w3.org website health report
Website health report
w3.org scores 91/100
Excellent — only minor polish left. We found 19 issues; the weakest area is SEO (80/100).
- 3 Medium
- 16 Low
- 30 Passed
Free expert review
Send this report to SuperSiteBros. An expert will look it over and email you with the highest-impact fixes — no obligation.
Free weekly monitoring
Weekly monitoring is built and ready, but outbound email from this server is not reliable yet (no SPF/DKIM/DMARC and no SMTP). Sign-ups stay closed until that is fixed — use the free expert review above in the meantime.
Matched SuperSiteBros services
Site crawl
- Pages crawled
- 25
- Broken links
- 0
- Redirect chains
- 0
- Missing titles
- 0
- Duplicate titles
- 1
- Missing descriptions
- 2
- Missing H1
- 0
- Thin pages
- 2
- Noindex pages
- 0
- Mixed content pages
- 0
Pages checked
| Page | Status | Title | Words | Issues |
|---|---|---|---|---|
| / | 200 | W3C | 828 | — |
| /ja/ | 200 | W3C | 74 | thin |
| /zh-hans/ | 200 | W3C | 164 | thin |
| /standards/ | 200 | Web Standards | W3C | 661 | — |
| /standards/about/ | 200 | About W3C web standards | Web Standards | W3C | 911 | — |
| /TR/ | 200 | W3C standards and drafts | W3C | 26692 | — |
| /standards/types/ | 200 | Types of documents W3C publishes | Web Standards | W3C | 2424 | — |
| /groups/ | 200 | Discover W3C groups | W3C | 824 | — |
| /translations/ | 200 | Translations of W3C standards and drafts | 7981 | no description |
| /standards/review/ | 200 | Reviews and public feedback | Web Standards | W3C | 903 | — |
| /get-involved/promote/ | 200 | Promote web standards | Get involved | W3C | 469 | — |
| /liaisons/ | 200 | Liaisons | W3C | 2528 | — |
| /groups/other/tag/ | 200 | Technical Architecture Group | Discover W3C groups | W3C | 425 | — |
| /get-involved/ | 200 | Get involved | W3C | 836 | — |
| /membership/ | 200 | Why join W3C | W3C | 659 | — |
| /membership/list/ | 200 | Current Members & Testimonials | 5144 | — |
| /email/ | 200 | Mailing lists | W3C | 999 | — |
| /guide/ | 200 | The Art of Consensus (Guidebook) | 1378 | no description |
| /about/positive-work-environment/ | 200 | Positive Work Environment | About us | W3C | 578 | — |
| /invited-experts/ | 200 | Invited Experts | W3C | 1562 | — |
| /support-us/ | 200 | Support us | W3C | 619 | — |
| /mission/accessibility/ | 200 | Accessibility | Our mission | W3C | 689 | — |
| /mission/internationalization/ | 200 | Internationalization | Our mission | W3C | 677 | — |
| /mission/privacy/ | 200 | Privacy | Our mission | W3C | 1081 | — |
| /mission/security/ | 200 | Web Security | Our mission | W3C | 880 | — |
Issues to fix on w3.org
MediumStatic files have weak browser cachingPerformance
4 of 4 sampled CSS/JS files are cached for less than 7 days.
Why it matters
Without a long Cache-Control lifetime, returning visitors re-download the same CSS, JS and images on every visit.
How to fix it
Serve versioned static assets with `Cache-Control: public, max-age=31536000, immutable` (or at least 30 days).
Details
- https://www.w3.org/assets/website-2021/styles/core.css?ver=1.6 (no Cache-Control)
- https://www.w3.org/assets/website-2021/styles/advanced.css?ver=1.6 (no Cache-Control)
- https://www.w3.org/assets/website-2021/styles/print.css?ver=1.6 (no Cache-Control)
- https://www.w3.org/assets/website-2021/js/libraries/fontfaceobserver.js?ver=1.6 (no Cache-Control)
MediumNo XML sitemap foundSEO
Checked robots.txt, /sitemap.xml, /sitemap_index.xml and /wp-sitemap.xml.
Why it matters
A sitemap lists the pages you want indexed and when they changed, helping search engines find new and deep pages faster.
How to fix it
Generate an XML sitemap, reference it in robots.txt and submit it in Google Search Console and Bing Webmaster Tools.
MediumDuplicate page titlesSEO
1 title(s) are shared by more than one page.
Why it matters
When several pages share a title, search engines struggle to tell which to rank and searchers can’t tell them apart.
How to fix it
Give every page a unique title describing its own content.
Details
- “w3c” on /ja/, /zh-hans/
LowButtons without readable namesAccessibility
1 button(s) have no accessible name.
Why it matters
Icon-only buttons with no label are announced as just “button”.
How to fix it
Add text, aria-label or a visually-hidden label to every button.
LowImages without width/heightPerformance
3 of 3 images have no width/height attributes.
Why it matters
When the browser doesn’t know an image’s size, content jumps as it loads — that’s Cumulative Layout Shift, a Core Web Vital.
How to fix it
Add width and height attributes (CSS can still make them responsive with `height:auto`).
LowFirst large image is lazy-loadedPerformance
The first image in the page is marked loading="lazy".
Why it matters
The first image is often the Largest Contentful Paint element. Lazy-loading it delays the most important paint.
How to fix it
Remove loading="lazy" from the first visible image and consider `fetchpriority="high"`.
Details
- https://www.w3.org/cms-uploads/banner1.jpg
LowImages not in modern formatsPerformance
3 of 3 images are JPEG/PNG/GIF without a WebP/AVIF alternative.
Why it matters
WebP and AVIF are typically 25–50% smaller than JPEG/PNG at the same quality and are supported by all current browsers.
How to fix it
Serve WebP/AVIF (with <picture> fallbacks if you need them) or let an image CDN negotiate the format.
LowNo security.txt fileBest practices
/.well-known/security.txt was not found (or has no Contact: line).
Why it matters
security.txt (RFC 9116) tells researchers how to report a vulnerability to you instead of disclosing it publicly or not at all.
How to fix it
Publish /.well-known/security.txt with at least a `Contact:` and an `Expires:` line.
LowNo Referrer-PolicySecurity
No Referrer-Policy header.
Why it matters
Browsers default to a reasonable policy today, but setting one explicitly guarantees full URLs (which can contain tokens or search terms) aren’t leaked to other sites.
How to fix it
Send `Referrer-Policy: strict-origin-when-cross-origin`.
LowNo Permissions-PolicySecurity
No Permissions-Policy header.
Why it matters
Permissions-Policy switches off powerful browser features (camera, microphone, geolocation, payment…) that your site doesn’t use, so injected or third-party code can’t use them either.
How to fix it
Send e.g. `Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()`, allowing only what you need.
LowTitle is very shortSEO
“W3C” is 3 characters.
Why it matters
A very short title wastes space in search results that could explain what the page offers.
How to fix it
Expand it to roughly 30–60 characters: main topic first, brand last.
LowMeta description will be truncatedSEO
The description is 184 characters.
Why it matters
Descriptions longer than ~160 characters are cut off in results.
How to fix it
Trim to about 155 characters and put the key message first.
LowNo canonical URLSEO
No canonical link tag found.
Why it matters
Without a canonical tag, URL variations (tracking parameters, trailing slashes, http/https) can be indexed as duplicates and split ranking signals.
How to fix it
Add `<link rel="canonical" href="…">` with the preferred absolute URL.
LowNo structured dataSEO
No JSON-LD or microdata found.
Why it matters
Structured data (schema.org JSON-LD) helps search engines understand your organisation, articles, products or FAQs and can unlock rich results.
How to fix it
Add JSON-LD for your organisation/website, plus the type that fits each page (Article, Product, LocalBusiness…). Check it with Google’s Rich Results Test.
Lowrobots.txt doesn’t list a sitemapSEO
No “Sitemap:” line in robots.txt.
Why it matters
The Sitemap line is how crawlers that you haven’t submitted to (Bing, others) find your sitemap.
How to fix it
Add `Sitemap: https://yourdomain/sitemap.xml` (absolute URL).
LowInternal links point at redirectsSEO
1 internal link target(s) redirect.
Why it matters
Each redirect adds a round-trip before the page loads and dilutes link signals slightly.
How to fix it
Update internal links to point straight at the final URL.
Details
- /translations/ → /Translations/
LowPages without meta descriptionsSEO
2 of 24 other indexable page(s) have no meta description.
Why it matters
Google will pick its own snippet for these pages, which usually earns fewer clicks.
How to fix it
Add a 120–160 character description to your important pages.
Affected pages
- /translations/
- /guide/
LowDuplicate meta descriptionsSEO
1 description(s) are reused across pages.
Why it matters
Repeated descriptions make results look identical and are often ignored by Google.
How to fix it
Write a unique description per page, or leave it empty for low-value pages rather than duplicating.
Details
- /TR/, /membership/list/: “the world wide web consortium (w3c) is an international comm…”
LowThin pagesSEO
2 page(s) have fewer than 200 words of visible text.
Why it matters
Pages with very little unique text rarely rank and can drag down how search engines judge the site’s overall quality.
How to fix it
Expand them with genuinely useful content, merge similar pages, or noindex utility pages.
Affected pages
- /ja/ (74 words)
- /zh-hans/ (164 words)
InfoNot ready for the HSTS preload listSecurity
For preload the header still needs: max-age ≥ 31536000.
Why it matters
Preloading bakes your domain into browsers as HTTPS-only, protecting even the very first visit. It’s optional and hard to undo, so only do it once every subdomain supports HTTPS.
How to fix it
Serve `max-age=31536000; includeSubDomains; preload` on the root domain, redirect http→https on the same host first, then submit at hstspreload.org.
No issues match these filters.
Passed checks (30)
- Valid SSL certificate — Trusted certificate for www.w3.org, valid until 2026-12-05 (38 days left), issued by Google Trust Services.
- HTTP redirects to HTTPS — http://www.w3.org/ → https://www.w3.org/ (301).
- HSTS enabled — Strict-Transport-Security: max-age=15552000; includeSubdomains; preload
- Content-Security-Policy present — frame-ancestors 'self' https://cms.w3.org/ https://cms-dev.w3.org/; upgrade-insecure-requests
- Clickjacking protection — CSP frame-ancestors is set.
- MIME sniffing disabled — X-Content-Type-Options: nosniff
- No mixed content — Every resource referenced in the HTML uses https://.
- Fast server response — Time to first byte 0.06s.
- Brotli compression — Content-Encoding: br
- HTTP/2 and HTTP/3 supported — Served over HTTP/2 and advertises HTTP/3 (QUIC) via Alt-Svc.
- Lean HTML — The HTML document is 48.5 KB.
- Few render-blocking resources — 1 blocking script(s), 1 stylesheet(s).
- Off-screen images are lazy-loaded
- Page loads successfully — HTTP 200 after 1 redirect(s).
- Page is indexable — No noindex directive in meta robots or X-Robots-Tag.
- One clear H1 — “Making the web work”
- Mobile viewport set — width=device-width, initial-scale=1
- Open Graph tags present — og:title, og:description and og:image are set.
- robots.txt allows crawling — 2 rule group(s).
- Missing pages return 404 — A made-up URL returned 404.
- One preferred hostname — w3.org redirects (301) to the preferred version.
- Page language declared — lang="en"
- All images have alt attributes — 9 images checked.
- Logical heading structure — 16 headings in order.
- Standards-mode HTML5 document — Doctype and charset are declared.
- SPF record present — v=spf1 mx ip4:34.238.48.92 ip4:34.199.101.240 ip6:2600:1f18:7d7a:2700::/56 include:_spf.google.com ~all
- DMARC policy enforced — v=DMARC1; p=reject; rua=mailto:ade5335604f1484dba5c0b11b27d7fce@dmarc-reports.cloudflare.net,mailto:dmarc-rua@w3.org; ruf=mailto:dmarc-ruf@w3.org; fo=1;
- CAA records restrict certificate issuance — iodef mailto:sysreq@w3.org; issue amazon.com; issue comodoca.com; issue digicert.com; cansignhttpexchanges=yes
- Reachable over IPv6 — www.w3.org has an AAAA record.
- No broken links found — Checked 25 page(s) and 60 linked URL(s).
Site facts
- Final URL
- https://www.w3.org/
- HTTP status
- 200
- Server response (TTFB)
- 55 ms
- Protocol
- HTTP/2 · HTTP/3 advertised
- Compression
- br
- HTML size
- 48.5 KB
- DOM elements
- 369
- Words on page
- 828
- Certificate
- Valid, 38 days left (Google Trust Services)
- Email DNS
- SPF ✓ · DMARC ✓ · CAA ✓ · IPv6 ✓
- Server
- cloudflare
Technology detected
Want these fixed for you?
SuperSiteBros care plans take care of security hardening, speed, updates and monitoring so your grade stays high.
See care plans