monicaandandy.com — Website Report

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

Set X-Frame-Options to prevent clickjacking attacks.

# Nginx:
add_header X-Frame-Options "SAMEORIGIN" always;

# Next.js (next.config.js headers):
{ key: 'X-Frame-Options', value: 'SAMEORIGIN' }

Your title is 65 characters. Keep it under 60 for best display in search results.

Your description is 213 characters. Keep it under 160 for best display.

Found 1 of 131 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

1 of 131 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Your HTML is 1252KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

2 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Loading 11 CSS files. Each blocks rendering. Consider combining stylesheets or inlining critical CSS.

7 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Found 20 elements with large inline styles. Move these to external CSS for better caching and maintainability.

Found 21 HTML comments. Remove unnecessary comments in production to reduce file size.