Skip to content

Changes

https://www.snapchat.com
Compared to previous audit · 31 weeks ago View previous audit

Madrid, Spain → Sao Paulo, Brazil

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

36
New issues
39
Resolved
28
score changes
CategoryPreviousCurrentChange
CompositeC (74)B (85) +11.000
PerformanceC (71)B (84) +13.000
SecurityC (70)B (85) +15.000
AccessibilityD (65)B (86) +21.000
SEOB (85)A (92) +7.000
InfrastructureB (89)B (88) -1.000
ComplianceC (75)C (74) -1.000
ContentB (87)B (86) -1.000
SustainabilityF (46)C (78) +32.000
MetricPreviousCurrentChange
Performance 36006100 +2500
Accessibility 930010000 +700
Best Practices 92009600 +400
SEO 1000010000—
PWA 00—
Desktop Performance 37008000 +4300
Desktop Accessibility 80009600 +1600
Desktop Best Practices 92009600 +400
Desktop SEO 92009200—
FCP 1.97 s2.55 s +581 ms
LCP 11.12 s14.59 s +3.47 s
TBT 2.11 s430 ms -1.68 s
CLS 0.0010.002 +0.001
Desktop FCP 655 ms904 ms +249 ms
Desktop LCP 13.18 s2.93 s -10.25 s
Desktop TBT 998 ms149 ms -849 ms
Desktop CLS 0.0040.000 -0.004
TTFB †17 ms220 ms +203 ms
DNS †5 ms43 ms +38 ms
TLS †5 ms21 ms +16 ms
Connect †2 ms17 ms +15 ms
Total †19 ms243 ms +223 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 74
Projected
A 95
Actual
B 85
Close to projection — 10 points away
39 issues resolved since last audit
46 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL 'unsafe-inline' found in script source security
CRITICAL 128 of 132 links are healthy content
WARNING Cookie 'sc-config-cache-key' is missing the HttpOnly flag security
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 136 KB unused (74%) performance
WARNING 0.64g CO2 — above the median website (0.60g) sustainability
WARNING Page weighs 5.0 MB (2.7 MB transferred) performance
WARNING Third-party scripts: 1217ms (56% of total) performance
WARNING Page weight 2.7 MB exceeds 1 MB target by 1.7 MB performance
WARNING No SPF record found security
WARNING 1 link(s) with generic text accessibility
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 282ms CPU time performance
WARNING 2 unclassified cookie(s) set before any consent step compliance
WARNING 4 link(s) open in new tab without warning accessibility
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 21 KB unused (87%) performance
WARNING Title is only 17 characters — consider expanding seo
WARNING 1 internal links use generic anchor text seo
WARNING Broken link: https://www.snapchat.com/favicon.svg content
WARNING SRI adoption: 0/31 third-party resources protected (0%) security
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 935ms CPU time performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 67 KB unused (91%) performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 20 KB unused (57%) performance
WARNING 63 third-party resources (98% of weight) performance
WARNING Registrar lock is NOT enabled infrastructure
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Broken link: https://www.snapchat.com/apple-touch-icon-yellow-192.png content
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING Third-party code accounts for 98% of page weight (2.6 MiB of 2.7 MiB) performance
WARNING https://www.snapchat.com/: 466ms CPU time performance
WARNING https://static.snapchat.com/sc-com/_next/static/ch...: 44 KB unused (39%) performance
WARNING 4 render-blocking <script src> tag(s) without async/defer performance
WARNING Broken link: https://cf-st.sc-cdn.net content
WARNING 3 risky subdomain name(s) advertised in certificate SANs security
WARNING Broken link: https://www.snapchat.com/favicon-192x192.png content
WARNING Cookie 'sc-wcid' is missing the HttpOnly flag security
WARNING JavaScript is 640 KB — consider code splitting or lazy loading performance
WARNING Unattributable: 499ms CPU time performance
CRITICAL 1 control(s) without accessible label accessibility
CRITICAL Page weighs 14.9 MB (14.1 MB transferred) performance
CRITICAL Viewport prevents user zooming compliance
CRITICAL 3.34g CO2 per page view sustainability
CRITICAL No H1 heading found accessibility
CRITICAL Transfer efficiency: 38% sustainability
WARNING https://static.snapchat.com/snapchat-dot-com/_next...: 3208ms CPU time performance
WARNING https://static.snapchat.com/snapchat-dot-com/_next...: 1472ms CPU time performance
WARNING Page has 154 words — thin content seo
WARNING 1 control(s) rely on placeholder only accessibility
WARNING JavaScript is 12.0 MB — consider code splitting or lazy loading performance
WARNING https://static.snapchat.com/images/snapchatdotcom/... is missing width/height — may cause layout shift performance
WARNING Third-party scripts: 5403ms (80% of total) performance
WARNING No meta description tag found seo
WARNING No `<meta charset>` declaration in HTML seo
WARNING Referrer-Policy header is missing security
WARNING base-uri directive is missing security
WARNING https://www.snapchat.com/: 680ms CPU time performance
WARNING https://static.snapchat.com/snapchat-dot-com/_next...: 27 KB unused (53%) performance
WARNING form-action directive is missing security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING Third-party code accounts for 100% of page weight (14.1 MiB of 14.1 MiB) performance
WARNING Terms of Service not detected compliance
WARNING 3.34g CO2 — above the median website (0.60g) sustainability
WARNING External script from www.googletagmanager.com lacks integrity attribute security
WARNING https://www.googletagmanager.com/gtag/js?id=G-DPDH...: 565ms CPU time performance
WARNING object-src allows plugin content security
WARNING External script from www.google-analytics.com lacks integrity attribute security
WARNING Unattributable: 696ms CPU time performance
WARNING Thin content — only 154 words seo
WARNING X-Content-Type-Options header is missing security
WARNING No Permissions-Policy header security
WARNING https://static.snapchat.com/snapchat-dot-com/_next...: 8.6 MB unused (76%) performance
WARNING https://www.googletagmanager.com/gtag/js?id=G-DPDH...: 66 KB unused (40%) performance
WARNING Main HTML cached for 180 minutes -- risks stale auth / SPA state performance
WARNING HSTS is missing includeSubDomains security
WARNING Page weight 14.1 MB exceeds 1 MB target by 13.1 MB performance
WARNING 66 third-party resources (100% of weight) performance
WARNING Permissions-Policy header is missing security
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING External link from static.snapchat.com lacks integrity attribute security
WARNING No accessibility statement detected compliance
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING CNAME record at zone apex infrastructure
WARNING No DMARC record found security
WARNING Images are 1.5 MB — compress or use modern formats performance
WARNING X-Powered-By header reveals technology stack security
WARNING External script from static.snapchat.com lacks integrity attribute security
+ link <https://cf-st.sc-cdn.net>; rel=preconnect, <https://bolt-gcdn.sc-cdn.net>; r...
+ permissions-policy camera=(), microphone=(), geolocation=(), payment=()
+ content-encoding gzip
+ referrer-policy strict-origin-when-cross-origin
+ set-cookie sc-wcid=a4e849e1-714a-4d4a-9c33-fe9c96108211; Path=/; Max-Age=86400; SameSite...
+ x-content-type-options nosniff
− etag "jdcgyq567a1jx6"
− x-xss-protection 0
− x-snap-client-country BR
strict-transport-security
max-age=31536000, max-age=31536000; includeSubDomains → max-age=31536000; includeSubDomains
cache-control
public, max-age=10800, s-maxage=10800, stale-while-revalidate=5400 → no-store
vary
x-gcp-device-type, x-gcp-client-region, Accept-Encoding → rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefet...
via
1.1 google → 1.1 google, 1.1 google
x-frame-options
DENY → SAMEORIGIN
x-gcp-cache-status
hit → miss
content-security-policy
connect-src 'self' blob: https://gcp.api.snapchat.com https://aws.api.snapcha... → default-src 'self'; script-src 'wasm-unsafe-eval' 'unsafe-inline' 'self' http...
x-envoy-upstream-service-time
27 → 20
alt-svc
h3=":443"; ma=2592000 → h3=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

3 headers unchanged

+ Turbopack Development
+ Next.js App Router JavaScript frameworks
− Google Analytics Analytics
− Underscore.js JavaScript libraries
− Google Tag Manager Tag managers
Next.js v14.2.28 → v16.2.12

14 technologies unchanged

Looking ahead

+12 pts
B (85) Could reach A+ (97)
Performance +16Security +15Content +14Accessibility +10Compliance +10Infrastructure +8SEO +8Sustainability +4

Estimate — actual results may vary (46 issues to fix)

Website improvement report — Snapchat

April 7, 2026 → November 11, 2026

C B 74 → 85 +11 pts

39

Resolved

36

New issues

10

Still remaining

Financial summary

Investment delivered

$7,683 in development time

Investment remaining

$9,517 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score74 (C)85 (B)+11
Performance71 (C)84 (B)+13
Security70 (C)85 (B)+15
Accessibility65 (D)86 (B)+21
SEO85 (B)92 (A)+7
Infrastructure89 (B)88 (B)-1
Compliance75 (C)74 (C)-1
Content87 (B)86 (B)-1
Sustainability46 (F)78 (C)+32

Resolved (39)

  • https://static.snapchat.com/snapchat-dot-com/_next...: 3208ms CPU time (Performance)

    → Page loads faster for users

  • https://static.snapchat.com/snapchat-dot-com/_next...: 1472ms CPU time (Performance)

    → Page loads faster for users

  • Page has 154 words — thin content (SEO)

    → Better search engine visibility

  • 1 control(s) without accessible label (Accessibility)

    → Improved usability for assistive technology users

  • 1 control(s) rely on placeholder only (Accessibility)

    → Improved usability for assistive technology users

  • Page weighs 14.9 MB (14.1 MB transferred) (Performance)

    → Page loads faster for users

  • JavaScript is 12.0 MB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • https://static.snapchat.com/images/snapchatdotcom/... is missing width/height — may cause layout shift (Performance)

    → Page loads faster for users

  • Third-party scripts: 5403ms (80% of total) (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • No `<meta charset>` declaration in HTML (SEO)

    → Better search engine visibility

  • Referrer-Policy header is missing (Security)

    → Reduced attack surface for visitors

  • base-uri directive is missing (Security)

    → Reduced attack surface for visitors

  • https://www.snapchat.com/: 680ms CPU time (Performance)

    → Page loads faster for users

  • https://static.snapchat.com/snapchat-dot-com/_next...: 27 KB unused (53%) (Performance)

    → Page loads faster for users

…and 24 more resolved issue(s)

Recommended next steps (46)

  • Sprint 3

    'unsafe-inline' found in script source (Security)

  • Sprint 1

    128 of 132 links are healthy (Content)

  • Sprint 1

    Cookie 'sc-config-cache-key' is missing the HttpOnly flag (Security)

  • Sprint 3

    https://static.snapchat.com/sc-com/_next/static/ch...: 136 KB unused (74%) (Performance)

  • Sprint 2

    0.64g CO2 — above the median website (0.60g) (Sustainability)

  • Sprint 1

    Page weighs 5.0 MB (2.7 MB transferred) (Performance)

  • Sprint 3

    Third-party scripts: 1217ms (56% of total) (Performance)

  • Sprint 2

    Page weight 2.7 MB exceeds 1 MB target by 1.7 MB (Performance)

  • Sprint 1

    No SPF record found (Security)

  • Sprint 2

    1 link(s) with generic text (Accessibility)

  • Sprint 1

    https://static.snapchat.com/sc-com/_next/static/ch...: 282ms CPU time (Performance)

  • Sprint 1

    2 unclassified cookie(s) set before any consent step (Compliance)

  • Sprint 1

    4 link(s) open in new tab without warning (Accessibility)

  • Sprint 3

    https://static.snapchat.com/sc-com/_next/static/ch...: 21 KB unused (87%) (Performance)

  • Sprint 1

    Title is only 17 characters — consider expanding (SEO)

…and 31 more recommended item(s)

Send Feedback