wikipedia.org

Total Blocking Time: 857ms (poor)

Heavy JavaScript blocks the main thread, so taps and scrolls feel laggy right when the page appears.

Properly size images — save ~0.1s

Est savings of 34 KiB

Serve images in next-gen formats — save ~20KB

Est savings of 20 KiB

Avoid an excessive DOM size

1,094 elements

Minimize main-thread work

2.5 s

Title is short (9 chars)

Aim for ~50–60 characters with your primary keyword and location.

Only ~82 words of extractable content

After stripping navigation and boilerplate, there's very little substance for an AI to summarize or cite. Add real, informative copy.

No structured data (JSON-LD)

Schema.org markup tells AI engines exactly what your business is, what you offer, and how to reach you — the clearest way to be identified and cited.

Form elements must have labels (1 element)

Ensure every form element has a label

HTTP security-header grade: E (1/6 core headers)

Graded on the six response headers securityheaders.com checks: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.

No Content-Security-Policy

A CSP is the strongest defense against cross-site scripting and content injection.

No clickjacking protection

Set X-Frame-Options: DENY or a CSP frame-ancestors directive so your site can't be embedded in a malicious frame.

Server header leaks software version: "ATS/9.2.13"

Exposing exact server/version tells attackers which known exploits to try. Strip the version from the Server header.

4 cookie(s) missing Secure/HttpOnly/SameSite

Cookies without these flags can be stolen over HTTP or via scripts, or sent in cross-site requests (CSRF).