Skip to content

Changes

https://www.randaroofing.com
Compared to previous audit · 1 minute ago View previous audit

New York, United Stated → Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

25
New issues
13
Resolved
20
score changes
CategoryPreviousCurrentChange
CompositeB (81)B (81)—
PerformanceB (82)B (85) +3.000
SecurityB (84)C (78) -6.000
AccessibilityC (74)C (77) +3.000
SEOA (92)A+ (97) +5.000
InfrastructureB (82)B (82)—
ComplianceD (67)D (66) -1.000
ContentA (91)A (91)—
SustainabilityC (72)C (72)—
MetricPreviousCurrentChange
Performance 66003900 -2700
Accessibility 95009500—
Best Practices 96009600—
SEO 1000010000—
PWA 00—
Desktop Performance 96009500 -100
Desktop Accessibility 95009500—
Desktop Best Practices 960010000 +400
Desktop SEO 1000010000—
FCP 3.00 s3.41 s +406 ms
LCP 3.00 s7.99 s +4.98 s
TBT 811 ms1.23 s +421 ms
CLS 0.0020.000 -0.002
Desktop FCP 902 ms819 ms -83 ms
Desktop LCP 962 ms899 ms -62 ms
Desktop TBT 0 ms5 ms +5 ms
Desktop CLS 0.0020.002—
TTFB †202 ms100 ms -103 ms
DNS †138 ms60 ms -78 ms
TLS †27 ms11 ms -16 ms
Connect †17 ms2 ms -14 ms
Total †203 ms108 ms -95 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Domain expires in 16 days infrastructure
CRITICAL Page weighs 19.4 MB (12.5 MB transferred) performance
CRITICAL Cookie 'ssr-caching' is missing the Secure flag security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Cookie 'ssr-caching' has no SameSite attribute security
WARNING Total JS execution time is 10.6 s -- over the 3.5s budget performance
WARNING X-Frame-Options header is missing security
WARNING Cookie 'sec-fetch-unsupported' is missing the HttpOnly flag security
WARNING 214 third-party resources (98% of weight) performance
WARNING No Permissions-Policy header security
WARNING https://www.randaroofing.com/: 3001ms CPU time performance
WARNING https://static.parastorage.com/unpkg/react-dom@18....: 444ms CPU time performance
WARNING Referrer-Policy header is missing security
WARNING JavaScript is 671 KB — consider code splitting or lazy loading performance
WARNING 220 HTTP requests — consider bundling or reducing performance
WARNING 3 render-blocking <script src> tag(s) without async/defer performance
WARNING 2 unclassified cookie(s) set before any consent step compliance
WARNING Cookie 'ssr-caching' is missing the HttpOnly flag security
WARNING Unattributable: 3772ms CPU time performance
WARNING https://static.parastorage.com/unpkg/react@18.3.1/...: 1362ms CPU time performance
WARNING HSTS is enabled but missing includeSubDomains security
WARNING Permissions-Policy header is missing security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING 24 inline style attribute(s) detected security
WARNING https://static.parastorage.com/services/wix-thunde...: 293ms CPU time performance
CRITICAL Domain expires in 10 days infrastructure
CRITICAL Page weighs 19.5 MB (12.5 MB transferred) performance
CRITICAL HSTS header is missing security
WARNING Unexpected status code: HTTP 403 accessibility
WARNING JavaScript is 670 KB — consider code splitting or lazy loading performance
WARNING 215 HTTP requests — consider bundling or reducing performance
WARNING Compressed response missing `Vary` header performance
WARNING 209 third-party resources (98% of weight) performance
WARNING Unattributable: 3274ms CPU time performance
WARNING https://www.randaroofing.com/: 2416ms CPU time performance
WARNING https://static.parastorage.com/unpkg/react@18.3.1/...: 808ms CPU time performance
WARNING https://static.parastorage.com/services/wix-thunde...: 349ms CPU time performance
WARNING No favicon.ico at site root accessibility
CRITICAL 2.96g CO2 per page view sustainability
CRITICAL Content-Security-Policy header is missing security
CRITICAL 6 link(s) with no accessible text accessibility
CRITICAL 1 button(s) with no accessible text accessibility
WARNING https://static.parastorage.com/services/wix-thunde...: 23 KB unused (40%) performance
WARNING Third-party code accounts for 98% of page weight (12.3 MiB of 12.5 MiB) performance
WARNING https://static.parastorage.com/services/wix-thunde...: 23 KB unused (79%) performance
WARNING https://static.parastorage.com/services/wix-thunde...: 21 KB unused (48%) performance
WARNING 24 images missing explicit width/height content
WARNING 2.96g CO2 — above the median website (0.60g) sustainability
WARNING No SPF record found security
WARNING Multiple H1 headings (2 found) accessibility
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING 1 heading(s) are over 120 characters -- likely a misformatted paragraph accessibility
WARNING Page weight 12.5 MB exceeds 1 MB target by 11.5 MB performance
WARNING All 38 images use legacy formats (JPEG/PNG/GIF) content
WARNING SRI adoption: 0/29 third-party resources protected (0%) security
WARNING Heading level skipped: H1 → H3 (missing H2) accessibility
WARNING Title is 118 characters — will be truncated in search results seo
WARNING Terms of Service not detected compliance
WARNING CNAME record at zone apex infrastructure
WARNING No accessibility statement detected compliance
WARNING 5 image(s) with filename as alt text accessibility
WARNING 2 internal links have no anchor text seo
WARNING Missing or invalid @context in block #1 content
WARNING External script from static.parastorage.com lacks integrity attribute security
WARNING https://browser.sentry-cdn.com/7.120.3/bundle.trac...: 28 KB unused (71%) performance
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 3 field(s) would benefit from inputmode attribute accessibility
WARNING Registrar lock is NOT enabled infrastructure
WARNING No DMARC record found security
WARNING External script from browser.sentry-cdn.com lacks integrity attribute security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING https://static.parastorage.com/services/wix-thunde...: 34 KB unused (62%) performance
+ x-wix-request-id 1791827598.927419508041292041
+ set-cookie ssr-caching=cache#desc=hit#varnish=hit_hit#dc#desc=fastly_cf; max-age=20, sec...
+ vary Accept-Encoding
+ x-cache-status HIT
+ content-language en-US
+ cache-control public,max-age=0,must-revalidate
+ cf-cache-status DYNAMIC
+ link <https://static.parastorage.com/>; rel=preconnect; crossorigin, <https://stat...
+ etag W/"316dccb73223a2d27f3127ef5b049cf0"
+ alt-svc h3=":443"; ma=86400
+ content-length 223202
+ strict-transport-security max-age=31556952
+ accept-ranges bytes
− origin-agent-cluster ?1
− critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
− x-frame-options SAMEORIGIN
− cross-origin-opener-policy same-origin
− cross-origin-resource-policy same-origin
− accept-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
− referrer-policy same-origin
− cf-mitigated challenge
− permissions-policy accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(...
− cross-origin-embedder-policy require-corp
x-seen-by
bQAXdg/f3pWGCb3VI6q72A==, → bQAXdg/f3pWGCb3VI6q72A==,bQAXdg/f3pWGCb3VI6q72A==,Ct40diYObxC+je8ScvxEPQ==,Vt...

4 headers unchanged

+ Cloudflare Bot Management Security
+ HTTP/3 Miscellaneous
+ HSTS Security
+ Lodash JavaScript libraries v4.17.23
− Underscore.js JavaScript libraries

11 technologies unchanged

Looking ahead

+17 pts
B (81) Could reach A+ (98)
Accessibility +23Security +22Performance +15Infrastructure +14Sustainability +14Compliance +13Content +9SEO +3

Estimate — actual results may vary (59 issues to fix)

Website improvement report — Randaroofing

October 12, 2026 → October 12, 2026

B B 81 → 81 0 pts

13

Resolved

25

New issues

34

Still remaining

Financial summary

Investment delivered

₪4,775 in development time

Investment remaining

₪29,875 to complete the remaining items

Ongoing risk

₪12/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score81 (B)81 (B)0
Performance82 (B)85 (B)+3
Security84 (B)78 (C)-6
Accessibility74 (C)77 (C)+3
SEO92 (A)97 (A+)+5
Infrastructure82 (B)82 (B)0
Compliance67 (D)66 (D)-1
Content91 (A)91 (A)0
Sustainability72 (C)72 (C)0

Resolved (13)

  • Unexpected status code: HTTP 403 (Accessibility)

    → Improved usability for assistive technology users

  • JavaScript is 670 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • 215 HTTP requests — consider bundling or reducing (Performance)

    → Page loads faster for users

  • Compressed response missing `Vary` header (Performance)

    → Page loads faster for users

  • 209 third-party resources (98% of weight) (Performance)

    → Page loads faster for users

  • Unattributable: 3274ms CPU time (Performance)

    → Page loads faster for users

  • https://www.randaroofing.com/: 2416ms CPU time (Performance)

    → Page loads faster for users

  • https://static.parastorage.com/unpkg/react@18.3.1/...: 808ms CPU time (Performance)

    → Page loads faster for users

  • https://static.parastorage.com/services/wix-thunde...: 349ms CPU time (Performance)

    → Page loads faster for users

  • No favicon.ico at site root (Accessibility)

    → Improved usability for assistive technology users

  • Domain expires in 10 days (Infrastructure)

    → More reliable delivery

  • Page weighs 19.5 MB (12.5 MB transferred) (Performance)

    → Page loads faster for users

  • HSTS header is missing (Security)

    → Reduced attack surface for visitors

Recommended next steps (59)

  • Sprint 1

    Domain expires in 16 days (Infrastructure)

  • Sprint 1

    Page weighs 19.4 MB (12.5 MB transferred) (Performance)

  • Sprint 1

    Cookie 'ssr-caching' is missing the Secure flag (Security)

  • Sprint 1

    2.96g CO2 per page view (Sustainability)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    6 link(s) with no accessible text (Accessibility)

  • Sprint 1

    1 button(s) with no accessible text (Accessibility)

  • Sprint 2

    Cross-Origin-Embedder-Policy header is missing (Security)

  • Sprint 1

    Cookie 'ssr-caching' has no SameSite attribute (Security)

  • Sprint 2

    Total JS execution time is 10.6 s -- over the 3.5s budget (Performance)

  • Sprint 1

    X-Frame-Options header is missing (Security)

  • Sprint 1

    Cookie 'sec-fetch-unsupported' is missing the HttpOnly flag (Security)

  • Sprint 1

    214 third-party resources (98% of weight) (Performance)

  • Sprint 1

    No Permissions-Policy header (Security)

  • Sprint 1

    https://www.randaroofing.com/: 3001ms CPU time (Performance)

…and 44 more recommended item(s)

Send Feedback