flowtechpandh.com — Website Report

Enable HTTP Strict Transport Security to force HTTPS connections.

# Nginx:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

# Apache (.htaccess):
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

# Next.js (next.config.js headers):
{ key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' }

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

27 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Set X-Frame-Options to prevent clickjacking attacks.

# Nginx:
add_header X-Frame-Options "SAMEORIGIN" always;

# Next.js (next.config.js headers):
{ key: 'X-Frame-Options', value: 'SAMEORIGIN' }

Add a Referrer-Policy header to control information leakage.

# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Your title is 82 characters. Keep it under 60 for best display in search results.

Your description is 182 characters. Keep it under 160 for best display.

Found 1 of 104 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

1 of 104 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Some text appears to use light colors that may not have sufficient contrast against the background. WCAG requires a minimum 4.5:1 contrast ratio.

Your HTML is 464KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

Your page loads 12 scripts from external domains. Consider auditing trackers and widgets and deferring non-critical ones.

52 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

No FAQ section, schema, or Q&A patterns found. FAQ content is among the most-cited by AI engines.

Add more internal links to help search engines discover and index your other pages. Internal linking also helps distribute page authority.

Add a <nav> element to help screen reader users quickly find the navigation. This is a WCAG 2.4.1 requirement.

<!-- Wrap your navigation in a <nav> element -->
<nav aria-label="Main navigation">
  <ul>
    <li><a href="/">Home</a></li>
    <li><a href="/about">About</a></li>
    <li><a href="/contact">Contact</a></li>
  </ul>
</nav>

Found 21 HTML comments. Remove unnecessary comments in production to reduce file size.