www.hardened-php.net speed test — 20 Oct 2026

Measured from the wfix.shop server on 20 October 2026 at 14:15 UTC. Grade B (85/100), with the screenshots, the timings and the fixes that matter.

http://www.hardened-php.net/

20 October 2026 at 14:15 UTC · Free test · report pt_4c55e205fd10
Grade
B
85/100
Performance94/100
Structure71/100

10 audit(s) passed, 5 need work

First byte (TTFB)414 msmeasured from this server
Fully loaded879 msfirst byte + slowest asset
Requests11document + assets
Page weight92.4 KBcompressed transfer
HTML document9.9 KBbr
ProtocolHTTP/2nginx

Where the first byte went

  • DNS lookup 94 ms 23%
  • TCP connect 160 ms 39%
  • Server wait 160 ms 39%

Measured on the connection that fetched the HTML. Every other request on the page waits for the end of this bar before it can start.

How this page compares

First bytefaster than 54% of 4,999 pages tested here414 ms against a median of 449 ms
Page weightlighter than 88% of 4,999 pages tested here92.4 KB against a median of 650.5 KB
Fully loadedfaster than 94% of 4,999 pages tested here879 ms against a median of 1.84 s
Requestssends fewer requests than 87% of 4,999 pages tested here11 against a median of 26

Every report published here is in this comparison, so it is a reference population of pages tested from one server - not a benchmark of the whole web.

What these numbers mean

  • The first byte arrived in 414 ms. That is workable, and the cheapest win left is caching or a warmer connection.
  • The page transfers 92.4 KB over 11 request(s), which is lean. Css files are 52% of it, so split the stylesheet so the first screen does not download the whole site.
  • The HTML itself arrives br-compressed.
  • It runs over HTTP/2, so the assets share a connection instead of opening one each.
  • The largest element painted at 1.17 s, inside the 2.5 s Google calls good.
  • Layout stayed still (CLS 0.001), so nothing jumps under the reader's cursor.

Fix first: Server response time (TTFB) - Cut server think time: page cache, query indexes, fewer synchronous calls to third parties inside the request. Connection setup is distance, so a nearer region or a CDN edge helps instead.

Read on one shared server, not a visitor's phone: use it to compare pages against each other, not as a promise about every connection. We fix what these tests find.

Browser render

The same URL loaded in a real browser, so these are the readings curl cannot produce. The grade above is still built from the server measurements.

Largest contentful paint1.17 sgood is under 2.5 s
Cumulative layout shift0.001under 0.1 is stable
Total blocking timenone over 50 mslong tasks during load
First contentful paint1.10 sfirst content on screen
Browser page weight142.0 KB14 request(s), scripts included
Largest contentful paint1.17 s
Goodgood under 2.5 s, poor over 4 s
Cumulative layout shift0.001
Goodgood under 0.1, poor over 0.25
Total blocking timenone over 50 ms
Goodgood under 200 ms, poor over 600 ms

Page weight by type

What the page is made of

Css 6 requests
48.5 KB 52%
Javascript 3 requests
34.0 KB 37%

Transfer size, compressed as sent. 11 request(s) in total, 92.4 KB across all of them.

Top issues

Server response time (TTFB)

high impact

The first byte arrived after 414 ms. Of that, 160 ms was the server thinking and 254 ms was connection setup. A first byte under 400 ms is what a visitor feels as instant.

Fix: Cut server think time: page cache, query indexes, fewer synchronous calls to third parties inside the request. Connection setup is distance, so a nearer region or a CDN edge helps instead.

Render-blocking resources

high impact

9 render-blocking resource(s) in the document head (3 script(s), 6 stylesheet(s)). The page cannot paint until each one arrives.

Fix: Add defer or async to scripts that do not change the first paint, inline the critical CSS, and load the rest with media="print" plus an onload swap.

Serve everything over HTTPS

high impact

The page itself is served over plain HTTP.

Fix: Redirect HTTP to HTTPS at the server, and rewrite the remaining http:// asset references so nothing depends on browser upgrading.

Avoid extra redirects

medium impact

1 redirect hop(s) before the page load started, each one a full round trip before the first byte.

Fix: Link to the canonical URL (and make sure http, the apex domain and www all point at it) so no visitor pays a redirect first.

Strict-Transport-Security

low impact

HSTS is not set, so the first visit on a hostile network can still be downgraded to HTTP.

Fix: Send Strict-Transport-Security with a max-age of at least six months. Add includeSubDomains once every subdomain is HTTPS.

Waterfall

Slowest requests

HTMLwww.hardened-php.net/r
465 ms
CSSwww.hardened-php.net/wp-content/themes/twentytwelve/css/blo…
400 ms
CSSwww.hardened-php.net/wp-content/themes/twentytwelve/fonts/f…
383 ms
JAVASCRIPTwww.hardened-php.net/wp-includes/js/jquery/jquery.min.js
382 ms
CSSwww.hardened-php.net/wp-content/themes/twentytwelve/style.css
382 ms
CSSwww.hardened-php.net/wp-includes/blocks/paragraph/style.min…
356 ms
CSSwww.hardened-php.net/wp-includes/css/dashicons.min.css
355 ms
CSSwww.hardened-php.net/wp-includes/css/admin-bar.min.css
355 ms
JAVASCRIPTwww.hardened-php.net/wp-includes/js/jquery/jquery-migrate.m…
354 ms
JAVASCRIPTwww.hardened-php.net/wp-content/themes/twentytwelve/js/navi…
354 ms

Each bar is one request's own response time, scaled to the slowest. Assets were fetched in parallel, so the bars overlap in real time rather than stacking. first party third party

RequestTypeStatusTimeSize
http://www.hardened-php.net/rhtml301465 ms0 B
http://www.hardened-php.net/wp-content/themes/twentytwelve/css/blocks.css?ver=20240812css200400 ms1.8 KB
http://www.hardened-php.net/wp-content/themes/twentytwelve/fonts/font-open-sans.css?ver=20230328css200383 ms831 B
http://www.hardened-php.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1javascript200382 ms28.9 KB
http://www.hardened-php.net/wp-content/themes/twentytwelve/style.css?ver=20241112css200382 ms7.6 KB
http://www.hardened-php.net/wp-includes/blocks/paragraph/style.min.css?ver=7.1.3css200356 ms282 B
http://www.hardened-php.net/wp-includes/css/dashicons.min.css?ver=7.1.3css200355 ms34.3 KB
http://www.hardened-php.net/wp-includes/css/admin-bar.min.css?ver=7.1.3css200355 ms3.7 KB
http://www.hardened-php.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1javascript200354 ms4.6 KB
http://www.hardened-php.net/wp-content/themes/twentytwelve/js/navigation.js?ver=20141205javascript200354 ms574 B
Report this page

The page is removed when the owner agrees. Sending this removes nothing by itself.

Run this test on your own site

The same engine, free, with the screenshots and the fixes. No account needed.