Аудит сайта evstal.ru

Missing security headers (score 0%)

Not set: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and 6 more.

LCP too slow (4.6s)

Main content load time >4s — Google considers this poor UX and demotes the page.

Invalid canonical tag

Canonical points to the wrong URL — may cause duplicate pages in the index.

7 images without alt text

Alt text is required for screen readers and SEO — search engines cannot "see" images without it.

120 HTML validation errors

Invalid HTML can break rendering across browsers and hinder search engine parsing.

Open Graph tags incomplete

Links shared on social media look bare — no image or description.

2 images heavier than 500 KB

Heavy images slow page load, especially on mobile.

1 cookie without Secure/HttpOnly flags

Cookies without Secure are sent over HTTP; without HttpOnly they are accessible from JS — XSS risk.

Trailing slash inconsistency — /page and /page/ both accessible

Both URL variants return 200 without redirecting to each other — potential duplicate pages.

10 images without lazy loading

All images load immediately, even those below the fold.

Using GZIP but no Brotli

Brotli compresses 15–25% better than GZIP — supported by all modern browsers.