Audit Result

Found 35 characters. Length is optimal.

Found 68 characters. Keep description around 70-160 characters.

Fix: Add <meta name="description" content="..."> in <head> with a clear page summary.

Canonical found: https://www.cloudflare.com/

Favicon found and reachable: /favicon.ico (HTTP 200).

Viewport configured: width=device-width, initial-scale=1.0, viewport-fit=cover

Language declared as "en".

Found 2 H1 tags.

Fix: Use a single, descriptive <h1> that states the primary purpose of the page.

Detected 5 heading level jumps.

• • Skipped from h2 to h6: "Region: Earth" -> "4.5x faster".
• • Skipped from h4 to h6: "Custom" -> "Pay for active employees".
• • Skipped from h4 to h6: "Custom" -> "Wall Clock vs. CPU Time".
• • Skipped from h4 to h6: "Free" -> "100,000".
• • Skipped from h4 to h6: "Paid" -> "$0.30".

Fix: Follow semantic order (h1 -> h2 -> h3) and avoid skipping heading levels.

1 of 66 images are missing alt text.

Fix: Add meaningful alt attributes to all informative images for accessibility and image SEO.

Page is served over HTTPS.

1 HTTPS hardening issues detected.

• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=31536000; includeSubDomains

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Core security headers were detected.

2 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • script-src/default-src permits 'unsafe-eval'.
• • Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https: wss://*.qualified.com wss://*.registrar.cloudflare.com; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://*.cloudflarestream.com https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain appears to be behind Cloudflare.

• • server: cloudflare
• • cf-cache-status: HIT
• • cf-ray: a3b09598eb02abc2-IAD

Loaded in 0.21s (perceived).

0 scripts and 4 styles may block rendering.

• • style: https://www.cloudflare.com/_astro/_separator.ClhCZQlI.css
• • style: https://www.cloudflare.com/_astro/index.Cm-titPL.css
• • style: https://www.cloudflare.com/_astro/index.CN3UJUeJ.css
• • style: https://www.cloudflare.com/_astro/DomainSearchApp.8QsXXcEv.css

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

Text-like assets appear compressed.

Found robots.txt (200).

Found sitemap (200) at https://www.cloudflare.com/sitemap.xml.

No robots meta tag defined.

Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

1 of 1 controls are missing labels.

• • select

Fix: Associate each form control with a visible label, aria-label, or aria-labelledby.

Header, nav, main, and footer landmarks are present.

25 interactive elements appear smaller than 48px.

• • a.relative.z-10 (Products) - 112x36px
• • a.relative.z-10 (Solutions) - 115x36px
• • a.relative.z-10 (Resources) - 123x36px
• • a.text-inherit.relative (Pricing) - 76x36px
• • a.group.text-security-100 (Under attack?) - 142x36px
• • a#nav-login-button.relative.isolate (Login) - 68x38px
• • a#nav-contact-sales-button.relative.isolate (Contact sales) - 131x38px
• • button.relative.isolate (Search Cloudflare) - 38x38px
• • a#nav-start-building-button.relative.isolate (Start building) - 119x35px
• • button.relative.hidden (Copy link to clipboard) - 42x72px
• • button.isolate.inline-flex (Pause customer story and logo rotation) - 36x30px
• • button.relative.hidden (Copy link to clipboard) - 42x80px
• • button#home-pricing-platform-tab-0.relative.z-10 (Network & CDN tab) - 172x40px
• • button#home-pricing-platform-tab-1.relative.z-10 (SASE / Zero Trust tab) - 184x40px
• • button#home-pricing-platform-tab-2.relative.z-10 (Compute & Storage tab) - 205x40px
• • a.relative.isolate (See Free plan) - 130x38px
• • a.relative.isolate (See Pro plan) - 121x38px
• • a.relative.isolate (See Business plan) - 161x38px
• • a.relative.isolate (See Contract plan) - 164x38px
• • a.relative.isolate (See Free plan) - 130x38px
• • a.relative.isolate (See Pay-as-you-go plan) - 209x38px
• • a.relative.isolate (See Contract plan) - 164x38px
• • a.relative.isolate (See more) - 100x38px
• • button#home-pricing-tab-free-0.shrink-0.snap-start (Workers) - 53x15px
• • button#home-pricing-tab-free-1.shrink-0.snap-start (Durable Objects) - 100x15px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary_large_image.

JSON-LD schema detected.

Manifest or Apple touch icon is missing.

Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

Social preview metadata and image quality look good for Open Graph/Twitter.

• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.
• • MEASURED: Image size: 0.34 MB
• • MEASURED: Image dimensions: 1400x800

1 internal links returned errors.

• • https://www.cloudflare.com/learning/ (HTTP 403)

Fix: Fix or remove the listed internal URLs, and ensure routes/pages return 200 responses.

6 external links returned errors or timed out.

• • https://dash.cloudflare.com/login (HTTP 403)
• • https://dash.cloudflare.com/ (HTTP 403)
• • https://dash.cloudflare.com/sign-up (HTTP 403)
• • https://partnerlocator.cloudflare.com/dashboard (HTTP 403)
• • https://radar.cloudflare.com/ (HTTP 403)
• • https://support.cloudflare.com/ (HTTP 403)

Fix: Replace dead external URLs or point to working alternatives.

All 72 links use non-empty href values.

Largest Contentful Paint: 0.38s.

Cumulative Layout Shift: 0.000.

Total Blocking Time estimate: 17ms.

No failed CSS/JS/image/font/media requests detected.

No console/page runtime errors detected during audit.