Audit Result

Found 40 characters. Length is optimal.

Found 156 characters. Good snippet length.

Canonical found: https://www.fitmycv.link

Favicon found and reachable: /favicon.ico?favicon.0aut0ko0ocvap.ico (HTTP 200).

Viewport configured: width=device-width, initial-scale=1

Language declared as "en".

Exactly one H1 found: "AI CV and cover letters.Paste any job link. Get a CV made for that role.".

Valid heading flow across 44 headings.

2 of 4 images are missing alt text.

Fix: Add meaningful alt attributes to all informative images for accessibility and image SEO.

Page is served over HTTPS.

1 HTTPS hardening issues detected.

• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Core security headers were detected.

4 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • script-src/default-src permits 'unsafe-eval'.
• • CSP is missing object-src 'none'.
• • CSP is missing a base-uri restriction.
• • Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://datafa.st https://app.chatwoot.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss: https://datafa.st; frame-src https://app.chatwoot.com; worker-src 'self' blob:; frame-ancestors 'none'

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain appears to be behind Cloudflare.

• • server: cloudflare
• • cf-cache-status: DYNAMIC
• • cf-ray: a3a92b8a7e83e62d-IAD

Loaded in 0.50s (perceived).

15 scripts and 2 styles may block rendering.

• • script: https://www.fitmycv.link/_next/static/chunks/03~yq9q893hmn.js
• • script: https://us-assets.i.posthog.com/static/1.430.3/exception-autocapture.js
• • script: https://us-assets.i.posthog.com/array/phc_CCyU2HH9WmdDMYKdyTMndNiJtHT3zaErY7vtvChoEu3r/config.js
• • script: https://us-assets.i.posthog.com/static/1.430.3/surveys.js
• • script: https://us-assets.i.posthog.com/static/1.430.3/posthog-recorder.js
• • script: https://us-assets.i.posthog.com/static/1.430.3/dead-clicks-autocapture.js
• • script: https://us-assets.i.posthog.com/static/1.430.3/web-vitals-with-attribution.js
• • script: https://www.fitmycv.link/_next/static/chunks/11mwa1rd4au8h.js
• • script: https://www.fitmycv.link/_next/static/chunks/17~rahtk4yfxp.js
• • script: https://www.fitmycv.link/_next/static/chunks/0kvwlgu9ybd8i.js
• • script: https://www.fitmycv.link/_next/static/chunks/06jv7f.boxv~r.js
• • script: https://www.fitmycv.link/_next/static/chunks/0cupukftrww_a.js
• • script: https://www.fitmycv.link/_next/static/chunks/03fu6ib2q~zni.js
• • script: https://www.fitmycv.link/_next/static/chunks/0k_1tbubh5eg2.js
• • script: https://www.fitmycv.link/_next/static/chunks/0zkz0998krvcs.js
• • style: https://www.fitmycv.link/_next/static/chunks/0d.3pk2p7jr_3.css
• • style: https://www.fitmycv.link/_next/static/chunks/15w1.i7l.n625.css

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

9 text resources look uncompressed.

• • https://app.chatwoot.com/widget?website_token=KXAMrRdPE45NvWU2ChRPnvKs (text/html; charset=utf-8)
• • https://d3smg0hrzo6i7w.cloudfront.net/vite/assets/sharedFrameEvents-Cz3L815q.js (text/javascript)
• • https://d3smg0hrzo6i7w.cloudfront.net/vite/assets/constants-lVAyZKq6.js (text/javascript)
• • https://d3smg0hrzo6i7w.cloudfront.net/vite/assets/HTMLSanitizer-cciupgGC.js (text/javascript)
• • https://app.chatwoot.com/api/v1/widget/conversations?website_token=KXAMrRdPE45NvWU2ChRPnvKs (application/json; charset=utf-8)
• • https://app.chatwoot.com/api/v1/widget/campaigns?website_token=KXAMrRdPE45NvWU2ChRPnvKs (application/json; charset=utf-8)
• • https://app.chatwoot.com/api/v1/widget/messages?website_token=KXAMrRdPE45NvWU2ChRPnvKs (application/json; charset=utf-8)
• • https://app.chatwoot.com/api/v1/widget/contact?website_token=KXAMrRdPE45NvWU2ChRPnvKs (application/json; charset=utf-8)
• • https://app.chatwoot.com/api/v1/widget/inbox_members?website_token=KXAMrRdPE45NvWU2ChRPnvKs (application/json; charset=utf-8)

Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

Found robots.txt (200).

Found sitemap (200) at https://www.fitmycv.link/sitemap.xml.

Robots meta found: index, follow

All 0 controls are labeled.

Header, nav, main, and footer landmarks are present.

25 interactive elements appear smaller than 48px.

• • a.flex.flex-row (FitMyCV) - 122x32px
• • a.text-sm.font-medium (Jobs) - 30x20px
• • a.text-sm.font-medium (How It Works) - 83x20px
• • a.text-sm.font-medium (Templates) - 64x20px
• • a.text-sm.font-medium (Pricing) - 43x20px
• • a.text-sm.font-medium (Blog) - 28x20px
• • button#radix-_R_i8lfb7b_.inline-flex.items-center (Free tools) - 78x20px
• • a.text-sm.font-semibold (Login) - 38x20px
• • a.landing-primary-btn.landing-primary-btn-sm (Try for free) - 117x36px
• • a.group.mt-6 (See how it works) - 154x20px
• • a.landing-dark-pill.font-outfit (Tailor my CV) - 145x40px
• • button.flex.h-10 (Previous templates) - 40x40px
• • button.flex.h-10 (Next templates) - 40x40px
• • a.landing-secondary-btn.landing-secondary-btn-sm (See all templates) - 182x37px
• • a.inline-flex.items-center ([email protected]) - 154x20px
• • button#founder-faq-button-0.flex.w-full (How does FitMyCV tailor my CV?) - 608x24px
• • button#founder-faq-button-1.flex.w-full (Will my CV still sound like me?) - 608x24px
• • button#founder-faq-button-2.flex.w-full (What do I get for free, and what needs Premium?) - 608x24px
• • button#founder-faq-button-3.flex.w-full (What file formats can I export?) - 608x24px
• • button#founder-faq-button-4.flex.w-full (Can I cancel my subscription anytime?) - 608x24px
• • button#founder-faq-button-5.flex.w-full (Is my data safe?) - 608x24px
• • button#founder-faq-button-6.flex.w-full (Why a job link instead of pasting the description?) - 608x24px
• • button#founder-faq-button-7.flex.w-full (Does tailoring actually help with ATS filters?) - 608x24px
• • button#founder-faq-button-8.flex.w-full (Google sign-in blocked in the LinkedIn app?) - 608x24px
• • button#founder-faq-button-9.flex.w-full (Is Premium worth it if I can read the CV on screen?) - 608x24px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary_large_image.

JSON-LD schema detected.

Manifest and Apple touch icon are configured.

1 social preview quality issues detected.

• • ISSUE: og:url should be an absolute URL.
• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.
• • MEASURED: Image size: 0.31 MB
• • MEASURED: Image dimensions: 3024x1724

Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Checked 36 links. No broken internal links found.

No broken external links found in checked URLs.

All 63 links use non-empty href values.

Largest Contentful Paint: 0.50s.

Cumulative Layout Shift: 0.000.

Total Blocking Time estimate: 93ms.

3 asset requests failed.

• • https://www.fitmycv.link/_vercel/insights/script.js (HTTP 404)
• • https://www.fitmycv.link/_vercel/insights/script.js (net::ERR_ABORTED)
• • https://prod-chatwoot-assets.s3.amazonaws.com/u4jxwzb724voihuua8u3saae9md0?response-content-disposition=inline%3B%20filename%3D%22cv-logo.png%22%3B%20filename%2A%3DUTF-8%27%27cv-logo.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAX7PDOLKIACEXACHP%2F20260913%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260913T182111Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=b8c7f2af1523ae2e4efc1e0e496bb8229c60d4811e8da620b72322f3cad1244d (net::ERR_ABORTED)

Fix: Fix missing files, update asset URLs, and ensure static assets return HTTP 200.

4 JavaScript runtime issues detected.

• • Request failed: https://www.fitmycv.link/_vercel/insights/script.js (HTTP 404, type: script)
• • Request failed: https://www.fitmycv.link/_vercel/insights/script.js (net::ERR_ABORTED, type: script)
• • Failed to load resource: the server responded with a status of 404 () [https://www.fitmycv.link/_vercel/insights/script.js:1]
• • Refused to execute script from 'https://www.fitmycv.link/_vercel/insights/script.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled. [https://www.fitmycv.link/:1]

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.