Target vakeplaza.ge
24 out of 100
- Blast radius
- /100
- Grade
- B
Office space website has layout shifts and security headers missing. Blast radius: moderate damage.
Damage assessment
- 01
Cumulative Layout Shift 0.71. Visitors watching the page rearrange itself mid-read will assume the server is still loading.
How to fix this - 02
Lighthouse performance 71/100 on mobile. Competitors' sites have already loaded and closed by the time yours finishes.
How to fix this - 03
X-Frame-Options and frame-ancestors directives missing. The site can be embedded in hostile frames without resistance.
How to fix this - 04
Content Security Policy absent. No declared rules for what scripts and resources the browser should trust.
How to fix this - 05
Speed Index 4.2 seconds. Meaningful paint of the page takes longer than most visitors will wait.
- 06
X-Content-Type-Options missing. MIME-sniffing attacks have a clearer path to the payload.
How to fix this - 07
Permissions-Policy header not set. Browser features like camera and microphone have no declared access rules.
How to fix this
Fix the layout shift first by identifying and stabilizing elements that move during load. Then add missing security headers: CSP, X-Frame-Options, X-Content-Type-Options, and Permissions-Policy.
By category
- Performance
- 65
- SEO
- 100
- Accessibility
- 100
- Security
- 64
- Copy & clarity
- 83
Full report
Every finding, ranked, with fixes. $10.
All 11 findings with severity, evidence, why it matters and how to fix it, with WordPress-specific steps where they apply. Plus a checklist in the order to work through it.
$10, one-time, via Stripe. The private link is emailed to you.
Recovery
We can fix it for you
Tell us what you need. A person replies with a quote within one business day.
Share
Scanned Sat, 19 Sep 2026 13:31:54 GMT. Roast written by AI from the scan data. Passive scan: we only read public pages. Is this your site? Remove this roast.