Audit Result

UUID: 01a09abd-422c-738a-9369-92d26a83db83

Share on X Recheck Back to history
nocodio.de

https://nocodio.de/

Scanned 1 month ago

94
Excellent Score
39 total checks
Passed
34
Warnings
5
Errors
0

Meta Information

  • Title Tag Pass

    Found 51 characters. Length is optimal.

  • Meta Description Pass

    Found 154 characters. Good snippet length.

  • Canonical URL Pass

    Canonical found: https://nocodio.de/

  • Favicon Pass

    Favicon found and reachable: /favicon.svg?v=20260731-nocodio-monogram (HTTP 200).

    Favicon
  • Viewport Meta Pass

    Viewport configured: width=device-width

  • HTML Lang Pass

    Language declared as "de".

Content Structure

  • H1 Tag Pass

    Exactly one H1 found: "Aus Excel und Access wird ein klarer, gemeinsamer Arbeitsprozess.".

  • Heading Hierarchy Pass

    Valid heading flow across 29 headings.

  • Image Alt Text Pass

    All 2 images include alt text.

Technical Optimization

  • HTTPS Pass

    Page is served over HTTPS.

  • HSTS & HTTPS Redirect Warning

    2 HTTPS hardening issues detected.

    • • HSTS is missing includeSubDomains.
    • • Could not probe the HTTP version of this page.
    • • Strict-Transport-Security: max-age=31536000

    Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

  • Security Headers Pass

    Core security headers were detected.

    Full HTTP headers (17)
    • • cache-control: public, max-age=300, must-revalidate
    • • content-encoding: gzip
    • • content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'self' https://cloud.seatable.io; form-action 'self'; img-src 'self' data: https://www.google-analytics.com https://region1.google-analytics.com; font-src 'self'; style-src 'self' 'sha256-5Bcao+aXVhqoAynnjYyF2ZqdK7tJm0NYxoy0RKZVoqY=' 'sha256-NkkjPmjWCcwzLhKOI2sY9kdYrvohkGdZEyHERfSF7fE=' 'sha256-PeT+ZZ0Qbzf6R/cqjd/yODuSNQFyLD/ZDZL5PL4ZP/s=' 'sha256-nEuG1sYus9INI8XuHqozafKmyl/EGzD/puAC5I3tlrY='; script-src 'self' https://www.googletagmanager.com 'sha256-0Y9imV/OXjaogPmSSorRIH6gI6Eakpfkxi3z/WjMlxo=' 'sha256-0u2exZRLuJQ110O37M18o1cxYMumJaHhN+SEI8CqkOQ=' 'sha256-1enoQLW0aH3xWCCluVW7DfWxzUB5LGxqcfFVeu3LtEA=' 'sha256-4RmirlyoP7Yv/2mflv846o/4DBJBjSMV3bECyZyt/jI=' 'sha256-AeNiGvgeAwISWrp0RhcG+z/AiXMrC3J2+xeeCmAbqHM=' 'sha256-BwShUQsozjoowWh/qD6X/mxAL9lwvVXHDf/vwNbMnKU=' 'sha256-K5rqjIVgxSE4epLDP+evGc7ojvkBxSK2qhFiiBOFdKQ=' 'sha256-Q2KUcVcaSyEOM9l6nosy1RanlmB8uj1S6tajfC6xqbE=' 'sha256-QUOQ0F01rFBIdNeWSxE1XFORu52TnOO+D3XOqF2A/Qk=' 'sha256-RKw5SzUnZDHm2okOmvrsDB0XjrFv4Pht/4b+vlE8FkI=' 'sha256-UPJvIpMJR8PISZxZU4YeNirlADmq44u21437XXHzE+M=' 'sha256-ZXrJrwV2X/1aK6hwlz64R93GrBMEu8PSg9hlI5i+nyU=' 'sha256-ct/rfb7dsVk5wn5D+BPSA4Qt7LgeVCFcEpiPdMhiXSU=' 'sha256-fAsI4gF/gn4IaMRylLlIXeKGFP9dfOMKe+LXaqqUoWU=' 'sha256-fhEc1/TAjWH9eyph6J0w1sQc/0bF9Tqdoqxba1Ooxy0=' 'sha256-kvkRj4AUEXtLoaiMQvpdZrAjVykV6T7d1yykgPgCOZk=' 'sha256-kyRluBGq+ffaNtPX5LCoY+UZfuBXj6P8yh1QGzaxeBg=' 'sha256-o89B9iYgjbXE+YosYsGLH7GolREBQp6d6XlVPg/s3v8=' 'sha256-sGBI2v9vE6kgNpk8zkFmq7cAuCDIyMLyheT5PIy7sd0=' 'sha256-waqDsJIZ+s1d0jZ8cgqRMjDUYO86QzAtRsXyLkjstwg=' 'sha256-zXZi5tcnneQHHS/ZT6tS0Efg+XuVfyoS3DrrRl247P8=' 'sha256-zbgvsbka4HAQOVa4gRvezEaYFWslsi6uBKGtmBzdqYc='; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com; manifest-src 'self'; media-src 'self'; worker-src 'self'
    • • content-type: text/html
    • • date: Sun, 13 Sep 2026 12:28:06 GMT
    • • etag: W/"10b05-65a71efeba8bc"
    • • last-modified: Tue, 01 Sep 2026 20:41:03 GMT
    • • permissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()
    • • referrer-policy: strict-origin-when-cross-origin
    • • server: Apache
    • • strict-transport-security: max-age=31536000
    • • vary: Cookie
    • • x-content-type-options: nosniff
    • • x-frame-options: DENY
    • • x-ws-origin: available
    • • x-ws-ratelimit-limit: 1000
    • • x-ws-ratelimit-remaining: 999
  • CSP Quality Pass

    Content Security Policy looks restrictive and avoids common unsafe directives.

    • • Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'self' https://cloud.seatable.io; form-action 'self'; img-src 'self' data: https://www.google-analytics.com https://region1.google-analytics.com; font-src 'self'; style-src 'self' 'sha256-5Bcao+aXVhqoAynnjYyF2ZqdK7tJm0NYxoy0RKZVoqY=' 'sha256-NkkjPmjWCcwzLhKOI2sY9kdYrvohkGdZEyHERfSF7fE=' 'sha256-PeT+ZZ0Qbzf6R/cqjd/yODuSNQFyLD/ZDZL5PL4ZP/s=' 'sha256-nEuG1sYus9INI8XuHqozafKmyl/EGzD/puAC5I3tlrY='; script-src 'self' https://www.googletagmanager.com 'sha256-0Y9imV/OXjaogPmSSorRIH6gI6Eakpfkxi3z/WjMlxo=' 'sha256-0u2exZRLuJQ110O37M18o1cxYMumJaHhN+SEI8CqkOQ=' 'sha256-1enoQLW0aH3xWCCluVW7DfWxzUB5LGxqcfFVeu3LtEA=' 'sha256-4RmirlyoP7Yv/2mflv846o/4DBJBjSMV3bECyZyt/jI=' 'sha256-AeNiGvgeAwISWrp0RhcG+z/AiXMrC3J2+xeeCmAbqHM=' 'sha256-BwShUQsozjoowWh/qD6X/mxAL9lwvVXHDf/vwNbMnKU=' 'sha256-K5rqjIVgxSE4epLDP+evGc7ojvkBxSK2qhFiiBOFdKQ=' 'sha256-Q2KUcVcaSyEOM9l6nosy1RanlmB8uj1S6tajfC6xqbE=' 'sha256-QUOQ0F01rFBIdNeWSxE1XFORu52TnOO+D3XOqF2A/Qk=' 'sha256-RKw5SzUnZDHm2okOmvrsDB0XjrFv4Pht/4b+vlE8FkI=' 'sha256-UPJvIpMJR8PISZxZU4YeNirlADmq44u21437XXHzE+M=' 'sha256-ZXrJrwV2X/1aK6hwlz64R93GrBMEu8PSg9hlI5i+nyU=' 'sha256-ct/rfb7dsVk5wn5D+BPSA4Qt7LgeVCFcEpiPdMhiXSU=' 'sha256-fAsI4gF/gn4IaMRylLlIXeKGFP9dfOMKe+LXaqqUoWU=' 'sha256-fhEc1/TAjWH9eyph6J0w1sQc/0bF9Tqdoqxba1Ooxy0=' 'sha256-kvkRj4AUEXtLoaiMQvpdZrAjVykV6T7d1yykgPgCOZk=' 'sha256-kyRluBGq+ffaNtPX5LCoY+UZfuBXj6P8yh1QGzaxeBg=' 'sha256-o89B9iYgjbXE+YosYsGLH7GolREBQp6d6XlVPg/s3v8=' 'sha256-sGBI2v9vE6kgNpk8zkFmq7cAuCDIyMLyheT5PIy7sd0=' 'sha256-waqDsJIZ+s1d0jZ8cgqRMjDUYO86QzAtRsXyLkjstwg=' 'sha256-zXZi5tcnneQHHS/ZT6tS0Efg+XuVfyoS3DrrRl247P8=' 'sha256-zbgvsbka4HAQOVa4gRvezEaYFWslsi6uBKGtmBzdqYc='; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com; manifest-src 'self'; media-src 'self'; worker-src 'self'
  • Cookie Security Pass

    No first-party cookies were set during the initial page load.

  • Server Version Disclosure Pass

    Server response headers do not expose version tokens.

  • Cloudflare Proxy Warning

    Domain does not appear to be behind Cloudflare.

  • Perceived Load Time Pass

    Loaded in 0.78s (perceived).

  • Render Blocking Resources Warning

    1 scripts and 3 styles may block rendering.

    • • script: https://nocodio.de/theme-bootstrap.js
    • • style: https://nocodio.de/_astro/BaseLayout.Dqbl22xb.css
    • • style: https://nocodio.de/_astro/Hero.BZBZ7Dmr.css
    • • style: https://nocodio.de/_astro/index.XhjGwyt-.css

    Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

  • Compression Warning

    6 text resources look uncompressed.

    • • https://nocodio.de/_astro/Hero.BZBZ7Dmr.css (text/css)
    • • https://nocodio.de/_astro/BaseLayout.Dqbl22xb.css (text/css)
    • • https://nocodio.de/_astro/index.XhjGwyt-.css (text/css)
    • • https://nocodio.de/theme-bootstrap.js (text/javascript)
    • • https://nocodio.de/_astro/ChatAssistant.astro_astro_type_script_index_0_lang.Ck6PGlnf.js (text/javascript)
    • • https://nocodio.de/_astro/ConsentPreferences.astro_astro_type_script_index_0_lang.C-dnm-Ti.js (text/javascript)

    Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

  • Robots.txt Pass

    Found robots.txt (200).

  • Sitemap File Pass

    Found sitemap (200) at https://nocodio.de/sitemap.xml.

  • Crawl Directives Pass

    Robots meta found: index, follow

Accessibility Basics

  • Form Labels Pass

    All 3 controls are labeled.

  • Landmarks Pass

    Header, nav, main, and footer landmarks are present.

  • Tap Target Size Warning

    2 interactive elements appear smaller than 48px.

    • • a.site-header__brand (NoCodio Startseite) - 165x38px
    • • button.desktop-navigation__link.practice-navigation__trigger (Praxisbeispiele⌄) - 150x44px

    Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Social & Rich Results

  • Open Graph Basics Pass

    Core Open Graph tags are present.

  • Open Graph Image Pass

    og:image is present and absolute.

    Open Graph Image
  • Twitter Card Pass

    twitter:card set to summary_large_image.

  • Structured Data Pass

    JSON-LD schema detected.

  • PWA Metadata Pass

    Manifest and Apple touch icon are configured.

  • Open Graph/Twitter Quality Pass

    Social preview metadata and image quality look good for Open Graph/Twitter.

    • • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
    • • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
    • • GUIDELINE: Optimal preview image size: 1200x630 pixels.
    • • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
    • • GUIDELINE: Optimal preview image file size: under 5 MB.
    • • GUIDELINE: Recommended twitter:card: summary_large_image.
    • • MEASURED: Image size: 0.09 MB
    • • MEASURED: Image dimensions: 1200x630

Links Analysis

  • Internal Links Pass

    Checked 11 links. No broken internal links found.

  • External Links Pass

    No broken external links found in checked URLs.

  • Link Format Pass

    All 39 links use non-empty href values.

Performance & Runtime