myquestclinic.com.au — Website Report

Enable HTTP Strict Transport Security to force HTTPS connections.

# Nginx:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

# Apache (.htaccess):
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

# Next.js (next.config.js headers):
{ key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' }

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

Found 14 of 30 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

Server responded in 3.1s. Aim for under 200ms Time to First Byte (TTFB). Check your server configuration, database queries, and hosting performance.

4 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Set X-Content-Type-Options: nosniff to prevent MIME-type sniffing.

# Nginx:
add_header X-Content-Type-Options "nosniff" always;

# Next.js (next.config.js headers):
{ key: 'X-Content-Type-Options', value: 'nosniff' }

Set X-Frame-Options to prevent clickjacking attacks.

# Nginx:
add_header X-Frame-Options "SAMEORIGIN" always;

# Next.js (next.config.js headers):
{ key: 'X-Frame-Options', value: 'SAMEORIGIN' }

Add a Referrer-Policy header to control information leakage.

# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Your title is 68 characters. Keep it under 60 for best display in search results.

Found 15 H1 headings. Best practice is to have exactly one H1 per page for clear content hierarchy.

14 of 30 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Heading hierarchy jumps from H2 to H4. Don't skip heading levels — this confuses screen readers and assistive technology.

Your HTML is 424KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

29 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Add more internal links to help search engines discover and index your other pages. Internal linking also helps distribute page authority.

Found 436 elements with large inline styles. Move these to external CSS for better caching and maintainability.

Add <link rel='preconnect'> for critical third-party domains to reduce connection setup time.

<!-- Add to <head> for your critical third-party domains -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="dns-prefetch" href="https://cdn.example.com">

Found 10 HTML comments. Remove unnecessary comments in production to reduce file size.