Audit Result

Found 70 characters. Keep title between 30 and 60 characters.

Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.

Found 129 characters. Good snippet length.

Canonical found: https://www.leftthis.world/en-us

Favicon found and reachable: /favicon.ico (HTTP 200).

Viewport configured: width=device-width, initial-scale=1, maximum-scale=5

Language declared as "en".

Exactly one H1 found: "A permanent place to remember someone you've lost".

Valid heading flow across 26 headings.

All 9 images include alt text.

Page is served over HTTPS.

2 HTTPS hardening issues detected.

• • HSTS is missing includeSubDomains.
• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=63072000

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Core security headers were detected.

1 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://accounts.google.com https://apis.google.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn-cookieyes.com https://js.stripe.com https://ctvnulgolfsbcupzectd.supabase.co https://cdn.sanity.io https://www.youtube.com https://challenges.cloudflare.com https://vercel.live https://va.vercel-scripts.com https://s.pinimg.com https://ct.pinterest.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://ctvnulgolfsbcupzectd.supabase.co https://media.leftthis.world https://ltw-media.b-cdn.net https://ltw-media-staging.b-cdn.net https://iframe.mediadelivery.net https://assets.mediadelivery.net https://vz-edf5f460-4a9.b-cdn.net https://vz-a59ed8a4-ab0.b-cdn.net https://cdn.sanity.io https://cdn-cookieyes.com https://www.google.com https://www.google.co.uk https://www.google.ie https://www.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://fonts.gstatic.com https://img.youtube.com https://i.ytimg.com https://ct.pinterest.com https://s.pinimg.com; media-src 'self' blob: https://cdn.sanity.io https://media.leftthis.world https://ltw-media.b-cdn.net https://ltw-media-staging.b-cdn.net https://vz-edf5f460-4a9.b-cdn.net https://vz-a59ed8a4-ab0.b-cdn.net; connect-src 'self' https://ctvnulgolfsbcupzectd.supabase.co https://api.stripe.com https://accounts.google.com https://www.googleapis.com https://www.google-analytics.com https://region1.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://analytics.google.com https://stats.g.doubleclick.net https://cdn-cookieyes.com https://log.cookieyes.com https://media.leftthis.world https://ltw-media.b-cdn.net https://ltw-media-staging.b-cdn.net https://upload.bunnycdn.com https://video.bunnycdn.com https://cdn.sanity.io https://*.api.sanity.io wss://ctvnulgolfsbcupzectd.supabase.co https://www.youtube.com https://challenges.cloudflare.com https://*.ingest.us.sentry.io https://va.vercel-scripts.com https://ct.pinterest.com https://log.pinterest.com https://s.pinimg.com https://*.bunny.run; frame-src 'self' https://accounts.google.com https://js.stripe.com https://www.google.com https://www.youtube.com https://challenges.cloudflare.com https://iframe.mediadelivery.net https://vercel.live https://ct.pinterest.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain does not appear to be behind Cloudflare.

Loaded in 0.61s (perceived).

11 scripts and 1 styles may block rendering.

• • script: https://www.leftthis.world/_next/static/immutable/chunks/0c0hxoamwjsbw.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/3lo-j4m-bh85b.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/2srhycvne9xg4.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/0csof55mgdegk.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/097ac83otdm00.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/2fsw5194gd1lr.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/3kv6z6_fw1uha.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/3wzi5ump-cboc.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/30sy6ba88n_qq.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/0myhulsm5-b5s.js
• • script: https://www.leftthis.world/_next/static/immutable/chunks/01lyf9v4_y791.js
• • style: https://www.leftthis.world/_next/static/immutable/chunks/1xfnwvcg27kpz.css

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

6 text resources look uncompressed.

• • https://www.leftthis.world/_next/static/immutable/chunks/0hj6scqhzf-yj.js (application/javascript; charset=utf-8)
• • https://www.leftthis.world/en-us/demo-memorial?_rsc=Uqk57SD-w0KzUGC6 (text/x-component)
• • https://www.leftthis.world/en-us/pricing?_rsc=Uqk57SD-w0KzUGC6 (text/x-component)
• • https://www.leftthis.world/en-us/invitation?_rsc=Uqk57SD-w0KzUGC6 (text/x-component)
• • https://www.leftthis.world/en-us/blog?_rsc=Uqk57SD-w0KzUGC6 (text/x-component)
• • https://www.leftthis.world/_next/static/immutable/chunks/0myhulsm5-b5s.js (application/javascript; charset=utf-8)

Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

Found robots.txt (200).

Found sitemap (200) at https://www.leftthis.world/sitemap.xml.

Robots meta found: index, follow

All 0 controls are labeled.

Header, nav, main, and footer landmarks are present.

10 interactive elements appear smaller than 48px.

• • a.sr-only.focus:not-sr-only (Skip to main content) - 1x1px
• • a.flex.items-center (Left This World) - 193x40px
• • a.inline-flex.items-center (Home) - 71x40px
• • a.inline-flex.items-center (Pricing) - 78x40px
• • a.inline-flex.items-center (Blog) - 59x40px
• • a.inline-flex.items-center (Invitation) - 100x40px
• • a.inline-flex.items-center (Sign in) - 87x40px
• • a.inline-flex.items-center (View all plans & features) - 218x24px
• • a.inline-flex.items-center (View all articles) - 145x24px
• • button.flex.h-10 (Select language) - 200x40px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary_large_image.

JSON-LD schema detected.

Manifest and Apple touch icon are configured.

Social preview metadata and image quality look good for Open Graph/Twitter.

• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.
• • MEASURED: Image size: 0.14 MB
• • MEASURED: Image dimensions: 1200x630

Checked 24 links. No broken internal links found.

No broken external links found in checked URLs.

All 45 links use non-empty href values.

Largest Contentful Paint: 0.61s.

Cumulative Layout Shift: 0.000.

Total Blocking Time estimate: 55ms.

No failed CSS/JS/image/font/media requests detected.

No console/page runtime errors detected during audit.