Audit Result

Found 6 characters. Keep title between 30 and 60 characters.

Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.

Found 239 characters. Keep description around 70-160 characters.

Fix: Add <meta name="description" content="..."> in <head> with a clear page summary.

Canonical found: https://www.roblox.com/

Favicon found and reachable: https://images.rbxcdn.com/e854eb7b2951ac03edba9a2681032bba.ico (HTTP 200).

Viewport configured: width=device-width, initial-scale=1

Language declared as "en".

Exactly one H1 found: "One platform.Millions of games.".

Detected 1 heading level jumps.

• • Skipped from h1 to h3: "One platform.Millions of games." -> "Games to get you started".

Fix: Follow semantic order (h1 -> h2 -> h3) and avoid skipping heading levels.

3 of 5 images are missing alt text.

Fix: Add meaningful alt attributes to all informative images for accessibility and image SEO.

Page is served over HTTPS.

2 HTTPS hardening issues detected.

• • HSTS is missing includeSubDomains.
• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=31536000 max-age=3600

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Missing: x-content-type-options, referrer-policy.

Fix: Add the missing security headers at your reverse proxy or application layer.

4 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • CSP is missing object-src 'none'.
• • CSP is missing a base-uri restriction.
• • CSP is missing frame-ancestors protection.
• • Content-Security-Policy: report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' apis.roblox.com roblox.com apis.robloxapp.vnggames.com arkoselabs.robloxapp.vnggames.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com challenges.cloudflare.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com js.stripe.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com arkoselabs.roblox.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com client-api.arkoselabs.com api.arkoselabs.com *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com cdn.safecharge.com *.px-cloud.net *.px-cdn.net; img-src 'self' data: *.cloudfront.net *.gilcdn.com *.gldcdn.com *.google-analytics.com *.google.com *.kaptcha.com *.openstreetmap.org *.rblx.org *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat *.stripe.com *.tarobicdn.com *.tarobidevsandboxcdn.com www.facebook.com *.snapchat.com *.safecharge.com; connect-src 'self' *.roblox.com *.robloxlabs.com *.rblx.org *.rbx.com *.rbxcdn.com *.roblox.cn *.robloxapp.vnggames.com *.simulpong.com *.lightstep.com *.ns1p.net *.arkoselabs.com *.kaptcha.com *.google.com *.google-analytics.com *.doubleclick.net *.sentry.io wss://realtime.roblox.com wss://realtime.sitetest1.robloxlabs.com wss://realtime.sitetest2.robloxlabs.com wss://realtime.sitetest3.robloxlabs.com wss://realtime-signalr.roblox.com wss://realtime-signalr.robloxapp.vnggames.com *.braintree-api.com *.braintreegateway.com d1q2u37vreaobr.cloudfront.net funcaptcha.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com *.safecharge.com *.px-cloud.net *.px-cdn.net *.pxchk.net *.px-client.net *.perimeterx.net;

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain does not appear to be behind Cloudflare.

Loaded in 1.88s (perceived).

Fix: Reduce payload size, cache static assets, and remove non-critical JS from initial load.

6 scripts and 25 styles may block rendering.

• • script: https://www.roblox.com/js/utilities/bundleVerifier.js?v=91dceb4978eda412b09842312dd6cbaa
• • script: https://js.rbxcdn.com/fc8e6f9e95e50f6da80942bd29d57886659233629d8caf66ac456117953186c6-EnvironmentUrls.js
• • script: https://js.rbxcdn.com/0496306d944faeb488779bad1af0738e.js
• • script: https://js.rbxcdn.com/fc00826f9e0f8fd2f6bfe2152fb652d4f73e1a12e1ad50ad234d2f60854a311c-Polyfill.js
• • script: https://js.rbxcdn.com/2f0fd0c2760ff1898187af6df3b764f4b08f77a315d0a33654f105f61b0ea6d0.js
• • script: https://js.rbxcdn.com/69792ba68738c4df0266885d6e3f59a121c1a727d1399b3fb83590023892b9b7-HeaderScripts.js
• • style: https://css.rbxcdn.com/d706fa7361f26569ce9481ec468f9f0da29aa7a0623e0da9d19a772490192ed1-FoundationCss.css
• • style: https://css.rbxcdn.com/cbc004c933c81fb07d6c57dd882001686ae4f26f1f13134ea1b138d7866af876-ReactStyleGuide.css
• • style: https://css.rbxcdn.com/7f4f10003b8708331d7c8f20bf584a6478db0a83a986877b6c8d079f74be0a42-StyleGuide.css
• • style: https://css.rbxcdn.com/835ad8483ecae12366bf4b80701ee78af7c5b58cdb95a529e061851cf7bc1c7f-Builder.css
• • style: https://css.rbxcdn.com/523c59064ab61f06e8d52365e916d731063e2a67981bcf994376f68214f5f8e4-Thumbnails.css
• • style: https://css.rbxcdn.com/b8f8f15a57a66e73469ae72eea7d8905346afa78b9f2397627cd099f7dcc779a-CaptchaCore.css
• • style: https://css.rbxcdn.com/425750fcea32cbd87363ee2d46539a13eee157b6c0b565dbe4389b416614f269-EmailVerifyCodeModal.css
• • style: https://css.rbxcdn.com/e99a78e14f6f93084da476e455341908b0cb8218ef6e967d25aa5abff7628822-Challenge.css
• • style: https://css.rbxcdn.com/f77e16b9fa5823882aaa0cdabade9706b9ba2b7e050d23d2831da138a58e5f7f-VerificationUpsell.css
• • style: https://css.rbxcdn.com/7a9e67ec503d2a15aac8cb8cbfe95ca99a08f78df56f5961d9e10a325c19ddf6-AccountSwitcher.css
• • style: https://css.rbxcdn.com/9bfc48ea40a698035ea8cbe3d3e94bd06d3aac48969bedceb6d8ba5ff17ff84d.css
• • style: https://css.rbxcdn.com/3d2ed080fe3621c03204c3c02e30ecb20ddc28f45c8f1c38c1999e3b888b67d5-SearchLandingPage.css
• • style: https://css.rbxcdn.com/7dfc7837b5da6850e13413c630b37da7e88aeb610ca2c7d4e8b71b02cbdc6ba6.css
• • style: https://css.rbxcdn.com/b2cff71de0c286e8f85b1a26a8b87a8cd7f77422c592849ad5114ac5d929c575.css
• • style: https://css.rbxcdn.com/0c111e7a50e6625e2fa441a046bbeb00e433fec9cd34d1dc7632f885e1ddeaf5-Navigation.css
• • style: https://css.rbxcdn.com/0f638d9cad3d450dec6771c2db09c9e8954b25b6ef84423d94f291b6c480471f-CookieBannerV3.css
• • style: https://css.rbxcdn.com/d9618808344e48ea410ac2fa550fbb606e5397c39a0f6d381f9051bfbf43a783-Footer.css
• • style: https://css.rbxcdn.com/2152a305a6a0a3d5a56e402aa4e3e9db865ff7bfa813e7b7ad780bf9876b5cc4-AccessManagementUpsellV2.css
• • style: https://css.rbxcdn.com/2b1755bad0b1fecc7cc797f785464a52f1c43220811d2765c6f343710ec9aa8a-SduiLandingPage.css
• • style: https://css.rbxcdn.com/52f3e763c2d49763b2dac14293b034680b0d32284d3f46e4b0a51073ae47995b-ItemPurchaseUpsell.css
• • style: https://css.rbxcdn.com/3408b46f5db5261266fe187e582c87e980ac50a5047314613bc4a7486de21e8c-ItemPurchase.css
• • style: https://css.rbxcdn.com/37b5bc69ed67ee094c95e908d68d809c55c28ab8f34ed714a7541f1f5eeacfa6-IdVerification.css
• • style: https://css.rbxcdn.com/d45e200658a1343116bbf4a88c367d093758085e7d001918d641c85b2143468f-AccessManagementUpsell.css
• • style: https://css.rbxcdn.com/4806bac3d36a384ebcf7cd0da6c34786b66ca961cc084daee7995125cc08b7f1-GameLaunch.css
• • style: https://css.rbxcdn.com/d5a3728b78be729b693aadf79a1f45f0fa49c15fe863a0d7dd631b75f9e82207.css

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

27 text resources look uncompressed.

• • https://css.rbxcdn.com/b8f8f15a57a66e73469ae72eea7d8905346afa78b9f2397627cd099f7dcc779a-CaptchaCore.css (text/css)
• • https://css.rbxcdn.com/d45e200658a1343116bbf4a88c367d093758085e7d001918d641c85b2143468f-AccessManagementUpsell.css (text/css)
• • https://css.rbxcdn.com/d5a3728b78be729b693aadf79a1f45f0fa49c15fe863a0d7dd631b75f9e82207.css (text/css)
• • https://css.rbxcdn.com/9bfc48ea40a698035ea8cbe3d3e94bd06d3aac48969bedceb6d8ba5ff17ff84d.css (text/css)
• • https://css.rbxcdn.com/b2cff71de0c286e8f85b1a26a8b87a8cd7f77422c592849ad5114ac5d929c575.css (text/css)
• • https://js.rbxcdn.com/0fe97bffcb328f446dd0f247d2d42e740d354ef70bd54b9371ece139569a5e72.js (application/javascript)
• • https://js.rbxcdn.com/7f4c2753c55dc89d4c9bf2dbfbf34e224194f6255457c0bd8c8c1ed0e6350f3a.js (application/javascript)
• • https://js.rbxcdn.com/993eb6cb9b2ed18baadeca1088086e99ede5c9877cb7fe9700e0c6854bfeefe0.js (application/javascript)
• • https://js.rbxcdn.com/5fbd8389fb24177a5be64285e12645c445dee91f0a686d5bed5865f0e009d387.js (application/javascript)
• • https://js.rbxcdn.com/44ff0f2cc820b734456e36bcd3528a30460f0576ff6ff17478b2d84824b64abd.js (application/javascript)
• • https://js.rbxcdn.com/88bacf62dae20f1d352d30afbd3df4c64ba7a24c551c6ee02152719cfb11b830.js (application/javascript)
• • https://js.rbxcdn.com/e92d027c197738388b36f7a8164dd7bdfc61a638ac1acaeb577a92fb77a98857.js (application/javascript)
• • https://js.rbxcdn.com/3fec2c529efef400a78a26a5c0a2d33e3e7ec0a13971616a31cd958214c71e37.js (application/javascript)
• • https://js.rbxcdn.com/39fc596fe35569666d5a3de2830296da4164ebf2ab50e1268b6f4617cb51ce43.js (application/javascript)
• • https://js.rbxcdn.com/e7e3731285889059db29156a67cd4e5358a2dbf2102a88f49403c524cab2ba91.js (application/javascript)
• • https://js.rbxcdn.com/b41227fe1ecc1f4409f2e33f02d4d968f6d6389349d2221f481ff3b34e01a257.js (application/javascript)
• • https://js.rbxcdn.com/264d4bed21a614e8a15806c5d97af0aa92f26a99f5bf89b2e94cd705728b9f1f.js (application/javascript)
• • https://js.rbxcdn.com/94a14bf31ad0a75d3878f6772e6d5a251e7da9b64894e2176a07f65f4d79d8a3.js (application/javascript)
• • https://js.rbxcdn.com/e171b6008ca0199b35099c1bf14e13b50d48456d5f4db1208a2421ef55e11de0.js (application/javascript)
• • https://js.rbxcdn.com/537d3ec6e2cbc418604174fc9628078ed3fd4adc40e41637bc716c735a60677a.js (application/javascript)
• • https://js.rbxcdn.com/458e4db7e6e243b2dc68967195eefe76d8329aa041cc0144cc28962e7ee3ea60.js (application/javascript)
• • https://js.rbxcdn.com/7774e92ccee60b92717e18209b9060b35988362a9493cadb5234c96550e27d90.js (application/javascript)
• • https://metrics.roblox.com/v1/thumbnails/metadata (application/json; charset=utf-8)
• • https://apis.roblox.com/guac-v2/v1/bundles/cookie-policy?urlLocale=en_us (application/json; charset=utf-8)
• • https://apis.roblox.com/guac-v2/v1/bundles/footer-ui?urlLocale=en_us (application/json; charset=utf-8)
• • ...and 2 more

Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

Found robots.txt (200).

Found sitemap (200) at https://www.roblox.com/sitemap.xml.

No robots meta tag defined.

Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

All 2 controls are labeled.

Missing landmarks: header, nav, main.

Fix: Use semantic regions (<header>, <nav>, <main>, <footer>) for navigation and assistive tech.

14 interactive elements appear smaller than 48px.

• • button.bg-inverse-surface-0.content-inverse-emphasis (Action) - 65x32px
• • button.bg-shift-300.content-action-utility (Adventure) - 93x32px
• • button.bg-shift-300.content-action-utility (RPG) - 52x32px
• • button.bg-shift-300.content-action-utility (Shooter) - 75x32px
• • button.bg-shift-300.content-action-utility (Survival) - 76x32px
• • button.bg-shift-300.content-action-utility (Sports & Racing) - 127x32px
• • button.bg-shift-300.content-action-utility (Roleplay & Avatar Simulation) - 211x32px
• • button.bg-shift-300.content-action-utility (Simulation) - 90x32px
• • button.bg-shift-300.content-action-utility (Strategy) - 80x32px
• • button.bg-shift-300.content-action-utility (Party & Casual) - 121x32px
• • button.bg-shift-300.content-action-utility (Obby & Platformer) - 147x32px
• • button.bg-shift-300.content-action-utility (Puzzle) - 64x32px
• • button.text-footer-nav.footer-button-link (Your Privacy Choices) - 196x22px
• • button.relative.clip (English (United States)▼) - 262x40px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary_large_image.

JSON-LD schema detected.

Manifest or Apple touch icon is missing.

Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

3 social preview quality issues detected.

• • ISSUE: og:title should typically be between 10 and 70 characters.
• • ISSUE: Preview image is below recommended size (1200x630).
• • ISSUE: Preview image aspect ratio (1.00) differs from the recommended ~1.91:1.
• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.
• • MEASURED: Image size: 0.33 MB
• • MEASURED: Image dimensions: 1080x1080

Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

6 internal links returned errors.

• • https://www.roblox.com/login (HTTP 500)
• • https://www.roblox.com/info/help?locale=en_us (HTTP 403)
• • https://www.roblox.com/info/terms?locale=en_us (HTTP 403)
• • https://www.roblox.com/info/accessibility?locale=en_us (HTTP 403)
• • https://www.roblox.com/info/privacy?locale=en_us (HTTP 403)
• • https://www.roblox.com/sitemap?locale=en_us (HTTP 500)

Fix: Fix or remove the listed internal URLs, and ensure routes/pages return 200 responses.

No broken external links found in checked URLs.

All 12 links use non-empty href values.

Largest Contentful Paint: 2.06s.

Cumulative Layout Shift: 0.004.

Total Blocking Time estimate: 754ms.

Fix: Reduce heavy JavaScript work, split long tasks, and defer non-critical scripts.

2 asset requests failed.

• • https://apis.roblox.com/rotating-client-service/v1/prelude/latest (HTTP 401)
• • https://apis.roblox.com/rotating-client-service/v1/prelude/latest (net::ERR_ABORTED)

Fix: Fix missing files, update asset URLs, and ensure static assets return HTTP 200.

5 JavaScript runtime issues detected.

• • Request failed: https://apis.roblox.com/rotating-client-service/v1/prelude/latest (HTTP 401, type: script)
• • Request failed: https://apis.roblox.com/rotating-client-service/v1/prelude/latest (net::ERR_ABORTED, type: script)
• • Failed to load resource: the server responded with a status of 401 () [https://apis.roblox.com/rotating-client-service/v1/prelude/latest:1]
• • WebSocket connection to 'wss://realtime.roblox.com/' failed: Error during WebSocket handshake: Unexpected response code: 404 [https://js.rbxcdn.com/50479f37dd26b7d109a6359c14b34df1a62d2d9058c5046a1a2202c4283ffc53-RealTime.js:6]
• • [2026-09-08T19:06:05.764Z] Error: Failed to start the connection: Error: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not be a SignalR endpoint, the connection ID is not present on the server, or there is a proxy blocking WebSockets. If you have multiple servers check that sticky sessions are enabled. [https://js.rbxcdn.com/3abde38c7f9ab1b7eded447d893918bfcf6661952a379a7a690ac65ac42387e2-Sentry.js:1]

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.