Growth Readiness Report

www.jotter.co.za

https://www.jotter.co.za/ · Analysed April 1, 2026

C Overall grade
Conversion & Trust (35% weight)
64
Search Visibility (35% weight)
76
Technical Confidence (30% weight)
86
How to read these scores
A 90–100 Highly optimised
B 80–89 Strong, minor gaps
C 70–79 Functional, room to grow
D 60–69 Below average
F Below 60 Significant issues

Each pillar blends deterministic signals (70%) with AI expert judgment (30%). Conversion & Trust and Search Visibility each carry 35% of the overall score; Technical Confidence carries 30%. A grade cap applies: if any pillar falls below 70, the site cannot receive an A regardless of the weighted average.

What your site does well

19 items
marketing

Your brand makes a strong first impression for a young SaaS product: the value proposition is mostly clear, the product screenshot helps users understand the workflow quickly, and the page feels modern and consistent.

CMO Review

marketing

Signups are easy to start. You already have multiple above-the-fold action buttons, strong visual prominence, and a simple low-friction email capture path.

CMO Review

marketing

You have a good early trust foundation with a testimonial, a visible integration badge, a physical address, and a newsletter signup for ongoing nurturing.

CMO Review

seo

Search engines are picking up a strong homepage foundation: the title tag is clear, the main page heading is present, the heading structure is well organized, and the homepage content depth is in a healthy range at 629 words.

SEO Review

seo

Your visibility foundation is technically solid for a young SaaS site. Pages are crawlable, robots.txt and sitemap are present, internal links checked are healthy with no broken links, and page speed is excellent with a fast load time.

SEO Review

seo

The homepage communicates the product clearly for searchers. The value proposition is easy to understand above the fold, content fitness is rated exceptional, and the copy aligns well with your core topic around notes, actions, and workspace.

SEO Review

technical

The technical foundation is strong on speed: the main content appears in about 0.8 seconds, the page is extremely lightweight, and the site uses only 4 requests, which supports reliable first-load performance for new users.

CTO Review

technical

Under the hood, the stack is lean and low-risk: Google Cloud hosting and Express.js were detected, no legacy JavaScript libraries were found, no third-party scripts were detected, and valid HTML was found with 0 errors.

CTO Review

technical

Core reliability basics are in place: HTTPS is enabled, mobile readiness is confirmed, navigation is present and healthy, and all 3 internal links checked were working.

CTO Review

security

SSL certificate active

Site is served securely over HTTPS

trust

Testimonials present

Social proof builds visitor confidence

marketing

6 call-to-actions found

CTA visible above the fold

marketing

2 forms for lead capture

technical

Performance score: 99

Fast loading improves user experience and rankings

technical

Accessibility score: 83

Good accessibility widens your audience

seo

SEO basics score: 83

Strong foundation for search visibility

design

Strong brand consistency

Colors, fonts, and imagery are cohesive

design

Excellent visual hierarchy

CTAs and key content are clearly visible

content

Clear, scannable content

Avg 9.0 words/sentence

Recommended fixes

13 total

Show what getting started actually looks like before users ask for access

high Moderate

Unclear Commitment

Add a simple pricing or access explainer that tells visitors whether the product is free, paid, trial-based, or waitlist-based, and what happens after they click.

  1. Add a short section near the hero or just below it that explains the current access model in plain language: immediate signup, request access, demo, or waitlist.
  2. If pricing is not ready for full public release, show a plan preview or a starting-price hint so buyers can qualify themselves.
  3. Match button wording to the real flow, such as 'Join free beta', 'Request early access', or 'Book a demo' so users know what to expect.
  4. Create a dedicated pricing page when plans are ready, with tiers, who each tier is for, and the core feature differences.

Why this matters: For SaaS, uncertainty around price and commitment slows signups. Clear access and pricing expectations help serious users move forward faster and reduce drop-off from confused visitors.

Pillar: Conversion & Trust

Bring your best proof closer to the first signup moment

medium Moderate

Low Trust Signals

Surface stronger credibility near the hero so users see proof before deciding whether to request access.

  1. Move one strong proof element directly under or beside the main signup area, such as your best testimonial or the integration badge row.
  2. Upgrade the existing testimonial by adding the customer's name, company, and photo if available.
  3. As pilot users come in, add recognizable company logos or short outcome-based quotes near the top of the page.
  4. Build one or two simple case-study pages focused on measurable before-and-after outcomes, then link to them from the homepage.

Why this matters: Users are being asked to trust a new product quickly. Proof that appears only mid-page or in lightweight form gets missed by bouncers. Earlier and stronger credibility can lift signups and reduce perceived risk.

Pillar: Conversion & Trust

Create a few focused pages that help people find you before they know your brand

medium Significant

Narrow Search Reach

Build a small set of intent-based pages around core SaaS discovery topics such as features, use cases, comparisons, integrations, and pricing.

  1. Start with the highest-intent pages supported by the business context: a pricing page, feature pages, and comparison pages.
  2. Give each page a distinct search target and headline, such as AI meeting notes to tasks, note-taking for consultants, or Gmail note import workflows, only where these reflect real product capabilities.
  3. Add original product screenshots, onboarding detail, and clear explanations of how the workflow works.
  4. Avoid stuffing the homepage with everything; let these pages carry deeper intent-specific content.

Why this matters: People searching for note-taking and productivity tools often do not search for your brand name first. Dedicated pages give Google more entry points to show Jotter for relevant non-brand searches and can support more signups and activations over time.

Pillar: Search Visibility

Add in-page links to your most important product pages so Google understands what matters

medium Moderate

Weak Page Connections

Once you have core product pages in place, link to them naturally from homepage copy and other relevant pages using descriptive anchor text.

  1. Keep the distinction clear: your current links are healthy because there are no broken links checked, but the linking strategy is weak because there are 0 contextual body links.
  2. After creating pages such as pricing, features, integrations, or comparisons, add 3-5 natural body links from the homepage and other relevant pages.
  3. Use descriptive anchor text tied to the topic of the destination page rather than generic phrases.

Why this matters: Search engines treat contextual in-content links as stronger topical signals than navigation or footer links. This helps Google understand which pages are most important and what searches they should compete for.

Pillar: Search Visibility

Make your pricing and access model easy to find for searchers comparing tools

medium Moderate

Unclear Pricing Access

Publish a clear page explaining pricing, trial or request-access status, and what users can expect during onboarding.

  1. Create a dedicated pricing page even if access is invitation-based or early access.
  2. Explain whether the product is free, paid, waitlist-based, demo-based, or invite-only, and what happens after someone requests access.
  3. Link to this page from the main navigation and homepage body copy once it exists.
  4. Include enough plain-language detail for searchers and crawlers to understand the offer without needing to sign in.

Why this matters: The homepage currently leaves open questions about cost and whether access is immediate or waitlist-based. For SaaS, that uncertainty can limit how well you capture high-intent searches from users actively comparing options.

Pillar: Search Visibility

Fix the accessibility issues that may block some users from signing up

high Moderate

Accessibility Barriers

Resolve the 3 detected accessibility issues, starting with the critical blocker first, then the serious and moderate issues.

  1. Run a Lighthouse check in Chrome or use the free axe DevTools browser extension to identify the affected elements on the homepage.
  2. Fix the critical issue first, since it can block assistive technology users from completing key actions.
  3. Address the serious issue next, then the moderate issue, and re-test until the page passes without critical failures.
  4. Use the HTML validation warnings as a secondary checklist, especially the noted missing labels, because form and control labels commonly affect signups and onboarding.

Why this matters: For a SaaS homepage, fewer barriers means more users can understand the product, navigate the page, and reach sign-up or request-access flows without friction.

Evidence

critical Form elements do not have associated labels 1 element affected · e.g. <textarea class="demo-textarea" id="demo-note"> on /
serious Background and foreground colors do not have a sufficient contrast ratio. 25 elements affected · e.g. <p class="hero-eyebrow"> on /
moderate Document does not have a main landmark. 1 element affected · e.g. <html lang="en"> on /

Homepage WCAG failure rate: 94.8% [WebAIM Million 2025]

Pillar: Technical Confidence

Make the app feel more reliable when pages are loading or something goes wrong

medium Moderate

Unclear Failure States

Add basic loading feedback and error handling so users see progress and recovery options instead of silent failures.

  1. Add visible loading states for key interactive areas so users know the site is working while content or requests are in progress.
  2. Implement React or framework-equivalent error boundaries around critical interface sections if applicable, or add Express-side fallback handling for failed requests and unexpected errors.
  3. Show a clear retry message or fallback UI when a request fails instead of leaving empty space or a broken component.
  4. Test slow-network and failed-request scenarios in Chrome DevTools to confirm the experience remains usable.

Why this matters: SaaS users judge product quality quickly. Clear loading and failure handling improves trust, supports activation, and reduces churn caused by unreliable first impressions.

1-second delay impact: -7% conversions [Google/Deloitte]

Pillar: Technical Confidence

Add basic privacy and consent controls before you scale traffic

medium Quick win

Privacy Readiness

Add a cookie consent banner if tracking expands, and publish clear privacy compliance signals that explain what data is collected and how it is used.

  1. Review whether any current or planned analytics, CRM, or marketing tools set cookies or process personal data beyond strictly necessary site function.
  2. Add a consent banner that reflects actual cookie usage and blocks non-essential tracking until consent is given if required in your markets.
  3. Publish or link a clear privacy policy and data-use explanation from the footer and onboarding entry points.
  4. Document data flows for email capture, waitlist signup, and product access requests so consent language matches reality.

Why this matters: For a SaaS company collecting signups and onboarding interest, privacy clarity helps enterprise-minded buyers and individual users feel safer engaging with the product.

Pillar: Technical Confidence

Reduce the chance of blank screens when scripts do not run

medium Moderate

Script Dependency

Add a basic fallback experience for JavaScript-dependent sections so the site still communicates core information even when scripts fail.

  1. Add a simple noscript message with a usable fallback path such as contact, access request, or product overview.
  2. Ensure core page content and key navigation render server-side or remain visible before interactive code finishes loading where feasible this week.
  3. Test the homepage with JavaScript disabled and with throttled network conditions to confirm users still see essential information and next steps.

Why this matters: Even a lightweight site can feel unreliable if one script problem causes a blank or incomplete page. Fallbacks protect signups and activation from avoidable failures.

Pillar: Technical Confidence

Improve your action buttons so more visitors click them

low Quick win

Weak Buttons

Tighten the wording on your main buttons so each one clearly communicates the benefit and the expected next step.

  1. Choose one primary action for the homepage, such as requesting access or starting a trial, and use that same wording consistently across hero and navigation.
  2. Add benefit-led wording where appropriate, for example clarifying whether access is free, early, or immediate.
  3. Demote secondary actions visually so the main path stands out instead of competing with near-duplicate buttons.
  4. A/B test current button copy against clearer variants and measure click-through to the signup step.

Why this matters: When users see several similar buttons without a clear difference, they hesitate. Sharper wording and one dominant path usually increase clicks and improve activation flow.

Evidence

Quality issue CTAs lack value propositions - adding benefits like 'free' or 'save' can boost clicks 30%+

Pillar: Conversion & Trust

Close 1 security gap in your website's protection

medium Quick win

Security Gaps

Your site is missing 1 security protection expected for saas sites.

  1. Set X-Content-Type-Options: nosniff — stops browsers from guessing a file's type and executing it as something it is not
  2. Where to add: configure these in your web server or application middleware — for Node.js/Express, the Helmet package adds them in one line; for nginx or Apache, add them to your server block or virtual host config

Why this matters: These headers strengthen security for saas sites that handle user data.

Evidence

serious x-content-type-options Missing — not set in server response

Recommended for saas sites

Based on HTTP response header analysis

Pillar: Technical Confidence

Add a meta description to control how you appear in Google

low Quick win

No Meta Description

Your page has no meta description. Google will auto-generate one, which may not represent your business well.

  1. Add a meta description: <meta name="description" content="Your compelling 150-character summary">
  2. Include your main value proposition and a call to action
  3. Keep it between 120-160 characters

Why this matters: A good meta description increases click-through rates from search results by telling searchers exactly what you offer.

Evidence

serious Meta description Missing — Google will auto-generate from page content

Pillar: Search Visibility

Duplicate page headlines found — help each page compete for its own search topic

low Quick win

Duplicate Page Titles

1 group of pages share identical title tags. Each page needs a distinct title so search engines can rank it for its own topic.

  1. Open each page listed below and update its title tag to reflect the specific topic of that page
  2. Keep titles between 50-60 characters and include the page's primary keyword near the start
  3. Avoid using your site name alone as a page title — add the page topic first, for example 'Services - YourBrand' or 'About YourBrand'

Why this matters: When multiple pages share the same title, search engines struggle to understand which page is most relevant for a query. Unique titles help each page rank independently.

Evidence

serious https://www.jotter.co.za/privacy Shares title: "Jotter - The note app that thinks for you." view →
serious https://www.jotter.co.za/sign-in Shares title: "Jotter - The note app that thinks for you." view →
serious https://www.jotter.co.za/terms Shares title: "Jotter - The note app that thinks for you." view →

Pillar: Search Visibility

Expert reviews

CMO · SEO · CTO

Each pillar is reviewed by an independent AI expert anchored to the detected signals. Scores blend 70% deterministic measurement with 30% expert judgment.

CMO

CMO Review

Growth & Conversion · Score: 67/100 · high confidence

Strengths

  • Your brand makes a strong first impression for a young SaaS product: the value proposition is mostly clear, the product screenshot helps users understand the workflow quickly, and the page feels modern and consistent.
  • Signups are easy to start. You already have multiple above-the-fold action buttons, strong visual prominence, and a simple low-friction email capture path.
  • You have a good early trust foundation with a testimonial, a visible integration badge, a physical address, and a newsletter signup for ongoing nurturing.

Key Issues

  • Users cannot quickly tell whether Jotter is free, paid, invite-only, or demo-led, which creates hesitation before signup.
  • Your proof is present but light: the testimonial is basic, there are no visible client logos beyond Gmail, and no case studies to reduce perceived risk.
  • Several similar access-focused buttons compete with each other, so visitors may pause instead of taking the next step.

CMO Recommendations

Improve your action buttons so more visitors click them

low

Tighten the wording on your main buttons so each one clearly communicates the benefit and the expected next step.

  1. Choose one primary action for the homepage, such as requesting access or starting a trial, and use that same wording consistently across hero and navigation.
  2. Add benefit-led wording where appropriate, for example clarifying whether access is free, early, or immediate.
  3. Demote secondary actions visually so the main path stands out instead of competing with near-duplicate buttons.
  4. A/B test current button copy against clearer variants and measure click-through to the signup step.

When users see several similar buttons without a clear difference, they hesitate. Sharper wording and one dominant path usually increase clicks and improve activation flow.

Show what getting started actually looks like before users ask for access

high

Add a simple pricing or access explainer that tells visitors whether the product is free, paid, trial-based, or waitlist-based, and what happens after they click.

  1. Add a short section near the hero or just below it that explains the current access model in plain language: immediate signup, request access, demo, or waitlist.
  2. If pricing is not ready for full public release, show a plan preview or a starting-price hint so buyers can qualify themselves.
  3. Match button wording to the real flow, such as 'Join free beta', 'Request early access', or 'Book a demo' so users know what to expect.
  4. Create a dedicated pricing page when plans are ready, with tiers, who each tier is for, and the core feature differences.

For SaaS, uncertainty around price and commitment slows signups. Clear access and pricing expectations help serious users move forward faster and reduce drop-off from confused visitors.

Bring your best proof closer to the first signup moment

medium

Surface stronger credibility near the hero so users see proof before deciding whether to request access.

  1. Move one strong proof element directly under or beside the main signup area, such as your best testimonial or the integration badge row.
  2. Upgrade the existing testimonial by adding the customer's name, company, and photo if available.
  3. As pilot users come in, add recognizable company logos or short outcome-based quotes near the top of the page.
  4. Build one or two simple case-study pages focused on measurable before-and-after outcomes, then link to them from the homepage.

Users are being asked to trust a new product quickly. Proof that appears only mid-page or in lightweight form gets missed by bouncers. Earlier and stronger credibility can lift signups and reduce perceived risk.

Assessment basis

This assessment is based on clearly provided conversion data: strong above-the-fold button visibility, simple forms, strong brand consistency, a mostly clear value proposition, weak but present trust signals, no visible pricing, no case studies, mild button ambiguity, and no detected marketing tracking tools.

SEO

SEO Review

Search Visibility · Score: 79/100 · high confidence

Strengths

  • Search engines are picking up a strong homepage foundation: the title tag is clear, the main page heading is present, the heading structure is well organized, and the homepage content depth is in a healthy range at 629 words.
  • Your visibility foundation is technically solid for a young SaaS site. Pages are crawlable, robots.txt and sitemap are present, internal links checked are healthy with no broken links, and page speed is excellent with a fast load time.
  • The homepage communicates the product clearly for searchers. The value proposition is easy to understand above the fold, content fitness is rated exceptional, and the copy aligns well with your core topic around notes, actions, and workspace.

Key Issues

  • Google is not getting a usable page description for the homepage, which limits your control over how this page appears in search results.
  • Search engines can crawl the site, but topical discovery is still thin because there are no contextual links inside the page body. Link health is good, but link strategy is weak.
  • Your search presence is still narrow for SaaS discovery. The crawl did not find pricing, comparison, feature, integration, blog, or case-study depth, and pricing visibility was not detected.

SEO Recommendations

Add a clear search result description so more people know why to click

low

Write a homepage meta description that explains what Jotter does, who it is for, and what action a visitor can take next.

  1. Add a unique meta description tag for the homepage, ideally around 150-160 characters.
  2. Include the core topic naturally, such as AI note-to-action workspace, plus the audience and outcome.
  3. Example direction: turn messy notes, emails, and thoughts into tasks and calendar actions for founders, consultants, and solo professionals.
  4. Check how it renders in search results and refine if Google rewrites it heavily.

When Google crawls your homepage today, it has almost no description to use. A strong description can raise visibility performance by improving how compelling your result looks in search.

Create a few focused pages that help people find you before they know your brand

medium

Build a small set of intent-based pages around core SaaS discovery topics such as features, use cases, comparisons, integrations, and pricing.

  1. Start with the highest-intent pages supported by the business context: a pricing page, feature pages, and comparison pages.
  2. Give each page a distinct search target and headline, such as AI meeting notes to tasks, note-taking for consultants, or Gmail note import workflows, only where these reflect real product capabilities.
  3. Add original product screenshots, onboarding detail, and clear explanations of how the workflow works.
  4. Avoid stuffing the homepage with everything; let these pages carry deeper intent-specific content.

People searching for note-taking and productivity tools often do not search for your brand name first. Dedicated pages give Google more entry points to show Jotter for relevant non-brand searches and can support more signups and activations over time.

Add in-page links to your most important product pages so Google understands what matters

medium

Once you have core product pages in place, link to them naturally from homepage copy and other relevant pages using descriptive anchor text.

  1. Keep the distinction clear: your current links are healthy because there are no broken links checked, but the linking strategy is weak because there are 0 contextual body links.
  2. After creating pages such as pricing, features, integrations, or comparisons, add 3-5 natural body links from the homepage and other relevant pages.
  3. Use descriptive anchor text tied to the topic of the destination page rather than generic phrases.

Search engines treat contextual in-content links as stronger topical signals than navigation or footer links. This helps Google understand which pages are most important and what searches they should compete for.

Make your pricing and access model easy to find for searchers comparing tools

medium

Publish a clear page explaining pricing, trial or request-access status, and what users can expect during onboarding.

  1. Create a dedicated pricing page even if access is invitation-based or early access.
  2. Explain whether the product is free, paid, waitlist-based, demo-based, or invite-only, and what happens after someone requests access.
  3. Link to this page from the main navigation and homepage body copy once it exists.
  4. Include enough plain-language detail for searchers and crawlers to understand the offer without needing to sign in.

The homepage currently leaves open questions about cost and whether access is immediate or waitlist-based. For SaaS, that uncertainty can limit how well you capture high-intent searches from users actively comparing options.

Assessment basis

The assessment is based on clear on-page and crawl data: strong title tag, H1 presence, exceptional content fitness, healthy 629-word homepage depth, excellent speed with 808ms load time, crawlable robots.txt and sitemap, no broken internal links checked, but a missing homepage meta description, no contextual body links, no structured data detected, missing Open Graph and Twitter Cards, and limited multi-page depth with no pricing page detected.

CTO

CTO Review

Technical Confidence · Score: 82/100 · high confidence

Strengths

  • The technical foundation is strong on speed: the main content appears in about 0.8 seconds, the page is extremely lightweight, and the site uses only 4 requests, which supports reliable first-load performance for new users.
  • Under the hood, the stack is lean and low-risk: Google Cloud hosting and Express.js were detected, no legacy JavaScript libraries were found, no third-party scripts were detected, and valid HTML was found with 0 errors.
  • Core reliability basics are in place: HTTPS is enabled, mobile readiness is confirmed, navigation is present and healthy, and all 3 internal links checked were working.

Key Issues

  • Accessibility needs attention with 1 critical issue, 1 serious issue, and 1 moderate issue affecting users with disabilities.
  • The site shows reliability gaps for a JavaScript-dependent SaaS experience: loading states are missing, error boundaries are missing, and no fallback is present when scripts fail or JavaScript is unavailable.
  • Privacy readiness is weak for a SaaS business: no cookie consent banner was detected and no GDPR compliance signals were found.

CTO Recommendations

Fix the accessibility issues that may block some users from signing up

high

Resolve the 3 detected accessibility issues, starting with the critical blocker first, then the serious and moderate issues.

  1. Run a Lighthouse check in Chrome or use the free axe DevTools browser extension to identify the affected elements on the homepage.
  2. Fix the critical issue first, since it can block assistive technology users from completing key actions.
  3. Address the serious issue next, then the moderate issue, and re-test until the page passes without critical failures.
  4. Use the HTML validation warnings as a secondary checklist, especially the noted missing labels, because form and control labels commonly affect signups and onboarding.

For a SaaS homepage, fewer barriers means more users can understand the product, navigate the page, and reach sign-up or request-access flows without friction.

Make the app feel more reliable when pages are loading or something goes wrong

medium

Add basic loading feedback and error handling so users see progress and recovery options instead of silent failures.

  1. Add visible loading states for key interactive areas so users know the site is working while content or requests are in progress.
  2. Implement React or framework-equivalent error boundaries around critical interface sections if applicable, or add Express-side fallback handling for failed requests and unexpected errors.
  3. Show a clear retry message or fallback UI when a request fails instead of leaving empty space or a broken component.
  4. Test slow-network and failed-request scenarios in Chrome DevTools to confirm the experience remains usable.

SaaS users judge product quality quickly. Clear loading and failure handling improves trust, supports activation, and reduces churn caused by unreliable first impressions.

Add basic privacy and consent controls before you scale traffic

medium

Add a cookie consent banner if tracking expands, and publish clear privacy compliance signals that explain what data is collected and how it is used.

  1. Review whether any current or planned analytics, CRM, or marketing tools set cookies or process personal data beyond strictly necessary site function.
  2. Add a consent banner that reflects actual cookie usage and blocks non-essential tracking until consent is given if required in your markets.
  3. Publish or link a clear privacy policy and data-use explanation from the footer and onboarding entry points.
  4. Document data flows for email capture, waitlist signup, and product access requests so consent language matches reality.

For a SaaS company collecting signups and onboarding interest, privacy clarity helps enterprise-minded buyers and individual users feel safer engaging with the product.

Reduce the chance of blank screens when scripts do not run

medium

Add a basic fallback experience for JavaScript-dependent sections so the site still communicates core information even when scripts fail.

  1. Add a simple noscript message with a usable fallback path such as contact, access request, or product overview.
  2. Ensure core page content and key navigation render server-side or remain visible before interactive code finishes loading where feasible this week.
  3. Test the homepage with JavaScript disabled and with throttled network conditions to confirm users still see essential information and next steps.

Even a lightweight site can feel unreliable if one script problem causes a blank or incomplete page. Fallbacks protect signups and activation from avoidable failures.

Tighten a few backend delivery settings to improve consistency as traffic grows

low

Enable response compression and finish the small media optimizations still available on the site.

  1. Enable gzip or Brotli compression in Express.js or at the Google Cloud edge so text responses are compressed before delivery.
  2. Convert the remaining JPG and PNG images to WebP or AVIF where supported.
  3. Add lazy loading to below-fold images so only the first screen loads immediately.
  4. Re-test after deployment to confirm the already-strong speed metrics stay strong while total transferred bytes drop further.

This is not an urgent fix because the site is already fast, but it adds headroom and keeps performance stable as content and traffic increase.

Assessment basis

This assessment is based on direct technical evidence: excellent on-page speed with 0.8s content appearance, 0.08 MB total page weight, 4 requests, HTTPS enabled, no third-party scripts, valid HTML with 0 errors, and no detected legacy library debt. The main deductions come from 1 critical accessibility issue plus 1 serious and 1 moderate issue, missing privacy signals, and observed resilience gaps including missing loading states, error handling, and JavaScript fallbacks.