vibestat

Site audit · 4/21/2026, 6:28:09 PM

lovable.dev

Free SEO, performance and security audit for lovable.dev. Score 94 of 100.

Run a new audit →

Score

94
excellent

Audited

https://lovable.dev/

Status
200
Load
606ms
Size
369kb
Links
65+10

AI summary

Top 3 wins, ranked by impact and time-to-ship. 3 generations per day.

Recommendations

6 to improve
No canonical URLSEO
Helps search engines pick the right URL when duplicates exist. Add <link rel="canonical" href="…">.
Open Graph missing 1 tagSocial
Missing: og:url. These control how the page looks when shared.
Missing X-Content-Type-OptionsSecurity
Prevents MIME-sniffing attacks. Add: X-Content-Type-Options: nosniff
Missing Referrer-PolicySecurity
Controls how much URL info leaks to third parties. Try: strict-origin-when-cross-origin
Missing Permissions-PolicySecurity
Restricts powerful APIs (camera, geolocation, etc.). Set a tight allow-list.
Missing X-Frame-OptionsSecurity
Prevents clickjacking. Use frame-ancestors in CSP, or X-Frame-Options: SAMEORIGIN.

What's working

8 ✓
Title looks goodSEO
AI App Builder | Vibe Code Apps &amp; Websites with AI, Fast
Meta description setSEO
130 chars
Viewport meta setSEO
Mobile rendering is enabled.
Single H1 presentStructure
AI App Builder
Structured data: WebSite, OrganizationSEO
Eligible for rich results in search.
HTTPS enabledSecurity
Connection is encrypted.
Compression: brPerformance
HTML is compressed in transit.
Fast first responsePerformance
606ms — feels instant.

Heading outline

12 found
  • H2  Build something Lovable
  • H1  AI App Builder
  • H2  Ready to build?
  • H3  Company
  • H3  Product
  • H3  Resources
  • H3  Legal
  • H3  Community
  • H2  Meet Lovable
  • H3  Start with an idea
  • H3  Watch it come to life
  • H3  Refine and ship

Security headers

HTTP response
Strict-Transport-Securityset
Content-Security-Policyset
X-Content-Type-Optionsmissing
Referrer-Policymissing
Permissions-Policymissing
X-Frame-Optionsmissing

Want this every week?

Track it live with vibestat.

Add one script to your site. See real visitors, Core Web Vitals, and weekly recommendations — all without cookies.