Target freeknagtzaam.nl
33 out of 100
- Blast radius
- /100
- Grade
- C
Wedding photography site loads slower than a church ceremony. LCP 24.3 seconds is ground zero.
Damage assessment
- 01
LCP 24.3 s. Guests will have already exchanged vows and left by the time the hero image appears.
How to fix this - 02
Content Security Policy header missing. The site runs whatever scripts it finds, no questions asked.
How to fix this - 03
X-Frame-Options and frame-ancestors directives absent. The site can be embedded in another frame for clickjacking.
How to fix this - 04
HSTS header missing. Browsers won't enforce HTTPS-only navigation on repeat visits.
How to fix this - 05
REST API exposes /wp/v2/users endpoint. Attackers can enumerate WordPress usernames without authentication.
How to fix this - 06
Cumulative Layout Shift 0.16. Elements shift visibly during load, disrupting the viewing experience.
How to fix this - 07
Color contrast insufficient in places. Some text will be hard to read for visitors with low vision.
Fix the LCP metric first. 24 seconds is a catastrophic load time that will drive away clients before they see a single photo. Then address the missing security headers, especially CSP and HSTS.
By category
- Performance
- 59
- SEO
- 100
- Accessibility
- 68
- Security
- 53
- WordPress health
- 57
- Copy & clarity
- 83
Full report
Every finding, ranked, with fixes. $10.
All 19 findings with severity, evidence, why it matters and how to fix it, with WordPress-specific steps where they apply. Plus a checklist in the order to work through it.
$10, one-time, via Stripe. The private link is emailed to you.
Recovery
We can fix it for you
Tell us what you need. A person replies with a quote within one business day.
Share
Scanned Wed, 23 Sep 2026 13:15:08 GMT. Roast written by AI from the scan data. Passive scan: we only read public pages. Is this your site? Remove this roast.