{"url":"https://gigaehitus.gotoand.support/","date":"2026-06-29","siteName":"Viga 401 - Error 401 | Veebimajutus.ee","overall":55,"reasoning":"Site overall 55 is the mean of 1 page. PSI mobile 95 indicates strong rendering performance (LCP 2.4 s, TTFB 2 ms), but the HTTP 401 Unauthorized status renders the site inaccessible to public users, creating a critical functional failure. Security headers are entirely missing (0/100 grade), though site signals suggest low authentication risk. Accessibility has a serious color-contrast violation and missing semantic landmarks. SEO metadata is absent, and the page contains three H1 tags. The overall score reflects high technical performance undermined by configuration errors and missing standards.","confidence":"high","fixes":[{"priority":1,"title":"Resolve HTTP 401 Unauthorized Status","impact":"Site Accessibility, SEO Indexing","problem":"Server returns 401 Unauthorized (WWW-Authenticate: Basic), blocking public access despite 'Auth surface: no' signals.","solution":"Remove Basic Auth requirements from the web server configuration (Apache/Nginx) for this public URL, or ensure the intended audience has credentials. Verify the `WWW-Authenticate` header is removed from the response."},{"priority":2,"title":"Implement Baseline Security Headers","impact":"Transport Security, Clickjacking Protection","problem":"HSTS, X-Frame-Options, and X-Content-Type-Options are missing (Security Headers grade 0/100).","solution":"Add the following headers to the server configuration:\n```\nStrict-Transport-Security: max-age=63072000; includeSubDomains\nX-Frame-Options: SAMEORIGIN\nX-Content-Type-Options: nosniff\n```"},{"priority":2,"title":"Fix Accessibility Contrast and Landmarks","impact":"WCAG 1.4.3, 1.3.1, 2.4.1","problem":"Serious color-contrast violations on navbar/links; missing `<main>` and `<nav>` landmarks.","solution":"- Increase text contrast to ≥4.5:1 ratio.\n- Wrap navigation in `<nav>` and main content in `<main>`.\n- Add a skip-to-content link at the top of the DOM."},{"priority":3,"title":"Add SEO Metadata and Canonical Tags","impact":"Search Visibility, Duplicate Content","problem":"Missing meta description, canonical URL, and robots meta; 3 `<h1>` tags present.","solution":"- Add `<meta name=\"description\" content=\"...\">`.\n- Add `<link rel=\"canonical\" href=\"...\">`.\n- Consolidate to a single `<h1>` per page."},{"priority":3,"title":"Enable Compression and Caching","impact":"Page Load Speed, Bandwidth","problem":"Response is not compressed (27.3 KB) and lacks Cache-Control headers.","solution":"Enable Brotli or Gzip compression on the server. Set `Cache-Control: public, max-age=31536000` for static assets."}],"coverage":{"pct":100,"missing":[]},"siteSummary":{"pagesAudited":1,"pagesAttempted":1,"urls":["https://gigaehitus.gotoand.support/"]},"psiSnapshot":{"rows":[{"pageUrl":"https://gigaehitus.gotoand.support/","perfMobile":95,"perfDesktop":100,"lcpMobileMs":2409.3926392573476,"lcpDesktopMs":648.3871191825087,"clsMobile":0.002054,"clsDesktop":0.000079}]},"optimizationChecklist":{"items":[{"id":"caching","title":"Page caching plugin / CDN active","status":"fail","detail":"No WordPress cache plugin marker or CDN edge cache detected on the document response.","evidence":[]},{"id":"lazyload","title":"Images lazy-loaded","status":"pass","detail":"All raster images use loading=\"lazy\".","evidence":[]},{"id":"heroEager","title":"Hero image eagerly loaded","status":"warn","detail":"Hero image has no explicit loading or fetchpriority (inferred from DOM order/size — Lighthouse LCP element unavailable). Browser default is eager but adding fetchpriority=\"high\" helps LCP.","evidence":["hero: …iKAkJVZAoSkJCFSSKkpBQBYmiJCRUQaIoCQlVkChKQkIV/D+cxxFa72wHXQAAAABJRU5ErkJggg==","loading: (not set)","fetchpriority: (not set)"]},{"id":"heroBackground","title":"Hero is a real <img> (not a CSS background-image)","status":"n/a","detail":"No CSS background-images detected on raster-image-eligible elements.","evidence":[]},{"id":"responsive","title":"Responsive images (srcset / <picture>)","status":"n/a","detail":"Only 1 raster image on the page — responsive-image rule does not apply.","evidence":[]},{"id":"imageSizes","title":"Reasonable number of image sizes","status":"n/a","detail":"Too few raster images to evaluate srcset width variety.","evidence":[]},{"id":"scriptsFooter","title":"JS scripts not blocking in <head>","status":"n/a","detail":"No external scripts on the page.","evidence":[]}],"summary":{"passed":1,"warned":1,"failed":1,"notApplicable":4},"priorities":[{"title":"Page caching plugin / CDN active","severity":"high","detail":"No WordPress cache plugin marker or CDN edge cache detected on the document response."},{"title":"Hero image eagerly loaded","severity":"medium","detail":"Hero image has no explicit loading or fetchpriority (inferred from DOM order/size — Lighthouse LCP element unavailable). Browser default is eager but adding fetchpriority=\"high\" helps LCP."}]},"perPageOverall":[{"url":"https://gigaehitus.gotoand.support/","overall":55,"reasoning":"PSI mobile 95 indicates strong rendering performance (LCP 2.4 s, TTFB 2 ms), but the HTTP 401 Unauthorized status renders the site inaccessible to public users, creating a critical functional failure. Security headers are entirely missing (0/100 grade), though site signals suggest low authentication risk. Accessibility has a serious color-contrast violation and missing semantic landmarks. SEO metadata is absent, and the page contains three H1 tags. The overall score reflects high technical performance undermined by configuration errors and missing standards.","confidence":"high","fixes":[{"priority":1,"title":"Resolve HTTP 401 Unauthorized Status","impact":"Site Accessibility, SEO Indexing","problem":"Server returns 401 Unauthorized (WWW-Authenticate: Basic), blocking public access despite 'Auth surface: no' signals.","solution":"Remove Basic Auth requirements from the web server configuration (Apache/Nginx) for this public URL, or ensure the intended audience has credentials. Verify the `WWW-Authenticate` header is removed from the response."},{"priority":2,"title":"Implement Baseline Security Headers","impact":"Transport Security, Clickjacking Protection","problem":"HSTS, X-Frame-Options, and X-Content-Type-Options are missing (Security Headers grade 0/100).","solution":"Add the following headers to the server configuration:\n```\nStrict-Transport-Security: max-age=63072000; includeSubDomains\nX-Frame-Options: SAMEORIGIN\nX-Content-Type-Options: nosniff\n```"},{"priority":2,"title":"Fix Accessibility Contrast and Landmarks","impact":"WCAG 1.4.3, 1.3.1, 2.4.1","problem":"Serious color-contrast violations on navbar/links; missing `<main>` and `<nav>` landmarks.","solution":"- Increase text contrast to ≥4.5:1 ratio.\n- Wrap navigation in `<nav>` and main content in `<main>`.\n- Add a skip-to-content link at the top of the DOM."},{"priority":3,"title":"Add SEO Metadata and Canonical Tags","impact":"Search Visibility, Duplicate Content","problem":"Missing meta description, canonical URL, and robots meta; 3 `<h1>` tags present.","solution":"- Add `<meta name=\"description\" content=\"...\">`.\n- Add `<link rel=\"canonical\" href=\"...\">`.\n- Consolidate to a single `<h1>` per page."},{"priority":3,"title":"Enable Compression and Caching","impact":"Page Load Speed, Bandwidth","problem":"Response is not compressed (27.3 KB) and lacks Cache-Control headers.","solution":"Enable Brotli or Gzip compression on the server. Set `Cache-Control: public, max-age=31536000` for static assets."}]}]}