coderedpro.com website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user LCP: 3.4 s

  3.4 s

  Real visitors wait 3.4 s for the largest content to appear (75th percentile). Good is under 2.5 s.

• Real-user INP: 304 ms

  304 ms

  Real visitors wait 304 ms for the page to respond to a tap (75th percentile). Good is under 200 ms.

• Real-user FCP: 2.9 s

  2.9 s

  Real visitors see the first content after 2.9 s (75th percentile). Good is under 1.8 s.

• Real-user TTFB: 865 ms

  865 ms

  Real visitors wait 865 ms for your server to start answering (75th percentile). Good is under 800 ms.

• Tap response (INP) held steady for real visitors

  0%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 312 ms to 312 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Largest content (LCP) held steady for real visitors

  -2%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' largest content (lcp) went from 3.5 s to 3.4 s at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 4.7 MB

  4.7 MB

  Your homepage downloads 4.7 MB on a phone, 15 KiB of it images (0%). Under 2 MB keeps phones on slow connections fast.

• About 1.3 g of CO₂ per visit

  1.33 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.33 g of CO₂e: 160.0 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 1 button without a name

  1 button has no accessible name, so screen readers announce just “button”.

  Elements (1)

• 96 text elements with low contrast

  96 text elements don't have enough contrast against the background to read easily, especially outdoors on a phone.

  Elements (3)

• Links must have discernible text (1 element)

  Links must have discernible text: 1 element on the page fails this check, rated serious by axe-core.

  Elements (1)

• Scrollable region must have keyboard access (1 element)

  Scrollable region must have keyboard access: 1 element on the page fails this check, rated serious by axe-core.

  Elements (1)

• Heading levels should only increase by one (5 elements)

  Heading levels should only increase by one: 5 elements on the page fail this check, rated moderate by axe-core.

  Elements (3)

• All page content should be contained by landmarks (4 elements)

  All page content should be contained by landmarks: 4 elements on the page fail this check, rated moderate by axe-core.

  Elements (3)

• 10 form fields without a label

  10 form fields have no label, so screen readers announce an empty box and autofill guesses.

  View source

• Title is long (69 characters)

  Your title is 69 characters, so Google will cut it off around 60: “Best Cybersecurity Courses Online for Professionals in 2026 | CodeRed”.

  View source

• No social preview image

  No Open Graph image, so links shared on LinkedIn, Slack or Facebook show no preview picture.

  View source

• 296 internal links, 7 external

  The homepage links to 296 pages on coderedpro.com and 7 external pages.

• No Organization structured data

  There is no Organization (or LocalBusiness) JSON-LD, so search engines and AI assistants have no machine-readable facts about who runs the site: its name, logo, profiles and contact details.

  View source

• No llms.txt

  There is no /llms.txt, a short Markdown guide to your key pages for AI tools (llmstxt.org). It is optional and few AI tools read it yet, so treat it as a cheap extra.

• 5 pages without a meta description

  /collections/all, /collections/skill-paths, /collections/career-paths, /collections/hands-on-labs and /collections/hands-on-ctfs have no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (5)

• 5 pages without an H1

  /collections/all, /collections/skill-paths, /collections/career-paths, /collections/hands-on-labs and /collections/hands-on-ctfs have no <h1> headline, so visitors and search engines get no clear main topic.

• 1 page with very little text

  /collections/hands-on-labs has under 150 words in the HTML. Thin pages rarely rank; if the text loads with JavaScript, crawlers that don't run it see even less.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 147 found) and read each the way a search engine does.

• 13 small tap targets

  13 of 25 tappable elements near the top of the page are smaller than 24 px, hard to hit with a thumb.

• 6 JavaScript errors while loading

  6 errors were logged to the browser console while the page loaded, for example “Failed to load resource: the server responded with a status of 422 ()”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No CAA record

  coderedpro.com has no CAA record, so any certificate authority may issue a certificate for it. A CAA record naming your provider (for example letsencrypt.org) closes that door.

• DNSSEC is off

  coderedpro.com's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• About 2,898 words of copy

  The homepage carries about 2,898 words of visible text.

• Email authentication score: 90/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 5 trackers load before any consent

  5

  Before a visitor clicks anything, the page loads Google Ads, Google Analytics, Google Tag Manager, Meta Pixel and Microsoft Clarity (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 26 cookies set on arrival

  26

  Opening the homepage sets 26 cookies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 47 other companies contacted

  Loading the homepage contacts 47 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.