high Broken internal link (HTTP 404)
https://demo.shipcheck.example/help/returns
How to fix: Fix the link target or remove the link.
Executive summary
This is a sample report for an invented site. The product is close to launch-ready, but one issue must be fixed first: a configuration file with your passwords can be downloaded by anyone. Mobile visitors will also struggle at checkout, because the page scrolls sideways. Six of the eight features in your spec are in place, and two need attention. Fix the top three items below, and this site would score well over 85.
Notes for developers
Add a deny rule for dotfiles at the proxy. The overflow comes from a fixed-width pricing table. Consider a CSP in report-only mode first.
Automated testing finds only a subset of issues, especially for accessibility. This report is not a WCAG certification, not a security penetration test and not a guarantee. It reflects the public pages checked at the time of the audit.
Scores and method
| Functional | 75 | |
|---|---|---|
| Accessibility | 72 | |
| Performance | 81 | |
| Security | 69 | |
| SEO | 90 | |
| Spec coverage | 84 |
Changes since last audit
- 2 new
- 7 fixed
- 8 still open
- +9 score change
Fixed
- Missing viewport meta tag
- HTTP does not redirect to HTTPS
Top fixes
- Block public access to the .env file Effort S
It exposes passwords and API keys, which could lead to a full data breach. - Fix sideways scrolling on the checkout page Effort S
Mobile buyers are likely to abandon a page that does not fit their screen. - Finish the password reset journey Effort M
Your spec asks for it, and customers who are locked out cannot return without it. - Label the checkout form fields Effort S
Screen reader users cannot complete a purchase, which is also a legal risk in many markets. - Compress the hero image Effort S
It delays the first impression, especially on mobile data.
Spec coverage
| Feature | Status | Confidence | Evidence |
|---|---|---|---|
| Product catalogue with prices | Built | 96% | Heading "All products" https://demo.shipcheck.example/shop |
| Checkout form | Built | 90% | Button "Pay now" https://demo.shipcheck.example/checkout |
| Newsletter with consent | Partial | 82% | Email field, no consent checkbox https://demo.shipcheck.example/ |
| Password reset | Missing | 78% | |
| Order history | Unverifiable | 60% |
Functional 2
medium Console error
Uncaught reference to analytics before it loaded.
How to fix: Investigate this error in your browser devtools.
Accessibility 2
critical Form elements must have labels
Screen reader users cannot tell what this field is for.
<input id="checkout-email" type="text" placeholder="Email">
How to fix: Add a label element or an aria-label.
high Elements must meet minimum colour contrast ratio
Low contrast text is hard to read for many visitors.
How to fix: Increase the contrast to at least 4.5:1.
Performance 1
medium Largest Contentful Paint needs improvement: 3400 ms
Good is under 2500 ms and poor is over 4000 ms.
How to fix: Compress and preload the hero image.
Security 2
critical Your .env file is publicly readable
This file normally holds passwords and API keys. Its contents are not stored in this report.
How to fix: Remove it from the web root and rotate every secret in it.
medium Content-Security-Policy missing
CSP limits the damage of cross-site scripting.
How to fix: Add a CSP, starting in report-only mode.
SEO 1
medium Missing meta description
Search engines will guess a snippet for this page.
How to fix: Add a meta description of 50 to 160 characters.
Responsive 1
high Page scrolls sideways by 148 px on mobile
Sideways scrolling is a common cause of mobile drop-off.
How to fix: Constrain the wide element.
Spec coverage 1
high Missing: Password reset
No reset link is visible on the sign-in page.
How to fix: Build this feature, then re-run the audit.