Audit Result

UUID: 019ffb49-60c8-71b3-bdcf-4ecdaf21b0bd

Share on X Recheck Back to history
webbab.se

https://webbab.se/

Scanned 3 weeks ago

74
Fair Score
39 total checks
Passed
22
Warnings
14
Errors
3

Meta Information

  • Title Tag Pass

    Found 42 characters. Length is optimal.

  • Meta Description Pass

    Found 142 characters. Good snippet length.

  • Canonical URL Warning

    Canonical link not found.

    Fix: Add <link rel="canonical" href="https://example.com/page"> to avoid duplicate URL ambiguity.

  • Favicon Pass

    Favicon found and reachable: https://webbab.se/favicon.ico (HTTP 200).

    Favicon
  • Viewport Meta Pass

    Viewport configured: width=device-width, initial-scale=1, maximum-scale=1

  • HTML Lang Pass

    Language declared as "sv-SE".

Content Structure

  • H1 Tag Pass

    Exactly one H1 found: "Webbutveckling till små och stora företag.".

  • Heading Hierarchy Warning

    Detected 1 heading level jumps.

    • • Skipped from h2 to h5: "Digital kommunikation när den är som bäst" -> "Användarupplevelse".

    Fix: Follow semantic order (h1 -> h2 -> h3) and avoid skipping heading levels.

  • Image Alt Text Pass

    All 30 images include alt text.

Technical Optimization

  • HTTPS Pass

    Page is served over HTTPS.

  • HSTS & HTTPS Redirect Warning

    2 HTTPS hardening issues detected.

    • • HSTS is missing includeSubDomains.
    • • Could not probe the HTTP version of this page.
    • • Strict-Transport-Security: max-age=31536000

    Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

  • Security Headers Pass

    Core security headers were detected.

    Full HTTP headers (21)
    • • alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
    • • cache-control: no-store, no-cache, must-revalidate
    • • content-encoding: br
    • • content-security-policy: default-src * data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'
    • • content-type: text/html; charset=UTF-8
    • • date: Thu, 13 Aug 2026 13:21:45 GMT
    • • expect-ct: max-age=7776000, enforce
    • • expires: Thu, 19 Nov 1981 08:52:00 GMT
    • • feature-policy: camera 'none'; microphone 'none'; geolocation *; fullscreen 'self'
    • • link: <https://webbab.se/wp-json/>; rel="https://api.w.org/" <https://webbab.se/wp-json/wp/v2/pages/105>; rel="alternate"; title="JSON"; type="application/json" <https://webbab.se/>; rel=shortlink
    • • permissions-policy: camera=(none), microphone=(), geolocation=(), sync-xhr=(), fullscreen=(self)
    • • pragma: no-cache
    • • referrer-policy: no-referrer-when-downgrade
    • • server: LiteSpeed
    • • strict-transport-security: max-age=31536000
    • • vary: Accept-Encoding
    • • x-content-type-options: nosniff
    • • x-frame-options: DENY
    • • x-permitted-cross-domain-policies: none
    • • x-powered-by: PHP/7.4.33
    • • x-xss-protection: 1; mode=block
  • CSP Quality Error

    6 CSP hardening issues detected.

    • • script-src/default-src permits 'unsafe-inline'.
    • • script-src/default-src permits 'unsafe-eval'.
    • • script-src/default-src allows wildcard (*) sources.
    • • CSP is missing object-src 'none'.
    • • CSP is missing a base-uri restriction.
    • • CSP is missing frame-ancestors protection.
    • • Content-Security-Policy: default-src * data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'

    Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

  • Cookie Security Pass

    No first-party cookies were set during the initial page load.

  • Server Version Disclosure Warning

    Versioned headers detected: x-powered-by.

    • • x-powered-by: PHP/7.4.33

    Fix: Hide or remove version tokens in Server and X-Powered-By headers.

  • Cloudflare Proxy Warning

    Domain does not appear to be behind Cloudflare.

  • Perceived Load Time Warning

    Loaded in 1.86s (perceived).

    Fix: Reduce payload size, cache static assets, and remove non-critical JS from initial load.

  • Render Blocking Resources Warning

    15 scripts and 22 styles may block rendering.

    • • script: https://connect.facebook.net/sv_SE/sdk.js#xfbml=1&version=v2.10
    • • script: https://www.google.com/recaptcha/api.js
    • • script: https://app.webcomet.io/js/loader.js
    • • script: https://app.webcomet.io/webcomet-components/webcomet-components.js
    • • script: https://plugin.nytsys.com/api/site/7063672b-3aaf-4a52-a925-85017564303a/nytsys.min.js
    • • script: https://webbab.se/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6
    • • script: https://webbab.se/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
    • • script: https://webbab.se/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
    • • script: https://webbab.se/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
    • • script: https://webbab.se/wp-content/plugins/latepoint/public/javascripts/vendor-front.js?ver=5.6.10
    • • script: https://webbab.se/wp-content/plugins/latepoint/public/javascripts/front.js?ver=5.6.10
    • • script: https://webbab.se/wp-content/plugins/essential-grid/public/assets/js/rbtools.min.js?ver=6.2.0
    • • script: https://webbab.se/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.1.8
    • • script: https://webbab.se/wp-content/themes/quince/js/init.js?ver=5153ffff3acdbe89e5851b4046d28656
    • • script: https://webbab.se/wp-content/themes/quince/js/sticky-header.js?ver=5153ffff3acdbe89e5851b4046d28656
    • • style: https://webbab.se/wp-content/plugins/easy-accordion-free/Blocks/assets/css/fontello.min.css?ver=3.1.9
    • • style: https://webbab.se/wp-content/plugins/easy-accordion-free/Blocks/build/style-ea-blocks.css?ver=3.1.9
    • • style: https://webbab.se/wp-content/plugins/easy-accordion-free/Blocks/assets/css/animate.min.css?ver=3.1.9
    • • style: https://webbab.se/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.6
    • • style: https://webbab.se/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.10
    • • style: https://webbab.se/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.10
    • • style: https://webbab.se/wp-content/plugins/latepoint/public/stylesheets/front.css?ver=5.6.10
    • • style: https://webbab.se/wp-content/plugins/latepoint-google-calendar/public/stylesheets/latepoint-google-calendar-front.css?ver=1.5.0
    • • style: https://webbab.se/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.1.8
    • • style: https://webbab.se/wp-content/plugins/wp-visual-icon-fonts/css/wpvi-fa4.css?ver=5153ffff3acdbe89e5851b4046d28656
    • • style: https://webbab.se/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.4.5
    • • style: https://webbab.se/wp-content/plugins/core-extend/assets/css/core-extend.css?ver=5153ffff3acdbe89e5851b4046d28656
    • • style: https://webbab.se/wp-content/plugins/core-extend/assets/css/font-awesome.css?ver=4.7.0
    • • style: https://webbab.se/wp-content/themes/quince/style.css?ver=5153ffff3acdbe89e5851b4046d28656
    • • style: https://fonts.googleapis.com/css?family=Lato%3Alighter%2Cnormal%2Csemi-bold%2Cbold%7COpen+Sans%3Alighter%2Cnormal%2Csemi-bold%2Cbold&ver=5153ffff3acdbe89e5851b4046d28656
    • • style: https://webbab.se/wp-content/themes/quince/css/jquery.mmenu.css?ver=1
    • • style: https://webbab.se/wp-content/themes/webbab/style.css?ver=5153ffff3acdbe89e5851b4046d28656
    • • style: https://use.fontawesome.com/releases/v5.15.4/css/all.css?ver=2.0.3
    • • style: https://use.fontawesome.com/releases/v5.15.4/css/v4-shims.css?ver=2.0.3
    • • style: https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800%7CRaleway:100,200,300,400,500,600,700,800,900%7CDroid+Serif:400,700
    • • style: https://app.webcomet.io/assets/fonts/font-awesome/css/all.min.css
    • • style: https://app.webcomet.io/assets/fonts/font-awesome/css/all.min.css

    Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

  • Compression Warning

    3 text resources look uncompressed.

    • • https://app.weply.chat/widget/12f77a0df4d4fbcb93c92421cfc59b78 (application/javascript; charset=utf-8)
    • • https://webbab.se/wp-json/contact-form-7/v1/contact-forms/2985/feedback/schema (application/json; charset=UTF-8)
    • • https://app.weply.chat/visitor/widget/12f77a0df4d4fbcb93c92421cfc59b78?templateId=null (application/json; charset=utf-8)

    Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

  • Robots.txt Pass

    Found robots.txt (200).

  • Sitemap File Pass

    Found sitemap (200) at https://webbab.se/gig/sitemap.

  • Crawl Directives Pass

    Robots meta found: index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

Accessibility Basics

  • Form Labels Error

    3 of 3 controls are missing labels.

    • • input[type="text"].wpcf7-form-control.wpcf7-text (your-name)
    • • input[type="email"].wpcf7-form-control.wpcf7-email (your-email)
    • • textarea#g-recaptcha-response-100000.g-recaptcha-response (g-recaptcha-response)

    Fix: Associate each form control with a visible label, aria-label, or aria-labelledby.

  • Landmarks Warning

    Missing landmarks: main.

    Fix: Use semantic regions (<header>, <nav>, <main>, <footer>) for navigation and assistive tech.

  • Tap Target Size Pass

    Interactive targets look touch-friendly.

Social & Rich Results

  • Open Graph Basics Pass

    Core Open Graph tags are present.

  • Open Graph Image Warning

    og:image is missing.

    Fix: Add <meta property="og:image" content="https://..."> with a high-quality share image.

  • Twitter Card Pass

    twitter:card set to summary_large_image.

  • Structured Data Pass

    JSON-LD schema detected.

  • PWA Metadata Warning

    Manifest or Apple touch icon is missing.

    Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

  • Open Graph/Twitter Quality Warning

    2 social preview quality issues detected.

    • • ISSUE: og:url should be an absolute URL.
    • • ISSUE: Use an absolute URL for og:image or twitter:image.
    • • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
    • • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
    • • GUIDELINE: Optimal preview image size: 1200x630 pixels.
    • • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
    • • GUIDELINE: Optimal preview image file size: under 5 MB.
    • • GUIDELINE: Recommended twitter:card: summary_large_image.

    Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Links Analysis

  • Internal Links Pass

    Checked 51 links. No broken internal links found.

  • External Links Pass

    No broken external links found in checked URLs.

  • Link Format Warning

    8 links are empty, invalid, or placeholder-only.

    • • href="(empty)"
    • • href="(empty)"
    • • href="#" text="Previous"
    • • href="#" text="Next"
    • • href="#" text="Previous"
    • • href="#" text="Next"
    • • href="#" text="Previous"
    • • href="#" text="Next"

    Fix: Replace empty/#/javascript href values with real destinations or use buttons for non-navigation actions.

Performance & Runtime

  • Core Web Vitals: LCP Pass

    Largest Contentful Paint: 1.86s.

  • Core Web Vitals: CLS Pass

    Cumulative Layout Shift: 0.003.

  • Main Thread Blocking (TBT) Pass

    Total Blocking Time estimate: 79ms.

  • Broken Assets Error

    2 asset requests failed.

    • • https://tag.clearbitscripts.com/v1/pk_6dbf6ee5a6b4d2ec6e4b1727b40690c2/tags.js (HTTP 404)
    • • https://tag.clearbitscripts.com/v1/pk_6dbf6ee5a6b4d2ec6e4b1727b40690c2/tags.js (net::ERR_ABORTED)

    Fix: Fix missing files, update asset URLs, and ensure static assets return HTTP 200.

  • JavaScript Runtime Errors Warning

    7 JavaScript runtime issues detected.

    • • Request failed: https://tag.clearbitscripts.com/v1/pk_6dbf6ee5a6b4d2ec6e4b1727b40690c2/tags.js (HTTP 404, type: script)
    • • Request failed: https://analytics.google.com/g/collect?v=2&tid=G-T92TD75ZV9&gtm=45je68b1v872107125za200zd872107125&_p=1786627305859&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&_eu=AAAAAGAC&are=1&cid=2029061210.1786627306&frm=0&pscdl=noapi&rcb=5&sr=1280x800&uaa=x86&uab=64&uafvl=Not%253AA-Brand%3B99.0.0.0%7CHeadlessChrome%3B145.0.7632.6%7CChromium%3B145.0.7632.6&uam=&uamb=0&uap=Linux&uapv=&uaw=0&ul=en-us&gaf=2&_s=1&tag_exp=115938466~115938468~118897920~118897930~119367802~119367810~119404700~119527020~119896802&sid=1786627306&sct=1&seg=0&dl=https%3A%2F%2Fwebbab.se%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1437 (net::ERR_ABORTED, type: fetch)
    • • Request failed: https://tag.clearbitscripts.com/v1/pk_6dbf6ee5a6b4d2ec6e4b1727b40690c2/tags.js (net::ERR_ABORTED, type: script)
    • • Request failed: https://www.google.com/recaptcha/api2/clr?k=6LfqwI4UAAAAACLtF7yPLASFujvs3zt61C1BeVoU (net::ERR_ABORTED, type: fetch)
    • • Failed to load resource: the server responded with a status of 404 () [https://tag.clearbitscripts.com/v1/pk_6dbf6ee5a6b4d2ec6e4b1727b40690c2/tags.js:1]
    • • Failed to load resource: the server responded with a status of 403 () [https://webbab.se/wp-content/plugins/matomo/app/matomo.php?action_name=Webbyr%C3%A5%20G%C3%A4vle%20Sm%C3%A5%20och%20stora%20f%C3%B6retag%20WEBBAB&idsite=1&rec=1&r=147219&h=15&m=21&s=46&url=https%3A%2F%2Fwebbab.se%2F&_id=4d6cbd8c6e32ee52&_idn=1&send_image=0&_refts=0&pv_id=6Jw1eI&pf_net=334&pf_srv=918&pf_tfr=3&uadata=%7B%22formFactors%22%3A%5B%22Desktop%22%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not%3AA-Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22HeadlessChrome%22%2C%22version%22%3A%22145.0.7632.6%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22145.0.7632.6%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Linux%22%2C%22platformVersion%22%3A%22%22%7D&cookie=1&res=1280x800:1]
    • • requestStorageAccess: Permission denied. [https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfqwI4UAAAAACLtF7yPLASFujvs3zt61C1BeVoU&co=aHR0cHM6Ly93ZWJiYWIuc2U6NDQz&hl=en&v=XOqlk8PL_yVx6IdpLbpXdiLy&size=invisible&anchor-ms=20000&execute-ms=30000&cb=muxwyl1t9zyj:259]

    Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.