Аудит сайта fintech-leasing.ru

Missing security headers (score 0%)

Not set: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and 6 more.

WWW and non-WWW both accessible — duplicate content

Both www.example.com and example.com return 200 without redirecting. Search engines may index both as separate pages.

Slow TTFB (24325ms)

Server responds slowly. This slows everything — loading, rendering, LCP.

1 image without alt text

Alt text is required for screen readers and SEO — search engines cannot "see" images without it.

Low accessibility score (64/100)

The site is difficult for people with disabilities and poorly read by screen readers.

Title length: 89 chars (target 50–70)

Title too long — truncated in Google snippets.

Open Graph tags incomplete

Links shared on social media look bare — no image or description.

1 image heavier than 500 KB

Heavy images slow page load, especially on mobile.

1 cookie without Secure/HttpOnly flags

Cookies without Secure are sent over HTTP; without HttpOnly they are accessible from JS — XSS risk.

Trailing slash inconsistency — /page and /page/ both accessible

Both URL variants return 200 without redirecting to each other — potential duplicate pages.

No Schema.org markup

Structured data helps get rich snippets in search results (ratings, breadcrumbs, etc.).

5 images without lazy loading

All images load immediately, even those below the fold.

Using GZIP but no Brotli

Brotli compresses 15–25% better than GZIP — supported by all modern browsers.

2 HTML validation errors

Invalid HTML can break rendering across browsers and hinder search engine parsing.