Audit Result

Found 27 characters. Keep title between 30 and 60 characters.

Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.

Missing meta description.

Fix: Add <meta name="description" content="..."> in <head> with a clear page summary.

Canonical link not found.

Fix: Add <link rel="canonical" href="https://example.com/page"> to avoid duplicate URL ambiguity.

Favicon found and reachable: data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 62 50'%3E %3Cstyle%3E path %7B fill: url(%23gradient-light); %7D @media (prefers-color-scheme: dark) %7B path %7B fill: url(%23gradient-dark); %7D %7D %3C/style%3E %3Cdefs%3E %3ClinearGradient id='gradient-light' x1='30.7' y1='0' x2='30.7' y2='49.8' gradientUnits='userSpaceOnUse'%3E %3Cstop stop-color='%23332CB3'/%3E %3Cstop offset='1' stop-color='%23456FDD'/%3E %3C/linearGradient%3E %3ClinearGradient id='gradient-dark' x1='30.7' y1='0' x2='30.7' y2='49.8' gradientUnits='userSpaceOnUse'%3E %3Cstop stop-color='%23FFFFFF'/%3E %3Cstop offset='1' stop-color='%23E0E0E0'/%3E %3C/linearGradient%3E %3C/defs%3E %3Cpath d='M21.3 15.6h-7.8C17.2 6.4 26.1 0 36.6 0c13.7 0 24.9 11.1 24.9 24.9 0 13.7-11.1 24.9-24.9 24.9-10.4 0-19.4-6.4-23.1-15.6h7.8c3.1 5.1 8.8 8.6 15.3 8.6 9.9 0 17.9-8 17.9-17.9 0-9.9-8-17.9-17.9-17.9-6.5 0-12.1 3.4-15.3 8.6zm-12 14l-3.1-3.1h36.7c1.4 0 2.1 1.7 1.1 2.7l-6.2 6.2-2.2-2.2 3.6-3.6H9.3zm23-12.9l2.2-2.2 6.2 6.2c1 1 .3 2.7-1.1 2.7H3.1L0 20.2h35.9l-3.6-3.5z'/%3E %3C/svg%3E (HTTP 200).

Viewport configured: initial-scale=1, maximum-scale=1, user-scalable=no, width=device-width

No lang attribute on the <html> element.

Fix: Set <html lang="en"> (or the correct locale) for accessibility and search engines.

Exactly one H1 found: "Log in to ksef-stage".

Valid heading flow across 1 headings.

1 of 1 images are missing alt text.

Fix: Add meaningful alt attributes to all informative images for accessibility and image SEO.

Page is served over HTTPS.

1 HTTPS hardening issues detected.

• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=31536000; includeSubDomains

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Core security headers were detected.

3 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • CSP is missing object-src 'none'.
• • CSP is missing a base-uri restriction.
• • Content-Security-Policy: frame-ancestors 'none'; connect-src 'self' http://127.0.0.1:*; default-src https: 'unsafe-inline'

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain appears to be behind Cloudflare.

• • server: cloudflare
• • cf-ray: a37735f97f342449-IAD

Loaded in 0.64s (perceived).

No render-blocking scripts or styles detected.

Text-like assets appear compressed.

Found robots.txt (200).

Sitemap missing or inaccessible at https://skryptersidev.cloudflareaccess.com/sitemap.xml (404).

Fix: Publish a sitemap.xml and reference it in robots.txt with: Sitemap: https://skryptersidev.cloudflareaccess.com/sitemap.xml

Robots meta found: noindex

4 of 5 controls are missing labels.

• • input[type="text"] (client_id)
• • input[type="text"] (connector_id)
• • input[type="text"] (connector_type)
• • input[type="text"] (redirect_url)

Fix: Associate each form control with a visible label, aria-label, or aria-labelledby.

Missing landmarks: header, nav, main, footer.

Fix: Use semantic regions (<header>, <nav>, <main>, <footer>) for navigation and assistive tech.

2 interactive elements appear smaller than 48px.

• • a.OrgAvatarLink (skryptersidev.cloudflareaccess.com) - 394x20px
• • button.Button-is-block.Button (Send login code) - 394x44px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Missing og:title or og:description.

Fix: Add og:title and og:description tags to control social preview text.

og:image is missing.

Fix: Add <meta property="og:image" content="https://..."> with a high-quality share image.

twitter:card is missing.

Fix: Add <meta name="twitter:card" content="summary_large_image"> for better previews on X.

No JSON-LD schema scripts found.

Fix: Add JSON-LD structured data matching your page type (Organization, Article, Product, etc.).

Manifest or Apple touch icon is missing.

Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

5 social preview quality issues detected.

• • ISSUE: og:url should be an absolute URL.
• • ISSUE: og:title should typically be between 10 and 70 characters.
• • ISSUE: og:description should typically be between 50 and 200 characters.
• • ISSUE: Use an absolute URL for og:image or twitter:image.
• • ISSUE: twitter:card is missing.
• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.

Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Checked 0 links. No broken internal links found.

No broken external links found in checked URLs.

1 links are empty, invalid, or placeholder-only.

• • href="(empty)" text="skryptersidev.cloudflareaccess.com"

Fix: Replace empty/#/javascript href values with real destinations or use buttons for non-navigation actions.

Largest Contentful Paint: 0.64s.

Cumulative Layout Shift: 0.000.

Total Blocking Time estimate: 0ms.

No failed CSS/JS/image/font/media requests detected.

1 JavaScript runtime issues detected.

• • Loading the image 'data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 62 50'%3E %3Cstyle%3E path %7B fill: url(%23gradient-light); %7D @media (prefers-color-scheme: dark) %7B path %7B fill: url(%23gradient-dark); %7D %7D %3C/style%3E %3Cdefs%3E %3ClinearGradient id='gradient-light' x1='30.7' y1='0' x2='30.7' y2='49.8' gradientUnits='userSpaceOnUse'%3E %3Cstop stop-color='%23332CB3'/%3E %3Cstop offset='1' stop-color='%23456FDD'/%3E %3C/linearGradient%3E %3ClinearGradient id='gradient-dark' x1='30.7' y1=...Use'%3E %3Cstop stop-color='%23FFFFFF'/%3E %3Cstop offset='1' stop-color='%23E0E0E0'/%3E %3C/linearGradient%3E %3C/defs%3E %3Cpath d='M21.3 15.6h-7.8C17.2 6.4 26.1 0 36.6 0c13.7 0 24.9 11.1 24.9 24.9 0 13.7-11.1 24.9-24.9 24.9-10.4 0-19.4-6.4-23.1-15.6h7.8c3.1 5.1 8.8 8.6 15.3 8.6 9.9 0 17.9-8 17.9-17.9 0-9.9-8-17.9-17.9-17.9-6.5 0-12.1 3.4-15.3 8.6zm-12 14l-3.1-3.1h36.7c1.4 0 2.1 1.7 1.1 2.7l-6.2 6.2-2.2-2.2 3.6-3.6H9.3zm23-12.9l2.2-2.2 6.2 6.2c1 1 .3 2.7-1.1 2.7H3.1L0 20.2h35.9l-3.6-3.5z'/%3E %3C/svg%3E' violates the following Content Security Policy directive: "default-src https: 'unsafe-inline'". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback. The action has been blocked. [https://skryptersidev.cloudflareaccess.com/cdn-cgi/access/login/stage.ksefnoti.pl?kid=ced1eb82164208c52d4e453d6a80f796ed493d463c6bb859bc0027ca8b18beca&meta=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjkzN2UzNzY1ZDljYzVkNTUwNDE0ZmIzNWU4ZTExOWJmODEwZmVlMGNkZmJmZTljYjljNjgxYmM4NmRjYjI2YjIifQ.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.OCob0yIROhdb1S_Lcm4-F8JOnMTdV5t7hFJnoicD4rTxGj_ej3_J60VKjgSi0cY_D7bymYjB-eRQ5RPTv2FPHE-2FwvXzT6JJ3sWwVulrOwzH3EhwHBUgP2GqBBzhMJyfxEnJNxPY9BlViW1zoz5UQEPf4v66lL6t0RAiKJDGhGWHkPpXBgkELCgTeIP5zUEPKav8VhvjIzypNL5UXTNhjbkIi2HNqSZflKlTtKzFiZhVzHttk2KawusUJ7tey9Ld-Qzlmy_6bV22H3uG0gF08Ls2saqN6Lee2YBIi9rMhgO7IrB0DqJcNed6ceQSc61a50t47ztbrssD6HxQxu2Xg&redirect_url=%2F:9]

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.