# Audit Report: Front page - Avalah **Website:** https://avalah.ee/ **Date:** 2026-06-10 **Overall Score:** 76 / 100 **Status:** ๐ŸŸก **Needs Improvement** **Confidence:** high **Audit Coverage:** 100% โ€” all sources returned data ## Summary Mobile PSI 93 indicates strong performance, but LCP 2.6s and 6 render-blocking scripts show optimization room. Security headers grade 13/100 is a significant drag due to missing HSTS and X-Frame-Options. One critical accessibility violation (button-name) and 4 W3C errors reduce quality. SEO suffers from missing meta description and vague link text. Confidence is high as all tools returned complete data. ## PageSpeed Insights โ€” Mobile vs Desktop _Lower is worse for Performance; higher is worse for LCP and CLS. Worse value is **bolded**._ | Strategy | Performance (M / D) | LCP (M / D) | CLS (M / D) | | --- | --- | --- | --- | | Mobile vs Desktop | **93** / 99 | **2.60 s** / 851 ms | 0.000 / **0.000** | ## Optimization Checklist **1 of 2 passing** โ€” 1 pass ยท 1 warn ยท 0 fail ยท 5 n/a | Item | Status | Detail | | --- | --- | --- | | Page caching plugin / CDN active | **Pass** | Caching plugin detected (WP Rocket) + CDN Cloudflare/Kinsta | | Images lazy-loaded | N/A | No raster elements found (3 SVGs excluded). | | Hero image eagerly loaded | N/A | No raster elements found (3 SVGs excluded). | | Hero is a real (not a CSS background-image) | N/A | No CSS background-images detected on raster-image-eligible elements. | | Responsive images (srcset / ) | N/A | Only 0 raster images on the page (3 SVGs excluded) โ€” responsive-image rule does not apply. | | Reasonable number of image sizes | N/A | Too few raster images to evaluate srcset width variety. | | JS scripts not blocking in | **Warn** | 2 render-blocking scripts in . Move to footer or add defer/async. | ## Fixes ### Priority 1: Critical *Immediate action โ€” impacts user experience, search rankings, or site safety.* **1A. Fix critical accessibility violation on search button** - **Impact:** WCAG 4.1.2, Screen Reader usability - **Problem:** axe-core reports 1 critical violation: `.header__search-submit` button lacks discernible text. - **Solution:** Add `aria-label` or visible text to the button: ```html ``` ### Priority 2: Important *Essential for compliance, user reach, and search visibility.* **2A. Add baseline security headers (HSTS, X-Frame-Options)** - **Impact:** Transport security, Clickjacking protection - **Problem:** Security Headers grade 13/100; HSTS and X-Frame-Options are missing despite HTTPS being active. - **Solution:** Add headers via server config (e.g., Nginx/Apache): ```nginx add_header Strict-Transport-Security "max-age=63072000; includeSubDomains" always; add_header X-Frame-Options "SAMEORIGIN" always; ``` **2B. Defer or async render-blocking scripts** - **Impact:** FCP, LCP, Mobile Performance - **Problem:** 6 render-blocking scripts found; FCP is 2.6s on mobile. Unused JS (122KB) also contributes. - **Solution:** Add `defer` or `async` to non-critical scripts in ``: ```html ``` Remove unused JS (e.g., `theme/js/global.7edaaf903ba7302f.js` if not needed). ### Priority 3: Best Practice *Recommended for long-term maintainability.* **3A. Add meta description and fix link text** - **Impact:** SEO, Click-through rate - **Problem:** SEO audit fails `metaDescription`; 13 links use vague text like "read more". - **Solution:** Add ``. Change link text to be descriptive: ```html Read more about our Services ``` **3B. Fix W3C HTML validation errors** - **Impact:** Browser compatibility, SEO - **Problem:** 4 errors found including `area-hidden` on form, empty `name` on input, and `p` inside `span`. - **Solution:** Correct HTML structure: - Remove `area-hidden` from `
`. - Add `name` attribute to ``. - Move `

` outside ``. - Remove `aria-label` from `