Target www.are.na
31 out of 100
- Blast radius
- /100
- Grade
- C
Are.na loads slowly and leaves itself open to clickjacking. Blast radius: 31.
Damage assessment
- 01
LCP 5.1 s. Visitors have time to brew coffee and reconsider their life choices before content appears.
How to fix this - 02
INP 293 ms. Page interactions lag enough to make users wonder if their click registered.
How to fix this - 03
No X-Frame-Options or frame-ancestors header. The site can be embedded in a malicious frame without resistance.
How to fix this - 04
Content Security Policy missing. No declared rules for where scripts and resources may load from.
How to fix this - 05
1 of 17 internal links broken, e.g. /cdn-cgi/l/email-protection (404). Cloudflare email obfuscation is malfunctioning.
How to fix this - 06
Insufficient contrast between background and foreground colors. Some text will not be readable for visitors with low vision.
Fix the LCP delay first: 5.1 seconds is well above the 2.5-second good threshold. Add X-Frame-Options and a Content Security Policy header next to close the most obvious security gaps.
By category
- Performance
- 57
- SEO
- 95
- Accessibility
- 87
- Security
- 64
- Copy & clarity
- 100
Full report
Every finding, ranked, with fixes. $10.
All 15 findings with severity, evidence, why it matters and how to fix it, with WordPress-specific steps where they apply. Plus a checklist in the order to work through it.
$10, one-time, via Stripe. The private link is emailed to you.
Recovery
We can fix it for you
Tell us what you need. A person replies with a quote within one business day.
Share
Scanned Tue, 22 Sep 2026 15:30:55 GMT. Roast written by AI from the scan data. Passive scan: we only read public pages. Is this your site? Remove this roast.