Audit Result

Found 39 characters. Length is optimal.

Found 64 characters. Keep description around 70-160 characters.

Fix: Add <meta name="description" content="..."> in <head> with a clear page summary.

Canonical found: https://nextjs.org

Favicon found and reachable: /favicon.ico?favicon.38folom4sz_yx.ico (HTTP 200).

Viewport configured: width=device-width, initial-scale=1

Language declared as "en".

Exactly one H1 found: "The React Framework for the Web".

Valid heading flow across 19 headings.

15 of 65 images are missing alt text.

Fix: Add meaningful alt attributes to all informative images for accessibility and image SEO.

Page is served over HTTPS.

1 HTTPS hardening issues detected.

• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Core security headers were detected.

4 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • CSP is missing object-src 'none'.
• • CSP is missing a base-uri restriction.
• • CSP is missing frame-ancestors protection.
• • Content-Security-Policy: default-src 'self' nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;script-src 'self' 'unsafe-inline' www.google.com www.google-analytics.com www.googleadservices.com www.gstatic.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.twimg.com cdn.ampproject.org www.googletagmanager.com *.googleapis.com *.fides-cdn.ethyca.com *.ethyca.com cdn.ethyca.com cdn.vercel-insights.com va.vercel-scripts.com app.cal.com *.cr-relay.com vercel.com *.vercel.com *.vercel.sh vercel.live nextjs.org *.nextjs.org localhost:* chrome-extension://*;child-src *.youtube.com *.youtube-nocookie.com *.stripe.com www.google.com td.doubleclick.net github.com calendly.com vercel.cal.com *.vercel.app *.vercel.dev nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;style-src 'self' 'unsafe-inline' *.googleapis.com nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;img-src * blob: data:;media-src 'self' videos.ctfassets.net user-images.githubusercontent.com replicate.delivery *.public.blob.vercel-storage.com blob: data: nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;connect-src 'self' data: vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org nextjs.org *.nextjs.org localhost:* cdn.vercel-insights.com va.vercel-scripts.com cdp.vercel.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.cr-relay.com *.ethyca.com cdn.ethyca.com risk.clearbit.com *.ingest.sentry.io *.ingest.us.sentry.io *.public.blob.vercel-storage.com;font-src 'self' *.nextjs.org *.vercel.com *.gstatic.com vercel.live *.vercel.sh;worker-src 'self' *.nextjs.org *.vercel.com blob:

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain does not appear to be behind Cloudflare.

Loaded in 0.31s (perceived).

15 scripts and 5 styles may block rendering.

• • script: https://nextjs.org/_next/static/immutable/chunks/0c0hxoamwjsbw.js
• • script: https://nextjs.org/_next/static/immutable/chunks/2g70aufap1-f8.js
• • script: https://nextjs.org/_next/static/immutable/chunks/3lhfkqdpt43cu.js
• • script: https://nextjs.org/_next/static/immutable/chunks/0dar5olj519gm.js
• • script: https://nextjs.org/_next/static/immutable/chunks/1zjj2gbw_z7iz.js
• • script: https://nextjs.org/_next/static/immutable/chunks/1ntdvmqs8p-t_.js
• • script: https://nextjs.org/_next/static/immutable/chunks/2b917qy7ramty.js
• • script: https://nextjs.org/_next/static/immutable/chunks/1zd6gsm0aq42y.js
• • script: https://nextjs.org/_next/static/immutable/chunks/20q08knlsrxgs.js
• • script: https://nextjs.org/_next/static/immutable/chunks/3jgbeswv70279.js
• • script: https://nextjs.org/_next/static/immutable/chunks/1zso7kbs0ghm6.js
• • script: https://nextjs.org/_next/static/immutable/chunks/1-xqetve7fr2k.js
• • script: https://nextjs.org/_next/static/immutable/chunks/130ttffsdjabr.js
• • script: https://nextjs.org/_next/static/immutable/chunks/3pq_omw7enx-h.js
• • script: https://nextjs.org/_next/static/immutable/chunks/17hxnnnggs889.js
• • style: https://nextjs.org/_next/static/immutable/chunks/1m48_0ixg1brz.css
• • style: https://nextjs.org/_next/static/immutable/chunks/0rqpoqvncsmwb.css
• • style: https://nextjs.org/_next/static/immutable/chunks/2lra4q96-7lip.css
• • style: https://nextjs.org/_next/static/immutable/chunks/3spci--kp_o0c.css
• • style: https://nextjs.org/_next/static/immutable/chunks/2feic8vb1xod6.css

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

12 text resources look uncompressed.

• • https://nextjs.org/_next/static/immutable/chunks/0-09xilovi8iy.js (application/javascript; charset=utf-8)
• • https://nextjs.org/?_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/docs?_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/blog?_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/showcase?_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/api/stream/internal (application/json; charset=utf-8)
• • https://nextjs.org/docs/app/getting-started/fetching-data?_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/learn?_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/docs/app/getting-started/images?_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/learn?utm_source=next-site&utm_medium=homepage-cta&utm_campaign=home&_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/docs/app/getting-started/server-and-client-components?_rsc=qsK8qbRE2sTqyjrm (text/x-component)
• • https://nextjs.org/_next/static/immutable/chunks/1-xqetve7fr2k.js (application/javascript; charset=utf-8)

Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

Found robots.txt (200).

Found sitemap (200) at https://nextjs.org/sitemap.xml.

No robots meta tag defined.

Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

All 8 controls are labeled.

Header, nav, main, and footer landmarks are present.

25 interactive elements appear smaller than 48px.

• • a.fixed.-m-px (Skip to content) - 118x26px
• • a (Go to Vercel homepage) - 25x22px
• • a.cV3TuW_logo (Go to the homepage) - 89x18px
• • a (Showcase) - 67x23px
• • a (Documentation) - 33x23px
• • a (Blog) - 30x23px
• • a (Templates) - 66x23px
• • a (Enterprise) - 63x23px
• • button.cV3TuW_search (Search documentation...CtrlK{var s=document.currentScript,n=s&&s.previousElement) - 251x32px
• • a.outline-none.m-0 (Deploy) - 98x32px
• • a.outline-none.m-0 (Learn) - 61x32px
• • a.outline-none.m-0 (Get Started) - 110x36px
• • a.outline-none.m-0 (Learn Next.js) - 118x36px
• • button.l-DIkW_copy (Copy npx command for creating a new Next.js app) - 264x24px
• • a.outline-none.m-0 (Deploy a Template on Vercel) - 238x36px
• • a.outline-none.m-0 (View the Next.js Showcase) - 212x36px
• • a.flex.flex-col (Vercel logo) - 100x20px
• • a (Docs) - 33x20px
• • a (Support Policy) - 94x20px
• • a (Learn) - 35x20px
• • a (Showcase) - 67x20px
• • a (Blog) - 30x20px
• • a (Team) - 35x20px
• • a (Analytics) - 60x20px
• • a (Next.js Conf) - 79x20px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary_large_image.

JSON-LD schema detected.

Manifest or Apple touch icon is missing.

Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

Social preview metadata and image quality look good for Open Graph/Twitter.

• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.
• • MEASURED: Image size: 0.09 MB
• • MEASURED: Image dimensions: 2400x1256

Checked 62 links. No broken internal links found.

2 external links returned errors or timed out.

• • https://bsky.app/profile/nextjs.org (HTTP 404)
• • https://bsky.app/profile/vercel.com (HTTP 404)

Fix: Replace dead external URLs or point to working alternatives.

All 166 links use non-empty href values.

Largest Contentful Paint: 0.31s.

Cumulative Layout Shift: 0.000.

Total Blocking Time estimate: 238ms.

Fix: Reduce heavy JavaScript work, split long tasks, and defer non-critical scripts.

No failed CSS/JS/image/font/media requests detected.

4 JavaScript runtime issues detected.

• • Request failed: https://nextjs.org/api/get-session (HTTP 401, type: fetch)
• • Request failed: https://nextjs.org/learn?_rsc=WxqvsMwUrv-PNSJ8 (net::ERR_ABORTED, type: fetch)
• • Failed to load resource: the server responded with a status of 401 () [https://nextjs.org/api/get-session:1]
• • Failed to load resource: the server responded with a status of 403 () [https://api.cr-relay.com/v1/site/f6dd8ada-7a97-4d9d-8ec4-9c2bff6cd234/batch:1]

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.