HAAM · Website quality

Quality,
in the open.

How well does HAAM’s own website work? Measured performance, accessibility, security and privacy, with the evidence and the unfinished work in view.

Production snapshotMeasured 2026-10-23

These results describe the public website at the time of the audit. This new report page is verified separately before release. This is a dated snapshot, not live monitoring.

Download audit data ↓

Performance

A score needs context.

Three fresh browser runs per page and device preset. The table uses the run with the middle performance score; every other metric comes from that same run. All runs remain available below.

Page / preset	Performance / 100	Accessibility / 100	Best practices / 100	SEO / 100	Main content (LCP)	Blocking time (TBT)	Data transferred
/enMobile	82	96	100	92	3.41 s	107 ms	0.78 MB
/enDesktop	93	96	100	92	0.90 s	0 ms	1.02 MB
/en/aboutMobile	93	96	100	100	2.23 s	0 ms	0.84 MB
/en/aboutDesktop	96	96	100	92	0.72 s	0 ms	1.13 MB
/en/case-studies/viirusMobile	95	100	100	100	1.61 s	160 ms	0.96 MB
/en/case-studies/viirusDesktop	100	96	100	92	0.54 s	0 ms	1.23 MB
/en/startMobile	90	100	100	100	3.35 s	179 ms	1.34 MB
/en/startDesktop	100	100	100	100	0.72 s	0 ms	0.53 MB

Lighthouse warnings

The tool reported these limitations for the selected runs. Scores and timings may be incomplete; interpret them with the raw evidence.

/en · mobile: The page loaded too slowly to finish within the time limit. Results may be incomplete.
/en · desktop: The page loaded too slowly to finish within the time limit. Results may be incomplete.
/en/about · mobile: The page loaded too slowly to finish within the time limit. Results may be incomplete.
/en/about · desktop: The page loaded too slowly to finish within the time limit. Results may be incomplete.
/en/case-studies/viirus · mobile: The page loaded too slowly to finish within the time limit. Results may be incomplete.

All measurements

/en · Mobile

#1 · 71/100 * ↓#2 · 82/100 * ↓#3 · 96/100 * ↓

/en · Desktop

#1 · 93/100 * ↓#2 · 95/100 * ↓#3 · 83/100 * ↓

/en/about · Mobile

#1 · 92/100 * ↓#2 · 96/100 * ↓#3 · 93/100 * ↓

/en/about · Desktop

#1 · 98/100 * ↓#2 · 96/100 * ↓#3 · 94/100 * ↓

/en/case-studies/viirus · Mobile

#1 · 94/100 ↓#2 · 95/100 * ↓#3 · 99/100 ↓

/en/case-studies/viirus · Desktop

#1 · 100/100 ↓#2 · 100/100 ↓#3 · 100/100 ↓

/en/start · Mobile

#1 · 91/100 ↓#2 · 90/100 ↓#3 · 86/100 ↓

/en/start · Desktop

#1 · 99/100 ↓#2 · 100/100 ↓#3 · 100/100 ↓

Accessibility

Find the barriers. Keep looking.

axe scans cover seven representative pages at 390 and 1440 CSS pixels, in light and dark modes, with reduced motion. They include WCAG 2.2 AA rules supported by axe. Automated results do not establish WCAG conformance. Technical findings below are retained in the tool’s original English.

Browser states tested: 28
States without automated violations: 0
Distinct rules with violations: 4
Checks needing human review: 65

Open automated findings

moderate · region

All page content should be contained by landmarks

Affected elements across tested states: 28

Affected pages: /en, /en/about, /en/case-studies/viirus, /en/start, /en/products, /en/skills/interaction, /profile/kris.haamer

.summer26-unified-chrome

serious · aria-prohibited-attr

Elements must only use permitted ARIA attributes

Affected elements across tested states: 4

Affected pages: /en/about

.summer26-moosisai-visual

moderate · landmark-complementary-is-top-level

Aside should not be contained in another landmark

Affected elements across tested states: 4

Affected pages: /en/about

.summer26-moosisai

serious · color-contrast

Elements must meet minimum color contrast ratio thresholds

Affected elements across tested states: 4

Affected pages: /en/case-studies/viirus, /en/products

.summer26-language-active · .regional-button[href$="start"]

States with horizontal overflow: 0
States with motion despite reduced motion: 0
States where the skip-link check failed: 0
States with JavaScript errors: 0

Security

Inspect protections, not a badge.

Passive checks of the public HTTPS response, certificate and browser policies. A missing header is a hardening gap; a present header alone does not establish a safe application. Best-practice scores are not security scores.

TLS certificate trusted: Present TLSv1.3
HTTP redirects to HTTPS: Present
strict-transport-security: Presentmax-age=63072000
content-security-policy: Missing
x-content-type-options: Missing
x-frame-options: Missing
referrer-policy: Missing
permissions-policy: Missing
cross-origin-opener-policy: Missing

Production dependency advisories

The advisory check covers production dependencies in the repository’s workspace lockfile, including the iOS app. It is not an inventory of the deployed server. Package names and advisory links are in the downloadable evidence.

critical: 6 · high: 45 · moderate: 18 · low: 1 · info: 0

Privacy

What reaches outside the page?

Fresh browser sessions, before any analytics consent. These are observed hosts and cookie names, not a legal compliance assessment. First-party proxying and requests after other interactions need separate review.

Third-party request hosts: None observed
Observed cookie names: lang
Mixed-content requests: 0

Search & reliability

Can people and search engines get there?

HTTP and metadata checks cover the English sitemap routes, six language homepages and the canonical identity page. Other translations and complete internal/external link journeys are outside this crawl.

Public URLs checked: 79
Failed public URLs: 0
Missing page titles: 0
Missing descriptions: 0
Missing canonicals: 0
Pages without exactly one main heading: 8
Sitemap pages marked noindex: 0

Method & limits

Repeatable, with limits.

Lighthouse uses its default simulated mobile or desktop conditions, a fresh Chrome profile for each run, and the public production server. Server caches may be warm. These are lab observations from this audit machine; real devices and networks will differ. The tool versions and exact settings are retained in the audit files.

Lighthouse 13.4.0 · axe-core 4.11.0 · Chrome 155.0.8059.85

Audit machine in Taiwan. Other read-only browser checks ran during the initial Lighthouse collection. Machine load, internet variability and server cache state were not controlled.

Website tested: https://haam.co

Still needs review

Real-user Core Web Vitals, including interaction latency (INP), are not measured here.
Full screen-reader journeys, keyboard workflows, 200% text zoom, content quality and all translated pages need human review.
Authentication, authorization, APIs, provider secrets, backup restoration and penetration testing are outside this public-page audit.
Transferred bytes are measured; energy use and carbon emissions are not. No carbon rating is inferred.

How to interpret the checks

Technical evidence is published in English.

SHA-256 evidence manifest ↓

Found a barrier or a misleading result?

Email kris@haam.co with the page and what happened.

Lighthouse warnings

Open automated findings

All page content should be contained by landmarks

Elements must only use permitted ARIA attributes

Aside should not be contained in another landmark

Elements must meet minimum color contrast ratio thresholds

Production dependency advisories

Still needs review

How to interpret the checks

Found a barrier or a misleading result?

Help improve this website?