Botpress

What Dr Urls found on botpress.com

From the audit of their public home page on 23/10/2026, worst first. Each links to what it means and how it is fixed.

• high
  Cacheable response sets a cookie, so no CDN will cache it

  The two headers contradict each other, and the contradiction is silent: the page looks cached, the CDN is configured, and every request still pays full origin latency.

• high
  Missing landmark elements

  WCAG 1.3.1 requires that page structure is programmatically determinable.

• medium
  Excessive third-party resource loading

  Third-party resources are outside your control and often add significant payload, blocking time, and unpredictable latency.

• medium
  Images missing width and height attributes

  Missing image dimensions are the leading cause of Cumulative Layout Shift (CLS), a Core Web Vital and ranking factor.

• medium
  Link has empty anchor text

  Anchor text is one of the strongest signals search engines use to understand the content of the linked page.

• medium
  Missing skip-to-content navigation link

  WCAG 2.4.1 requires a way to bypass blocks repeated on every page.

• medium
  Scripts without async or defer

  Synchronous scripts halt HTML parsing while the browser downloads and executes them.

• low
  CSS files are not minified

  Unminified CSS files are larger than necessary, increasing download time and delaying rendering.

• low
  Excessive inline CSS

  Inline CSS cannot be cached separately by the browser, so it is re-downloaded with every page load.

• low
  Excessive inline JavaScript

  Inline JavaScript cannot be cached by the browser and must be parsed and executed every time the page loads.

• low
  Images missing responsive srcset

  Without srcset, a 1200px wide image is downloaded on a 375px wide mobile screen, wasting bandwidth and slowing load times.

• low
  JavaScript files are not minified

  JavaScript is the most expensive resource type per byte because it must be downloaded, parsed, compiled, and executed.

And 6 more. 6 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.