Audit Result

UUID: 019e1694-a7de-7163-9ce9-735a8ac1aa77

Share on X Recheck Back to history

https://hello.cv/

Scanned 3 months ago

Fair Score

39 total checks

Passed

Warnings

Errors

Meta Information

Title Tag Warning

Found 70 characters. Keep title between 30 and 60 characters.

Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.
Meta Description Error

Missing meta description.

Fix: Add <meta name="description" content="..."> in <head> with a clear page summary.
Canonical URL Warning

Canonical link not found.

Fix: Add <link rel="canonical" href="https://example.com/page"> to avoid duplicate URL ambiguity.
Favicon Pass

Favicon found and reachable: https://hello.cv/assets/favicon.png (HTTP 200).
Viewport Meta Pass

Viewport configured: width=device-width, initial-scale=1
HTML Lang Pass

Language declared as "en".

Content Structure

H1 Tag Warning

Found 2 H1 tags.

Fix: Use a single, descriptive <h1> that states the primary purpose of the page.
Heading Hierarchy Warning

Detected 3 heading level jumps.
- • Skipped from h1 to h3: "ready everywhere." -> "AI Agents that help you get ahead".
- • Skipped from h3 to h6: "Built for modern professionals" -> "Create resumes and profiles that gets you discovered".
- • Skipped from h3 to h6: "Frequently Asked Questions" -> "What is hello.cv, and how does the AI career platform work?".
Fix: Follow semantic order (h1 -> h2 -> h3) and avoid skipping heading levels.
Image Alt Text Pass

All 81 images include alt text.

Technical Optimization

HTTPS Pass

Page is served over HTTPS.
HSTS & HTTPS Redirect Warning

2 HTTPS hardening issues detected.
- • Missing Strict-Transport-Security header.
- • Could not probe the HTTP version of this page.
Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.
Security Headers Warning

Missing: strict-transport-security, referrer-policy.
Full HTTP headers (14)
- • cache-control: no-cache, private
- • content-encoding: gzip
- • content-security-policy: frame-ancestors 'self' https://hello.cv https://*.hello.cv;
- • content-type: text/html; charset=utf-8
- • date: Mon, 11 May 2026 10:28:14 GMT
- • link: </.well-known/api-catalog>; rel="api-catalog" </.well-known/service-desc>; rel="service-desc" </llms.txt>; rel="service-doc" </skill.md>; rel="describedby" <https://hello.cv/build/assets/vendor-gXhktgQD.css>; rel="preload"; as="style", <https://hello.cv/build/assets/app-WJ6v0sIZ.css>; rel="preload"; as="style", <https://hello.cv/build/assets/app-9Zf1ZFvy.js>; rel="modulepreload"; as="script", <https://hello.cv/build/assets/vendor-BzHf4OYi.js>; rel="modulepreload"; as="script", <https://hello.cv/build/assets/index-gGwi133f.js>; rel="modulepreload"; as="script", <https://hello.cv/build/assets/SiteCustomizationProvider-BkCXnl7-.js>; rel="modulepreload"; as="script", <https://hello.cv/build/assets/app-9xJhgXFl.js>; rel="modulepreload"; as="script", <https://hello.cv/build/assets/ThemeProvider-6wD_fvXs.js>; rel="modulepreload"; as="script"
- • server: nginx
- • vary: Accept-Encoding X-Inertia Accept
- • x-content-type-options: nosniff
- • x-frame-options: SAMEORIGIN SAMEORIGIN
- • x-ratelimit-limit: 10
- • x-ratelimit-remaining: 8
- • x-who: hellocv-3
- • x-xss-protection: 1; mode=block
Fix: Add the missing security headers at your reverse proxy or application layer.
CSP Quality Warning

2 CSP hardening issues detected.
- • CSP is missing object-src 'none'.
- • CSP is missing a base-uri restriction.
- • Content-Security-Policy: frame-ancestors 'self' https://hello.cv https://*.hello.cv;
Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.
Cookie Security Pass

No first-party cookies were set during the initial page load.
Server Version Disclosure Pass

Server response headers do not expose version tokens.
Cloudflare Proxy Warning

Domain does not appear to be behind Cloudflare.
Perceived Load Time Pass

Loaded in 0.32s (perceived).
Render Blocking Resources Warning

1 scripts and 6 styles may block rendering.
- • script: https://gist-widget.b-cdn.net/favicon/favicon-c9aae08cce.min.js
- • style: https://rsms.me/inter/inter.css
- • style: https://fonts.googleapis.com/css2?family=Figtree:ital,wght@0,300..900;1,300..900&display=swap
- • style: https://hello.cv/build/assets/vendor-gXhktgQD.css
- • style: https://hello.cv/build/assets/app-WJ6v0sIZ.css
- • style: https://hello.cv/build/assets/vendor-gXhktgQD.css
- • style: https://hello.cv/build/assets/app-WJ6v0sIZ.css
Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.
Compression Warning

27 text resources look uncompressed.
- • https://hello.cv/build/assets/app-9xJhgXFl.js (application/javascript; charset=utf-8)
- • https://missanjali.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://alex.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://saranshrai.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://missanjali.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://saranshrai.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://alex.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://aboloresalami.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://opeawo.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://aboloresalami.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://himanshumwd.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://himanshumwd.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://opeawo.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://lakshman.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://lakshman.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://josemartins.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://josemartins.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://joshualim.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://joshualim.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://stephenanyalewechi.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://stephenanyalewechi.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://brinisaac.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://brinisaac.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://berkaycelik.cv/_next/static/chunks/ff1a16fafef87110.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • https://berkaycelik.cv/_next/static/chunks/2d6285f3b206a4bc.js?dpl=dpl_8eymrrqrp2NY4Q5BBz6Y48Cy1yue (application/javascript; charset=utf-8)
- • ...and 2 more
Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.
Robots.txt Pass

Found robots.txt (200).
Sitemap File Pass

Found sitemap (200) at https://hello.cv/sitemap.xml.
Crawl Directives Warning

No robots meta tag defined.

Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

Accessibility Basics

Form Labels Error

1 of 2 controls are missing labels.
- • textarea.w-full.text-zinc-950 (You can start with your existing resume, or just talk to me. I'll handle the res)
Fix: Associate each form control with a visible label, aria-label, or aria-labelledby.
Landmarks Warning

Missing landmarks: footer.

Fix: Use semantic regions (<header>, <nav>, <main>, <footer>) for navigation and assistive tech.
Tap Target Size Warning

25 interactive elements appear smaller than 48px.
- • a.w-fit - 109x40px
- • button.outline-none - 40x40px
- • button.outline-none (My Profile) - 224x36px
- • a.flex.w-full (My Profile) - 224x36px
- • button.outline-none.w-full (AI Tools) - 224x36px
- • button.cursor-default.flex (AI Tools) - 224x36px
- • button.flex.items-center (Resume Writer) - 224x34px
- • a.flex-1.flex (Resume Writer) - 224x34px
- • button.flex.items-center (Job Finder) - 224x34px
- • a.flex-1.flex (Job Finder) - 224x34px
- • button.flex.items-center (Cover Letter Writer) - 224x34px
- • a.flex-1.flex (Cover Letter Writer) - 224x34px
- • button.outline-none (Domain Names) - 224x36px
- • a.flex.w-full (Domain Names) - 224x36px
- • button.outline-none (Short Links) - 224x36px
- • a.flex.w-full (Short Links) - 224x36px
- • button.outline-none (Upgrade to Pro) - 224x36px
- • a.flex.w-full (Upgrade to Pro) - 224x36px
- • button.outline-none (hello.cv AutofillNew) - 224x37px
- • a.flex.w-full (hello.cv AutofillNew) - 224x37px
- • button.outline-none (Contact Support) - 224x36px
- • a.pb-1.text-[15px] (AI Profile Builder) - 110x29px
- • a.pb-1.text-[15px] (AI Job Finder) - 90x29px
- • a.pb-1.text-[15px] (Job Autofill) - 77x29px
- • a.pb-1.text-[15px] (Pricing) - 47x29px
Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Social & Rich Results

Open Graph Basics Warning

Missing og:title or og:description.

Fix: Add og:title and og:description tags to control social preview text.
Open Graph Image Pass

og:image is present and absolute.
Twitter Card Pass

twitter:card set to summary_large_image.
Structured Data Pass

JSON-LD schema detected.
PWA Metadata Pass

Manifest and Apple touch icon are configured.
Open Graph/Twitter Quality Warning

2 social preview quality issues detected.
- • ISSUE: og:title should typically be between 10 and 70 characters.
- • ISSUE: Preview image aspect ratio (1.66) differs from the recommended ~1.91:1.
- • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
- • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
- • GUIDELINE: Optimal preview image size: 1200x630 pixels.
- • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
- • GUIDELINE: Optimal preview image file size: under 5 MB.
- • GUIDELINE: Recommended twitter:card: summary_large_image.
- • MEASURED: Image size: 0.23 MB
- • MEASURED: Image dimensions: 1800x1085
Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Links Analysis

Internal Links Pass

Checked 34 links. No broken internal links found.
External Links Pass

No broken external links found in checked URLs.
Link Format Pass

All 41 links use non-empty href values.

Performance & Runtime

Core Web Vitals: LCP Pass

Largest Contentful Paint: 2.01s.
Core Web Vitals: CLS Error

Cumulative Layout Shift: 0.555.

Fix: Reserve space for images/ads and avoid injecting layout-changing elements above existing content.
Main Thread Blocking (TBT) Error

Total Blocking Time estimate: 767ms.

Fix: Reduce heavy JavaScript work, split long tasks, and defer non-critical scripts.
Broken Assets Error

1 asset requests failed.
- • https://connect.facebook.net//log/error?p=pixel&sl=2&v=2.9.313&e=%5BMeta%20pixel%5D%20Bot%20traffic%20detected%20and%20blocked%20-%20pixel_id%3A%202831409217054773&ue=0&rs=stable&rqm=FGET (net::ERR_BLOCKED_BY_ORB)
Fix: Fix missing files, update asset URLs, and ensure static assets return HTTP 200.
JavaScript Runtime Errors Warning

6 JavaScript runtime issues detected.
- • Request failed: https://hello.cv/surveys/track (HTTP 401, type: xhr)
- • Request failed: https://hello.cv/broadcasting/auth (HTTP 403, type: xhr)
- • Request failed: https://www.google.com/rmkt/collect/16973209834/?random=1778495299075&cv=11&fst=1778495299075&fmt=8&bg=ffffff&guid=ON&async=1&en=gtag.config&gtm=45je6562v9199503816z89203223361za20gzb9203223361zd9203223361xec&gcd=13l3l3l3l1l1&dma=0&tag_exp=0~115938466~115938469~118131810~118463261&u_w=1280&u_h=800&url=https%3A%2F%2Fhello.cv%2F&rcb=3&frm=0&tiba=AI%20Resume%20and%20Profile%20Builder%20with%20Your%20Own%20Free%20.cv%20Domain%20%7C%20Hello.cv&hn=www.googleadservices.com&npa=0&pscdl=noapi&auid=1798723958.1778495299&uaa=x86&uab=64&uafvl=Not%253AA-Brand%3B99.0.0.0%7CHeadlessChrome%3B145.0.7632.6%7CChromium%3B145.0.7632.6&uamb=0&uam=&uap=Linux&uapv=&uaw=0&data=event%3Dgtag.config&gcp=5 (net::ERR_ABORTED, type: fetch)
- • Request failed: https://www.google.com/ccm/collect?rcb=3&frm=0&en=page_view&dl=https%3A%2F%2Fhello.cv%2F&scrsrc=www.googletagmanager.com&rnd=1406030475.1778495299&dt=AI%20Resume%20and%20Profile%20Builder%20with%20Your%20Own%20Free%20.cv%20Domain%20%7C%20Hello.cv&auid=1798723958.1778495299&navt=n&npa=0&gtm=45je6562v9199503816z89203223361za20gzb9203223361zd9203223361xec&gcd=13l3l3l3l1l1&dma=0&tag_exp=0~115938466~115938469~118463261&apve=1&apvf=f&apvc=1&tids=AW-16973209834&tid=AW-16973209834&tft=1778495299092&tfd=4253 (net::ERR_ABORTED, type: fetch)
- • Failed to load resource: the server responded with a status of 401 () [https://hello.cv/surveys/track:1]
- • Failed to load resource: the server responded with a status of 403 () [https://hello.cv/broadcasting/auth:1]
Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.

Audit Result

https://hello.cv/

Meta Information

Content Structure

Technical Optimization

Accessibility Basics

Social & Rich Results

Links Analysis

Performance & Runtime

LLM Fix Prompt

Include Issues