vibestat

Site audit · 4/20/2026, 5:59:50 PM

designshots-web-canvas.lovable.app

Free SEO, performance and security audit for designshots-web-canvas.lovable.app. Score 77 of 100.

Run a new audit →

Score

77
good

Audited

https://designshots-web-canvas.lovable.app/

Status
200
Load
368ms
Size
1kb
Links
0+0

AI summary

Top 3 wins, ranked by impact and time-to-ship. 3 generations per day.

Recommendations

10 to improve
Title is short (12 chars)SEO
Aim for 30–60 chars with a keyword + benefit.
Meta description is shortSEO
Currently 25 chars. Aim for 120–160.
No canonical URLSEO
Helps search engines pick the right URL when duplicates exist. Add <link rel="canonical" href="…">.
No <h1> on the pageStructure
An H1 anchors the page topically. Add one descriptive H1.
Open Graph missing 1 tagSocial
Missing: og:url. These control how the page looks when shared.
No structured data (JSON-LD)SEO
Schema.org markup unlocks rich results. Start with Organization or WebSite.
No /sitemap.xmlSEO
Submit a sitemap to help search engines discover your pages.
Missing Content-Security-PolicySecurity
The single biggest XSS mitigation. Start with a permissive default-src and tighten over time.
Missing Permissions-PolicySecurity
Restricts powerful APIs (camera, geolocation, etc.). Set a tight allow-list.
Missing X-Frame-OptionsSecurity
Prevents clickjacking. Use frame-ancestors in CSP, or X-Frame-Options: SAMEORIGIN.

What's working

4 ✓
Viewport meta setSEO
Mobile rendering is enabled.
HTTPS enabledSecurity
Connection is encrypted.
Compression: gzipPerformance
HTML is compressed in transit.
Fast first responsePerformance
368ms — feels instant.

Security headers

HTTP response
Strict-Transport-Securityset
Content-Security-Policymissing
X-Content-Type-Optionsset
Referrer-Policyset
Permissions-Policymissing
X-Frame-Optionsmissing

Want this every week?

Track it live with vibestat.

Add one script to your site. See real visitors, Core Web Vitals, and weekly recommendations — all without cookies.