thesmileconnect.com — Website Report

Enable HTTP Strict Transport Security to force HTTPS connections.

# Nginx:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

# Apache (.htaccess):
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

# Next.js (next.config.js headers):
{ key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' }

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

Your viewport meta tag prevents users from zooming. This is an accessibility violation — users with low vision need to zoom to read content.

<!-- Replace your viewport meta tag with this (allows zooming) -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- Do NOT use: maximum-scale=1, user-scalable=no -->

Server responded in 5.8s. Aim for under 200ms Time to First Byte (TTFB). Check your server configuration, database queries, and hosting performance.

19 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Add a Referrer-Policy header to control information leakage.

# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }

Your description is 164 characters. Keep it under 160 for best display.

Missing og:image. Add these for better social media sharing previews on Facebook, LinkedIn, and Twitter.

<meta property="og:title" content="Your Page Title">
<meta property="og:description" content="Description for social sharing">
<meta property="og:image" content="https://yoursite.com/og-image.jpg">
<meta property="og:url" content="https://yoursite.com/page">
<meta property="og:type" content="website">

Found 2 H1 headings. Best practice is to have exactly one H1 per page for clear content hierarchy.

Form inputs should have associated labels or aria-label attributes so screen readers can identify them.

Heading hierarchy jumps from H1 to H4. Don't skip heading levels — this confuses screen readers and assistive technology.

Links with text like "click here" or "read more" don't make sense out of context. Use descriptive link text that explains the destination.

Some text appears to use light colors that may not have sufficient contrast against the background. WCAG requires a minimum 4.5:1 contrast ratio.

Your HTML is 351KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

Loading 14 CSS files. Each blocks rendering. Consider combining stylesheets or inlining critical CSS.

13 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Add more internal links to help search engines discover and index your other pages. Internal linking also helps distribute page authority.

Add a <main> element to identify the primary content area. Screen reader users use this to skip navigation.

<!-- Wrap your primary content in a <main> element -->
<main id="main-content">
  <h1>Page Title</h1>
  <p>Your primary content here...</p>
</main>

Add a 'Skip to main content' link at the top of the page so keyboard users can bypass repetitive navigation.

<!-- Add as the first element inside <body> -->
<a href="#main-content" class="sr-only focus:not-sr-only focus:absolute focus:top-2 focus:left-2 focus:z-50 focus:px-4 focus:py-2 focus:bg-blue-600 focus:text-white focus:rounded">
  Skip to main content
</a>

<!-- Add id to your main content area -->
<main id="main-content">
  ...
</main>