Platform: wordpress
Archetype: wellness
Run ID: 2026-04-19T06-18-18-831Z
Scanned: 2026-04-19T06:33:38.571Z
Duration: 1015s
This is a monthly deep audit. The crawler performed a full-site scan including
Lighthouse performance, axe-core accessibility (WCAG 2.2 AA), cross-browser compatibility,
security headers, schema markup validation, and SEO best-practice checks.
Because this site is not a repository we control, Apex Sentinel **cannot automatically
apply fixes** — instead, each finding below includes an AI-generated plain-English
explanation + step-by-step recommended fix you can hand to a developer or execute
in your CMS directly.
Overall grade: F
| Dimension | Count | Meaning |
|---|---|---|
| Pages crawled | 42 | Full sitemap + linked pages |
| P0 (critical) | 1 | Site-down or compliance-breaking |
| P1 (urgent) | 7 | Significant revenue / SEO / UX impact |
| P2 (high) | 32 | Quality / ranking / trust degradation |
| P3 (medium) | 140 | Polish + optimization |
| "Do first" items | 6 | AI-flagged top priorities |
| Quick wins (< 30 min) | 35 | Fastest ROI items |
If you only have time for ten things this month, do these — in this order.
Page: https://sageseedsny.com/wp-login.php
Effort: Moderate (1-3 hours)
Page: https://sageseedsny.com/
Effort: Moderate (1-3 hours)
Page: https://sageseedsny.com/
Effort: Moderate (1-3 hours)
Page: https://sageseedsny.com/
Effort: Quick win (< 30 min)
Page: https://sageseedsny.com/
Effort: Moderate (1-3 hours)
Page: https://sageseedsny.com/
Effort: Moderate (1-3 hours)
Page: https://sageseedsny.com/
Effort: Moderate (1-3 hours)
Page: https://sageseedsny.com/
Effort: Quick win (< 30 min)
Page: https://sageseedsny.com/
Effort: Moderate (1-3 hours)
Page: https://sageseedsny.com/home-vimeo-bg/
Effort: Moderate (1-3 hours)
tier5.exposed.artifactWhat it means (plain English)
Your WordPress login page (/wp-login.php) is publicly accessible and returns a successful response. This is a standard WordPress path that attackers routinely scan for. While WordPress login pages are expected to exist, leaving them openly accessible without protection makes your site a target for brute-force attacks—where attackers automatically try thousands of password combinations to gain admin access.
Why it matters for your business: An attacker gaining admin access could modify your site content, inject malware, steal customer data, deface your licensing information, or take the site offline—directly harming customer trust, compliance, and revenue.
Technical root cause: WordPress login is enabled by default and not restricted. The wp-login.php file responds normally to all visitors without IP allowlisting, rate-limiting, or Web Application Firewall (WAF) rules to block or slow automated login attempts.
Recommended fix — step by step
tier5.mixed-contentWhat it means (plain English)
Your website is served over HTTPS (secure), but it's loading at least one resource from an HTTP (non-secure) address. Modern browsers will block these mixed resources or show security warnings to visitors, reducing trust and potentially breaking functionality.
Why it matters for your business: Visitors may see security warnings, lose trust in your site, and search engines may penalize your ranking—critical for a cannabis retailer where compliance and trust directly affect sales.
Technical root cause: A theme file, plugin, or custom code is hardcoding an HTTP:// URL instead of using a protocol-relative URL (// or https://) or letting WordPress handle the protocol dynamically.
Recommended fix — step by step
tier8.lighthouse.perf-mobileWhat it means (plain English)
Your mobile homepage takes 86 seconds for the largest content element (like a banner image or product card) to become visible to visitors. This is extremely slow — most users expect a page to load in under 3 seconds. The Lighthouse performance score of 39 indicates serious speed issues that are likely caused by unoptimized images, render-blocking code, or slow server response times.
Why it matters for your business: Slow mobile load times cause visitors to abandon your site before they can browse products or place orders, directly reducing revenue. Google also ranks slower sites lower in search results, shrinking your organic traffic and making it harder for customers to find you.
Technical root cause: The LCP (Largest Contentful Paint) metric of 86 seconds suggests either very large uncompressed images, missing image lazy-loading, render-blocking JavaScript in the page head, or a slow Time to First Byte from your WordPress host. WordPress also loads many scripts and stylesheets by default that may not be optimized.
Recommended fix — step by step
tier9.a11y.aria-dialog-nameWhat it means (plain English)
Your age-gate dialog (the popup that appears to verify visitor age) is missing a text label that screen readers can announce. Screen reader users cannot understand the purpose of the dialog, making it impossible for them to complete age verification and access your site.
Why it matters for your business: Blind and low-vision visitors cannot pass your age gate, blocking them from viewing products and making purchases—creating legal liability under ADA/WCAG and excluding a market segment.
Technical root cause: The dialog div with id='baag3-gate' has role='dialog' and aria-modal='true' but lacks aria-label, aria-labelledby, or title attribute. Screen readers require one of these to announce the dialog's purpose.
Recommended fix — step by step
tier9.a11y.color-contrastWhat it means (plain English)
Your website has 20 instances where text and background colors don't provide enough contrast for people with low vision or color blindness to read easily. For example, white text on a gold/tan button (#ffffff on #cda641) only meets a 2.3:1 contrast ratio, but accessibility standards require at least 3:1 for normal text. This is a legal and usability issue under WCAG 2 AA, the standard most US states reference in cannabis compliance.
Why it matters for your business: Poor color contrast can trigger ADA complaints, reduce conversions from customers with visual impairments (a meaningful portion of any audience), and signal to search engines that your site may not be well-maintained, potentially harming your organic rankings.
Technical root cause: The Elementor page builder and Dutchie menu embed are using brand colors (golds, greens) and text colors that were chosen for aesthetics rather than accessibility. The contrast math: WCAG AA requires a minimum ratio of 3:1 for regular text and 4.5:1 for small text; your current palette doesn't meet those thresholds.
Recommended fix — step by step
tier10.journey.failedWhat it means (plain English)
Your site is trying to load JavaScript files, but the server is sending them with the wrong file type label (MIME type). Modern browsers reject this for security reasons, treating them as HTML documents instead of executable code. This breaks your age-gate functionality and any dependent scripts.
Why it matters for your business: Visitors cannot pass your age verification gate, blocking access to your product menu and preventing sales—this is a revenue-blocking issue for a cannabis retailer.
Technical root cause: JavaScript files (likely .js module scripts referenced in your theme or plugins) are being served with Content-Type: text/html instead of application/javascript. This typically happens when a plugin or theme is loading scripts from a URL that doesn't resolve to the actual .js file, or a CDN/hosting misconfiguration is stripping the correct MIME type.
Recommended fix — step by step
tier8.lighthouse.bestPractices-desktopWhat it means (plain English)
Your site's Lighthouse Best Practices score is 59 out of 100, well below the healthy threshold of 90. This score reflects several technical issues that erode visitor trust and can harm your search ranking. Common culprits on cannabis sites include outdated libraries, mixed HTTP/HTTPS content, missing security headers, or third-party scripts that aren't properly vetted.
Why it matters for your business: A low Best Practices score signals to search engines and users that your site may have security or reliability issues—critical for a cannabis retailer where age verification and payment trust are essential to conversions.
Technical root cause: Lighthouse flagged multiple best-practice violations in the full HTML report. These typically stem from outdated WordPress plugins, unencrypted third-party embeds, missing Content Security Policy headers, or browser APIs being used unsafely.
Recommended fix — step by step
tier9.a11y.link-nameWhat it means (plain English)
Your website has two social media icon links (Facebook and Instagram) that don't have any text label associated with them. Screen readers—software that blind and low-vision users rely on to navigate the web—can't tell visitors what these links do. This makes your site inaccessible to a significant audience and creates legal risk under accessibility laws.
Why it matters for your business: Cannabis retailers must ensure compliance with accessibility standards to avoid discrimination lawsuits, and accessible sites rank better in search engines and convert more visitors—especially important for building community trust in a regulated industry.
Technical root cause: The social icons are styled as images-only links within Elementor (WordPress's page builder) without accompanying text or ARIA labels. Screen readers have nothing to announce when users encounter these links.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images without alt text (descriptive text that describes what an image shows). Screen readers—tools used by people with vision disabilities—cannot describe those images to users. This also means search engines cannot understand what those images contain, which reduces your ability to appear in image search results and hurts your overall SEO.
Why it matters for your business: You're losing potential customers who use assistive technology, exposing yourself to accessibility lawsuits, and missing SEO traffic from Google Images—especially important for a cannabis retailer where product photos drive discovery and trust.
Technical root cause: Images were added to pages (likely via WordPress editor or theme) without filling in the Alt Text field, which is a required field in WordPress's image block settings.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 15 images without alt text (descriptive text that tells screen readers and search engines what the image shows). This makes the site harder for people using assistive technology to navigate, and search engines can't index those images, which means you're missing potential traffic from image search results.
Why it matters for your business: Customers with visual impairments may leave your site, and you're losing SEO value from Google Images — a significant traffic source for cannabis retail product discovery and lifestyle content.
Technical root cause: Images were likely uploaded to WordPress without filling in the Alt Text field during upload, or inserted via shortcodes/custom blocks without alt attributes defined in the code.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 18 images without alt text (descriptive text that explains what an image shows). Search engines and accessibility tools rely on this text to understand your images. When alt text is missing, those images become invisible to search rankings and to visitors using screen readers.
Why it matters for your business: Missing alt text reduces your search visibility for product images and reduces accessibility for disabled customers — both of which limit your potential customer base and revenue.
Technical root cause: Images were likely added to the WordPress media library and inserted into pages without filling in the 'Alt Text' field in the image block or image settings, which is optional but critical for compliance and SEO.
Recommended fix — step by step
tier2.meta.no-descriptionWhat it means (plain English)
Your Events page is missing a meta description — the 160-character summary that appears below your page title in Google search results. Without it, Google generates its own excerpt from your page content, which may not highlight what makes your events compelling to customers looking for cannabis product releases, educational sessions, or promotions.
Why it matters for your business: A missing meta description reduces click-through rate from search results; potential customers see a generic snippet instead of your sales-focused message, directly impacting foot traffic to your dispensary.
Technical root cause: The page template or post does not have a meta description field populated in WordPress's SEO plugin (if one is installed) or in the page's raw HTML head tag.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Five images on your delivery page don't have alt text — the short descriptive text that appears when an image fails to load and that screen readers use to describe images to visually impaired visitors. This creates an accessibility barrier for customers using assistive technology and also means search engines can't understand what those images show, losing you SEO value.
Why it matters for your business: Customers using screen readers or those in areas with slow connections may struggle to navigate your products, and you're missing keyword opportunities that image descriptions provide to Google — especially important for visual-heavy product pages in competitive cannabis retail.
Technical root cause: Images were inserted into the page without the alt attribute being populated. This commonly happens when images are uploaded directly through WordPress media without filling in the 'Alt Text' field in the image properties.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your website has 6 images without alt text (descriptive text that appears if an image fails to load). This makes those images invisible to screen readers used by people with vision disabilities, and it also means search engines can't understand what those images show. When search engines can't read your images, you miss opportunities to rank for related searches.
Why it matters for your business: Customers using assistive technology may have a poor experience on your site, reducing trust and sales. Additionally, you're losing SEO value — images with proper alt text rank in Google Images and help your pages rank higher for relevant searches like 'weed delivery Queens Bayside.'
Technical root cause: Images on the Queens Bayside delivery page were uploaded to WordPress without alt text filled in. WordPress allows alt text to be left blank by default, so images get published without this critical metadata.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images without alt text—descriptive text that appears when images don't load and is read aloud by screen readers. This affects visitors using assistive technology and also tells search engines what your product photos show, which boosts visibility for image search and helps Google understand your pages better.
Why it matters for your business: Missing alt text hurts SEO rankings for product discovery and reduces accessibility for disabled customers—both translate to lost traffic and potential compliance risk under ADA standards.
Technical root cause: Images uploaded to Elementor or WordPress media library often skip the alt text field during upload. The Elementor page builder doesn't enforce alt text, allowing images to be published without it.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images missing alt text—descriptions that tell screen readers and search engines what an image shows. This breaks accessibility for blind and visually impaired visitors, and search engines can't understand or rank those images.
Why it matters for your business: Missing alt text reduces search visibility for product images, lowers accessibility compliance (risking legal exposure), and frustrates customers using assistive technology who can't understand your product offerings.
Technical root cause: Images were likely added to Elementor pages without filling in the Alt Text field during upload or image insertion. Elementor makes this optional, so images publish without it by default.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images without alt text—these are descriptions that appear when images fail to load and help screen readers (tools used by people with visual impairments) understand what each image shows. Search engines also use alt text to index images, so missing descriptions hurt both accessibility and image SEO.
Why it matters for your business: Visitors using assistive technology or on slow connections may not understand product images or dispensary location photos, reducing trust and conversions; Google also ranks image-heavy pages lower when alt text is missing.
Technical root cause: Images were likely uploaded to Elementor (your page builder) or added via WordPress media without filling in the alt text field during upload or in the image block settings.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images without alt text—descriptions that screen readers use to understand images, and that search engines use to index visual content. This means visually impaired customers can't understand product photos, and Google can't properly index those images in search results.
Why it matters for your business: Missing alt text reduces SEO rankings for product images, blocks accessibility for disabled customers (legal risk under ADA), and limits your ability to rank in image search where cannabis product discovery often happens.
Technical root cause: Images were likely inserted into Elementor page builder without filling in the alt text field, or were uploaded via media library without alt metadata. WordPress doesn't auto-generate alt text.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images without alt text—descriptive labels that explain what each image shows. Search engines and screen readers (used by visually impaired customers) can't interpret these images, which means potential customers may miss product information and Google can't index your visual content for search results.
Why it matters for your business: Missing alt text reduces your organic search visibility for product images, blocks disabled customers from browsing your inventory, and signals to Google that your site lacks accessibility—all of which shrink your addressable market and traffic.
Technical root cause: Images were likely inserted via Elementor (your page builder) or uploaded to WordPress without the alt text field being filled in during upload or element configuration.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your website has 28 images without alt text—descriptive labels that tell screen readers and search engines what an image shows. This breaks accessibility for blind and low-vision customers, and search engines can't index those images for image search traffic. Since 28 out of 39 images are affected, this is a widespread issue.
Why it matters for your business: Customers using screen readers cannot understand your product images, which risks legal liability under the ADA and excludes a customer segment; you also miss image search traffic (Google Images) and rank lower in regular search results.
Technical root cause: Images were added to the Elementor page builder without filling in the alt text field. Elementor allows publishing images without alt text, so they default to empty.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images without alt text—short descriptions that describe what each image shows. When alt text is missing, screen readers used by visually impaired visitors can't explain the images, and search engines can't understand what those images contain. This hurts both accessibility and your ability to rank for image-based searches.
Why it matters for your business: Customers using screen readers cannot navigate your product images or understand your dispensary visuals, reducing accessibility for disabled visitors and potentially exposing you to ADA compliance complaints; search engines also rank image-rich content lower when alt text is absent, reducing organic traffic.
Technical root cause: Images inserted via Elementor (WordPress page builder) or uploaded directly to WordPress likely lack alt text attributes in their HTML. This commonly happens when images are added quickly without filling the 'Alt Text' field during upload or in the image block settings.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images without alternative text (alt text). Alt text is a short description that appears if an image doesn't load and is read aloud to visitors using screen readers. Search engines also use alt text to understand what your images show, which helps them rank your pages correctly.
Why it matters for your business: Missing alt text reduces your SEO visibility for image searches and product discovery, and excludes customers with visual impairments from accessing your content — both revenue and brand reputation risks.
Technical root cause: Images were likely uploaded to WordPress or added via Elementor without filling in the alt text field during upload or element configuration. This is a common oversight when bulk-importing or quickly adding media.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your site has 28 images without alt text — descriptions that screen readers use to understand images, and that search engines use to index visual content. This affects both customers using assistive technology and your search rankings. When Google can't read an image, it can't rank your site for relevant visual searches.
Why it matters for your business: Missing alt text hurts SEO visibility for product images and dispensary photos, and excludes customers using screen readers — a legal liability under ADA compliance.
Technical root cause: Images were likely uploaded or inserted via Elementor (a page builder plugin) without filling the alt text field during upload, or legacy images predate alt text best practices.
Recommended fix — step by step
tier2.a11y.img-missing-altWhat it means (plain English)
Your website has 28 images without alt text — descriptive labels that screen readers use to understand images, and that search engines use to index visual content. This means visually impaired visitors can't understand product photos, and Google can't properly index your product imagery for search results.
Why it matters for your business: Missing alt text reduces SEO visibility for product searches, blocks visually impaired customers from browsing your catalog, and may expose you to accessibility compliance risk under ADA standards.
Technical root cause: Images were likely inserted into Elementor templates or WordPress without filling in the alt text field during upload. WordPress allows alt text to be skipped, so it requires deliberate entry.
Recommended fix — step by step
tier2.meta.no-descriptionWhat it means (plain English)
Your blog category page doesn't have a meta description — the short text snippet that appears under your site name in Google search results. Search engines will generate one automatically, but it's often incomplete or poorly written. This hurts click-through rates because visitors don't see your most compelling summary before deciding to visit.
Why it matters for your business: A missing meta description on your blog category page means fewer clicks from organic search, reducing traffic to content that could educate customers and build trust with your brand.
Technical root cause: The /category/blog/ archive page is likely generated automatically by WordPress without a custom meta description field. WordPress category archives default to empty unless explicitly filled in per-category.
Recommended fix — step by step
tier3.perf.mobile-failWhat it means (plain English)
Our automated performance testing tool timed out trying to load your homepage on a mobile connection — it waited 60 seconds and the page never fully loaded. This suggests either the site is extremely slow on mobile networks, or there's a resource (image, script, or plugin) that's stalling indefinitely and blocking the page from becoming interactive.
Why it matters for your business: Customers on mobile devices — your primary traffic source for a dispensary site — may see a blank screen, leave before placing an order, and report poor reviews; search engines also penalize slow mobile sites in rankings.
Technical root cause: A heavy plugin, unoptimized images, render-blocking JavaScript, or a third-party integration (chat widget, compliance tool, payment processor) is likely loading synchronously and preventing the page from reaching a 'network idle' state where all resources have finished downloading.
Recommended fix — step by step
tier4.schema.missing-coreWhat it means (plain English)
Your homepage is missing LocalBusiness schema markup, which is structured data that tells Google your business's location, hours, phone, and services. You have Organization and WebSite data, but LocalBusiness is the missing piece that helps Google understand you're a physical place people can visit.
Why it matters for your business: Without LocalBusiness schema, your dispensary won't appear correctly in Google Maps results or local search panels, reducing foot traffic from customers searching for 'cannabis dispensary near me' or 'Sage Seeds NY hours.'
Technical root cause: Your WordPress SEO plugin (likely Yoast or Rank Math) is configured to output Organization schema but has not been set to also output LocalBusiness schema, or the local business settings are incomplete.
Recommended fix — step by step
tier5.header.strict-transport-securityWhat it means (plain English)
Your website is missing the HSTS (HTTP Strict Transport Security) header, which is a security instruction that tells browsers to always use encrypted connections (HTTPS) when visiting your site. Without it, visitors could be tricked into using unencrypted connections, exposing their data. This is especially important for a cannabis retailer handling customer orders and compliance documentation.
Why it matters for your business: Missing HSTS reduces trust signals for search rankings, increases risk of customer data interception during checkout or age verification, and signals to compliance auditors that security practices may be incomplete.
Technical root cause: The server response headers do not include 'Strict-Transport-Security' directive. While WP Engine and Cloudflare are configured, the HSTS header has not been explicitly set at the server or CDN level.
Recommended fix — step by step
tier5.header.content-security-policyWhat it means (plain English)
Your website is missing a Content Security Policy (CSP) header — a security instruction that tells browsers which external resources (scripts, images, stylesheets) are allowed to load. Without it, malicious code can be injected into your pages more easily. This is especially important for cannabis retailers handling customer data and payments.
Why it matters for your business: A CSP breach could expose customer information, damage trust, trigger payment processor penalties, and harm your SEO ranking since security headers are a ranking factor.
Technical root cause: WordPress (especially managed hosting like WP Engine) doesn't set CSP headers by default. Cloudflare is configured on your domain but CSP rules haven't been created there or in your server config.
Recommended fix — step by step
tier6.a11y.small-targetsWhat it means (plain English)
Your homepage has 37 buttons, links, and interactive elements that are smaller than 44×44 pixels when viewed on mobile phones. This makes them hard to tap accurately—especially for people with low vision, arthritis, or anyone on a small screen. Apple and Google both recommend 44×44px as the minimum touch target size.
Why it matters for your business: Customers frustrated by tiny tap targets on mobile will abandon your site before placing orders or signing up; this directly reduces conversion and customer satisfaction, particularly for older demographics who may be more price-sensitive.
Technical root cause: Your theme or custom CSS is likely applying padding/margin constraints to buttons and links, or navigation elements are inheriting overly small font sizes without adequate spacing around them. Mobile viewport CSS may not be expanding targets proportionally.
Recommended fix — step by step
tier6.a11y.small-targetsWhat it means (plain English)
Your website has 37 interactive buttons, links, and form fields that are smaller than 44×44 pixels on mobile devices. This makes them hard to tap accurately, especially for people with larger fingers, tremors, or vision impairments. Mobile visitors will struggle to click menus, add-to-cart buttons, or navigation links without accidentally hitting the wrong target.
Why it matters for your business: Customers browsing on phones will abandon carts or leave your site due to frustration, directly reducing mobile conversions and revenue — particularly critical for a dispensary where age verification and checkout are mobile-heavy flows.
Technical root cause: WordPress themes often inherit button and link styling from CSS frameworks that don't meet WCAG 2.5.5 (44×44px minimum). This is compounded by custom CSS that overrides padding/sizing, or plugins injecting undersized UI elements without accessible spacing.
Recommended fix — step by step
tier6.a11y.small-targetsWhat it means (plain English)
Your website has 37 buttons, links, and clickable elements on mobile that are smaller than 44×44 pixels. This is the minimum size recommended by accessibility standards (WCAG 2.5.5) to ensure people with dexterity challenges, tremors, or using touch on mobile devices can tap them reliably without accidentally hitting the wrong target. Customers will experience higher error rates and frustration on phones.
Why it matters for your business: Smaller tap targets increase cart abandonment and order errors on mobile, where a significant portion of cannabis retail customers browse and purchase; they also expose you to accessibility complaints and potential ADA litigation risk.
Technical root cause: Mobile CSS is either not scaling interactive elements proportionally, or the design was built for desktop-first without mobile touch considerations. WordPress themes often ship with button padding and spacing that meet desktop mouse targets but fail mobile touch thresholds.
Recommended fix — step by step
@media (max-width: 768px) { button, a.btn, input[type='button'] { min-height: 44px; min-width: 44px; padding: 12px 16px !important; } } to ensure all interactive elements meet the minimum.input[type='radio'], input[type='checkbox'] { width: 44px; height: 44px; margin: 8px; }.tier6.a11y.small-targetsWhat it means (plain English)
Your website has 37 clickable buttons, links, and form fields that are smaller than 44×44 pixels when viewed on a tablet. This makes them hard to tap accurately, especially for people with tremors, vision problems, or using touch devices. WCAG 2.5.5 is a web accessibility standard that requires minimum tap target sizes to ensure all visitors can use your site.
Why it matters for your business: Customers browsing on tablets (a common device in retail) will struggle to click menu items, product links, and checkout buttons, leading to abandoned visits and lost sales—plus you're exposed to accessibility lawsuit risk.
Technical root cause: CSS padding, margins, or button dimensions are set too small, or interactive elements lack sufficient spacing. This is often due to a responsive design that didn't account for touch targets at medium breakpoints (768px width).
Recommended fix — step by step
tier8.lighthouse.bestPractices-mobileWhat it means (plain English)
Your site's mobile best practices score is 61 out of 100—well below the healthy threshold of 90. This score reflects issues like outdated browser APIs, missing security headers, or unoptimized third-party scripts that could expose visitors to risks or slow down their experience. The Lighthouse report in your audit files lists the specific culprits.
Why it matters for your business: A low best practices score signals to search engines and users that your site may have security or stability problems, which can suppress mobile search rankings and increase bounce rates—especially critical for a cannabis retailer where trust and compliance perception directly affect conversion.
Technical root cause: WordPress sites commonly accumulate issues through outdated plugins, poorly configured security settings, missing HTTP security headers (like X-Frame-Options or Content-Security-Policy), and unvetted third-party scripts (analytics, ads, chat widgets) that Lighthouse flags as risky or deprecated.
Recommended fix — step by step
tier8.lighthouse.perf-desktopWhat it means (plain English)
Your homepage takes 12.9 seconds for the largest visual element to appear on screen, well above the 2.5-second target that keeps visitors engaged. This slow load is driven by unoptimized images, render-blocking scripts, and possibly third-party embeds. While your SEO score is strong (92), performance directly affects how many visitors stay long enough to convert.
Why it matters for your business: Slow pages cause cart abandonment and reduce search ranking in Google's algorithm; visitors on mobile or slower connections will bounce before seeing your products, costing direct sales.
Technical root cause: Large, uncompressed image files and JavaScript that runs before the page displays are the primary culprits. WordPress plugins (analytics, pop-ups, ads) often load synchronously, blocking the browser from rendering content.
Recommended fix — step by step
tier2.meta.no-descriptionWhat it means (plain English)
Your /category/events/ page doesn't have a meta description — that's the 160-character summary that appears below your page title in Google search results. Without it, Google may generate its own, which often looks unprofessional and may not mention what makes your events stand out. This is especially important for a cannabis business where trust and clarity matter.
Why it matters for your business: Missing descriptions reduce click-through rates from search results; potential customers see a generic snippet instead of a compelling reason to visit your events page, directly impacting foot traffic and event attendance.
Technical root cause: The WordPress events category page likely has no custom meta description assigned in the SEO plugin (Yoast, Rank Math, or The SEO Framework) or in theme settings, so search engines default to auto-generation.
Recommended fix — step by step
tier5.header.x-frame-optionsWhat it means (plain English)
The X-Frame-Options header tells browsers whether your site can be displayed inside an iframe (a frame within another website). This header is missing from your homepage, which means someone could embed your site inside their own malicious site without restriction — a technique called clickjacking. You're behind Cloudflare, which adds some protection, but the header should be explicitly set at the application level.
Why it matters for your business: A clickjacking attack could trick customers into taking unintended actions (like placing orders or sharing payment info) while viewing your site inside a hidden frame on an attacker's page, damaging trust and creating liability.
Technical root cause: WordPress and WP Engine do not set X-Frame-Options by default. Cloudflare provides some mitigations but does not replace the need for server-side header configuration.
Recommended fix — step by step
tier1.js.console-errorsDetail
High console error volume suggests hydration or runtime problems.
tier2.meta.no-descriptionDetail
Page has no meta description.
tier9.a11y.landmark-uniqueDetail
Ensure landmarks are unique
Impact: moderate
WCAG:
Learn more: https://dequeuniversity.com/rules/axe/4.11/landmark-unique?application=playwright
tier2.robots.no-sitemapWhat it means (plain English)
Your robots.txt file (the instruction sheet you give to Google's crawlers) doesn't tell them where to find your XML sitemap — a complete list of all your pages. Without this pointer, Google has to discover your pages the hard way, which is slower and may miss some content, especially newer product pages or location listings.
Why it matters for your business: Missing sitemap references delay Google's indexing of new products, menus, or license updates, which means slower visibility in search results for customers looking for your strains or location info.
Technical root cause: The robots.txt file exists but lacks a 'Sitemap:' directive. WordPress typically auto-generates an XML sitemap (usually at /sitemap.xml), but robots.txt must explicitly point to it.
Recommended fix — step by step
tier2.meta.title-lengthWhat it means (plain English)
Your homepage title is only 17 characters long. Search engines like Google use page titles as a ranking signal and to display in search results. A title that's too short misses an opportunity to include keywords and context that helps both search engines and potential customers understand what your page is about.
Why it matters for your business: Customers searching for cannabis products in New York are less likely to click your listing in Google results because your title doesn't clearly communicate what you offer (products, location, or value proposition).
Technical root cause: The WordPress site title or homepage-specific SEO title field is either set to just the site name or a generic 'Home' prefix without descriptive keywords about the business.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
OpenGraph metadata is code in your page header that tells social media platforms (Facebook, Instagram, LinkedIn) what image and text to show when someone shares your link. Without it, social posts look bland and may not display your branding—just a generic preview or nothing at all.
Why it matters for your business: When customers share your product pages or homepage on social media, poor preview images reduce click-through rates and brand perception, directly limiting word-of-mouth traffic and social referral sales.
Technical root cause: WordPress theme or site configuration is not generating og:title and og:image meta tags in the page <head>. This is typically missing when an SEO plugin is not active or is misconfigured, or when the theme lacks built-in social sharing support.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
When someone shares a link to your 'Your First Visit' page on Facebook, Instagram, or messaging apps, those platforms don't know what image or title to display. Instead of showing your cannabis dispensary's branding, the share might look blank or generic. This is called OpenGraph metadata — it's HTML code that tells social platforms how to preview your content.
Why it matters for your business: Poor social shares reduce click-through rates from organic social traffic, especially since cannabis dispensaries often rely on word-of-mouth and community shares; customers won't see an appealing preview when friends share your site.
Technical root cause: The page is missing og:title, og:image, and likely og:description meta tags in the HTML head. WordPress doesn't automatically generate these unless a plugin (like Yoast SEO, All in One SEO, or Rank Math) is installed and configured, or they're manually added to the theme.
Recommended fix — step by step
tier2.meta.title-lengthWhat it means (plain English)
Your page title is 77 characters long, but search engines like Google typically display 50–60 characters on desktop and 40 characters on mobile before truncating with ellipsis. This title will be cut off in search results, hiding key information like your brand name or the specific product benefit.
Why it matters for your business: Potential customers searching for pre-roll guides won't see your full message in Google results, reducing click-through rate and brand visibility.
Technical root cause: The title tag in the page's HTML head section exceeds the optimal display width. WordPress or your SEO plugin is not enforcing length limits when titles are saved.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
OpenGraph tags are metadata snippets that control how your pages appear when shared on Facebook, Instagram, LinkedIn, and other social platforms. Without them, those platforms display a generic preview instead of your chosen title and image, making your content look unprofessional and less clickable when customers share it.
Why it matters for your business: Missing OpenGraph tags reduce click-through rates on social shares, which directly impacts traffic from the platforms where cannabis consumers discover products and recommendations.
Technical root cause: The WordPress theme or SEO plugin is not automatically generating og:title and og:image meta tags, or they were not manually added to this specific post's settings.
Recommended fix — step by step
tier2.meta.title-lengthWhat it means (plain English)
Your page title is 72 characters long, but search engines display only 50–60 characters on desktop and 40 characters on mobile before truncating with an ellipsis. This particular title will be cut off, hiding the key message 'Sage Seeds' and reducing click-through rates from search results.
Why it matters for your business: Truncated titles reduce organic traffic because potential customers see incomplete, less compelling snippets in Google search results and may click competitors instead.
Technical root cause: The WordPress page or post title, or the Yoast/Rank Math SEO plugin's custom meta title field, contains 72 characters instead of staying within the 50–60 character sweet spot for consistent display.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
Open Graph tags are snippets of code that tell social media platforms (Facebook, Instagram, LinkedIn) how to display your page when someone shares it. Without them, the platform guesses—often showing generic or broken previews. This affects posts about your products or blog content shared by staff or customers on social channels.
Why it matters for your business: Poor social preview appearance reduces click-through rates on shared posts, weakening word-of-mouth and community engagement on platforms where cannabis retailers often build their audience.
Technical root cause: The WordPress theme or SEO plugin (if installed) is not generating or outputting og:title and og:image meta tags in the page <head>. This is typically missing from the theme template or disabled in plugin settings.
Recommended fix — step by step
tier2.meta.title-lengthWhat it means (plain English)
Your page title is 100 characters long, but search engines like Google typically display only 50–60 characters in search results before truncating with an ellipsis. This means potential customers see a cut-off headline that may not clearly communicate your value proposition.
Why it matters for your business: A truncated title in search results reduces click-through rates because visitors can't read your full message and may skip your page for competitors with clearer headlines.
Technical root cause: The WordPress page title (set in Yoast SEO or your theme settings) exceeds the recommended 50–60 character limit that Google displays in desktop search results.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
OpenGraph metadata are HTML tags that control how your pages appear when shared on Facebook, Instagram, LinkedIn, and other social platforms. Without them, your Valentine's Day guide (and likely other pages) show up as plain links with no image or custom description—making them far less likely to be clicked when customers share them.
Why it matters for your business: Cannabis retailers rely heavily on social sharing for organic reach; missing OpenGraph tags reduce click-through rates on shared content by 30–50%, directly limiting customer acquisition and engagement.
Technical root cause: The WordPress page or template is missing og:title, og:image, og:description, and og:url meta tags in the <head> section. Most SEO plugins (Yoast, Rank Math, All in One SEO) have toggle options for these tags that may be disabled or not configured.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your blog post pages are missing Twitter Card meta tags — special codes that tell Twitter (now X) how to display your content when someone shares a link on that platform. Without these tags, shares appear as plain text with no image or formatted preview, which looks unprofessional and reduces click-through rates from social traffic.
Why it matters for your business: Lost opportunity to drive traffic from X/Twitter shares; competitors with properly formatted cards get higher engagement and more visits from social platforms.
Technical root cause: The WordPress site is not outputting twitter:card, twitter:title, twitter:description, and twitter:image meta tags in the <head> section of blog post pages. This is typically a theme or plugin configuration gap.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
When your blog post is shared on Facebook, Instagram, or other social platforms, those sites pull a preview image and title from special metadata tags called OpenGraph tags. Without them, your post shows up as a plain link with no image or formatted preview, making people less likely to click through.
Why it matters for your business: Shared blog content drives traffic and brand awareness for dispensaries; missing preview images reduce click-through rates on social media by 30-50%, directly cutting discovery and foot traffic.
Technical root cause: WordPress is not automatically generating og:title and og:image meta tags for this blog post. Either the site lacks an SEO plugin configured to do this, or the plugin is disabled/misconfigured for blog posts.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
OpenGraph tags are snippets of code that tell social media platforms (Facebook, Instagram, LinkedIn) how to display your page when someone shares a link. Without them, the platform guesses—often poorly—and you get no image, a generic title, or irrelevant text in the preview. This affects how appealing your shared links look to potential customers.
Why it matters for your business: When staff or customers share your deals page on Facebook or Instagram, it appears without your branding or product image, reducing click-through rates and making the post look unprofessional or spammy.
Technical root cause: The WordPress theme or page template does not include og:title and og:image meta tags in the HTML head. Either the theme lacks built-in OpenGraph support, or the SEO plugin (if present) is not configured to generate these tags for this specific post.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your blog post pages are missing Twitter card meta tags, which are snippets of code that tell Twitter (now X) how to display your content when someone shares a link. Without them, social shares appear plain and unformatted, making them less likely to catch attention in feeds.
Why it matters for your business: Reduced click-through rates on social media shares of your promotions and blog content, which directly impacts traffic and customer acquisition for your wellness retail business.
Technical root cause: The page header lacks the <meta name="twitter:card"> and related tags (twitter:title, twitter:description, twitter:image) that social platforms use to render rich preview cards.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
When someone shares this page on Facebook, Instagram, or other social platforms, those sites don't know what title or image to display. Instead of showing your brand name and product photo, the share will appear bare or generic, making people less likely to click through.
Why it matters for your business: Poor social sharing appearance reduces click-through rates from social media traffic, which is a key customer acquisition channel for cannabis retailers.
Technical root cause: The page is missing og:title and og:image meta tags in the HTML head section. WordPress doesn't automatically generate these for all post types unless a plugin or custom code adds them.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your blog post about International Women's Day is missing a Twitter card — a snippet of metadata that tells Twitter how to display your link when someone shares it. Without this, Twitter will auto-generate a plain preview instead of showing your chosen title, image, and description, making the post less appealing when shared on that platform.
Why it matters for your business: Missing Twitter cards reduce click-through rates on social shares, which means fewer visitors from Twitter referrals and lower engagement on a platform where cannabis wellness communities are active.
Technical root cause: The WordPress page is not outputting the twitter:card, twitter:title, twitter:description, and twitter:image meta tags in the HTML <head>. This is typically missing when the active SEO plugin (Yoast, Rank Math, etc.) is not configured for social card output, or no plugin is handling it.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your blog post pages are missing a Twitter Card meta tag—a small piece of code that tells Twitter (X) how to display your content when someone shares a link. Without it, Twitter shows a generic preview instead of your custom title, description, and image, making shares less engaging and less likely to drive clicks back to your site.
Why it matters for your business: Missing Twitter Cards reduce click-through rates on social shares and hurt brand consistency when customers share your content on Twitter/X, directly impacting referral traffic and brand visibility in social feeds.
Technical root cause: The WordPress head section is not including the <meta name="twitter:card" content="summary_large_image"> tag and related Twitter-specific open graph meta tags (twitter:title, twitter:description, twitter:image) for shared content.
Recommended fix — step by step
<meta name="twitter:card" content="summary_large_image"> <meta name="twitter:site" content="@YourTwitterHandle"> <meta name="twitter:title" content="[POST_TITLE]"> <meta name="twitter:description" content="[POST_EXCERPT]"> <meta name="twitter:image" content="[FEATURED_IMAGE]"> (replace bracketed values with dynamic post data).tier2.meta.description-lengthWhat it means (plain English)
The meta description (the text Google shows below your page title in search results) is only 74 characters long. Google recommends 80–160 characters so your full message appears in search results instead of being cut off. This page's description is slightly too short to take full advantage of search visibility.
Why it matters for your business: A truncated description may discourage clicks from search results, reducing traffic to promotional pages like this discount offer.
Technical root cause: The meta description tag for this page was written too briefly, likely during initial content creation without a character count check.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
OpenGraph tags are snippets of code that tell social media platforms (Facebook, Instagram, LinkedIn) what image and text to show when someone shares your page. Without them, social shares appear as plain links with no preview image or description, which makes your dispensary look less professional and reduces click-through rates from social traffic.
Why it matters for your business: Missing OpenGraph metadata means your promotional posts (like this April 2nd Rove discount) get shared on social media without an eye-catching preview image, reducing traffic back to your site and losing visibility for time-sensitive deals.
Technical root cause: The WordPress theme or page template is not inserting og:title and og:image meta tags into the page's <head> section. This is typically handled by an SEO plugin (Yoast, Rank Math, All in One SEO) or hardcoded into the theme.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your blog post isn't set up to display nicely when shared on Twitter/X. Without a Twitter Card meta tag, when someone shares your content, Twitter shows a plain link instead of a rich preview with your title, image, and description. This reduces click-through rates from social media.
Why it matters for your business: Lost social media engagement and traffic; shared content looks unprofessional compared to competitors who use Twitter Cards, reducing brand credibility.
Technical root cause: The page is missing the <meta name="twitter:card" content="summary_large_image"> tag and related Twitter meta tags (twitter:title, twitter:description, twitter:image) in the HTML head section.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your pages don't include Twitter Card meta tags, which are optional HTML snippets that tell Twitter (now X) how to display your content when someone shares a link. Without them, shares appear plain and less visually appealing, but your content still gets shared and indexed normally.
Why it matters for your business: Missing Twitter Cards reduce click-through rates on social shares and make your brand look less polished when customers or industry accounts mention Sage Seeds NY on X/Twitter.
Technical root cause: WordPress theme or SEO plugin (likely Yoast, Rank Math, or All in One SEO) is not configured to output Twitter Card meta tags, or the setting is disabled.
Recommended fix — step by step
tier2.meta.no-ogWhat it means (plain English)
When someone shares your article on Facebook, Instagram, or other social platforms, those sites pull information (title, description, image) from special metadata tags called OpenGraph tags. Without them, the share looks generic or broken — just a link with no preview image or custom headline. This is purely a social sharing issue; search engines don't care about these tags.
Why it matters for your business: When customers share your educational content (like 'Indica vs. Sativa') on social media, it won't display attractively, reducing click-through rates and making your brand look less polished compared to competitors who have rich previews.
Technical root cause: The page template or WordPress theme is not outputting og:title, og:image, og:description, and og:url meta tags in the <head> section of the HTML. This is typically handled by SEO plugins (Yoast, Rank Math, etc.) or manual theme customization.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your blog post isn't tagged with Twitter Card metadata, which means when someone shares the link on Twitter/X, it won't display a rich preview with your custom image and description. Instead, Twitter will auto-generate a plain text preview, making the post less visually appealing and less likely to get clicks.
Why it matters for your business: Missing Twitter Cards reduce click-through rates on social shares, limiting organic reach for content that could drive dispensary traffic or brand awareness.
Technical root cause: The page lacks the open graph and twitter-specific meta tags (og:image, og:description, twitter:card, twitter:image) that social platforms use to render rich previews.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your blog posts and product pages are missing Twitter Card tags—special metadata that tells Twitter (now X) how to display your content when someone shares a link. Without these tags, Twitter shows a plain text preview instead of a branded card with your image, title, and description. This reduces click-through rates on social shares.
Why it matters for your business: When customers share your brand spotlights or product pages on Twitter/X, they get ugly plain-text previews instead of eye-catching cards, hurting engagement and traffic from social platforms.
Technical root cause: WordPress isn't automatically generating Twitter Card meta tags (twitter:card, twitter:title, twitter:description, twitter:image). Most SEO plugins include this feature but it's either not installed or not enabled.
Recommended fix — step by step
tier2.meta.no-twitter-cardWhat it means (plain English)
Your site is missing Twitter Card meta tags, which are small snippets of code that tell Twitter how to display your content when someone shares a link on that platform. Without them, Twitter shows a plain, unformatted preview instead of a rich card with your image, title, and description — making your content less eye-catching and less likely to drive clicks.
Why it matters for your business: Cannabis retailers depend on social sharing to reach customers; a plain Twitter preview loses engagement and traffic compared to a branded, image-rich card that stands out in feeds.
Technical root cause: The page's <head> section lacks og:twitter:card and related meta tags (twitter:title, twitter:description, twitter:image) that Twitter's crawler uses to render rich previews.
Recommended fix — step by step
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "March Madness Shopping List: What to Grab Before Tip-Off | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.a11y.img-missing-altDetail
Images without alt fail a11y + hurt SEO.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.description-lengthDetail
Description should be 80-160 chars.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.description-lengthDetail
Description should be 80-160 chars.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Test | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.a11y.img-missing-altDetail
Images without alt fail a11y + hurt SEO.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Blog | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Events | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.a11y.img-missing-altDetail
Images without alt fail a11y + hurt SEO.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.a11y.img-missing-altDetail
Images without alt fail a11y + hurt SEO.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.a11y.img-missing-altDetail
Images without alt fail a11y + hurt SEO.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "About | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.a11y.img-missing-altDetail
Images without alt fail a11y + hurt SEO.
tier2.meta.description-lengthDetail
Description should be 80-160 chars.
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.a11y.img-missing-altDetail
Images without alt fail a11y + hurt SEO.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Home | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Blog | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier2.meta.title-lengthDetail
Title should be 20-65 chars. Got: "Events | Sage Seeds"
tier2.meta.no-ogDetail
Page missing og:title and/or og:image.
tier2.meta.no-twitter-cardDetail
No twitter:card meta tag.
tier3.perf.desktop-failDetail
page.goto: Timeout 60000ms exceeded.
Call log:
tier5.header.x-content-type-optionsDetail
x-content-type-options not present on homepage response. Affects fortress score and CSP posture.
tier5.header.referrer-policyDetail
referrer-policy not present on homepage response. Affects fortress score and CSP posture.
tier5.header.permissions-policyDetail
permissions-policy not present on homepage response. Affects fortress score and CSP posture.
tier5.cookie.no-samesiteDetail
Cookies should declare SameSite=Lax or Strict.
tier5.fortress.ssl-gradeDetail
Qualys SSL Labs: SSL Labs HTTP 400. Aim for A+ via strong TLS 1.3, HSTS, CAA, and preload.
tier5.fortress.dnssec-missingDetail
DNSSEC adds cryptographic verification to DNS responses. Consider enabling via your registrar.
tier5.fortress.caa-missingDetail
CAA records restrict which CAs may issue certs for your domain, preventing rogue issuance. Add CAA for letsencrypt.org / digicert.com / etc.
tier5.fortress.dmarc-weakDetail
DMARC published at p=none — monitoring mode only. After 2-4 weeks of clean reports, tighten to p=quarantine → p=reject.
tier8.lighthouse.a11y-mobileDetail
Score 90 is below target 95. See HTML report for details.
tier8.lighthouse.seo-mobileDetail
Score 92 is below target 95. See HTML report for details.
tier8.lh-opportunity.uses-rel-preconnect-mobileDetail
Consider adding preconnect or dns-prefetch resource hints to establish early connections to important third-party origins. https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/" target="_blank" rel="noreferrer">Learn how to preconnect to required origins.
tier8.lh-opportunity.offscreen-images-mobileDetail
Consider lazy-loading offscreen and hidden images after all critical resources have finished loading to lower time to interactive. https://developer.chrome.com/docs/lighthouse/performance/offscreen-images/" target="_blank" rel="noreferrer">Learn how to defer offscreen images.
tier8.lh-opportunity.render-blocking-resources-mobileDetail
Resources are blocking the first paint of your page. Consider delivering critical JS/CSS inline and deferring all non-critical JS/styles. https://developer.chrome.com/docs/lighthouse/performance/render-blocking-resources/" target="_blank" rel="noreferrer">Learn how to eliminate render-blocking resources.
tier8.lh-opportunity.unminified-javascript-mobileDetail
Minifying JavaScript files can reduce payload sizes and script parse time. https://developer.chrome.com/docs/lighthouse/performance/unminified-javascript/" target="_blank" rel="noreferrer">Learn how to minify JavaScript.
tier8.lh-opportunity.unused-javascript-mobileDetail
Reduce unused JavaScript and defer loading scripts until they are required to decrease bytes consumed by network activity. https://developer.chrome.com/docs/lighthouse/performance/unused-javascript/" target="_blank" rel="noreferrer">Learn how to reduce unused JavaScript.
tier8.lighthouse.a11y-desktopDetail
Score 89 is below target 95. See HTML report for details.
tier8.lighthouse.seo-desktopDetail
Score 92 is below target 95. See HTML report for details.
tier8.lh-opportunity.uses-rel-preconnect-desktopDetail
Consider adding preconnect or dns-prefetch resource hints to establish early connections to important third-party origins. https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/" target="_blank" rel="noreferrer">Learn how to preconnect to required origins.
tier8.lh-opportunity.offscreen-images-desktopDetail
Consider lazy-loading offscreen and hidden images after all critical resources have finished loading to lower time to interactive. https://developer.chrome.com/docs/lighthouse/performance/offscreen-images/" target="_blank" rel="noreferrer">Learn how to defer offscreen images.
tier8.lh-opportunity.render-blocking-resources-desktopDetail
Resources are blocking the first paint of your page. Consider delivering critical JS/CSS inline and deferring all non-critical JS/styles. https://developer.chrome.com/docs/lighthouse/performance/render-blocking-resources/" target="_blank" rel="noreferrer">Learn how to eliminate render-blocking resources.
tier8.lh-opportunity.unminified-javascript-desktopDetail
Minifying JavaScript files can reduce payload sizes and script parse time. https://developer.chrome.com/docs/lighthouse/performance/unminified-javascript/" target="_blank" rel="noreferrer">Learn how to minify JavaScript.
tier8.lh-opportunity.unused-javascript-desktopDetail
Reduce unused JavaScript and defer loading scripts until they are required to decrease bytes consumed by network activity. https://developer.chrome.com/docs/lighthouse/performance/unused-javascript/" target="_blank" rel="noreferrer">Learn how to reduce unused JavaScript.
Grouped by URL — useful when working through the site one page at a time.
_47 findings on this page_
Your website is served over HTTPS (secure), but it's loading at least one resource from an HTTP (non-secure) address. Modern browsers will block these mixed resources or show security warnings to visi
Your mobile homepage takes 86 seconds for the largest content element (like a banner image or product card) to become visible to visitors. This is extremely slow — most users expect a page to load in
Your site's Lighthouse Best Practices score is 59 out of 100, well below the healthy threshold of 90. This score reflects several technical issues that erode visitor trust and can harm your search ran
Your age-gate dialog (the popup that appears to verify visitor age) is missing a text label that screen readers can announce. Screen reader users cannot understand the purpose of the dialog, making it
Your website has 20 instances where text and background colors don't provide enough contrast for people with low vision or color blindness to read easily. For example, white text on a gold/tan button
Your website has two social media icon links (Facebook and Instagram) that don't have any text label associated with them. Screen readers—software that blind and low-vision users rely on to navigate t
Your site is trying to load JavaScript files, but the server is sending them with the wrong file type label (MIME type). Modern browsers reject this for security reasons, treating them as HTML documen
Your site has 28 images without alt text (descriptive text that describes what an image shows). Screen readers—tools used by people with vision disabilities—cannot describe those images to users. This
Our automated performance testing tool timed out trying to load your homepage on a mobile connection — it waited 60 seconds and the page never fully loaded. This suggests either the site is extremely
Your homepage is missing LocalBusiness schema markup, which is structured data that tells Google your business's location, hours, phone, and services. You have Organization and WebSite data, but Local
Your website is missing the HSTS (HTTP Strict Transport Security) header, which is a security instruction that tells browsers to always use encrypted connections (HTTPS) when visiting your site. Witho
The X-Frame-Options header tells browsers whether your site can be displayed inside an iframe (a frame within another website). This header is missing from your homepage, which means someone could emb
Your website is missing a Content Security Policy (CSP) header — a security instruction that tells browsers which external resources (scripts, images, stylesheets) are allowed to load. Without it, mal
Your homepage has 37 buttons, links, and interactive elements that are smaller than 44×44 pixels when viewed on mobile phones. This makes them hard to tap accurately—especially for people with low vis
Your website has 37 interactive buttons, links, and form fields that are smaller than 44×44 pixels on mobile devices. This makes them hard to tap accurately, especially for people with larger fingers,
Your website has 37 buttons, links, and clickable elements on mobile that are smaller than 44×44 pixels. This is the minimum size recommended by accessibility standards (WCAG 2.5.5) to ensure people w
Your website has 37 clickable buttons, links, and form fields that are smaller than 44×44 pixels when viewed on a tablet. This makes them hard to tap accurately, especially for people with tremors, vi
Your site's mobile best practices score is 61 out of 100—well below the healthy threshold of 90. This score reflects issues like outdated browser APIs, missing security headers, or unoptimized third-p
Your homepage takes 12.9 seconds for the largest visual element to appear on screen, well above the 2.5-second target that keeps visitors engaged. This slow load is driven by unoptimized images, rende
Your homepage title is only 17 characters long. Search engines like Google use page titles as a ranking signal and to display in search results. A title that's too short misses an opportunity to inclu
OpenGraph metadata is code in your page header that tells social media platforms (Facebook, Instagram, LinkedIn) what image and text to show when someone shares your link. Without it, social posts loo
_4 findings on this page_
Your site is missing Twitter Card meta tags, which are small snippets of code that tell Twitter how to display your content when someone shares a link on that platform. Without them, Twitter shows a p
_4 findings on this page_
_4 findings on this page_
Your Events page is missing a meta description — the 160-character summary that appears below your page title in Google search results. Without it, Google generates its own excerpt from your page cont
_4 findings on this page_
_4 findings on this page_
_4 findings on this page_
Your site has 28 images without alt text—descriptive text that appears when images don't load and is read aloud by screen readers. This affects visitors using assistive technology and also tells searc
_4 findings on this page_
Your site has 28 images missing alt text—descriptions that tell screen readers and search engines what an image shows. This breaks accessibility for blind and visually impaired visitors, and search en
_4 findings on this page_
Your site has 28 images without alt text—these are descriptions that appear when images fail to load and help screen readers (tools used by people with visual impairments) understand what each image s
_4 findings on this page_
Your site has 28 images without alt text—descriptions that screen readers use to understand images, and that search engines use to index visual content. This means visually impaired customers can't un
_4 findings on this page_
Your site has 28 images without alt text—descriptive labels that explain what each image shows. Search engines and screen readers (used by visually impaired customers) can't interpret these images, wh
_4 findings on this page_
Your website has 28 images without alt text—descriptive labels that tell screen readers and search engines what an image shows. This breaks accessibility for blind and low-vision customers, and search
_4 findings on this page_
Your site has 28 images without alt text—short descriptions that describe what each image shows. When alt text is missing, screen readers used by visually impaired visitors can't explain the images, a
_4 findings on this page_
Your site has 28 images without alternative text (alt text). Alt text is a short description that appears if an image doesn't load and is read aloud to visitors using screen readers. Search engines al
_4 findings on this page_
Your site has 28 images without alt text — descriptions that screen readers use to understand images, and that search engines use to index visual content. This affects both customers using assistive t
_4 findings on this page_
Your website has 28 images without alt text — descriptive labels that screen readers use to understand images, and that search engines use to index visual content. This means visually impaired visitor
_4 findings on this page_
Your blog category page doesn't have a meta description — the short text snippet that appears under your site name in Google search results. Search engines will generate one automatically, but it's of
_4 findings on this page_
Your /category/events/ page doesn't have a meta description — that's the 160-character summary that appears below your page title in Google search results. Without it, Google may generate its own, whi
_3 findings on this page_
Your page title is 77 characters long, but search engines like Google typically display 50–60 characters on desktop and 40 characters on mobile before truncating with ellipsis. This title will be cut
OpenGraph tags are metadata snippets that control how your pages appear when shared on Facebook, Instagram, LinkedIn, and other social platforms. Without them, those platforms display a generic previe
Your blog post isn't set up to display nicely when shared on Twitter/X. Without a Twitter Card meta tag, when someone shares your content, Twitter shows a plain link instead of a rich preview with you
_3 findings on this page_
Your page title is 72 characters long, but search engines display only 50–60 characters on desktop and 40 characters on mobile before truncating with an ellipsis. This particular title will be cut off
Open Graph tags are snippets of code that tell social media platforms (Facebook, Instagram, LinkedIn) how to display your page when someone shares it. Without them, the platform guesses—often showing
Your pages don't include Twitter Card meta tags, which are optional HTML snippets that tell Twitter (now X) how to display your content when someone shares a link. Without them, shares appear plain an
_3 findings on this page_
Your page title is 100 characters long, but search engines like Google typically display only 50–60 characters in search results before truncating with an ellipsis. This means potential customers see
OpenGraph metadata are HTML tags that control how your pages appear when shared on Facebook, Instagram, LinkedIn, and other social platforms. Without them, your Valentine's Day guide (and likely other
Your blog post pages are missing Twitter Card meta tags — special codes that tell Twitter (now X) how to display your content when someone shares a link on that platform. Without these tags, shares ap
_3 findings on this page_
The meta description (the text Google shows below your page title in search results) is only 74 characters long. Google recommends 80–160 characters so your full message appears in search results inst
OpenGraph tags are snippets of code that tell social media platforms (Facebook, Instagram, LinkedIn) what image and text to show when someone shares your page. Without them, social shares appear as pl
_3 findings on this page_
_3 findings on this page_
_3 findings on this page_
_3 findings on this page_
Your site has 15 images without alt text (descriptive text that tells screen readers and search engines what the image shows). This makes the site harder for people using assistive technology to navig
_3 findings on this page_
_3 findings on this page_
Your site has 18 images without alt text (descriptive text that explains what an image shows). Search engines and accessibility tools rely on this text to understand your images. When alt text is miss
_3 findings on this page_
_3 findings on this page_
Five images on your delivery page don't have alt text — the short descriptive text that appears when an image fails to load and that screen readers use to describe images to visually impaired visitors
_3 findings on this page_
Your website has 6 images without alt text (descriptive text that appears if an image fails to load). This makes those images invisible to screen readers used by people with vision disabilities, and i
_3 findings on this page_
_3 findings on this page_
_2 findings on this page_
When someone shares a link to your 'Your First Visit' page on Facebook, Instagram, or messaging apps, those platforms don't know what image or title to display. Instead of showing your cannabis dispen
_2 findings on this page_
When someone shares your article on Facebook, Instagram, or other social platforms, those sites pull information (title, description, image) from special metadata tags called OpenGraph tags. Without t
_2 findings on this page_
When your blog post is shared on Facebook, Instagram, or other social platforms, those sites pull a preview image and title from special metadata tags called OpenGraph tags. Without them, your post sh
Your blog post isn't tagged with Twitter Card metadata, which means when someone shares the link on Twitter/X, it won't display a rich preview with your custom image and description. Instead, Twitter
_2 findings on this page_
OpenGraph tags are snippets of code that tell social media platforms (Facebook, Instagram, LinkedIn) how to display your page when someone shares a link. Without them, the platform guesses—often poorl
Your blog post pages are missing Twitter card meta tags, which are snippets of code that tell Twitter (now X) how to display your content when someone shares a link. Without them, social shares appear
_2 findings on this page_
When someone shares this page on Facebook, Instagram, or other social platforms, those sites don't know what title or image to display. Instead of showing your brand name and product photo, the share
Your blog posts and product pages are missing Twitter Card tags—special metadata that tells Twitter (now X) how to display your content when someone shares a link. Without these tags, Twitter shows a
_2 findings on this page_
Your blog post about International Women's Day is missing a Twitter card — a snippet of metadata that tells Twitter how to display your link when someone shares it. Without this, Twitter will auto-gen
_2 findings on this page_
Your blog post pages are missing a Twitter Card meta tag—a small piece of code that tells Twitter (X) how to display your content when someone shares a link. Without it, Twitter shows a generic previe
_2 findings on this page_
_2 findings on this page_
_1 finding on this page_
Your robots.txt file (the instruction sheet you give to Google's crawlers) doesn't tell them where to find your XML sitemap — a complete list of all your pages. Without this pointer, Google has to dis
_1 finding on this page_
Your WordPress login page (/wp-login.php) is publicly accessible and returns a successful response. This is a standard WordPress path that attackers routinely scan for. While WordPress login pages are
_Generated by Apex Sentinel Monthly Audit · 2026-04-19T06:50:33.906Z · Powered by Bud Authority._
Generated by Apex Sentinel · © 2026 Bud Authority