async`, `defer`, or `type="module"` blocks HTML parsing while the browser fetches and executes it. The block lasts the entire round-trip + execution time -- on slow networks this translates directly into LCP delay. Add `defer` (executes after parse, in source order) for scripts that interact with the DOM, or `async` (executes whenever ready) for analytics / independent scripts. Module scripts (`type="module"`) are deferred by default.
A+
CSS Performance Depth
No CSS performance depth issues detected
PASS
No CSS performance depth issues detected
Info::
✓
No CSS performance depth issues detected
A+
Green Hosting
Whether the site is served from green-energy infrastructure
PASS
Green Hosting
This site is hosted on green energy infrastructure
Provider: Cloudflare
A+
HTTP Caching
max-age=14400 (4 hours)
PASS
max-age=14400 (4 hours)
Info::
✓
Cache-Control header is set
Got: public, max-age=14400, s-maxage=3600
Info::
✓
Effective TTL: 4 hours (max-age=14400)
Info::
✓
CDN TTL: 1 hour (s-maxage=3600)
Info::
i
No ETag or Last-Modified header
Conditional requests (304 Not Modified) are not possible without validators.
Cache-Control
public, max-age=14400, s-maxage=3600
Directive
Value
Meaning
public
—
Any cache may store this response
max-age
14400
Cache for 4 hours
s-maxage
3600
CDN caches for 1 hour
Effective TTL: 14400 seconds
Asset Compression
No text asset hosts to measure
INFO
No text asset hosts to measure
Info::
i
No third-party or subdomain host served enough text assets to measure
Asset compression is measured per host, from one HEAD request against a sampled resource. Pages that serve all their JS and CSS from the document's own origin are covered by the document compression check instead.
Network Waterfall
48 requests over 1184ms
INFO
HTML JavaScript CSS Images Fonts XHR/Fetch Other
Image Optimization
13 images, 113 KB total, 0 KB wasted
INFO
Image Optimization Audit
Total Images
13
Total Size
113 KB
1 missing lazy loading
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.