broadbandswitch.uk — Website Report

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

Server responded in 1.1s. Aim for under 200ms TTFB. Consider caching, CDN, or server-side optimizations.

Your HTML is 518KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

Loading 9 CSS files. Each blocks rendering. Consider combining stylesheets or inlining critical CSS.

13 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Add a <main> element to identify the primary content area. Screen reader users use this to skip navigation.

<!-- Wrap your primary content in a <main> element -->
<main id="main-content">
  <h1>Page Title</h1>
  <p>Your primary content here...</p>
</main>

Found 76 HTML comments. Remove unnecessary comments in production to reduce file size.