projektleder.de — Website Report

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

Every page should have exactly one H1 heading that describes the main topic. This is important for SEO and accessibility.

<h1>Your Main Page Heading</h1>
<!-- Only use one H1 per page. Make it descriptive and include your target keyword. -->

Your page loads 16 external JavaScript files. Each requires a network request. Bundle scripts and defer non-critical ones to improve load time.

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Your title is 92 characters. Keep it under 60 for best display in search results.

Found 1 of 70 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

1 of 70 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Form inputs should have associated labels or aria-label attributes so screen readers can identify them.

Heading hierarchy jumps from H2 to H4. Don't skip heading levels — this confuses screen readers and assistive technology.

Server responded in 1.0s. Aim for under 200ms TTFB. Consider caching, CDN, or server-side optimizations.

Your HTML is 334KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

Loading 14 CSS files. Each blocks rendering. Consider combining stylesheets or inlining critical CSS.

42 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Add a 'Skip to main content' link at the top of the page so keyboard users can bypass repetitive navigation.

<!-- Add as the first element inside <body> -->
<a href="#main-content" class="sr-only focus:not-sr-only focus:absolute focus:top-2 focus:left-2 focus:z-50 focus:px-4 focus:py-2 focus:bg-blue-600 focus:text-white focus:rounded">
  Skip to main content
</a>

<!-- Add id to your main content area -->
<main id="main-content">
  ...
</main>

Add <link rel='preconnect'> for critical third-party domains to reduce connection setup time.

<!-- Add to <head> for your critical third-party domains -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="dns-prefetch" href="https://cdn.example.com">