Audit report · September 25, 2026 · No. 000048

wordpress.org

wordpress.org ↗ WordPress detected 7.2 Theme: wporg-parent-2021 1 plugin detected
Audit another site
82Good

13 fixes stand between you and a clean site.

Measured just now across 72 checks, from outside, like a visitor or Googlebot.

6Critical
7To improve
47Passed
99 The score you reach by doing the 13 fixes: from 82 to 99/100, computed by the engine.
Performance53
SEO95
Security80
WordPress62
Accessibility100
Best practices100
Server response279 ms
HTML weight31.0 KB
Checks72
HTTPS certificate88 days left

What it costs you

Where your site leaks, plainly.

Issues grouped by consequence. Points are the ones the engine removed — the ones you get back.

Loses you visitors

711 pts at stake

Page Cache and 6 more

Hides you from Google

22 pts at stake

Meta Description and 1 more

Leaves a door open

45 pts at stake

Users Exposed via REST API and 3 more

Shuts out visitors

0none

No accessibility blocker.

Hurts the site's image

0none

Nothing to report.

5 free fixes out of 13

Where to start: the most rewarding.

Critical first, then by points gained. For each: what was measured, what it costs, what to do and, when it exists, the code to paste.

01 Critical Loses you visitors 5 minutes +3 pts

Page Cache

Measured on your site: Not detected

What it costs you

Without page caching, WordPress rebuilds every page (PHP + database) on every visit. It's the #1 cause of slowness.

What to do

Install a cache plugin: LiteSpeed Cache on LiteSpeed hosts, otherwise WP Super Cache (free) or WP Rocket (paid).

wp-config.php
define( 'WP_CACHE', true );
02 Critical Loses you visitors 5 minutes +2 pts

Browser Cache Headers

Measured on your site: No cache headers

What it costs you

Without cache headers, the browser downloads images, CSS and scripts again on every visit: returning visitors wait as long as the first time.

What to do

Give static files (images, CSS, JS, fonts) a long lifetime. Cache plugins do it; otherwise use the block below.

.htaccess (Apache, LiteSpeed)
<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType image/webp "access plus 1 year"
  ExpiresByType image/jpeg "access plus 1 year"
  ExpiresByType image/png "access plus 1 year"
  ExpiresByType image/svg+xml "access plus 1 year"
  ExpiresByType text/css "access plus 1 year"
  ExpiresByType application/javascript "access plus 1 year"
  ExpiresByType font/woff2 "access plus 1 year"
</IfModule>
nginx (server block)
location ~* \.(css|js|webp|avif|jpe?g|png|gif|svg|woff2?)$ {
    expires 1y;
    add_header Cache-Control "public, max-age=31536000";
}
03 Critical Loses you visitors 5 minutes +2 pts

Image Lazy Loading

Measured on your site: 0/18 images lazy-loaded

What it costs you

Off-screen images download right away and slow down the ones the visitor actually sees.

What to do

WordPress adds loading="lazy" since 5.5; when it is missing, the theme or builder writes its own tags. Add the attribute, except on the main image at the top.

HTML
<img src="photo.webp" width="800" height="533" loading="lazy" alt="…">
04 Critical Loses you visitors A developer +2 pts

Inline CSS Size

Measured on your site: 71.1 KB inline CSS

What it costs you

CSS written inside the page is downloaded again on every page view instead of being cached once.

What to do

In Elementor: Settings › Performance › "CSS Print Method" = External File. Elsewhere, move large <style> blocks to the theme stylesheet.

05 Critical Loses you visitors About an hour +2 pts

Render-Blocking CSS

Measured on your site: 8 blocking stylesheets

What it costs you

Every stylesheet in <head> delays the first paint.

What to do

Combine stylesheets ("combine CSS" in your cache plugin) and drop the ones of plugins unused on the page.

child theme's functions.php (or Code Snippets plugin)
// Exemple : ne charger le CSS de Contact Form 7 que sur la page contact
add_action( 'wp_enqueue_scripts', function () {
    if ( ! is_page( 'contact' ) ) {
        wp_dequeue_style( 'contact-form-7' );
        wp_dequeue_script( 'contact-form-7' );
    }
}, 100 );

In the full report

8 more fixes, with their code.

The titles are real: these issues were found on your site. Their explanation and code are in the report. Together they are worth 8 more points — enough to reach 99/100.

Critical Leaves a door open

Users Exposed via REST API

+2 pts
To improve Leaves a door open

Content Security Policy (CSP)

+1 pts
To improve Loses you visitors

Font Loading Strategy

+0.8 pts
To improve Hides you from Google

Meta Description

+0.8 pts
To improve Leaves a door open

X-Content-Type-Options

+0.8 pts
To improve Leaves a door open

WordPress Version

+0.8 pts

+ 2 more fixes in the report

Full report

All 13 fixes, in order, with the code.

  • All 13 fixes, each explained, with code to paste when it exists
  • Your target score: 99/100, computed fix by fix
  • Three re-checks within 30 days: what is fixed, what remains, what appeared
  • All 72 checks one by one, plus the technical appendix (HTTPS, DNS, redirects, plugins)
  • A PDF for your developer
€9.90incl. VAT · once, no subscription

No account needed: the report opens right after payment and its link is emailed to you. Already have an account? Log in

Card, Apple Pay or Google Pay via Stripe. Refunded within 14 days on request.

HTTPS certificateDecember 22, 2026

Expiry date found, detailed in the appendix.

Technologies · redirects2 technologies · 0 redirect(s)

Detected on your page, listed in the appendix.

After your fixesRe-check

Re-run the audit from the report and see what moved.

Before you unlock

Do I need an account to pay?

No. An email is enough: the report opens right after payment and its link is emailed to you.

Is it a subscription?

No. The €9.90 report is a one-off payment. Pro is separate: it monitors several sites over time.

What does the report add to the free audit?

Every fix with its code (not only the first five), your target score, all 72 checks, the technical appendix, the PDF and three re-checks within 30 days.

What if I can't code?

Each fix gives the WordPress action first (setting, plugin). Code is for when there is no other way; the PDF can be handed as-is to whoever maintains your site.

What do you do with my data?

The scanner only reads what a browser publicly sees. Your email is used to send the report link and, if you do not complete the purchase, a single reminder; nothing is resold.