Skip to content

Changes

https://vox.com
Compared to previous audit · 16 weeks ago View previous audit
35
New issues
22
Resolved
22
score changes
CategoryPreviousCurrentChange
CompositeC (73)C (78) +5.000
PerformanceD (67)C (74) +7.000
SecurityD (64)C (79) +15.000
AccessibilityD (62)C (74) +12.000
SEOA (94)A (94)—
InfrastructureB (83)B (82) -1.000
ComplianceA (91)D (67) -24.000
ContentA (96)A (91) -5.000
SustainabilityC (72)C (70) -2.000
MetricPreviousCurrentChange
Performance 32003100 -100
Accessibility 97009700—
Best Practices 96009600—
SEO 92009200—
PWA 00—
Desktop Performance 63006400 +100
Desktop Accessibility 1000010000—
Desktop Best Practices 96009600—
Desktop SEO 92009200—
FCP 2.80 s2.90 s +102 ms
LCP 34.11 s76.91 s +42.80 s
TBT 3.76 s3.46 s -298 ms
CLS 0.0350.044 +0.009
Desktop FCP 861 ms989 ms +128 ms
Desktop LCP 2.26 s2.24 s—
Desktop TBT 442 ms376 ms -65 ms
Desktop CLS 0.0000.010 +0.010
TTFB †44 ms41 ms -3 ms
DNS †38 ms37 ms -1 ms
TLS †4 ms2 ms -2 ms
Connect †1 ms0 ms -0 ms
Total †44 ms41 ms -3 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 73
Projected
A 95
Actual
C 78
Fell short of projection
22 issues resolved since last audit
84 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL 8.67g CO2 per page view sustainability
CRITICAL Page weighs 46.2 MB (36.6 MB transferred) performance
CRITICAL Broken link: https://www.instagram.com/voxdotcom content
WARNING 115 inline style attribute(s) detected security
WARNING Third-party scripts: 9858ms (83% of total) performance
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING 169 HTTP requests — consider bundling or reducing performance
WARNING Page weight 36.6 MB exceeds 1 MB target by 35.6 MB performance
WARNING 3 advertising/retargeting trackers detected compliance
WARNING https://www.vox.com/: 1292ms CPU time performance
WARNING https://www.vox.com/_next/static/chunks/pages/_app...: 3537ms CPU time performance
WARNING 11 link(s) open in new tab without warning accessibility
WARNING <iframe> missing title attribute (src="") accessibility
WARNING Unattributable: 1997ms CPU time performance
WARNING https://www.vox.com/_next/static/chunks/pages/_app...: 223 KB unused (44%) performance
WARNING OpenAPI / Swagger spec exposed at /swagger.json security
WARNING 4 tap target(s) too small or too close to neighbors accessibility
WARNING 155 text node(s) render below 12 CSS pixels on mobile accessibility
WARNING Third-party code accounts for 100% of page weight (36.6 MiB of 36.6 MiB) performance
WARNING 1 render-blocking <script src> tag(s) without async/defer performance
WARNING https://www.vox.com/metrics/gtm.js?id=GTM-WQ5FM5W: 219 KB unused (30%) performance
WARNING Total JS execution time is 11.9 s -- over the 3.5s budget performance
WARNING 137 images missing explicit width/height content
WARNING All 134 images use legacy formats (JPEG/PNG/GIF) content
WARNING <iframe> missing title attribute (src="https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=rx_n-vmg_…") accessibility
WARNING JavaScript is 3.3 MB — consider code splitting or lazy loading performance
WARNING 8.67g CO2 — above the median website (0.60g) sustainability
WARNING https://www.gstatic.com/recaptcha/releases/XOqlk8P...: 181 KB unused (54%) performance
WARNING 197 of 200 links are healthy content
WARNING https://cdn.cookielaw.org/scripttemplates/202602.1...: 713ms CPU time performance
WARNING Referrer-Policy: `no-referrer-when-downgrade` -- leaky -- legacy default that sends full URL cross-origin on HTTPS-to-HTTPS security
WARNING https://www.vox.com/_next/static/chunks/framework-...: 1205ms CPU time performance
WARNING Meta description is 455 characters — truncated on all platforms (320 char SERP cap) seo
WARNING SRI adoption: 1/20 third-party resources protected (5%) security
WARNING 168 third-party resources (100% of weight) performance
CRITICAL Page weighs 14.5 MB (5.8 MB transferred) performance
WARNING https://www.vox.com/: 1499ms CPU time performance
WARNING Skip link target(s) don't exist on page: #content accessibility
WARNING 3 link(s) open in new tab without warning accessibility
WARNING https://www.vox.com/_next/static/chunks/pages/_app...: 172 KB unused (39%) performance
WARNING 1.37g CO2 per page view sustainability
WARNING JavaScript is 3.0 MB — consider code splitting or lazy loading performance
WARNING https://www.vox.com/_next/static/chunks/pages/_app...: 2469ms CPU time performance
WARNING 198 of 200 links are healthy content
WARNING Page weight 5.8 MB exceeds 1 MB target by 4.8 MB performance
WARNING https://securepubads.g.doubleclick.net/pagead/mana...: 933ms CPU time performance
WARNING No meta description tag found seo
WARNING 1.37g CO2 — above the median website (0.60g) sustainability
WARNING https://cdn.cookielaw.org/scripttemplates/202602.1...: 919ms CPU time performance
WARNING https://www.gstatic.com/recaptcha/releases/gTpTIWh...: 177 KB unused (49%) performance
WARNING 155 third-party resources (100% of weight) performance
WARNING 156 HTTP requests — consider bundling or reducing performance
WARNING Third-party code accounts for 100% of page weight (5.8 MiB of 5.8 MiB) performance
WARNING Third-party scripts: 10396ms (85% of total) performance
WARNING https://www.vox.com/metrics/gtm.js?id=GTM-WQ5FM5W: 213 KB unused (31%) performance
WARNING Images are 1.9 MB — compress or use modern formats performance
WARNING Unattributable: 1833ms CPU time performance
CRITICAL Content-Security-Policy header is missing security
CRITICAL No H1 heading found accessibility
CRITICAL 10 button(s) with no accessible text accessibility
CRITICAL Both www and non-www versions serve content infrastructure
CRITICAL 1 control(s) without accessible label accessibility
CRITICAL og:image is not reachable content
CRITICAL No Content-Security-Policy header found security
CRITICAL 2 non-essential cookie(s) set without consent banner compliance
CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL Cookie '_vm_consent_type' is missing the Secure flag security
WARNING External script from sb.scorecardresearch.com lacks integrity attribute security
WARNING External script from c.amazon-adsystem.com lacks integrity attribute security
WARNING External script from www.google.com lacks integrity attribute security
WARNING No Permissions-Policy header security
WARNING 6 link(s) with generic text accessibility
WARNING Cookie '_vm_consent_type' has no SameSite attribute security
WARNING 1 field(s) missing recommended autocomplete attribute accessibility
WARNING No favicon.ico at site root accessibility
WARNING External script from www.googletagmanager.com lacks integrity attribute security
WARNING External script from pub.doubleverify.com lacks integrity attribute security
WARNING External script from assets.zephr.com lacks integrity attribute security
WARNING External script from apps.voxmedia.com lacks integrity attribute security
WARNING X-Content-Type-Options header is missing security
WARNING Title is only 11 characters — consider expanding seo
WARNING External script from cdn.cookielaw.org lacks integrity attribute security
WARNING 1 field(s) would benefit from inputmode attribute accessibility
WARNING GDPR Article 13 disclosure coverage: 1 / 8 categories compliance
WARNING 2 of 4 <nav> elements are unlabeled accessibility
WARNING X-Frame-Options header is missing security
WARNING Cookie '_vm_consent_type' is missing the HttpOnly flag security
WARNING Domain expires in 42 days infrastructure
WARNING External script from securepubads.g.doubleclick.net lacks integrity attribute security
WARNING External script from secure.cdn.fastclick.net lacks integrity attribute security
WARNING External script from cdn.concert.io lacks integrity attribute security
WARNING Broken link: https://securepubads.g.doubleclick.net content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Main HTML cached for 1440 minutes -- risks stale auth / SPA state performance
WARNING Registrar lock is NOT enabled infrastructure
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING Cookie 'vmidv1' is missing the HttpOnly flag security
WARNING Broken link: https://pagead2.googlesyndication.com content
WARNING External script from config.aps.amazon-adsystem.com lacks integrity attribute security
WARNING External script from www.vox.com lacks integrity attribute security
WARNING HSTS is missing includeSubDomains security
WARNING External script from www.googletagservices.com lacks integrity attribute security
WARNING External script from btloader.com lacks integrity attribute security
WARNING External script from cdnjs.cloudflare.com lacks integrity attribute security
WARNING is missing width/height — may cause layout shift performance
WARNING Permissions-Policy header is missing security
set-cookie
vmidv1=51c18a84-3c93-4e08-9a6e-159da5262bb3;Expires=Sun, 20 Apr 2031 19:02:54... → vmidv1=f630d37d-67b1-4071-9ab5-c9022676399e;Expires=Sat, 16 Aug 2031 17:11:07...

9 headers unchanged

core-js v2.5.7 → v3.36.1

28 technologies unchanged

Looking ahead

+20 pts
C (78) Could reach A+ (98)
Accessibility +26Performance +26Security +21Infrastructure +18Compliance +14Sustainability +14Content +9SEO +6

Estimate — actual results may vary (84 issues to fix)

Website improvement report — Vox

April 21, 2026 → August 17, 2026

C C 73 → 78 +5 pts

22

Resolved

35

New issues

49

Still remaining

Financial summary

Investment delivered

$6,042 in development time

Investment remaining

$11,108 to complete the remaining items

Ongoing risk

$9/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score73 (C)78 (C)+5
Performance67 (D)74 (C)+7
Security64 (D)79 (C)+15
Accessibility62 (D)74 (C)+12
SEO94 (A)94 (A)0
Infrastructure83 (B)82 (B)-1
Compliance91 (A)67 (D)-24
Content96 (A)91 (A)-5
Sustainability72 (C)70 (C)-2

Resolved (22)

  • Page weighs 14.5 MB (5.8 MB transferred) (Performance)

    → Page loads faster for users

  • https://www.vox.com/: 1499ms CPU time (Performance)

    → Page loads faster for users

  • Skip link target(s) don't exist on page: #content (Accessibility)

    → Improved usability for assistive technology users

  • 3 link(s) open in new tab without warning (Accessibility)

    → Improved usability for assistive technology users

  • https://www.vox.com/_next/static/chunks/pages/_app...: 172 KB unused (39%) (Performance)

    → Page loads faster for users

  • 1.37g CO2 per page view (Sustainability)

    → Lower carbon footprint per page view

  • JavaScript is 3.0 MB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • https://www.vox.com/_next/static/chunks/pages/_app...: 2469ms CPU time (Performance)

    → Page loads faster for users

  • 198 of 200 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • Page weight 5.8 MB exceeds 1 MB target by 4.8 MB (Performance)

    → Page loads faster for users

  • https://securepubads.g.doubleclick.net/pagead/mana...: 933ms CPU time (Performance)

    → Page loads faster for users

  • No meta description tag found (SEO)

    → Better search engine visibility

  • 1.37g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • https://cdn.cookielaw.org/scripttemplates/202602.1...: 919ms CPU time (Performance)

    → Page loads faster for users

  • https://www.gstatic.com/recaptcha/releases/gTpTIWh...: 177 KB unused (49%) (Performance)

    → Page loads faster for users

…and 7 more resolved issue(s)

Recommended next steps (84)

  • Sprint 1

    8.67g CO2 per page view (Sustainability)

  • Sprint 1

    Page weighs 46.2 MB (36.6 MB transferred) (Performance)

  • Sprint 1

    Broken link: https://www.instagram.com/voxdotcom (Content)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    No H1 heading found (Accessibility)

  • Sprint 1

    10 button(s) with no accessible text (Accessibility)

  • Sprint 1

    Both www and non-www versions serve content (Infrastructure)

  • Sprint 2

    1 control(s) without accessible label (Accessibility)

  • Sprint 1

    og:image is not reachable (Content)

  • Sprint 2

    No Content-Security-Policy header found (Security)

  • Sprint 2

    2 non-essential cookie(s) set without consent banner (Compliance)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 1

    Cookie '_vm_consent_type' is missing the Secure flag (Security)

  • Sprint 2

    115 inline style attribute(s) detected (Security)

  • Sprint 3

    Third-party scripts: 9858ms (83% of total) (Performance)

…and 69 more recommended item(s)

Send Feedback