# Audit Report: Viga 401 - Error 401 | Veebimajutus.ee **Website:** https://gigaehitus.gotoand.support/ **Date:** 2026-06-29 **Overall Score:** 30 / 100 **Status:** ๐ŸŸ  **Poor** **Confidence:** high **Audit Coverage:** 100% โ€” all sources returned data **Pages Audited (1 of 1):** - https://gigaehitus.gotoand.support/ ## Summary Site overall 30 is the mean of 1 page. PSI mobile 94 indicates fast rendering, but HTTP 401 Unauthorized blocks public access, constituting a core functional failure. Security headers score 0/100 with missing HSTS and compression, creating significant risk. Accessibility has 1 serious color-contrast violation and missing main landmarks. SEO is weakened by missing meta descriptions and three H1 tags. The score reflects the critical availability issue despite decent lab performance metrics. ## Per-Page Scores | Page | Score | Status | Confidence | | --- | --- | --- | --- | | https://gigaehitus.gotoand.support/ | 30 | ๐ŸŸ  **Poor** | high | ## PageSpeed Insights โ€” Mobile vs Desktop _Lower is worse for Performance; higher is worse for LCP and CLS. Worse value is **bolded**._ | URL | Performance (M / D) | LCP (M / D) | CLS (M / D) | | --- | --- | --- | --- | | https://gigaehitus.gotoand.support/ | **94** / 100 | **2.44 s** / 678 ms | **0.002** / 0.000 | ## Optimization Checklist **1 of 3 passing** โ€” 1 pass ยท 1 warn ยท 1 fail ยท 4 n/a | Item | Status | Detail | | --- | --- | --- | | Page caching plugin / CDN active | **Fail** | No WordPress cache plugin marker or CDN edge cache detected on the document response. | | Images lazy-loaded | **Pass** | All raster images use loading="lazy". | | Hero image eagerly loaded | **Warn** | Hero image has no explicit loading or fetchpriority (inferred from DOM order/size โ€” Lighthouse LCP element unavailable). Browser default is eager but adding fetchpriority="high" helps LCP. | | Hero is a real (not a CSS background-image) | N/A | No CSS background-images detected on raster-image-eligible elements. | | Responsive images (srcset / ) | N/A | Only 1 raster image on the page โ€” responsive-image rule does not apply. | | Reasonable number of image sizes | N/A | Too few raster images to evaluate srcset width variety. | | JS scripts not blocking in | N/A | No external scripts on the page. | ## Fixes ### Priority 1: Critical *Immediate action โ€” impacts user experience, search rankings, or site safety.* **1A. Resolve HTTP 401 Unauthorized Status** - **Impact:** Site Availability, User Access - **Problem:** HTTP response status is 401 Unauthorized; W3C validator reports 'HTTP resource not retrievable' due to this status. - **Solution:** Check server configuration (Apache) and authentication rules. Ensure the resource is publicly accessible or redirect to a valid login page if authentication is required. Verify `WWW-Authenticate` header is intentional. **1B. Implement Baseline Security Headers** - **Impact:** Transport Security, Clickjacking, MIME Sniffing - **Problem:** Security Headers grade is 0/100; HSTS, X-Frame-Options, X-Content-Type-Options, and CSP are all missing. - **Solution:** Add headers via Apache config: ```apache Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains" Header always set X-Frame-Options "SAMEORIGIN" Header always set X-Content-Type-Options "nosniff" ``` ### Priority 2: Important *Essential for compliance, user reach, and search visibility.* **2A. Fix Accessibility Violations** - **Impact:** WCAG 1.4.3 Contrast, 1.3.1 Info & Relationships - **Problem:** axe-core reports 1 serious color-contrast violation and missing `main` landmark; 3 H1 tags found in HTML inventory. - **Solution:** - Increase contrast ratio for `.navbar-nav` links to โ‰ฅ4.5:1. - Wrap main content in `
` tag. - Consolidate headings to a single `

` per page. **2B. Improve SEO Metadata** - **Impact:** Search Visibility, Indexing - **Problem:** HTML inventory shows missing meta description, canonical URL, and robots meta; PSI SEO score is 82. - **Solution:** Add to ``: ```html ``` ### Priority 3: Best Practice *Recommended for long-term maintainability.* **3A. Optimize First Contentful Paint & Caching** - **Impact:** Perceived Performance, Load Time - **Problem:** FCP is 2.44 s (warning threshold); no cache-control header set; response not compressed (27.3 KB uncompressed). - **Solution:** - Enable gzip/brotli compression on server. - Add `Cache-Control: public, max-age=31536000` for static assets. - Preload critical fonts or use `font-display: swap`.