{"url":"https://play.ee/","date":"2026-07-22","siteName":"Perfectly formed web development team - gotoAndPlay","overall":76,"reasoning":"Site overall 76 is the mean of 5 pages. Scores range 72 (https://play.ee/software-development-work-index/) → 82 (https://play.ee/). Weakest page: Mobile performance is strong (86) with excellent TTFB (5 ms) and TBT (0 ms), but CLS is high at 0.211 due to footer shifts. Security is the weakest area (20/100 grade) with a critical failure: HTTP does not redirect to HTTPS, plus missing HSTS and X-Content-Type-Options. Accessibility has a serious color-contrast violation and missing main landmark despite a 90 score. W3C validation shows 7 errors including parser recovery failure at line 100. Confidence is high as all audit tools returned complete data.","confidence":"high","fixes":[{"priority":1,"category":"Security","title":"Enforce HTTPS and add HSTS","impact":"Transport security, browser warnings","problem":"Security Headers tool reports HTTP does not redirect to HTTPS and HSTS is missing (Grade 20/100).","solution":"Configure server to redirect all HTTP traffic to HTTPS and send:\n```\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\n```"},{"priority":1,"category":"Security","title":"Add X-Content-Type-Options","impact":"MIME sniffing protection","problem":"X-Content-Type-Options header is missing, leaving the site vulnerable to MIME-type sniffing attacks.","solution":"Add the following header to all responses:\n```\nX-Content-Type-Options: nosniff\n```"},{"priority":1,"category":"Security","title":"Enforce HTTPS redirect and add HSTS","impact":"Transport security, data integrity","problem":"HTTP does not redirect to HTTPS and HSTS is missing (Security Headers grade 20/100).","solution":"Configure server to redirect all HTTP traffic to HTTPS immediately.\nAdd HSTS header:\n`Strict-Transport-Security: max-age=63072000; includeSubDomains; preload`"},{"priority":1,"category":"Security","title":"Force HTTPS redirect on HTTP requests","impact":"Transport security, data integrity","problem":"Audit detected that http://play.ee/software-development-work-index/ does not redirect to HTTPS, leaving users vulnerable to downgrade attacks.","solution":"Configure the web server (Apache/Nginx) to return a 301 redirect for all HTTP traffic to the HTTPS version:\n```apache\nRewriteEngine On\nRewriteCond %{HTTPS} off\nRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n```"},{"priority":1,"category":"Security","title":"Add HSTS and X-Content-Type-Options headers","impact":"Transport security, MIME sniffing","problem":"Security Headers grade is 20/100; HSTS and X-Content-Type-Options are missing despite HTTPS being used.","solution":"Add the following headers to the server response:\n```apache\nHeader always set Strict-Transport-Security \"max-age=63072000; includeSubDomains; preload\"\nHeader always set X-Content-Type-Options \"nosniff\"\n```"},{"priority":1,"category":"SEO","title":"Fix W3C HTML Validation Errors","impact":"Document structure, rendering reliability","problem":"7 validation errors including parser recovery failure at line 100 (iframe/noscript in head, stray end tags).","solution":"Move `` out of the `` section. Ensure `` tags are placed correctly within `` and close `` before `` starts."},{"priority":2,"category":"SEO","title":"Fix HTML Validation Errors","impact":"Parser recovery, SEO rendering","problem":"W3C Validator reports 7 errors including 'Bad start tag in iframe in noscript in head' and parser recovery failure at line 100.","solution":"Move `` out of the `` section. Ensure `` tags do not use the `name` attribute where `property` is required (e.g., Open Graph)."},{"priority":2,"category":"Accessibility","title":"Add Skip Link and Main Landmark","impact":"Keyboard navigation, screen reader flow","problem":"HTML Inventory shows missing `main` landmark and no skip-to-content link; axe reports `region` and `landmark-unique` violations.","solution":"Add a skip link at the top of the ``:\n```html\nSkip to content\n```\nWrap primary content in `
`."},{"priority":2,"category":"Accessibility","title":"Fix color contrast and add main landmark","impact":"WCAG 1.4.3, 1.3.1","problem":"axe-core found 1 serious color-contrast violation; HTML Inventory shows missing main landmark.","solution":"- Increase contrast ratio to ≥4.5:1 for `.heading__main` and card text.\n- Wrap primary content in `
` tag.\n- Add skip-to-content link at top of page."},{"priority":2,"category":"Best Practices","title":"Resolve W3C HTML validation errors","impact":"Rendering stability, SEO","problem":"7 W3C errors including parser recovery failure at line 100 and bad iframe/noscript in head.","solution":"- Move `` out of the `` section. Ensure `` tags do not use the `name` attribute where `property` is required (e.g., Open Graph)."},{"priority":2,"category":"Accessibility","title":"Add Skip Link and Main Landmark","impact":"Keyboard navigation, screen reader flow","problem":"HTML Inventory shows missing `main` landmark and no skip-to-content link; axe reports `region` and `landmark-unique` violations.","solution":"Add a skip link at the top of the ``:\n```html\nSkip to content\n```\nWrap primary content in `
`."},{"priority":3,"category":"Performance","title":"Add Image Dimensions and Lazy Loading","impact":"CLS, Initial Load","problem":"52 images lack explicit width/height attributes and 52 lack `loading=\"lazy\"`, risking layout shifts despite current CLS score.","solution":"Add `width` and `height` attributes to all `` tags. Add `loading=\"lazy\"` to images below the fold:\n```html\n\"...\"\n```"}],"perfScore":97,"a11yScore":100,"bestPracticesScore":100,"seoScore":92,"securityScore":20},{"url":"https://play.ee/web-development-case-studies/","overall":74,"reasoning":"PSI mobile performance is strong at 95, but Core Web Vitals show warnings (LCP 2.6 s, FCP 1.95 s). Security configuration is critically weak with a 20/100 header grade and HTTP not redirecting to HTTPS. Accessibility has a serious color-contrast violation and missing main landmark. W3C validation reports 7 errors including parser recovery failure. Image dimensions are missing on 56 assets despite low CLS.","confidence":"high","fixes":[{"priority":1,"category":"Security","title":"Enforce HTTPS redirect and add HSTS","impact":"Transport security, data integrity","problem":"HTTP does not redirect to HTTPS and HSTS is missing (Security Headers grade 20/100).","solution":"Configure server to redirect all HTTP traffic to HTTPS immediately.\nAdd HSTS header:\n`Strict-Transport-Security: max-age=63072000; includeSubDomains; preload`"},{"priority":2,"category":"Accessibility","title":"Fix color contrast and add main landmark","impact":"WCAG 1.4.3, 1.3.1","problem":"axe-core found 1 serious color-contrast violation; HTML Inventory shows missing main landmark.","solution":"- Increase contrast ratio to ≥4.5:1 for `.heading__main` and card text.\n- Wrap primary content in `
` tag.\n- Add skip-to-content link at top of page."},{"priority":2,"category":"Best Practices","title":"Resolve W3C HTML validation errors","impact":"Rendering stability, SEO","problem":"7 W3C errors including parser recovery failure at line 100 and bad iframe/noscript in head.","solution":"- Move `` out of the `` section. Ensure `` tags are placed correctly within `` and close `` before `` starts."},{"priority":2,"category":"Accessibility","title":"Fix Color Contrast Violations","impact":"WCAG 1.4.3 compliance, readability","problem":"axe-core reports 1 serious violation for color-contrast on multiple heading elements (e.g., `.focus__heading > h1`).","solution":"Increase contrast ratio to at least 4.5:1 for normal text. Adjust CSS for `.heading__main` and `.heading__small` classes to use darker text or lighter backgrounds."},{"priority":2,"category":"Accessibility","title":"Add Main Landmark and Skip Link","impact":"Keyboard navigation, screen reader support","problem":"HTML Inventory shows `main` landmark is missing and no skip-to-content link exists.","solution":"Wrap primary content in `
` tag. Add a skip link at the top of the page:\n```html\nSkip to content\n
...
\n```"},{"priority":3,"category":"Performance","title":"Remove Unused CSS and JavaScript","impact":"Page load time, render-blocking resources","problem":"PSI findings estimate 31 KiB unused CSS and 23 KiB unused JS savings.","solution":"Use PurgeCSS or similar tool to remove unused CSS rules. Defer non-critical JS or use `type=\"module\"` with `defer` to reduce main thread work."},{"priority":3,"category":"Best Practices","title":"Add Explicit Dimensions to Images","impact":"Layout stability (CLS), rendering performance","problem":"HTML Inventory shows 69 images without explicit width/height attributes.","solution":"Add `width` and `height` attributes to all `` tags to reserve space before loading:\n```html\n\"...\"\n```"}],"perfScore":96,"a11yScore":94,"bestPracticesScore":100,"seoScore":100,"securityScore":20}]}