Remediation scope

Modern Heritage

modernheritageknox.com · scanned 2026-07-28 · 7 pages · ruleset 2026.07.1
Significant remediation required — 3 critical exposures. 21 findings, grouped into 8 work items.
Security F Performance D Mobile Failing SEO C Accessibility D
Estimated effort
—
bill rate $ / hr
Estimated cost
—
Timeline
—
Estimate confidence
High within ±18% of actual
across 1,240 jobs like this

Work items

ordered by priority · expand any item for the evidence behind the estimate
Add security response headers
Security · Critical
 3–5 hrs ›

The site serves authenticated pages with no baseline security headers. Low-effort, high-impact — mostly server/edge config, no app rewrite.

Evidence — 3 findings

OBC-SEC-0114HighNo Content-Security-Policy header
observed: absent on 412/412 responsesexpected: present, non-permissive
OBC-SEC-0090MedHSTS not enforced
observed: header absentexpected: max-age ≥ 15552000
OBC-SEC-0071MedX-Content-Type-Options missing
observed: absent on 7/7 pagesexpected: nosniff
Effort 3–5 hrs tap to override — your edit sharpens future estimates
Make the site mobile-responsive
Mobile · Critical
 10–16 hrs ›

Fixed desktop layout breaks on phones — the largest single line here. Effort scales with page count (7) and the fixed-width grid that has to be rebuilt fluid.

Evidence — 3 findings

OBC-RWD-0002HighNo viewport meta tag
observed: absent on 7/7 pagesexpected: width=device-width
OBC-RWD-0011HighFixed 980px layout — horizontal scroll on mobile
observed: body min-width 980pxexpected: fluid ≤ viewport
OBC-RWD-0020MedTap targets below minimum size
observed: 18 targets < 40px on 6 pagesexpected: ≥ 44px
Effort 10–16 hrs tap to override — your edit sharpens future estimates
Update end-of-life platform & libraries
Security · Critical
 5–8 hrs ›

Server and front-end libraries are years past end-of-life with known CVEs. Effort range reflects the risk of breakage on upgrade — hence a manual smoke pass.

Evidence — 2 findings

OBC-DEP-0003HighPHP 5.6 (end-of-life 2018)
observed: Server: PHP/5.6.40expected: supported release
OBC-DEP-0008HighjQuery 1.11.1 — known XSS
observed: jquery-1.11.1.min.jsexpected: patched ≥ 3.5
Effort 5–8 hrs tap to override — your edit sharpens future estimates
Fix load time — render-blocking & oversized images
Performance · High
 6–10 hrs ›

Homepage takes 6.8s to show its main content — the slowness costing conversions. Image optimization + deferring scripts.

Evidence — 3 findings

OBC-PERF-0005HighLargest Contentful Paint 6.8s
observed: 6.8s (homepage)expected: < 2.5s
OBC-PERF-0012High3.4 MB of unoptimized images
observed: 22 images, no next-gen formatsexpected: compressed, WebP/AVIF
OBC-PERF-0018Med11 render-blocking resources
observed: 11 blocking in <head>expected: deferred/async
Effort 6–10 hrs tap to override — your edit sharpens future estimates
Enable caching & compression
Performance · High
 2–3 hrs ›

Quick win — no cache or compression is configured, so every visit re-downloads everything at full size. Edge/server config only.

Evidence — 2 findings

OBC-PERF-0021MedNo Cache-Control on static assets
observed: header absentexpected: long-lived, immutable
OBC-PERF-0024MedNo gzip/brotli compression
observed: Content-Encoding absentexpected: br or gzip
Effort 2–3 hrs tap to override — your edit sharpens future estimates
Fix metadata & SEO basics
SEO · Medium
 3–5 hrs ›

Missing titles and descriptions mean pages are invisible or unappealing in search results. Content-entry work across 7 pages.

Evidence — 3 findings

OBC-SEO-0002MedMissing <title> on 4 pages
observed: 4/7 pagesexpected: unique title each page
OBC-SEO-0007LowNo meta description on 6 pages
observed: 6/7 pagesexpected: 140–160 chars
OBC-SEO-0014LowNo structured data
observed: none detectedexpected: LocalBusiness schema
Effort 3–5 hrs tap to override — your edit sharpens future estimates
Accessibility fixes — contrast, alt text, headings
Accessibility · Medium
 4–7 hrs ›

Contrast and alt-text failures are both a legal-risk and an SEO signal. Spread across the image library and templates.

Evidence — 3 findings

OBC-A11Y-0003Med22 images missing alt text
observed: 22 of 30 imagesexpected: descriptive alt
OBC-A11Y-0009Med14 color-contrast failures
observed: ratio < 4.5:1expected: WCAG AA
OBC-A11Y-0015LowNo H1 on 3 pages
observed: 3/7 pagesexpected: one H1 per page
Effort 4–7 hrs tap to override — your edit sharpens future estimates
Fix broken links & mixed content
SEO · Low
 2–3 hrs ›

Housekeeping — dead links hurt trust and crawlability; mixed content trips browser security warnings.

Evidence — 2 findings

OBC-LINK-0004Low7 broken internal links
observed: 7 links → 404expected: resolve or redirect
OBC-SEC-0130MedMixed active content
observed: http:// assets on 2 pagesexpected: https only
Effort 2–3 hrs tap to override — your edit sharpens future estimates

By priority

Critical · 3 items—
High · 2 items—
Medium · 2 items—
Low · 1 item—

What this scope clears

  • ✓ 3 critical security exposures on authenticated pages
  • ✓ A mobile experience that currently fails on every phone
  • ✓ A 6.8s load time that’s costing conversions
  • ✓ Search, accessibility, and trust issues across 7 pages
↻ Every number here is an editable estimate, not a fixed price. Adjust a line to your reality, and when the job closes we log the actual — so your next scope, and everyone’s, gets sharper. The estimates improve with use.