Reports. Decisions. Results.
HTTP Observatory Report
Website security report every week in your inbox.
Keep your visitors and their data safer from theft and scams, and keep their trust: see which security headers help, which ones are missing, and what to prioritize.
Free plan: 4 deliveries per month · AI Insight included Built using Mozilla’s HTTP Observatory
Sponsored by
Trusted by teams at Google, Airbnb, Stripe, IKEA, Nestlé and dozens more global brands.
Start receiving automated website security reports directly in your inbox.
I love having a weekly reminder of the Web Performance of my site, as another checkpoint that I’m not letting things regress, Also look forward to the featured links in case I missed anything in the webperf world in the last week.
WPR provides an easy way for me to observe and share simplified performance monitoring results with other engineers. Compared to other solutions, WPR just gets to the point with the data you need.
A snapshot report that provides valuable insights to help you focus on your website’s performance, based on data, makes it a worthwhile choice, especially considering such factors influence SEO.
About WebPerformance Report
WebPerformance Report is a reporting service. It gathers data from the tools you already trust and turns it into a clear report delivered to your inbox, on your schedule. Free to start, no dashboard to keep checking.
The HTTP Observatory Report shows how your site’s HTTP security headers are graded: Content Security Policy, HSTS, cookies, CORS, redirections, Referrer Policy, SRI and X-Frame-Options, plus the raw server headers and what changed since the last report.
See the security reportWhere the data comes from
The HTTP Observatory is developed by Mozilla and runs on MDN. It analyzes the response headers your server returns and checks them against security best practices widely accepted across the web industry.
Those headers defend your site against clickjacking, code injection and man-in-the-middle attacks, and they are easy to overlook.
Explore HTTP ObservatoryWe are really proud that teams at big companies and brands around the world read their WebPerformance Report every week, right from their inbox. 🎉
Five reports, one subscription. Pick the ones that matter to your site. Each has its own recipients and schedule.
WebPageTest Report
The gold-standard open-source performance tool. Core Web Vitals, filmstrip, request map.
HTTP Observatory Report
Mozilla’s in-depth assessment of your HTTP headers and security configuration.
WAVE Report
The accessibility barriers on your pages, checked against standards such as WCAG, ADA and the EU Accessibility Directive.
GA4 Report
Your traffic numbers set against the period before, so a channel drying up shows up while you can still act on it.
Search Console Report
Impressions, clicks, positions and the queries bringing visitors in from organic search.
Want all five?
Every report type is unlocked on the paid plans, each with its own URLs, recipients and schedule.
See PlansWeak security headers leave your visitors more exposed: injected scripts can steal what they type, hidden frames can trick them into clicks, and downgraded connections can be intercepted, often unnoticed because nothing looks broken. Every report shows where your headers stand across the four areas below, and what to prioritize.
-
Scan summary
Your site’s grade and score from Mozilla’s HTTP Observatory, with how many tests pass and how many fail.
-
Scoring
The penalty behind each result, CSP, CORS, redirections, Referrer Policy, HSTS, SRI, X-Content-Type and X-Frame-Options, so you can prioritize the biggest ones.
-
CSP analysis
Whether your Content Security Policy blocks inline scripts, eval(), plug-ins and insecure content: the protections against code injection.
-
Raw server headers
The headers your server actually sends, including ones like Server and X-Powered-By that can reveal your technology stack.
Get in touch: info@webperformancereport.com
Reports. Decisions. Results.
(stable version 😊)