This is a fundamentally strong site — search engines find it easily, it's clean and accessible for visitors, and the underlying setup is well maintained. The most pressing issue is boring but urgent: your SSL certificate expires in 13 days, and if auto-renewal isn't confirmed, visitors could hit browser security warnings. Beyond that, the biggest opportunities are speed on mobile, where pages take noticeably longer to become usable, and a few missing security and search settings that are easy to add.
An expired certificate triggers scary browser warnings that turn visitors away and erode trust in a public institution.
Mobile pages currently take almost six seconds to show their main content, which frustrates prospective students and staff browsing on phones.
These strengthen protection against common attacks and help your pages stand out in Google results with richer, more clickable listings.
The speed and stability metrics Google uses to rank pages. Our lab test deliberately simulates a budget phone on a slow connection — a worst-case stress test that exposes bottlenecks. It is not how long the site takes for a typical visitor, who will see it load several times faster.
What real visitors actually experienced (Chrome data, last 28 days): LCP 1.1s · INP 70ms · CLS 0.000. These real-user numbers are the ground truth — the stress-test cards above are for finding what to optimize.
Could save roughly 0.5s in our stress test (simulated slow connection) — the real-world gain for typical visitors is smaller, but it's one of the clearest levers for making the site feel faster.
Could save roughly 0.1s in our stress test (simulated slow connection) — the real-world gain for typical visitors is smaller, but it's one of the clearest levers for making the site feel faster.
Could save roughly 0.1s in our stress test (simulated slow connection) — the real-world gain for typical visitors is smaller, but it's one of the clearest levers for making the site feel faster.
Consider adding: Content Security Policy (blocks injection); Referrer-Policy (privacy); Permissions-Policy (feature control).
The certificate expires in 13 days. Confirm auto-renewal is working.
The full remaining technical audit — lower-impact items, handy if your team or IT department wants to verify everything.
You scored 82/100 on the GlossyDev index — a weighted blend of real performance, accessibility, SEO, security posture, and stack maintainability. The findings are ordered so the highest-impact fixes come first. Most are addressable quickly, and several compound — faster load times lift conversions and search rankings at once.
This analysis uses a deliberately lightweight, non-intrusive scan — it reads only what your site publicly serves to any visitor or search engine and avoids aggressive probing that could trip security tools, rate limits, or bot protection. On sites behind heavy caching, a CDN, or firewall/bot protection, some technical details (particularly platform and server detection) may be incomplete or approximate.