www.tartinebakery.com — Website Report

Enable HTTP Strict Transport Security to force HTTPS connections.

# Nginx:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

# Apache (.htaccess):
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

# Next.js (next.config.js headers):
{ key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' }

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

No meta description found. Search engines use this as the snippet in results. Add one for better CTR.

<meta name="description" content="Clear, compelling description of your page in 120-160 characters. Include your main keyword naturally.">

Your page loads 16 scripts from external domains. Each requires a separate connection. Audit analytics, chat widgets, and trackers; remove or defer non-essential ones.

16 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Add a Referrer-Policy header to control information leakage.

# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Your title is 160 characters. Keep it under 60 for best display in search results.

Missing og:title, og:description, og:image. Add these for better social media sharing previews on Facebook, LinkedIn, and Twitter.

<meta property="og:title" content="Your Page Title">
<meta property="og:description" content="Description for social sharing">
<meta property="og:image" content="https://yoursite.com/og-image.jpg">
<meta property="og:url" content="https://yoursite.com/page">
<meta property="og:type" content="website">

Found 2 H1 headings. Best practice is to have exactly one H1 per page for clear content hierarchy.

Links with text like "click here" or "read more" don't make sense out of context. Use descriptive link text that explains the destination.

Loading 16 CSS files. Each blocks rendering. Consider combining stylesheets or inlining critical CSS.

13 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

No JSON-LD or Microdata found. AI engines rely heavily on structured data to understand content.

No FAQ section, schema, or Q&A patterns found. FAQ content is among the most-cited by AI engines.

No Organization, Person, or LocalBusiness schema found. Define your entity identity.

Multiple H1s dilute the topic signal. Use exactly one H1 per page.

Moderate content length. AI engines prefer in-depth content (1000+ words).

Add JSON-LD structured data (Schema.org) to help search engines understand your content and earn rich snippets in search results.

Add twitter:card meta tags for optimized appearance when your pages are shared on Twitter/X.

<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:title" content="Your Page Title">
<meta name="twitter:description" content="A compelling description">
<meta name="twitter:image" content="https://yoursite.com/twitter-image.jpg">

Add <link rel='preconnect'> for critical third-party domains to reduce connection setup time.

<!-- Add to <head> for your critical third-party domains -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="dns-prefetch" href="https://cdn.example.com">

Found 8 HTML comments. Remove unnecessary comments in production to reduce file size.