delzottoprecastconcrete.com — Website Report

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

5 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Add a Referrer-Policy header to control information leakage.

# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Missing og:image. Add these for better social media sharing previews on Facebook, LinkedIn, and Twitter.

<meta property="og:title" content="Your Page Title">
<meta property="og:description" content="Description for social sharing">
<meta property="og:image" content="https://yoursite.com/og-image.jpg">
<meta property="og:url" content="https://yoursite.com/page">
<meta property="og:type" content="website">

Found 1 of 14 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

1 of 14 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Form inputs should have associated labels or aria-label attributes so screen readers can identify them.

Heading hierarchy jumps from H1 to H3. Don't skip heading levels — this confuses screen readers and assistive technology.

Some text appears to use light colors that may not have sufficient contrast against the background. WCAG requires a minimum 4.5:1 contrast ratio.

Server responded in 2.9s. Aim for under 200ms TTFB. Consider caching, CDN, or server-side optimizations.

13 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Found 21 elements with large inline styles. Move these to external CSS for better caching and maintainability.