ptglab.com — Website Report

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

Found 33 of 38 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

33 of 38 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Your viewport meta tag prevents users from zooming. This is an accessibility violation — users with low vision need to zoom to read content.

<!-- Replace your viewport meta tag with this (allows zooming) -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- Do NOT use: maximum-scale=1, user-scalable=no -->

12 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Set X-Content-Type-Options: nosniff to prevent MIME-type sniffing.

# Nginx:
add_header X-Content-Type-Options "nosniff" always;

# Next.js (next.config.js headers):
{ key: 'X-Content-Type-Options', value: 'nosniff' }

Set X-Frame-Options to prevent clickjacking attacks.

# Nginx:
add_header X-Frame-Options "SAMEORIGIN" always;

# Next.js (next.config.js headers):
{ key: 'X-Frame-Options', value: 'SAMEORIGIN' }

Add a Referrer-Policy header to control information leakage.

# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Your title is 68 characters. Keep it under 60 for best display in search results.

Found 2 H1 headings. Best practice is to have exactly one H1 per page for clear content hierarchy.

Add H2 subheadings to organize your content. Good heading hierarchy helps search engines understand your page structure.

Form inputs should have associated labels or aria-label attributes so screen readers can identify them.

Heading hierarchy jumps from H1 to H4. Don't skip heading levels — this confuses screen readers and assistive technology.

Your HTML is 241KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

Your page loads 14 external JavaScript files. Consider bundling some together and deferring non-critical scripts.

24 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Add a 'Skip to main content' link at the top of the page so keyboard users can bypass repetitive navigation.

<!-- Add as the first element inside <body> -->
<a href="#main-content" class="sr-only focus:not-sr-only focus:absolute focus:top-2 focus:left-2 focus:z-50 focus:px-4 focus:py-2 focus:bg-blue-600 focus:text-white focus:rounded">
  Skip to main content
</a>

<!-- Add id to your main content area -->
<main id="main-content">
  ...
</main>

Add <link rel='preconnect'> for critical third-party domains to reduce connection setup time.

<!-- Add to <head> for your critical third-party domains -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="dns-prefetch" href="https://cdn.example.com">

Found 18 HTML comments. Remove unnecessary comments in production to reduce file size.