Skip to content

Changes

https://web.whatsapp.com
Compared to previous audit · 22 weeks ago View previous audit
26
New issues
18
Resolved
21
score changes
CategoryPreviousCurrentChange
CompositeC (75)B (80) +5.000
PerformanceB (82)B (85) +3.000
SecurityC (75)B (83) +8.000
AccessibilityD (66)B (83) +17.000
SEOD (67)C (77) +10.000
InfrastructureB (80)B (83) +3.000
ComplianceC (78)D (62) -16.000
ContentD (68)C (71) +3.000
SustainabilityC (72)C (72)—
MetricPreviousCurrentChange
Performance 58005800—
Accessibility 1000010000—
Best Practices 77007700—
SEO 58005800—
PWA 00—
Desktop Performance 50005100 +100
Desktop Accessibility 96009600—
Desktop Best Practices 77007700—
Desktop SEO 1000010000—
FCP 6.80 s7.78 s +978 ms
LCP 7.85 s8.36 s +507 ms
TBT 10 ms0 ms -10 ms
CLS 0.0800.000 -0.080
Desktop FCP 1.00 s1.30 s +297 ms
Desktop LCP 6.60 s3.32 s -3.28 s
Desktop TBT 505 ms658 ms +152 ms
Desktop CLS 0.0000.004 +0.003
TTFB †200 ms254 ms +54 ms
DNS †41 ms26 ms -15 ms
TLS †18 ms19 ms +1 ms
Connect 16 ms16 ms—
Total †203 ms261 ms +58 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

Projected vs. Actual

Previous
C 75
Projected
A 95
Actual
B 80
Fell short of projection
18 issues resolved since last audit
59 issues remaining
Resolving remaining issues could reach A+

Estimate — actual results may vary

CRITICAL Page body has only 151 chars of text -- likely empty / placeholder security
CRITICAL Page has only 26 words — nearly empty seo
CRITICAL 1 image(s) missing alt attribute accessibility
WARNING Third-party scripts: 654ms (56% of total) performance
WARNING Thin content — only 26 words seo
WARNING security.txt: Missing required 'Contact' field security
WARNING SRI adoption: 0/10 third-party resources protected (0%) security
WARNING https://static.whatsapp.net/rsrc.php/v4/yJ/r/5S6jq...: 146 KB unused (78%) performance
WARNING JavaScript is 966 KB — consider code splitting or lazy loading performance
WARNING 28 third-party resources (98% of weight) performance
WARNING Transfer efficiency: 54% sustainability
WARNING Page weight 1.5 MB exceeds 1 MB target by 543 KB performance
WARNING https://static.whatsapp.net/rsrc.php/v4iB2m4/yB/l/...: 154 KB unused (83%) performance
WARNING https://static.whatsapp.net/rsrc.php/v4is4J4/yp/l/...: 62 KB unused (90%) performance
WARNING Certificate expires soon (7 days remaining) security
WARNING Third-party code accounts for 98% of page weight (1.5 MiB of 1.5 MiB) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yv/r/EH-Pq...: 66 KB unused (97%) performance
WARNING 6 render-blocking <script src> tag(s) without async/defer performance
WARNING security.txt: Missing required 'Expires' field (RFC 9116) security
WARNING https://static.whatsapp.net/rsrc.php/v4/yA/r/yNZV7...: 429ms CPU time performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yg/r/0Dr5E...: 49 KB unused (91%) performance
WARNING All 1 images use legacy formats (JPEG/PNG/GIF) content
WARNING https://web.whatsapp.com/mobile/: 259ms CPU time performance
WARNING Unattributable: 264ms CPU time performance
WARNING 1 images missing explicit width/height content
WARNING 1 images missing alt text content
CRITICAL 2 image(s) missing alt attribute accessibility
CRITICAL Page has only 28 words — nearly empty seo
CRITICAL Transfer efficiency: 49% sustainability
WARNING https://static.whatsapp.net/rsrc.php/v4/yS/r/DXGWA...: 242 KB unused (97%) performance
WARNING Page weight 1.2 MB exceeds 1 MB target by 221 KB performance
WARNING Third-party code accounts for 99% of page weight (1.2 MiB of 1.2 MiB) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 253ms CPU time performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yP/r/TmE3j...: 43 KB unused (52%) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yJ/r/Wl_HC...: 123 KB unused (99%) performance
WARNING https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 45 KB unused (58%) performance
WARNING 24 third-party resources (99% of weight) performance
WARNING Thin content — only 28 words seo
WARNING JavaScript is 873 KB — consider code splitting or lazy loading performance
WARNING No canonical tag found seo
WARNING No meta description tag found seo
WARNING Certificate expires soon (8 days remaining) security
WARNING Third-party scripts: 388ms (59% of total) performance
WARNING https://static.whatsapp.net/rsrc.php/v4iSfE4/y0/l/...: 125 KB unused (88%) performance
CRITICAL robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals seo
CRITICAL robots.txt blocks all crawlers infrastructure
CRITICAL Soft 404: server returns HTTP 200 for non-existent pages accessibility
CRITICAL No page title found seo
CRITICAL HTTP version does not redirect to HTTPS infrastructure
CRITICAL 'unsafe-eval' found in script source security
CRITICAL No <main> landmark found accessibility
WARNING No DMARC record found security
WARNING CNAME record at zone apex infrastructure
WARNING No <nav> landmark found accessibility
WARNING https://static.whatsapp.net/rsrc.php/yu/r/3IkZnQ5T... is missing width/height — may cause layout shift performance
WARNING No accessibility statement detected compliance
WARNING base-uri directive is missing security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING Referrer-Policy header is missing security
WARNING No internal links found seo
WARNING Sitemap is empty -- 0 URLs listed seo
WARNING Terms of Service not detected compliance
WARNING frame-ancestors directive is missing security
WARNING 1 unclassified cookie(s) set before any consent step compliance
WARNING object-src allows plugin content security
WARNING No Open Graph meta tags found content
WARNING 6 link(s) open in new tab without warning accessibility
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING X-Frame-Options header is missing security
WARNING sitemap.xml is empty — no URLs found infrastructure
WARNING form-action directive is missing security
WARNING Registrar lock is NOT enabled infrastructure
WARNING No privacy policy found (page links and common paths checked) compliance
WARNING External link from static.whatsapp.net lacks integrity attribute security
WARNING External script from static.whatsapp.net lacks integrity attribute security
WARNING sitemap.xml contains invalid XML infrastructure
WARNING Dead-end page — no outgoing internal links seo
+ content-encoding br
− origin-trial AojvwgvBFizBFcnJMB8LbCdT9eDSte7tVJfVLHoVJy1J/0/IZz8Fto9n7e3x2BE1Vu40AbDJwupVG...
x-fb-debug
YeEf/ag9QVIOcmVm7notx3Dl+4A22gZ3FgWS8NBByE8lVkE/cd631pqOI+4/pHJTqM9FuAu60JXoK... → IJkDnWxEwQsbpd/uMCO24GXP8ExqAD3jFUGHcevcpbhLkr/cHYsqNSAmR5BBkx5bgT8PC4NZgthTT...
set-cookie
wa_ul=a194c457-1f1d-4a70-8cb6-575f5d008a38; expires=Mon, 20-Jul-2026 18:49:24... → wa_ul=d072c408-243f-44e6-8d4f-ac863b24b082; expires=Tue, 22-Dec-2026 15:58:38...
reporting-endpoints
coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", de... → coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", de...
content-security-policy
default-src 'self' blob:;script-src blob: 'self' 'nonce-rRH7TdQ4' 'report-sam... → default-src 'self' blob:;script-src blob: 'self' 'nonce-BzoHnNtJ' 'report-sam...
x-fb-connection-quality
EXCELLENT; q=0.9, rtt=16, rtx=0, c=14, mss=1380, tbw=4296, tp=-1, tpl=-1, upl... → EXCELLENT; q=0.9, rtt=16, rtx=0, c=17, mss=1380, tbw=4450, tp=-1, tpl=-1, upl...
content-security-policy-report-only
default-src 'self' blob:;script-src blob: 'self' 'nonce-rRH7TdQ4' 'report-sam... → default-src 'self' blob:;script-src blob: 'self' 'nonce-BzoHnNtJ' 'report-sam...

17 headers unchanged

Technology stack unchanged

4 technologies unchanged

Looking ahead

+17 pts
B (80) Could reach A+ (97)
SEO +23Accessibility +17Infrastructure +17Security +17Compliance +16Performance +15Content +13Sustainability +4

Estimate — actual results may vary (59 issues to fix)

Website improvement report — Web.whatsapp

April 21, 2026 → September 23, 2026

C B 75 → 80 +5 pts

18

Resolved

26

New issues

33

Still remaining

Financial summary

Investment delivered

$8,442 in development time

Investment remaining

$11,275 to complete the remaining items

Ongoing risk

$0/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score75 (C)80 (B)+5
Performance82 (B)85 (B)+3
Security75 (C)83 (B)+8
Accessibility66 (D)83 (B)+17
SEO67 (D)77 (C)+10
Infrastructure80 (B)83 (B)+3
Compliance78 (C)62 (D)-16
Content68 (D)71 (C)+3
Sustainability72 (C)72 (C)0

Resolved (18)

  • https://static.whatsapp.net/rsrc.php/v4/yS/r/DXGWA...: 242 KB unused (97%) (Performance)

    → Page loads faster for users

  • Page weight 1.2 MB exceeds 1 MB target by 221 KB (Performance)

    → Page loads faster for users

  • 2 image(s) missing alt attribute (Accessibility)

    → Improved usability for assistive technology users

  • Third-party code accounts for 99% of page weight (1.2 MiB of 1.2 MiB) (Performance)

    → Page loads faster for users

  • https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 253ms CPU time (Performance)

    → Page loads faster for users

  • https://static.whatsapp.net/rsrc.php/v4/yP/r/TmE3j...: 43 KB unused (52%) (Performance)

    → Page loads faster for users

  • https://static.whatsapp.net/rsrc.php/v4/yJ/r/Wl_HC...: 123 KB unused (99%) (Performance)

    → Page loads faster for users

  • https://static.whatsapp.net/rsrc.php/v4/yV/r/ce-O1...: 45 KB unused (58%) (Performance)

    → Page loads faster for users

  • 24 third-party resources (99% of weight) (Performance)

    → Page loads faster for users

  • Thin content — only 28 words (SEO)

    → Better search engine visibility

  • JavaScript is 873 KB — consider code splitting or lazy loading (Performance)

    → Page loads faster for users

  • No canonical tag found (SEO)

    → Better search engine visibility

  • No meta description tag found (SEO)

    → Better search engine visibility

  • Certificate expires soon (8 days remaining) (Security)

    → Reduced attack surface for visitors

  • Third-party scripts: 388ms (59% of total) (Performance)

    → Page loads faster for users

…and 3 more resolved issue(s)

Recommended next steps (59)

  • Sprint 1

    Page body has only 151 chars of text -- likely empty / placeholder (Security)

  • Sprint 3

    Page has only 26 words — nearly empty (SEO)

  • Sprint 2

    1 image(s) missing alt attribute (Accessibility)

  • Sprint 1

    robots.txt has 'Disallow: /' but sitemap.xml is published -- contradictory signals (SEO)

  • Sprint 1

    robots.txt blocks all crawlers (Infrastructure)

  • Sprint 1

    Soft 404: server returns HTTP 200 for non-existent pages (Accessibility)

  • Sprint 1

    No page title found (SEO)

  • Sprint 1

    HTTP version does not redirect to HTTPS (Infrastructure)

  • Sprint 3

    'unsafe-eval' found in script source (Security)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 3

    Third-party scripts: 654ms (56% of total) (Performance)

  • Sprint 3

    Thin content — only 26 words (SEO)

  • Sprint 1

    security.txt: Missing required 'Contact' field (Security)

  • Sprint 1

    SRI adoption: 0/10 third-party resources protected (0%) (Security)

  • Sprint 3

    https://static.whatsapp.net/rsrc.php/v4/yJ/r/5S6jq...: 146 KB unused (78%) (Performance)

…and 44 more recommended item(s)

Send Feedback