# Audit Report: Advokaadibüroo Sorainen

**Website:** https://www.sorainen.com/et/  
**Date:** 11.08.2026  
**Audit Coverage:** 99% — PageSpeed Insights (mobile): PSI HTTP 500  
**Confidence:** medium

**Pages Audited (10 of 10):**

- https://www.sorainen.com/et
- https://www.sorainen.com/newsroom
- https://www.sorainen.com/et/uudised
- https://www.sorainen.com/lv/zinas
- https://www.sorainen.com/lt/naujienos
- https://www.sorainen.com/law-firm-ratings-in-mergermarket-place-sorainen-as-a-leader-in-the-baltics-and-belarus
- https://www.sorainen.com/darius-rauludaitis-former-prosecutor-general-joins-law-firm-sorainen
- https://www.sorainen.com/sorainen-named-european-law-firm-of-the-year-at-the-lawyer-european-awards
- https://www.sorainen.com/lithuanian-private-equity-and-venture-capital-association-awards-sorainen-lawyers-as-bees-of-the-year
- https://www.sorainen.com/edvins-draba-joins-the-latvian-association-of-patent-attorneys

## Summary of results

**Overall Score:** 52 / 100  
**Status:** ⚠ 🟠 **Poor**

Site overall 52 is the mean of 10 pages. Scores range 42 (https://www.sorainen.com/darius-rauludaitis-former-prosecutor-general-joins-law-firm-sorainen) → 62 (https://www.sorainen.com/lithuanian-private-equity-and-venture-capital-association-awards-sorainen-lawyers-as-bees-of-the-year). Weakest page: Mobile performance is catastrophic (45/100) with LCP at 12.0s and 17.38 MB page weight, dragging the score heavily. Accessibility has 2 critical violations (button-name, image-alt) and 3 serious ones, failing WCAG standards. Security headers are weak (40/100) with CSP allowing unsafe-inline despite user-generated content signals. Desktop performance is strong (93) but mobile-first indexing penalizes the mobile experience. W3C validation shows 5 errors including nesting violations and missing alt attributes.

### Per-page scores

🟠 **Poor** · https://www.sorainen.com/et

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 46 | 32 | 79 | 92 | 92 | 40 |

🟠 **Poor** · https://www.sorainen.com/newsroom

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 54 | 62 | 85 | 92 | 85 | 40 |

🟡 **Needs Improvement** · https://www.sorainen.com/et/uudised

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 62 | 67 | 85 | 92 | 92 | 40 |

🟠 **Poor** · https://www.sorainen.com/lv/zinas

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 48 | 41 | 85 | 92 | 92 | 40 |

🟠 **Poor** · https://www.sorainen.com/lt/naujienos

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 55 | 60 | 85 | 92 | 92 | 40 |

🟠 **Poor** · https://www.sorainen.com/law-firm-ratings-in-mergermarket-place-sorainen-as-a-leader-in-the-baltics-and-belarus

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 52 | 67 | 81 | 92 | 77 | 40 |

🟠 **Poor** · https://www.sorainen.com/darius-rauludaitis-former-prosecutor-general-joins-law-firm-sorainen

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 42 | 45 | 81 | 69 | 77 | 40 |

🟠 **Poor** · https://www.sorainen.com/sorainen-named-european-law-firm-of-the-year-at-the-lawyer-european-awards

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 54 | 64 | 78 | 88 | 77 | 40 |

🟡 **Needs Improvement** · https://www.sorainen.com/lithuanian-private-equity-and-venture-capital-association-awards-sorainen-lawyers-as-bees-of-the-year

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 62 | 70 | 81 | 92 | 77 | 40 |

🟠 **Poor** · https://www.sorainen.com/edvins-draba-joins-the-latvian-association-of-patent-attorneys

| Score | Performance | Accessibility | Best Practices | SEO | Security |
| --- | --- | --- | --- | --- | --- |
| 46 | 47 | 81 | 92 | 77 | 40 |

## PageSpeed Insights — Mobile vs Desktop

_Lower is worse for Performance; higher is worse for LCP and CLS. Worse value is **bolded**._

| URL | Performance (M / D) | LCP (M / D) | CLS (M / D) |
| --- | --- | --- | --- |
| https://www.sorainen.com/et | **32** / 67 | **10.22 s** / 2.10 s | 0.000 / **0.007** |
| https://www.sorainen.com/newsroom | **62** / 69 | **11.66 s** / 1.33 s | 0.000 / **0.000** |
| https://www.sorainen.com/et/uudised | **67** / 96 | **3.95 s** / 1.24 s | 0.000 / **0.000** |
| https://www.sorainen.com/lv/zinas | **41** / 75 | **4.71 s** / 1.06 s | 0.000 / **0.001** |
| https://www.sorainen.com/lt/naujienos | **60** / 78 | **4.82 s** / 1.13 s | 0.000 / **0.004** |
| https://www.sorainen.com/law-firm-ratings-in-mergermarket-place-sorainen-as-a-leader-in-the-baltics-and-belarus | **67** / 74 | **11.00 s** / 1.40 s | **0.004** / 0.003 |
| https://www.sorainen.com/darius-rauludaitis-former-prosecutor-general-joins-law-firm-sorainen | **45** / 93 | **11.97 s** / 1.35 s | 0.000 / **0.001** |
| https://www.sorainen.com/sorainen-named-european-law-firm-of-the-year-at-the-lawyer-european-awards | 64 / 64 | **11.04 s** / 960 ms | 0.001 / **0.002** |
| https://www.sorainen.com/lithuanian-private-equity-and-venture-capital-association-awards-sorainen-lawyers-as-bees-of-the-year | — / 70 | — / 941 ms | — / 0.002 |
| https://www.sorainen.com/edvins-draba-joins-the-latvian-association-of-patent-attorneys | **47** / 68 | **10.84 s** / 2.10 s | 0.000 / **0.000** |

## Optimization Checklist

**1 of 4 passing** — 1 pass · 2 warn · 1 fail · 3 n/a

| Item | Status | Detail |
| --- | --- | --- |
| Page caching plugin / CDN active | **Pass** | Caching plugin detected (WP Rocket) |
| Images lazy-loaded | N/A | No raster <img> elements found (4 SVGs excluded). |
| Hero image eagerly loaded | **Warn** | Hero image has no explicit loading or fetchpriority (inferred from DOM order/size — Lighthouse LCP element unavailable). Browser default is eager but adding fetchpriority="high" helps LCP. |
| Hero is a real <img> (not a CSS background-image) | **Warn** | Hero element uses a CSS background-image (no image-set() variants), so the browser always loads the original asset regardless of viewport — there is no srcset equivalent. Move the hero to a real <img> with srcset/sizes (or <picture>) so smaller viewports can fetch a smaller file. |
| Responsive images (srcset / <picture>) | N/A | Only 0 raster images on the page (4 SVGs excluded) — responsive-image rule does not apply. |
| Reasonable number of image sizes | N/A | Too few raster images to evaluate srcset width variety. |
| JS scripts not blocking in <head> | **Fail** | 4 render-blocking scripts in <head>. Move to footer or add defer/async. |

## Fixes

### Priority 1: Critical
*Immediate action — impacts user experience, search rankings, or site safety.*

**1A. Reduce page weight and defer third-party scripts** `Performance`
- **Impact:** LCP, TBT, FCP, Mobile Performance Score
- **Problem:** Page weight is 18.44 MB (15.6 MB media) with LCP 10.2s and TBT 2.98s; recaptcha and gtag scripts cause long tasks.
- **Solution:**
  - Compress/convert media (15.6 MB is excessive for a text-heavy site).
  - Defer non-critical JS (gtag, recaptcha, fb) using `defer` or `async`.
  - Implement lazy loading for below-fold images.
  - Consider removing unused scripts (154 KB wasted recaptcha JS).

**1B. Add alt text and button labels** `Accessibility`
- **Impact:** WCAG 1.1.1, 4.1.2, Screen Reader Usability
- **Problem:** 12 images missing `alt` attributes; 4 buttons lack discernible text (axe critical violations).
- **Solution:**
  - Add descriptive `alt` text to all 12 missing images.
  - Add `aria-label` or visible text to `.search-submit`, `.close`, and toggle buttons.
  - Ensure decorative images use `alt=""`.

**1C. Reduce page weight and fix LCP** `Performance`
- **Impact:** LCP 11.7 s, FCP 3.1 s, Total Weight 17.4 MB
- **Problem:** Page weight is 17.4 MB with 15.6 MB media; LCP is 11.7 s on mobile, far exceeding the 2.5 s threshold.
- **Solution:**
  - Compress or lazy-load the 15.6 MB media asset (likely the splash video).
  - Use `<video>` with `poster` attribute and `preload="metadata"`.
  - Implement responsive images (`srcset`) for raster assets.
  - Defer non-critical scripts (18 render-blocking scripts found).

**1D. Fix critical form and button accessibility** `Accessibility`
- **Impact:** 5 critical axe violations (button-name, label, select-name)
- **Problem:** Buttons lack discernible text; search and filter forms lack labels; 3 select elements missing accessible names.
- **Solution:**
  - Add `aria-label` or visible text to all buttons (e.g., `.search-submit`).
  - Associate `<label>` elements with inputs using `for`/`id`.
  - Ensure `<select>` elements have visible labels or `aria-label`.

**1E. Harden CSP and HSTS for UGC** `Security`
- **Impact:** XSS risk, Transport security
- **Problem:** Site has user-generated content signals; CSP allows `unsafe-inline`/`unsafe-eval`; HSTS missing `includeSubDomains` and `preload`.
- **Solution:**
  - Update CSP to remove `unsafe-inline` and `unsafe-eval`; use nonces/hashes.
  - Update HSTS: `max-age=31536000; includeSubDomains; preload`.
  - Add `Referrer-Policy: strict-origin-when-cross-origin`.

**1F. Fix critical axe violations and add H1** `Accessibility`
- **Impact:** WCAG compliance, SEO structure
- **Problem:** 3 critical axe violations (button-name, label, select-name) and 0 h1 elements found; 18 form inputs lack labels.
- **Solution:**
  - Add exactly one `<h1>` to the page (currently missing).
  - Add `aria-label` or visible text to all buttons (e.g., `.search-submit`).
  - Add `<label>` elements or `aria-label` to all form inputs (search, select, checkboxes).
  - Ensure `<select>` elements have associated labels.

**1G. Defer render-blocking scripts** `Performance`
- **Impact:** FCP, TBT, LCP
- **Problem:** 18 render-blocking scripts in <head> delay FCP to 3.1 s and contribute to TBT 486 ms.
- **Solution:**
  - Add `defer` or `async` to non-critical scripts in `<head>`.
  - Move analytics/tracking scripts (GTM, Facebook Pixel) to the footer or load via `defer`.
  - Example: `<script src="..." defer></script>`

**1H. Reduce page weight and defer non-critical scripts** `Performance`
- **Impact:** LCP, TBT, FCP, Mobile Performance Score
- **Problem:** Page weight is 17.4 MB (15.6 MB video) with 18 render-blocking scripts; LCP is 4.7 s and TBT is 2.98 s.
- **Solution:**
  - Replace the 15.6 MB `splash.webm` with a lightweight poster image or lazy-load the video.
  - Add `defer` or `async` to the 18 render-blocking scripts (e.g., jQuery, GTM, Facebook Pixel).
  - Remove unused JavaScript (154 KB recaptcha, 71 KB gtag).

**1I. Fix critical form and button accessibility issues** `Accessibility`
- **Impact:** WCAG 2.1 Level A compliance, Screen Reader usability
- **Problem:** 3 critical axe violations: buttons lack discernible text, search/select forms lack labels.
- **Solution:**
  - Add `aria-label` or visible text to all buttons (e.g., `.search-submit`).
  - Associate `<label>` elements with all form inputs (search, filters, newsletter).
  - Ensure `<select>` elements have accessible names.

**1J. Optimize Largest Contentful Paint (LCP)** `Performance`
- **Impact:** LCP, FCP, TBT
- **Problem:** Mobile LCP is 4.8s (heavy penalty) and FCP is 3.07s, driven by render-blocking scripts and heavy third-party JS (recaptcha, gtag).
- **Solution:**
  - Defer non-critical scripts (e.g., GTM, Facebook Pixel) until after main content renders.
  - Preload LCP image if it is an image element.
  - Reduce TBT by splitting long tasks in third-party scripts or loading them asynchronously.

**1K. Fix Critical Form and Button Labels** `Accessibility`
- **Impact:** WCAG 2.1.1, 4.1.2
- **Problem:** 3 critical axe violations: buttons lack discernible text, form elements (search, select) lack labels.
- **Solution:**
  - Add `aria-label` or visible text to all buttons (e.g., `.search-submit`).
  - Associate `<label>` elements with all form inputs using `for` and `id` attributes.
  - Ensure `<select>` elements have accessible names.

**1L. Reduce page weight and optimize media** `Performance`
- **Impact:** LCP, FCP, Total Page Weight
- **Problem:** Browser runtime shows 17.38 MB total weight with 15.61 MB from media; LCP is 11.0 s on mobile.
- **Solution:**
  - Compress and convert video assets (splash.webm failed to load).
  - Implement lazy loading for off-screen images.
  - Use modern formats (WebP/AVIF) and responsive `srcset`.
  - Consider a CDN for static assets.

**1M. Fix critical axe-core violations** `Accessibility`
- **Impact:** WCAG 2.1 Compliance, Screen Reader Support
- **Problem:** 2 critical violations: `button-name` (search-submit) and `image-alt` (newsIntro) missing accessible names.
- **Solution:**
  - Add `aria-label` or visible text to `.search-submit` button.
  - Add descriptive `alt` text to `.newsIntro__line--2` image.
  - Ensure all interactive elements have discernible names.

**1N. Reduce media weight and fix LCP** `Performance`
- **Impact:** LCP, FCP, Page Weight
- **Problem:** Mobile LCP is 12.0s and total page weight is 17.38 MB (15.61 MB media), causing severe load delays.
- **Solution:**
  - Compress or lazy-load the 15.61 MB video asset (`splash.webm`).
  - Use `fetchpriority="high"` on the LCP image.
  - Implement responsive images (`srcset`) to serve smaller files on mobile.

**1O. Fix critical axe violations** `Accessibility`
- **Impact:** WCAG 2.1 Compliance
- **Problem:** 2 critical violations found: `button-name` (search-submit) and `image-alt` (content images missing text).
- **Solution:**
  - Add `aria-label` or visible text to `.search-submit` button.
  - Add descriptive `alt` text to all `<img>` elements, especially `.newsIntro__line--2`.

**1P. Harden Content Security Policy** `Security`
- **Impact:** XSS Defense
- **Problem:** CSP allows `unsafe-inline` and `unsafe-eval` scripts, which defeats XSS protection despite UGC signals.
- **Solution:**
  - Remove `'unsafe-inline'` and `'unsafe-eval'` from `script-src`.
  - Use nonces or hashes for allowed scripts (e.g., `script-src 'nonce-{random}'`).
  - Ensure `hello.myfonts.net` is whitelisted in `connect-src` to fix console errors.

**1Q. Reduce media weight and optimize LCP** `Performance`
- **Impact:** LCP, Page Weight, Mobile Performance
- **Problem:** Browser Runtime shows 15.61 MB media weight (17.39 MB total); Mobile LCP is 11.0 s (Desktop 1.0 s).
- **Solution:**
  - Compress video/images aggressively (target <5 MB total).
  - Use `fetchpriority="high"` on the LCP image.
  - Implement responsive images (`srcset`) to serve smaller files to mobile.
  - Preload the LCP resource.

**1R. Fix critical axe violations (button, image)** `Accessibility`
- **Impact:** WCAG 2.1 Compliance, Screen Reader Support
- **Problem:** 2 critical violations: `button-name` (search-submit) and `image-alt` (2 images missing alt).
- **Solution:**
  - Add `aria-label` or visible text to `.search-submit`.
  - Add descriptive `alt` text to all content images (e.g., `alt="Karolina Sorainen"`).
  - Ensure decorative images use `alt=""`.

**1S. Harden CSP and HSTS for UGC site** `Security`
- **Impact:** XSS Protection, Transport Security
- **Problem:** CSP allows `unsafe-inline`/`unsafe-eval` (high risk with UGC signal); HSTS missing `includeSubDomains`/`preload`. Grade 40/100.
- **Solution:**
  - Remove `unsafe-inline` and `unsafe-eval` from CSP; use nonces/hashes.
  - Update HSTS: `Strict-Transport-Security: max-age=63072000; includeSubDomains; preload`.
  - Add `X-Content-Type-Options: nosniff` (already present, verify strictness).

**1T. Fix critical accessibility violations (alt text, button names)** `Accessibility`
- **Impact:** WCAG compliance, screen reader usability
- **Problem:** axe-core reports 2 critical violations: 2 images missing alt attributes and 2 buttons without discernible text.
- **Solution:**
  - Add descriptive `alt` text to all content images (e.g., `<img src="..." alt="Sorainen lawyers receiving award">`).
  - Ensure all buttons have visible text or `aria-label` (e.g., `<button aria-label="Submit search">`).

**1U. Reduce media payload (15.61 MB video/images)** `Performance`
- **Impact:** Page load time, data usage, LCP stability
- **Problem:** Browser runtime shows 17.38 MB total weight, with 15.61 MB from a single media asset (likely video). This is excessive for a news article page.
- **Solution:**
  - Compress video assets (use WebM/MP4 with lower bitrate) or serve poster images instead of autoplaying video.
  - Implement lazy loading for off-screen media (`loading="lazy"`).
  - Consider using a CDN for video delivery.

**1V. Harden Content Security Policy (remove unsafe-inline/eval)** `Security`
- **Impact:** XSS protection, data integrity
- **Problem:** CSP allows `unsafe-inline` and `unsafe-eval`, negating XSS protection. Site signals indicate user-generated content ('post' anchor), raising XSS risk.
- **Solution:**
  - Audit third-party scripts (GTM, Recaptcha, Facebook) to use nonces or hashes instead of `unsafe-inline`.
  - Implement a strict CSP with `'strict-dynamic'` and nonces for allowed scripts.
  - Example: `script-src 'nonce-{random}' 'strict-dynamic';`

**1W. Reduce media weight and fix failed video request** `Performance`
- **Impact:** LCP, TBT, Page Weight
- **Problem:** Total page weight is 17.38 MB with 15.61 MB from media; LCP is 10.8 s on mobile. A video splash.webm request failed (net::ERR_ABORTED).
- **Solution:**
  - Compress or lazy-load the video splash asset.
  - Use `<video>` with `preload="metadata"` and poster image.
  - Ensure the video file exists at `/wp-content/themes/sorainen/build/video/splash.webm`.

**1X. Fix critical axe violations (buttons, images, contrast)** `Accessibility`
- **Impact:** WCAG 2.1 A/AA Compliance
- **Problem:** 2 critical violations: buttons lack discernible text (`.search-submit`), images lack alt text (`.newsIntro__line--2`). 3 serious violations on color contrast.
- **Solution:**
  - Add `aria-label` or visible text to `.search-submit` and `.col-tp-none`.
  - Add descriptive `alt` text to all content images.
  - Increase contrast ratio for menu links to ≥4.5:1.

### Priority 2: Important
*Essential for compliance, user reach, and search visibility.*

**2A. Harden Content Security Policy and HSTS** `Security`
- **Impact:** XSS Defense, Transport Security
- **Problem:** CSP allows `unsafe-inline` and `unsafe-eval` (high risk); HSTS missing `includeSubDomains` and `preload`.
- **Solution:**
  - Remove `unsafe-inline` and `unsafe-eval` from CSP; use nonces/hashes for scripts.
  - Update HSTS: `Strict-Transport-Security: max-age=63072000; includeSubDomains; preload`.
  - Add `Referrer-Policy: strict-origin-when-cross-origin`.

**2B. Enable user zoom and fix viewport** `Accessibility`
- **Impact:** WCAG 1.4.4, Mobile Usability
- **Problem:** Viewport meta tag sets `user-scalable=no` and `maximum-scale=1.0`, blocking zoom.
- **Solution:**
  - Update viewport meta tag: `<meta name="viewport" content="width=device-width, initial-scale=1.0">`.
  - Ensure touch targets meet 44x44px minimum size.

**2C. Add H1 and Meta Description** `SEO`
- **Impact:** Search visibility, Document outline
- **Problem:** Document has 0 `<h1>` elements and no meta description; 10 W3C errors including duplicate IDs.
- **Solution:**
  - Add a unique `<h1>` describing the page content.
  - Add `<meta name="description" content="...">`.
  - Fix duplicate IDs (e.g., `select-50-8002b801-adc4a003`) and invalid attributes (`stylr`).

**2D. Defer render-blocking scripts** `Performance`
- **Impact:** FCP, TBT
- **Problem:** 18 render-blocking scripts found; 4 in `<head>` blocking rendering.
- **Solution:**
  - Add `defer` or `async` to non-critical scripts.
  - Move analytics and third-party tags to footer or use `type="module"`.
  - Remove unused JS (164 KB wasted on reCAPTCHA, 71 KB on GTM).

**2E. Fix CSP to allow GTM and Fonts without unsafe-inline** `Security`
- **Impact:** XSS protection, resource loading
- **Problem:** CSP blocks GTM images and fonts (console errors) while allowing `unsafe-inline` and `unsafe-eval`, defeating XSS protection.
- **Solution:**
  - Remove `unsafe-inline` and `unsafe-eval` from `script-src`.
  - Add specific nonces or hashes for allowed scripts.
  - Add `https://www.googletagmanager.com` and `https://fonts.gstatic.com` to `img-src` and `connect-src` to stop console errors.

**2F. Optimize video asset** `Performance`
- **Impact:** Page weight, LCP
- **Problem:** Media resource `splash.webm` is 15.6 MB, contributing to 17.4 MB total page weight and LCP 3.9 s.
- **Solution:**
  - Compress video to <5 MB using H.264/VP9.
  - Serve via a CDN with adaptive bitrate streaming.
  - Use `poster` attribute for instant visual feedback before load.

**2G. Strengthen HSTS and add missing headers** `Security`
- **Impact:** Transport security, privacy
- **Problem:** HSTS missing `includeSubDomains` and `preload`; Referrer-Policy, COOP, CORP missing.
- **Solution:**
  - Update HSTS: `max-age=31536000; includeSubDomains; preload`.
  - Add `Referrer-Policy: strict-origin-when-cross-origin`.
  - Add `Permissions-Policy` to disable unused features.

**2H. Fix HTML structure and W3C validation errors** `SEO`
- **Impact:** Search ranking, Document outline, CLS
- **Problem:** No `<h1>` element, 12 W3C errors (duplicate IDs, invalid attributes), 4 images missing dimensions.
- **Solution:**
  - Add a single `<h1>` describing the page content.
  - Fix duplicate IDs (e.g., `select-50-8002b801-ae3c5c07`).
  - Add `width` and `height` attributes to all `<img>` tags to prevent CLS.

**2I. Strengthen HSTS and CSP Headers** `Security`
- **Impact:** Transport security, XSS mitigation
- **Problem:** HSTS missing `includeSubDomains` and `preload`; CSP allows `unsafe-inline` and `unsafe-eval`.
- **Solution:**
  - Update HSTS: `Strict-Transport-Security: max-age=63072000; includeSubDomains; preload`
  - Refine CSP to remove `unsafe-inline`/`unsafe-eval` where possible, or use nonces for scripts.

**2J. Harden Content Security Policy (CSP)** `Security`
- **Impact:** XSS Defense, Data Integrity
- **Problem:** CSP allows `unsafe-inline` and `unsafe-eval`, negating XSS protection; UGC signal is present.
- **Solution:**
  - Remove `'unsafe-inline'` and `'unsafe-eval'` from `script-src`.
  - Use nonces or hashes for allowed scripts.
  - Ensure `connect-src` includes `hello.myfonts.net` to stop console errors.

**2K. Fix contrast, viewport, and link names** `Accessibility`
- **Impact:** WCAG 1.4.3, 1.4.4, 2.4.4
- **Problem:** Serious violations: `color-contrast` (menu links), `meta-viewport` (user-scalable=no), `link-name` (social icons).
- **Solution:**
  - Increase contrast ratio to ≥4.5:1 for menu links.
  - Remove `user-scalable=no` from viewport meta tag.
  - Add `aria-label` to icon-only links (e.g., `aria-label="Share on LinkedIn"`).

**2L. Reduce Total Blocking Time (TBT) by deferring scripts** `Performance`
- **Impact:** Interactivity, TBT metric
- **Problem:** TBT is 692 ms (warning threshold >600 ms) caused by long tasks from Google Tag Manager, Recaptcha, and Facebook Pixel.
- **Solution:**
  - Defer non-critical scripts (analytics, pixels) until after `load` or `requestIdleCallback`.
  - Use `async` or `defer` attributes on script tags where possible.
  - Consider loading Recaptcha only on form interaction.

**2M. Fix W3C validation errors and missing landmarks** `Best Practices`
- **Impact:** SEO, semantic structure, parser recovery
- **Problem:** W3C reports 6 errors including missing alt, illegal href characters, and nesting violations. `main` landmark is missing.
- **Solution:**
  - Wrap main content in `<main>` tag.
  - Fix nesting errors (e.g., `<a>` inside `<a>`).
  - Encode special characters in URLs (e.g., spaces in `href`).

**2N. Defer render-blocking JavaScript** `Performance`
- **Impact:** FCP, TBT
- **Problem:** 16 render-blocking scripts detected in `<head>`. 4 scripts specifically flagged in optimization checklist (jQuery, GTM, Facebook Pixel, CookieYes).
- **Solution:**
  - Add `defer` or `async` to non-critical scripts.
  - Move analytics and tracking scripts to the footer.
  - Inline critical CSS and defer non-critical CSS.

### Priority 3: Best Practice
*Recommended for long-term maintainability.*

**3A. Fix HTML validation errors and nesting** `Best Practices`
- **Impact:** Maintainability, SEO Crawling
- **Problem:** 16 W3C errors including missing alt, bad href, and anchor nesting violations.
- **Solution:**
  - Fix empty `href` attributes on `<link>` tags.
  - Resolve anchor nesting errors (e.g., `<a>` inside `<a>`).
  - Add `main` landmark and skip-to-content link.

**3B. Fix HTML Validation Errors** `Best Practices`
- **Impact:** Maintainability, rendering consistency
- **Problem:** 12 W3C errors including duplicate IDs (e.g., `select-finansai-ir-draudimas`) and invalid attributes.
- **Solution:**
  - Ensure all IDs are unique within the document.
  - Remove invalid attributes (e.g., `stylr` on `<a>`, `pause` on `<video>`).
  - Fix attribute spacing errors.

**3C. Add meta description and fix HTML errors** `SEO`
- **Impact:** Search Snippets, Validation
- **Problem:** Meta description missing; W3C reports 5 errors including illegal characters in href and nesting violations.
- **Solution:**
  - Add `<meta name="description" content="...">`.
  - Fix `href` query strings (remove spaces).
  - Correct `<a>` tag nesting in the author section.

**3D. Add meta description and fix W3C errors** `SEO`
- **Impact:** Search Snippets, Validation
- **Problem:** Missing meta description; 20 W3C errors (unknown `o_p` elements, nesting issues).
- **Solution:**
  - Write a 150-character meta description.
  - Remove custom `o_p` elements; use standard HTML.
  - Fix anchor nesting errors (line 311).

**3E. Add meta description and fix HSTS directives** `SEO`
- **Impact:** Search snippet, transport security
- **Problem:** SEO audit shows missing meta description. HSTS header lacks `includeSubDomains` and `preload` directives.
- **Solution:**
  - Add `<meta name="description" content="...">` summarizing the article.
  - Update HSTS header: `Strict-Transport-Security: max-age=31536000; includeSubDomains; preload`.

**3F. Fix HTML validation errors and meta description** `SEO`
- **Impact:** SEO, Crawlability
- **Problem:** W3C validator reports 5 errors (bad href, missing img alt, nesting). Meta description is not set.
- **Solution:**
  - Add `meta name="description"` with relevant text.
  - Fix `<a>` href query string spaces (URL encode).
  - Ensure `<img>` tags have `alt` and fix nesting violations.