Skip to content

Changes

https://pullitpacks.com
Compared to previous audit · 4 days ago View previous audit

Madrid, Spain → Sao Paulo, Brazil

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

15
New issues
16
Resolved
20
score changes
CategoryPreviousCurrentChange
CompositeB (80)B (82) +2.000
PerformanceA (91)A (91)—
SecurityC (74)C (78) +4.000
AccessibilityC (79)C (79)—
SEOB (82)B (83) +1.000
InfrastructureB (82)B (84) +2.000
ComplianceD (69)D (69)—
ContentC (75)C (73) -2.000
SustainabilityC (79)B (80) +1.000
MetricPreviousCurrentChange
Performance 55005800 +300
Accessibility 96009600—
Best Practices 1000010000—
SEO 91009100—
PWA 00—
Desktop Performance 93009600 +300
Desktop Accessibility 96009600—
Desktop Best Practices 1000010000—
Desktop SEO 91009100—
FCP 4.11 s2.00 s -2.12 s
LCP 6.33 s4.46 s -1.88 s
TBT 88 ms138 ms +50 ms
CLS 0.2060.656 +0.449
Desktop FCP 921 ms456 ms -464 ms
Desktop LCP 1.40 s1.38 s -21 ms
Desktop TBT 0 ms0 ms—
Desktop CLS 0.0110.000 -0.011
TTFB †249 ms181 ms -68 ms
DNS †81 ms36 ms -45 ms
TLS †6 ms21 ms +15 ms
Connect †1 ms16 ms +15 ms
Total †249 ms182 ms -68 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

WARNING Third-party code accounts for 63% of page weight (621.3 KiB of 988.7 KiB) performance
WARNING https://pullitpacks.com/assets/index-DDEm5X1t.js: 46 KB unused (54%) performance
WARNING 26 third-party resources (63% of weight) performance
WARNING https://pullitpacks.com/assets/aws-kLirSH7r.js: 31 KB unused (67%) performance
WARNING Thin content — only 88 words seo
WARNING Broken link: https://lvamkivp4fcwhgmpr4njokacqy.appsync-api.us-east-1.... content
WARNING 10 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING https://pullitpacks.com/assets/react-DqYccM46.js: 264ms CPU time performance
WARNING 2 font preload(s) missing `crossorigin` -- font will be downloaded twice performance
WARNING 32 of 33 links are healthy content
WARNING 10 above-fold image(s) marked loading="lazy" (LCP anti-pattern) content
WARNING SRI adoption: 0/1 third-party resources protected (0%) security
WARNING https://pullitpacks.com/: 402ms CPU time performance
WARNING Page has 88 words — thin content seo
WARNING https://pullitpacks.com/assets/react-DqYccM46.js: 24 KB unused (38%) performance
CRITICAL Page has only 32 words — nearly empty seo
CRITICAL Page body has only 183 chars of text -- likely empty / placeholder security
WARNING https://pullitpacks.com/assets/aws-DSCIpVe1.js: 434ms CPU time performance
WARNING Unattributable: 444ms CPU time performance
WARNING Broken link: https://fonts.googleapis.com content
WARNING No headings found accessibility
WARNING SRI adoption: 0/2 third-party resources protected (0%) security
WARNING 19 of 21 links are healthy content
WARNING https://pullitpacks.com/assets/aws-DSCIpVe1.js: 98 KB unused (51%) performance
WARNING https://pullitpacks.com/assets/index-Cb44Q5Rp.js: 26 KB unused (42%) performance
WARNING Broken link: https://fonts.gstatic.com content
WARNING External link from fonts.googleapis.com lacks integrity attribute security
WARNING Third-party code accounts for 59% of page weight (593.2 KiB of 1001.2 KiB) performance
WARNING https://pullitpacks.com/: 521ms CPU time performance
WARNING 33 third-party resources (59% of weight) performance
WARNING Thin content — only 32 words seo
CRITICAL HSTS header is missing security
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL Content-Security-Policy header is missing security
CRITICAL Both www and non-www versions serve content infrastructure
CRITICAL No Content-Security-Policy header found security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING 1 publicly-accessible JavaScript source map(s) security
WARNING No favicon.ico at site root accessibility
WARNING Title is only 13 characters — consider expanding seo
WARNING No meta description tag found seo
WARNING No canonical tag found seo
WARNING X-Frame-Options header is missing security
WARNING No DMARC record found security
WARNING Sitemap is empty -- 0 URLs listed seo
WARNING sitemap.xml is empty — no URLs found infrastructure
WARNING No Open Graph meta tags found content
WARNING Manifest contains invalid JSON accessibility
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING X-Content-Type-Options header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING sitemap.xml contains invalid XML infrastructure
WARNING No Permissions-Policy header security
WARNING Registrar lock is NOT enabled infrastructure
WARNING No privacy policy link detected compliance
WARNING No accessibility statement detected compliance
WARNING Privacy Policy not detected compliance
WARNING Referrer-Policy header is missing security
WARNING Permissions-Policy header is missing security
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING External script from www.redditstatic.com lacks integrity attribute security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
+ content-encoding br
etag
W/"81d154345f1f91da2426412b4703cd8e" → W/"f171f37987031e08c18c6774e22d92f1"
last-modified
Sun, 10 May 2026 01:37:33 GMT → Thu, 14 May 2026 08:05:00 GMT
via
1.1 19ba162983a19106ea1aeb19f13f3c42.cloudfront.net (CloudFront) → 1.1 67dcca6cd203eb944e3da0c9e0509316.cloudfront.net (CloudFront)

5 headers unchanged

+ Priority Hints Performance
− Google Font API Font scripts

11 technologies unchanged

Looking ahead

+15 pts
B (82) Could reach A+ (97)
Security +22Accessibility +21Infrastructure +16SEO +14Compliance +13Content +13Performance +9

Estimate — actual results may vary (46 issues to fix)

Website improvement report — Pullitpacks

May 10, 2026 → May 14, 2026

B B 80 → 82 +2 pts

16

Resolved

15

New issues

31

Still remaining

Financial summary

Investment delivered

$4,300 in development time

Investment remaining

$7,275 to complete the remaining items

Ongoing risk

$0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score80 (B)82 (B)+2
Performance91 (A)91 (A)0
Security74 (C)78 (C)+4
Accessibility79 (C)79 (C)0
SEO82 (B)83 (B)+1
Infrastructure82 (B)84 (B)+2
Compliance69 (D)69 (D)0
Content75 (C)73 (C)-2
Sustainability79 (C)80 (B)+1

Resolved (16)

  • https://pullitpacks.com/assets/aws-DSCIpVe1.js: 434ms CPU time (Performance)

    → Page loads faster for users

  • Unattributable: 444ms CPU time (Performance)

    → Page loads faster for users

  • Broken link: https://fonts.googleapis.com (Content)

    → Stronger social sharing and on-page quality

  • No headings found (Accessibility)

    → Improved usability for assistive technology users

  • SRI adoption: 0/2 third-party resources protected (0%) (Security)

    → Reduced attack surface for visitors

  • Page has only 32 words — nearly empty (SEO)

    → Better search engine visibility

  • 19 of 21 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • https://pullitpacks.com/assets/aws-DSCIpVe1.js: 98 KB unused (51%) (Performance)

    → Page loads faster for users

  • https://pullitpacks.com/assets/index-Cb44Q5Rp.js: 26 KB unused (42%) (Performance)

    → Page loads faster for users

  • Broken link: https://fonts.gstatic.com (Content)

    → Stronger social sharing and on-page quality

  • External link from fonts.googleapis.com lacks integrity attribute (Security)

    → Reduced attack surface for visitors

  • Third-party code accounts for 59% of page weight (593.2 KiB of 1001.2 KiB) (Performance)

    → Page loads faster for users

  • https://pullitpacks.com/: 521ms CPU time (Performance)

    → Page loads faster for users

  • Page body has only 183 chars of text -- likely empty / placeholder (Security)

    → Reduced attack surface for visitors

  • 33 third-party resources (59% of weight) (Performance)

    → Page loads faster for users

…and 1 more resolved issue(s)

Recommended next steps (46)

  • Sprint 1

    HSTS header is missing (Security)

  • Sprint 1

    Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 3

    Third-party code accounts for 63% of page weight (621.3 KiB of 988.7 KiB) (Performance)

  • Sprint 3

    https://pullitpacks.com/assets/index-DDEm5X1t.js: 46 KB unused (54%) (Performance)

  • Sprint 1

    26 third-party resources (63% of weight) (Performance)

  • Sprint 3

    https://pullitpacks.com/assets/aws-kLirSH7r.js: 31 KB unused (67%) (Performance)

  • Sprint 3

    Thin content — only 88 words (SEO)

  • Sprint 1

    Broken link: https://lvamkivp4fcwhgmpr4njokacqy.appsync-api.us-east-1.... (Content)

  • Sprint 1

    10 text node(s) render below 12 CSS pixels on mobile (Accessibility)

  • Sprint 1

    https://pullitpacks.com/assets/react-DqYccM46.js: 264ms CPU time (Performance)

  • Sprint 2

    2 font preload(s) missing `crossorigin` -- font will be downloaded twice (Performance)

  • Sprint 1

    32 of 33 links are healthy (Content)

…and 31 more recommended item(s)

Send Feedback