squarespace.com

Showing top 10 issues. Full audit with code-level fixes available on the free plan.

• 01
  FAIL · performance

  Time to First Byte (TTFB)

  Time to First Byte is 3225 ms (3.23 sec) — Google flags this as "poor" (> 1.8 s per web.dev/articles/ttfb). The browser cannot begin rendering until the first byte arrives, so LCP cannot beat 3.23s. Every downstream Core Web Vital (LCP, INP, CLS) inherits this delay, and Page Experience signals trigger a soft demotion in Google + Bing rankings.
  Sign up to see how to fix this
• 02
  FAIL · performance

  Render-Blocking Resources

  Found 7 render-blocking resources (1 CSS, 6 JS) — this is too many. The browser must download and process all of these files before it can start rendering the page. This critically delays First Contentful Paint (FCP) and Largest Contentful Paint (LCP).
  Sign up to see how to fix this
• 03
  FAIL · performance

  HTTP Requests Count

  The page loads 107 external resources — this is too many (4 CSS, 8 JS, 75 images). A high number of HTTP requests critically slows down page loading, as browsers are limited to 6 simultaneous connections per domain. This negatively affects all performance metrics.
  Sign up to see how to fix this
• 04
  FAIL · security

  Security Headers

  Only 2 out of 6 modern security headers found. Missing: x-frame-options, content-security-policy, referrer-policy, permissions-policy. The site is exposed to XSS (no CSP), clickjacking (no X-Frame-Options / CSP frame-ancestors), MIME-sniffing (no X-Content-Type-Options), and HTTPS-stripping MITM (no HSTS). Mozilla Observatory grades sites with <4 headers as D or F.
  Sign up to see how to fix this
• 05
  FAIL · security

  Mixed Content

  Found 1 element(s) with mixed content (HTTP resources on an HTTPS page). By tag: <link>: 1. Browsers may block these resources, causing incomplete page loading.
  Sign up to see how to fix this
• 06
  FAIL · content

  Keyword Stuffing

  Keyword stuffing detected. The following words appear excessively often: "website" — 63 times (4.2%), "squarespace" — 46 times (3.1%). The acceptable keyword density is 1-2%. Exceeding the 3% threshold may result in search engine penalties.
  Sign up to see how to fix this
• 07
  FAIL · security

  Security Headers Grade (Mozilla Observatory)

  Security grade D+ (50/100 baseline, Mozilla Observatory rubric). Top issues: Content-Security-Policy header missing (-25); X-Frame-Options + CSP frame-ancestors both missing (-20); Referrer-Policy missing (-5)
  Sign up to see how to fix this
• 08
  WARN · ai-readiness

  Knowledge Panel Readiness

  Partial knowledge-panel readiness — score 50/100. Missing components: Organization JSON-LD with ≥5 sameAs anchors, visible NAP (name/address/phone). Each missing piece reduces the chance of appearing in Google Knowledge Panel and AI-search citation anchors.
  Sign up to see how to fix this
• 09
  FAIL · performance

  Scripts Inventory

  Inventoried 31 <script> elements (23 inline, 8 third-party). 8 third-party scripts block(s) initial render (no async/defer). Approx 796 KB of third-party JavaScript measured. No third-party scripts use Subresource Integrity (SRI) hashes.
  Sign up to see how to fix this
• 10
  FAIL · performance

  Page Size

  The total HTML page size is 603.1 KB, which significantly exceeds the recommended limit of 100 KB. Heavy pages load slowly, especially on mobile devices and slow internet connections. This negatively impacts Core Web Vitals and search rankings.
  Sign up to see how to fix this