{"url":"https://kawiare.ee/","date":"2026-07-14","siteName":"Kawiare - Experience of Taste","overall":61,"reasoning":"Site overall 61 is the mean of 10 pages. Scores range 52 (https://kawiare.ee/kaaviar-kui-looduslik-toidulisand-ehk-kaaviar-ilma-muutideta) → 71 (https://kawiare.ee/lumekrabi). Weakest page: Mobile performance is critically low (58) with an LCP of 8.5 s, driven by 11 render-blocking scripts and unused JavaScript. Security posture is weak due to missing HTTP-to-HTTPS redirects and absent CSP, despite the primary URL using HTTPS. Accessibility has a serious contrast violation and missing skip link, though core structure is mostly intact. Desktop performance is excellent (96), highlighting a severe mobile-specific bottleneck. Confidence is high as all audit tools returned complete data.","confidence":"high","fixes":[{"priority":1,"title":"Eliminate render-blocking JavaScript","impact":"LCP, FCP, Performance Score","problem":"11 render-blocking scripts (including jQuery and WooCommerce) delay first paint; LCP is 10.1s on mobile.","solution":"Add `defer` or `async` to non-critical scripts in ``. Move WooCommerce and theme JS to footer or use `type=\"module\"`.\n```html\n\n```"},{"priority":1,"title":"Optimize hero and above-fold images","impact":"LCP, Page Weight","problem":"Images total 1.45 MB; 6 images lack `loading=\"lazy\"`; hero image is eagerly loaded but heavy.","solution":"Convert PNG/JPEG to WebP/AVIF. Add `fetchpriority=\"high\"` to LCP image. Ensure `loading=\"lazy\"` on below-fold images.\n```html\n\"...\"\n```"},{"priority":1,"title":"Force HTTPS redirect","impact":"Security, Transport encryption","problem":"http://kawiare.ee/artiklid does not redirect to HTTPS, leaving users on unencrypted connections.","solution":"Configure the web server (Apache/Nginx) to return a 301 redirect for all HTTP requests to HTTPS:\n```apache\nRewriteEngine On\nRewriteCond %{HTTPS} off\nRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n```"},{"priority":1,"title":"Fix LCP by optimizing hero image and scripts","impact":"LCP, FCP, Performance Score","problem":"LCP is 9.4 s on mobile; hero uses CSS background-image (no srcset) and 16 scripts are render-blocking.","solution":"1. Replace CSS background hero with a real `` or `` element with `fetchpriority=\"high\"`.\n2. Add `defer` or `async` to non-critical scripts in ``.\n3. Inline critical CSS and remove unused JS (224 KB wasted)."},{"priority":1,"title":"Enforce HTTPS redirect for all HTTP traffic","impact":"Security, Transport encryption","problem":"Security Headers audit reports: 'http://kawiare.ee... does not redirect to HTTPS'. This exposes users to MITM attacks on initial connection.","solution":"Configure the web server (Apache/Nginx) to return a 301 redirect from HTTP to HTTPS for all requests.\n```apache\nRewriteEngine On\nRewriteCond %{HTTPS} off\nRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n```"},{"priority":1,"title":"Eliminate render-blocking JavaScript to fix LCP","impact":"LCP (8.5 s), FCP (4.7 s), Mobile Performance (58)","problem":"11 render-blocking scripts found in HTML Inventory; PSI identifies 224 KB unused JS and long tasks delaying main thread.","solution":"Add `defer` or `async` to non-critical scripts in ``. Inline critical CSS and move non-critical JS to the footer.\n```html\n\n\n\n\n```"},{"priority":1,"title":"Force HTTPS redirect for all HTTP traffic","impact":"Security, Data Integrity","problem":"Security Headers audit found 'http://kawiare.ee... does not redirect to HTTPS', leaving users vulnerable to downgrade attacks.","solution":"Configure the web server (Apache/Nginx) to return a 301 redirect from HTTP to HTTPS for all requests.\n```apache\nRewriteEngine On\nRewriteCond %{HTTPS} off\nRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n```"},{"priority":1,"title":"Enforce HTTPS Redirect","impact":"Security, Trust","problem":"http://kawiare.ee/kuidas-eristada-kvaliteetset-kaaviari does not redirect to HTTPS, leaving HTTP traffic unencrypted.","solution":"Configure server (Apache/Nginx) to return a 301 redirect from HTTP to HTTPS for all requests.\n```apache\nRewriteEngine On\nRewriteCond %{HTTPS} off\nRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n```"},{"priority":1,"title":"Defer Render-Blocking JavaScript","impact":"LCP, FCP, Performance","problem":"11 render-blocking scripts contribute to a 5.4s LCP on mobile; 224 KB of unused JS identified.","solution":"Add `defer` or `async` to non-critical scripts in ``.\n```html\n\n```\nMove critical CSS inline and defer non-critical CSS."},{"priority":1,"title":"Optimize Largest Contentful Paint (LCP)","impact":"Performance, Mobile UX","problem":"Mobile LCP is 8.5 s (target ≤2.5 s) caused by render-blocking scripts and unoptimized hero image.","solution":"- Defer non-critical JavaScript (11 render-blocking scripts found).\n- Preload the hero image (``).\n- Convert hero image to WebP/AVIF and serve responsive sizes."},{"priority":2,"title":"Strengthen security headers","impact":"Security Headers Score, XSS/Clickjacking Defense","problem":"Security Headers grade 40/100; CSP missing, HSTS lacks preload directive.","solution":"Add CSP with nonce/hash (not just allowlist). Update HSTS to include `preload`.\n```apache\nHeader set Content-Security-Policy \"default-src 'self'; script-src 'nonce-{random}' 'strict-dynamic'\"\nHeader set Strict-Transport-Security \"max-age=63072000; includeSubDomains; preload\"\n```"},{"priority":2,"title":"Fix color contrast on cookie banner","impact":"Accessibility (WCAG 1.4.3)","problem":"axe-core reports 1 serious violation on `#cookiescript_accept` button.","solution":"Increase contrast ratio to ≥4.5:1 for text on the cookie accept button. Test with a contrast checker tool."},{"priority":2,"title":"Fix accessibility violations and landmarks","impact":"WCAG 1.4.3, 2.4.1, 2.4.6","problem":"Serious color-contrast on `#cookiescript_accept`; heading order skips H2; missing skip-to-content link; form inputs lack labels.","solution":"- Increase contrast on `#cookiescript_accept` to ≥4.5:1.\n- Insert `

` between `h1` and `h3` or change `h3` to `h2`.\n- Add `Skip to content`.\n- Add `