Skip to main content

buffer.com — Website Report

Scored 81/100 · Scanned with Foglift

B
OverallOverall Score — weighted average of all category scores

buffer.com scored 81 — top 15% of sites we've scanned.

1 critical5 warnings8 total issues

Quick wins

~49 min total fix time
1Missing Referrer Policy header~2m
2Missing Permissions Policy header~2m
3Missing Content Security Policy header~5m

https://buffer.com/resources/social-media-image-sizes/#why-do-social-media-image-sizes-matter · 2026-07-09

Scanned with Foglift · Technical Audit + AI Readiness analysis

Share This Report

Send this scan to a teammate or contact. The shareable link includes all scores and issues.

Email to Contact

How does AI see Buffer?

When users ask AI about your industry, are you recommended?

G
C
P
Ge
A

See how ChatGPT, Claude, Perplexity, and Gemini talk about Buffer

Issues Found (8)

Missing Content Security Policy headercriticalSecurity~5 min fix

Add a Content-Security-Policy header to prevent XSS and injection attacks.

Quick Fix
# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }
Content-Security-Policy prevents XSS attacks by controlling which resources the browser can load.
Missing Referrer Policy headerwarningSecurity~2 min fix

Add a Referrer-Policy header to control information leakage.

Quick Fix
# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }
Controls how much referrer information is sent with requests, protecting user privacy.
Missing Permissions Policy headerwarningSecurity~2 min fix

Add a Permissions-Policy header to control browser feature access.

Quick Fix
# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }
Permissions-Policy restricts which browser features your site can use, reducing attack surface.
Large HTML documentwarningPerformance

Your HTML is 456KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

7 external stylesheetswarningPerformance

Loading 7 CSS files. Each blocks rendering. Consider combining stylesheets or inlining critical CSS.

Skipped heading levelwarningAccessibility

Heading hierarchy jumps from H1 to H3. Don't skip heading levels — this confuses screen readers and assistive technology.

No resource hintsinfoPerformance~5 min fix

Add <link rel='preconnect'> for critical third-party domains to reduce connection setup time.

Quick Fix
<!-- Add to <head> for your critical third-party domains -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="dns-prefetch" href="https://cdn.example.com">
Preconnect and DNS-prefetch reduce connection time to third-party domains by starting the handshake early.
No skip navigation linkinfoAccessibility~5 min fix

Add a 'Skip to main content' link at the top of the page so keyboard users can bypass repetitive navigation.

Quick Fix
<!-- Add as the first element inside <body> -->
<a href="#main-content" class="sr-only focus:not-sr-only focus:absolute focus:top-2 focus:left-2 focus:z-50 focus:px-4 focus:py-2 focus:bg-blue-600 focus:text-white focus:rounded">
  Skip to main content
</a>

<!-- Add id to your main content area -->
<main id="main-content">
  ...
</main>
Skip links let keyboard users bypass repetitive navigation and jump straight to content.

Your Potential Score

81

Now

95

Potential

+14 points possible by fixing 8 issues

That moves you from B to Atop 5% of all websites

Track your AI visibility over time

AI Visibility Monitoring

We check AI prompts weekly across ChatGPT, Perplexity, and Google AI. See how often your brand appears.

Competitor Tracking

Compare your AI visibility against competitors. Know when they overtake you.

Weekly Digest

Get AI-generated insights emailed every Monday with action items.

Start monitoring — from $49/mo

Free tier available · No credit card required

Industry Benchmark

SEO
Avg: 62+38Ahead
AI Readiness
Avg: 45+55Ahead
AEO
Avg: 48+17Ahead
Performance
Avg: 55+24Ahead
Security
Avg: 40+10Ahead
Accessibility
Avg: 68+24Ahead

Based on 120+ websites scanned across industries. See full benchmark report →

Recent scans on Foglift

Scan your own site free →