Web AuditAll pages are set with a proper !DOCTYPE and have language and reading directionality attributes defined.
Formatting
Title, description and keyword tags are present across the entire project. Social meta links and favicons are included on all pages. Viewport meta tag is setup according to the project's requirements.
All CSS tags are positioned ahead of all JS tags in the DOM structure.
Project layout design adapts to all devices and viewport sizes. Interactive elements work as expected in both desktop and mobile experiences. All content is available regardless of device type.
Performance
The HTML code is minified, unnecessary comments are deleted and overly explicit attributes are removed.
The CSS code is minified and set to preload. Unused CSS is removed and critical styling is setup appropriately. There are no embedded or inline CSS styles.
All JavaScript is minified, concatenated into a single file (if applicable) and non-blocking with the use of defer and async.
All images are optimized and compressed for each device screen size without direct impact to the end user. Offscreen images are handled via lazy loading and image attributes height / width are set when applicable. Proper alt tags are also included.
Custom fonts do not exceed 300kb, use WOFF2 formatting, are set with preconnect to load faster, and avoid FOIT / FOUT / FOFT.
Only the most essential files are delivered to the end user.
CDN is used to deliver content faster to the end user. HTTP caching is also utilized for subsequent visits.
The server is setup with GZIP or Brotli compression enabled.
Accessibility
All major functionality like navigation and search fields work without JavaScript enabled. Keyboard-only navigation is also fully supported across the project. A 404 error page is also setup correctly.
Project color contrast passes WCAG AA on desktop and AAA on mobile.
Proper input types are set for corresponding fields. Custom keyboard types are supported and working properly on mobile devices.
All pages work with standard screen readers (such as JAWS, VoiceOver, and NVDA). Elements are configured with proper role and aria attributes.
Security
Website has a valid SSL certificate and all URLs are passed through HTTPS protocol.
All database / CMS administrative passwords are strong and secure.
Project files and associated databases are backed-up regularly. Automated recovery builds are highly suggested.