# bestvid.net Website Report

- Final URL: https://bestvid.net/
- Scanned at: 2026-09-15T10:21:50.757Z
- Themerella Score: 77/100
- Technologies detected: 4
- Total issues: 11

## Top Fixes
1. [P1] Missing HSTS header (Security, high, security.missing_hsts_header)
   - Add Strict-Transport-Security after confirming the full site works over HTTPS.
   - Fix guide: https://themerella.com/fix/missing-hsts-header/
2. [P1] Missing Content-Security-Policy header (Security, high, security.missing_csp_header)
   - Add a CSP header at the CDN or server layer and test third-party scripts.
   - Fix guide: https://themerella.com/fix/missing-csp-header/
3. [P1] Title length may be weak (SEO, medium, seo.title_length)
   - Aim for a descriptive title that usually fits search result snippets.
   - Fix guide: https://themerella.com/fix/missing-title-tag/
4. [P2] Missing X-Frame-Options header (Security, medium, security.missing_x_frame_options_header)
   - Add X-Frame-Options: SAMEORIGIN or use frame-ancestors in CSP.
   - Fix guide: https://themerella.com/fix/missing-x-frame-options/
5. [P2] Missing X-Content-Type-Options header (Security, medium, security.missing_x_content_type_options_header)
   - Add X-Content-Type-Options: nosniff.
6. [P2] Form labels may be missing (Accessibility, medium, accessibility.form_labels_missing)
   - Associate every input with a visible label or accessible aria-label.
7. [P2] Buttons may lack accessible names (Accessibility, medium, accessibility.buttons_missing_accessible_names)
   - Add visible button text or aria-label for icon-only buttons.
8. [P3] Many JavaScript files detected (Performance, medium, performance.many_javascript_files)
   - Reduce third-party scripts, bundle carefully, and remove unused JavaScript.
   - Fix guide: https://themerella.com/fix/large-javascript/
9. [P3] Meta description length may be weak (SEO, low, seo.meta_description_length)
   - Write a useful, specific description for searchers.
   - Fix guide: https://themerella.com/fix/missing-meta-description/
10. [P3] Missing Referrer-Policy header (Security, low, security.missing_referrer_policy_header)
   - Add Referrer-Policy: strict-origin-when-cross-origin.
   - Fix guide: https://themerella.com/fix/missing-referrer-policy/

## Technologies
- Google Analytics 4 (Analytics, confidence: high)
  - Evidence [html]: g-homepage
- Tailwind CSS (CSS / UI, confidence: low)
  - Evidence [html]: class="bg-fd-secondary/50 p-3 empty:hidden
- Next.js (Frontend Framework, confidence: high)
  - Evidence [html]: /_next/static
  - Evidence [resources]: /_next/static
  - Evidence [headers]: Next-Router
- Cloudflare (Hosting / CDN, confidence: high)
  - Evidence [headers]: cf-ray
  - Evidence [resources]: cloudflareinsights.com

## WordPress
- Detected: no
- Theme: not exposed
- Plugins: none detected
- Legacy signals: none detected

## All Issues
- Title length may be weak (SEO, medium, seo.title_length)
  - Detail: Current title length: 80 characters.
  - Fix: Aim for a descriptive title that usually fits search result snippets.
  - Fix guide: https://themerella.com/fix/missing-title-tag/
- Meta description length may be weak (SEO, low, seo.meta_description_length)
  - Detail: Current description length: 177 characters.
  - Fix: Write a useful, specific description for searchers.
  - Fix guide: https://themerella.com/fix/missing-meta-description/
- Missing HSTS header (Security, high, security.missing_hsts_header)
  - Detail: HSTS was not found in the response headers.
  - Fix: Add Strict-Transport-Security after confirming the full site works over HTTPS.
  - Fix guide: https://themerella.com/fix/missing-hsts-header/
- Missing Content-Security-Policy header (Security, high, security.missing_csp_header)
  - Detail: Content-Security-Policy was not found in the response headers.
  - Fix: Add a CSP header at the CDN or server layer and test third-party scripts.
  - Fix guide: https://themerella.com/fix/missing-csp-header/
- Missing X-Frame-Options header (Security, medium, security.missing_x_frame_options_header)
  - Detail: X-Frame-Options was not found in the response headers.
  - Fix: Add X-Frame-Options: SAMEORIGIN or use frame-ancestors in CSP.
  - Fix guide: https://themerella.com/fix/missing-x-frame-options/
- Missing X-Content-Type-Options header (Security, medium, security.missing_x_content_type_options_header)
  - Detail: X-Content-Type-Options was not found in the response headers.
  - Fix: Add X-Content-Type-Options: nosniff.
- Missing Referrer-Policy header (Security, low, security.missing_referrer_policy_header)
  - Detail: Referrer-Policy was not found in the response headers.
  - Fix: Add Referrer-Policy: strict-origin-when-cross-origin.
  - Fix guide: https://themerella.com/fix/missing-referrer-policy/
- Missing Permissions-Policy header (Security, low, security.missing_permissions_policy_header)
  - Detail: Permissions-Policy was not found in the response headers.
  - Fix: Restrict browser features that the site does not use.
- Form labels may be missing (Accessibility, medium, accessibility.form_labels_missing)
  - Detail: 1 text-like inputs and 0 labels were found.
  - Fix: Associate every input with a visible label or accessible aria-label.
- Buttons may lack accessible names (Accessibility, medium, accessibility.buttons_missing_accessible_names)
  - Detail: 1 button(s) appear to have no text or aria-label.
  - Fix: Add visible button text or aria-label for icon-only buttons.
- Many JavaScript files detected (Performance, medium, performance.many_javascript_files)
  - Detail: 45 script-like resources were found.
  - Fix: Reduce third-party scripts, bundle carefully, and remove unused JavaScript.
  - Fix guide: https://themerella.com/fix/large-javascript/

Generated by Themerella Website Scanner.