Target ewolve.nl
33 out of 100
- Blast radius
- /100
- Grade
- C
Digital agency site scores 33/100: performance crater, security perimeter breached, WordPress exposed.
Damage assessment
- 01
LCP 12.7 seconds. Visitors will have left to find a faster agency by then.
How to fix this - 02
Content Security Policy header missing. No ruleset against injected scripts.
How to fix this - 03
X-Frame-Options and frame-ancestors directives absent. Site is clickjackable.
How to fix this - 04
HSTS header missing. Browser will not enforce HTTPS-only connections.
How to fix this - 05
REST API /wp/v2/users route exposed. Usernames are enumerable without authentication.
How to fix this - 06
Total blocking time 396 ms. JavaScript is locking up the main thread.
How to fix this
Restore Largest Contentful Paint under 2.5 seconds first, then add missing security headers (CSP, HSTS, X-Frame-Options). Disable REST API user enumeration or restrict it to authenticated requests.
By category
- Performance
- 53
- SEO
- 95
- Accessibility
- 85
- Security
- 53
- WordPress health
- 57
- Copy & clarity
- 100
Full report
Every finding, ranked, with fixes. $10.
All 17 findings with severity, evidence, why it matters and how to fix it, with WordPress-specific steps where they apply. Plus a checklist in the order to work through it.
$10, one-time, via Stripe. The private link is emailed to you.
Recovery
We can fix it for you
Tell us what you need. A person replies with a quote within one business day.
Share
Scanned Wed, 23 Sep 2026 13:12:46 GMT. Roast written by AI from the scan data. Passive scan: we only read public pages. Is this your site? Remove this roast.