Audit Result

UUID: 01a02a10-51fc-70f7-9383-755d50127f34

Share on X Recheck Back to history
x.com

https://x.com/

Scanned 2 weeks ago

69
Fair Score
39 total checks
Passed
20
Warnings
14
Errors
5

Meta Information

  • Title Tag Error

    Missing <title> tag.

    Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.

  • Meta Description Error

    Missing meta description.

    Fix: Add <meta name="description" content="..."> in <head> with a clear page summary.

  • Canonical URL Warning

    Canonical link not found.

    Fix: Add <link rel="canonical" href="https://example.com/page"> to avoid duplicate URL ambiguity.

  • Favicon Warning

    No favicon link found in <head>.

    Fix: Add <link rel="icon" href="/favicon.ico"> to ensure browser tab and bookmark visibility.

  • Viewport Meta Error

    Viewport meta is missing.

    Fix: Add <meta name="viewport" content="width=device-width, initial-scale=1"> for mobile rendering.

  • HTML Lang Warning

    No lang attribute on the <html> element.

    Fix: Set <html lang="en"> (or the correct locale) for accessibility and search engines.

Content Structure

  • H1 Tag Error

    No H1 heading found.

    Fix: Use a single, descriptive <h1> that states the primary purpose of the page.

  • Heading Hierarchy Pass

    Valid heading flow across 0 headings.

  • Image Alt Text Pass

    All 0 images include alt text.

Technical Optimization

  • HTTPS Pass

    Page is served over HTTPS.

  • HSTS & HTTPS Redirect Warning

    1 HTTPS hardening issues detected.

    • • Could not probe the HTTP version of this page.
    • • Strict-Transport-Security: max-age=631138519; includeSubdomains

    Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

  • Security Headers Pass

    Core security headers were detected.

    Full HTTP headers (25)
    • • cache-control: no-cache, no-store, max-age=0
    • • cf-cache-status: DYNAMIC
    • • cf-ray: a2f2de82d9023000-IAD
    • • content-length: 0
    • • content-security-policy: default-src 'self';script-src 'self' 'nonce-sCz3/xQ2O5qEyxgQO0Zo7A==' 'unsafe-inline' 'wasm-unsafe-eval' 'report-sample' https://*.twimg.com https://abs.twimg.com https://accounts.google.com/gsi/client https://appleid.cdn-apple.com https://*.stripe.com https://cdn.plaid.com/link/v2/stable/link-initialize.js https://sdk.dv.socure.io/latest/device-risk-sdk.js https://cdn.getpinwheel.com/pinwheel-v3.2.1.js https://*.x.com;script-src-attr 'none' 'report-sample';style-src 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;style-src-elem 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;img-src 'self' https://x.com:443 https://twitter.com https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv https://abs.twimg.com data: blob: https://play-lh.googleusercontent.com https://img.youtube.com https://i.ytimg.com https://*.plaid.com https://assets.grok.com https://*.grokusercontent.com https://*.gstatic.com https://*.grok.me https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com;manifest-src 'self' https://x.com:443;font-src 'self' https://*.twimg.com data:;media-src 'self' https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv blob: data: https://*.watch.x.com;connect-src 'self' https://api.x.com https://api.twitter.com https://t.co https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv wss://*.pscp.tv https://upload.x.com https://sentry.io https://*.sentry.io wss://localhost.x.com:* https://m.castle.io wss://chat-ws.x.com https://*.x.com https://accounts.google.com/gsi/ https://csi.gstatic.com https://appleid.cdn-apple.com https://appleid.apple.com https://*.prelude.dev data: https://*.stripe.com https://*.plaid.com https://*.dv.socure.io https://checkoutshopper-live.adyen.com https://grok.com https://*.grok.com wss://grok.com wss://*.grok.com https://*.x.ai wss://*.x.ai https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com;frame-src 'self' https://accounts.google.com https://appleid.apple.com https://www.youtube.com https://w.soundcloud.com https://www.pscp.tv https://studio.x.com https://studio-dev.x.com https://iframe.arkoselabs.com https://*.x.com https://*.crbcos.com https://*.plaid.com https://*.stripe.com https://cdn.getpinwheel.com/ https://checkoutshopper-live.adyen.com https://artifacts.grokusercontent.com;worker-src 'self' blob: https://*.twimg.com https://abs.twimg.com;frame-ancestors 'self' https://x.com https://x.com:443 https://twitter.com https://twitter.com:443;base-uri 'self';form-action 'self' https://accounts.google.com;object-src 'none';upgrade-insecure-requests
    • • cross-origin-opener-policy: same-origin-allow-popups
    • • cross-origin-resource-policy: same-origin
    • • date: Sat, 22 Aug 2026 15:21:46 GMT
    • • origin-agent-cluster: ?1
    • • origin-cf-ray: a2f2de82d9023000-ATL
    • • perf: 7402827104
    • • referrer-policy: strict-origin-when-cross-origin
    • • server: cloudflare envoy
    • • strict-transport-security: max-age=631138519; includeSubdomains
    • • x-content-type-options: nosniff
    • • x-dns-prefetch-control: off
    • • x-download-options: noopen
    • • x-frame-options: SAMEORIGIN
    • • x-permitted-cross-domain-policies: none
    • • x-response-time: 26
    • • x-robots-tag: none
    • • x-served-by: t4_a
    • • x-server: x-web
    • • x-transaction-id: eae5bf9d977b1807
    • • x-xss-protection: 0
  • CSP Quality Error

    1 CSP hardening issues detected.

    • • script-src/default-src permits 'unsafe-inline'.
    • • Content-Security-Policy: default-src 'self';script-src 'self' 'nonce-sCz3/xQ2O5qEyxgQO0Zo7A==' 'unsafe-inline' 'wasm-unsafe-eval' 'report-sample' https://*.twimg.com https://abs.twimg.com https://accounts.google.com/gsi/client https://appleid.cdn-apple.com https://*.stripe.com https://cdn.plaid.com/link/v2/stable/link-initialize.js https://sdk.dv.socure.io/latest/device-risk-sdk.js https://cdn.getpinwheel.com/pinwheel-v3.2.1.js https://*.x.com;script-src-attr 'none' 'report-sample';style-src 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;style-src-elem 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;img-src 'self' https://x.com:443 https://twitter.com https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv https://abs.twimg.com data: blob: https://play-lh.googleusercontent.com https://img.youtube.com https://i.ytimg.com https://*.plaid.com https://assets.grok.com https://*.grokusercontent.com https://*.gstatic.com https://*.grok.me https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com;manifest-src 'self' https://x.com:443;font-src 'self' https://*.twimg.com data:;media-src 'self' https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv blob: data: https://*.watch.x.com;connect-src 'self' https://api.x.com https://api.twitter.com https://t.co https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv wss://*.pscp.tv https://upload.x.com https://sentry.io https://*.sentry.io wss://localhost.x.com:* https://m.castle.io wss://chat-ws.x.com https://*.x.com https://accounts.google.com/gsi/ https://csi.gstatic.com https://appleid.cdn-apple.com https://appleid.apple.com https://*.prelude.dev data: https://*.stripe.com https://*.plaid.com https://*.dv.socure.io https://checkoutshopper-live.adyen.com https://grok.com https://*.grok.com wss://grok.com wss://*.grok.com https://*.x.ai wss://*.x.ai https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com;frame-src 'self' https://accounts.google.com https://appleid.apple.com https://www.youtube.com https://w.soundcloud.com https://www.pscp.tv https://studio.x.com https://studio-dev.x.com https://iframe.arkoselabs.com https://*.x.com https://*.crbcos.com https://*.plaid.com https://*.stripe.com https://cdn.getpinwheel.com/ https://checkoutshopper-live.adyen.com https://artifacts.grokusercontent.com;worker-src 'self' blob: https://*.twimg.com https://abs.twimg.com;frame-ancestors 'self' https://x.com https://x.com:443 https://twitter.com https://twitter.com:443;base-uri 'self';form-action 'self' https://accounts.google.com;object-src 'none';upgrade-insecure-requests

    Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

  • Cookie Security Pass

    No first-party cookies were set during the initial page load.

  • Server Version Disclosure Pass

    Server response headers do not expose version tokens.

  • Cloudflare Proxy Pass

    Domain appears to be behind Cloudflare.

    • • cf-cache-status: DYNAMIC
    • • cf-ray: a2f2de82d9023000-IAD
  • Perceived Load Time Pass

    Loaded in 0.11s (perceived).

  • Render Blocking Resources Pass

    No render-blocking scripts or styles detected.

  • Compression Pass

    Text-like assets appear compressed.

  • Robots.txt Pass

    Found robots.txt (200).

  • Sitemap File Pass

    Found sitemap (200) at https://x.com/sitemap.xml.

  • Crawl Directives Warning

    No robots meta tag defined.

    Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

Accessibility Basics

  • Form Labels Pass

    All 0 controls are labeled.

  • Landmarks Warning

    Missing landmarks: header, nav, main, footer.

    Fix: Use semantic regions (<header>, <nav>, <main>, <footer>) for navigation and assistive tech.

  • Tap Target Size Pass

    Interactive targets look touch-friendly.

Social & Rich Results

  • Open Graph Basics Warning

    Missing og:title or og:description.

    Fix: Add og:title and og:description tags to control social preview text.

  • Open Graph Image Warning

    og:image is missing.

    Fix: Add <meta property="og:image" content="https://..."> with a high-quality share image.

  • Twitter Card Warning

    twitter:card is missing.

    Fix: Add <meta name="twitter:card" content="summary_large_image"> for better previews on X.

  • Structured Data Warning

    No JSON-LD schema scripts found.

    Fix: Add JSON-LD structured data matching your page type (Organization, Article, Product, etc.).

  • PWA Metadata Warning

    Manifest or Apple touch icon is missing.

    Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

  • Open Graph/Twitter Quality Warning

    5 social preview quality issues detected.

    • • ISSUE: og:url should be an absolute URL.
    • • ISSUE: og:title should typically be between 10 and 70 characters.
    • • ISSUE: og:description should typically be between 50 and 200 characters.
    • • ISSUE: Use an absolute URL for og:image or twitter:image.
    • • ISSUE: twitter:card is missing.
    • • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
    • • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
    • • GUIDELINE: Optimal preview image size: 1200x630 pixels.
    • • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
    • • GUIDELINE: Optimal preview image file size: under 5 MB.
    • • GUIDELINE: Recommended twitter:card: summary_large_image.

    Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Links Analysis

Performance & Runtime

  • Core Web Vitals: LCP Warning

    LCP could not be measured.

    Fix: Improve LCP by optimizing above-the-fold media, reducing server latency, and inlining critical CSS.

  • Core Web Vitals: CLS Pass

    Cumulative Layout Shift: 0.000.

  • Main Thread Blocking (TBT) Pass

    Total Blocking Time estimate: 0ms.

  • Broken Assets Pass

    No failed CSS/JS/image/font/media requests detected.

  • JavaScript Runtime Errors Warning

    1 JavaScript runtime issues detected.

    • • Failed to load resource: the server responded with a status of 403 () [https://x.com/:1]

    Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.