NEXORA
Website Intelligence Report
https://aurora-studio.example/
- Requested on
- Oct 9, 2026
- Analyzed in
- 2.4s
- Automated checks
- 55
- Narrative
- Deterministic
Category scores
Executive summary
aurora-studio.example is in strong shape with an 87/100 NEXORA Score — a credible security posture (94), fast, well-compressed pages (91) and clean semantics. The site is being held back by thin content on key pages, underused social proof around the primary CTA, and a handful of small accessibility and SEO gaps (missing alt text, Twitter cards). These are targeted wins rather than structural problems: fix them in roughly a quarter and this site has a believable 90+ story for new-business pitches.
Biggest problems
- 3 portfolio images ship without alternative text, hiding content from screen readers
- Trust signals are limited to a single testimonial near the booking CTA
- Gallery images lack intrinsic dimensions, risking layout shift as they load
- Twitter card tags are missing, so shares on X render as bare URLs
- Body copy is thin (~210 words) on the pages that matter most
Biggest opportunities
- Win organic territory with deeper service pages and structured data
- Lift booking conversions with a client logo strip and rating badge at the CTA
- Protect the LCP/CLS story by dimensioning every gallery image
- Make every link share beautifully by completing twitter:card tags
- Sell the 94/100 security posture in sales decks
Category deep-dive
Performance
1 finding(s) reviewed. The most important is "3 images ship without width/height". Set width/height attributes (or CSS aspect-ratio) on gallery images to reserve layout space.
- 3 images ship without width/heightlow
SEO
1 finding(s) reviewed. The most important is "Twitter card tags are missing". Add twitter:card=summary_large_image plus twitter:title, twitter:description and twitter:image.
- Twitter card tags are missinglow
Accessibility
1 finding(s) reviewed. The most important is "3 images are missing alternative text". Add descriptive alt text (e.g. "Interior render — Loft residence, Oslo"), or empty alt="" where images are purely decorative.
- 3 images are missing alternative textmedium
Security
1 finding(s) reviewed. The most important is "One cookie is readable by JavaScript". Set the HttpOnly flag on cookies not needed by client-side scripts.
- One cookie is readable by JavaScriptlow
UX & Design Intelligence
1 finding(s) reviewed. The most important is "Trust signals are limited to testimonials". Add founder quotes, a client-list strip, or a verified rating badge above the fold next to the primary CTA.
- Trust signals are limited to testimonialsmedium
Content
1 finding(s) reviewed. The most important is "Body copy is on the thin side (~210 words)". Add case-study narratives, process detail and FAQs to service pages — each serving a distinct query.
- Body copy is on the thin side (~210 words)low
Every check, every result
Transparency down to the individual rule. Unavailable items genuinely could not be measured server-side — nothing is estimated.
Performance
11 checks
Performance
11 checks- WarningImage dimensions3/22 images lack width/height
- PassPage weight1.2 MB (HTML document)
- PassCompressionContent-Encoding: br
- PassCache headersCache-Control: public, max-age=31536000
- PassRender-blocking CSS2 stylesheets — manageable
- PassJavaScript weight6 scripts, 2 render-blocking
- PassImage lazy-loading17 lazy + 5 responsive images
- PassDOM size~640 DOM nodes
- PassInline <style> blocks1 inline <style> block
- PassServer response time (TTFB)TTFB 210ms (from NEXORA probe)
- UnavailableCore Web VitalsRequires a real browser (Lighthouse/Chrome UX Report)
SEO
14 checks
SEO
14 checks- WarningTwitter cardsNo twitter:card tag found
- PassMeta titleTitle: "Aurora Studio — Design that performs" (43 chars)
- PassMeta descriptionDescription present (158 chars)
- PassH1 usageExactly one H1
- PassHeading hierarchyHeading levels progress smoothly
- PassCanonical tagCanonical → https://aurora-studio.example/
- PassRobots metarobots meta: index, follow
- Passrobots.txtrobots.txt reachable
- PassXML sitemapSitemap with 24 URLs
- PassStructured data2 JSON-LD blocks (Organization, Article)
- PassInternal linking31 internal links
- PassBroken links8 of 31 internal links sampled — none broken
- PassOpen Graphog:title, og:description, og:image present
- PassHTML lang attributelang="en"
Accessibility
8 checks
Accessibility
8 checks- WarningImage alt text3/22 images missing alt text
- PassForm field labelsAll 9 form controls labeled
- PassSemantic landmarksCore landmarks (main/nav/footer) detected
- PassDuplicate IDsNo duplicate IDs
- PassLink namesAll links have text
- InfoForm autocomplete9 form controls — confirm autocomplete attributes
- UnavailableColor contrastRequires rendered computed styles (axe/Lighthouse)
- UnavailableKeyboard navigationRequires interactive testing
Security
11 checks
Security
11 checks- WarningCookie flags1 cookie readable by JS (httpOnly absent)
- PassHTTPSServed over HTTPS
- PassHSTSHSTS: max-age=31536000; includeSubDomains
- PassCSPCSP header present
- PassnosniffX-Content-Type-Options: nosniff
- PassClickjacking protectionX-Frame-Options: SAMEORIGIN
- PassMixed contentNo insecure sub-resources detected
- PassServer bannerServer identified: Vercel
- PassSubresource IntegrityExternal scripts include SRI
- PassSensitive code commentsNo sensitive patterns in HTML comments
- PassExposed secretsNo common key patterns in HTML
UX / Design
9 checks
UX / Design
9 checks- WarningTrust signalsTrust signal: testimonials only
- PassMobile viewportviewport: width=device-width, initial-scale=1
- PassNavigationNavigation present with internal links
- PassCTA clarityAction-oriented CTAs: Start a project · Book a call
- PassResponsive behaviorViewport + responsive images + media queries present
- PassFooterFooter landmark present
- PassSocial presence3 social profile links
- PassFavicon & app iconsIcons: favicon, apple-icon
- PassTheme colortheme-color: #14141f
Content
5 checks
Content
5 checks- WarningContent depth~210 words — on the thin side
- PassText-to-markup ratio8% text-to-code ratio
- PassLink wordingLink text is descriptive
- PassMedia richness22 images, 1 video
- PassReadability~18 words per sentence — readable
Action plan
Every finding, ranked: the fix, the effort, and the impact if you ship it.
3 images are missing alternative text
Alt text is how screen-reader users understand images. The portfolio carousel ships three decorative/viewer images without alt attributes, making them invisible to assistive technology and failing WCAG 1.1.1.
/img/gallery/horizon-01.webp/img/gallery/horizon-02.webp/img/gallery/horizon-03.webpTrust signals are limited to testimonials
First-time visitors convert better when they see guarantees, ratings or client logos near the booking CTA. The page currently surfaces only a single testimonial string.
testimonials section present3 images ship without width/height
Images without intrinsic dimensions reserve no layout space, which can push content around as they load — a Cumulative Layout Shift (CLS) risk on article pages.
/img/work/case-04.webpTwitter card tags are missing
Twitter/OG card tags control link previews on X. Without twitter:card, shares on X render as bare URLs instead of rich previews, reducing click-through from social.
og tags presenttwitter:card missingOne cookie is readable by JavaScript
A session cookie without HttpOnly can be read by any script running on the page, widening the blast radius of a potential XSS.
Set-Cookie: session=...Body copy is on the thin side (~210 words)
Thin content gives readers and search engines little to weigh; the services and about pages would benefit from deeper, structured copy.
wordCount: 21090-day roadmap
Put out fires and capture quick wins
- Add alt text to the three unlabeled portfolio imagesMedium
WCAG 1.1.1 compliance and screen-reader support
- Add twitter:card + twitter:image tagsLow
Rich link previews on X, higher social click-through
- Set width/height on gallery imagesLow
Reserves layout space and prevents CLS
Structural improvements
- Add a client logo strip + rating badge beside the CTAHigh
First-time visitors convert better with visible social proof
- Set HttpOnly on the non-essential session cookieLow
Shrinks the XSS blast radius to complete the security story
Move the metrics that matter
- Expand thin service pages with process stories and FAQsMedium
Targets distinct queries and materially deepens content
- Add structured data to service and case-study pagesMedium
Eligibility for rich results and stronger organic CTR
Not measured: Color contrast · Keyboard navigation · Core Web Vitals (LCP, CLS, INP) — these need a real browser (e.g. Lighthouse, axe) or user traffic. They are reported as unavailable, never estimated.