{"url":"https://gotoand.dev/larsen","date":"2026-07-09","siteName":"Viga 401 - Error 401 | Veebimajutus.ee","overall":25,"reasoning":"The site returns a 401 Unauthorized status, making content inaccessible to the public, which is a core functional failure. Security headers are completely missing (0/100) and HTTP does not redirect to HTTPS, creating significant security exposure. Accessibility has 1 serious color-contrast violation and missing landmarks. Performance is strong (PSI 94) but irrelevant if the site is locked. SEO basics are missing.","confidence":"high","fixes":[{"priority":1,"title":"Resolve 401 Unauthorized Status","impact":"Core functionality, Public Access","problem":"W3C and Security Headers report HTTP status 401; page is blocked from public access.","solution":"Remove authentication requirements for this URL or configure the server to return 200 OK for public visitors. If this is a private resource, ensure it is not indexed or linked publicly."},{"priority":1,"title":"Enforce HTTPS Redirect","impact":"Transport Security","problem":"Security Headers report 'http://gotoand.dev/larsen does not redirect to HTTPS'.","solution":"Configure the web server (Apache/Nginx) to redirect all HTTP traffic to HTTPS:\n```apache\nRewriteEngine On\nRewriteCond %{HTTPS} off\nRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n```"},{"priority":2,"title":"Add Security Headers (HSTS, X-Frame-Options, CSP)","impact":"Security Headers Grade (0/100)","problem":"Missing HSTS, X-Content-Type-Options, X-Frame-Options, and CSP. Grade is 0/100.","solution":"Add headers to server config:\n```apache\nHeader always set Strict-Transport-Security \"max-age=63072000; includeSubDomains\"\nHeader always set X-Frame-Options \"SAMEORIGIN\"\nHeader always set X-Content-Type-Options \"nosniff\"\n```"},{"priority":2,"title":"Fix Color Contrast and Landmarks","impact":"Accessibility (axe-core 3 violations)","problem":"Serious color-contrast violation on navigation links; missing main landmark and skip link.","solution":"- Increase contrast ratio to ≥4.5:1 for `.navbar-nav > a` links.\n- Wrap main content in `
` and navigation in `