Zuletzt gescannt: June 7, 2026

D0/100

Unterdurchschnittlich

Score-Bericht

www.muziker.sk

Gescannt am June 7, 2026

Unknown

Font Awesome

Swiper

Stimulus

Turbo

Cloudflare

Zuletzt gescannt: June 7, 2026

Aktionsplan

Beheben Sie zuerst diese 3 Dinge

Sortiert nach Score-Wirkung — jede Behebung verbessert Ihre Gesamtnote.

+18möglicher Gewinn

65/100

Performance

Gewichtung: 25% · 12 bestanden · 3 Warnungen · 3 fehlgeschlagen

Was wir gefunden haben: 652ms (good: <200ms)

Warum es wichtig ist: TBT over 600ms means your page is unresponsive for over half a second. Users who can't interact within 100ms perceive the site as broken. This kills conversions.

So beheben: Critical: audit all JavaScript. 1) Remove unused plugins/modules, 2) Defer analytics and chat widgets, 3) Code-split large bundles, 4) Move heavy computation to web workers.

Request quote for speed audit

Was wir gefunden haben: 0.271 (good: <0.1) — Core Web Vital FAILING

Warum es wichtig ist: CLS >0.25 fails Core Web Vitals. Users experience constant content jumping — extremely frustrating on mobile where accidental clicks lead to unwanted purchases or page changes.

So beheben: Urgent layout stability issues. 1) Add width/height to all <img> and <video>, 2) Reserve space for ads with min-height, 3) Use font-display: swap for web fonts, 4) Don't dynamically inject content above visible area.

Request quote for speed audit

Was wir gefunden haben: 746 KB wasted on unused code!

Warum es wichtig ist: Over 200 KB of unused code significantly slows parsing and execution. This is one of the easiest performance wins — removing dead code requires no trade-offs.

Hinweis: Diese Prüfung nutzt heuristische Erkennung und kann False Positives produzieren. Manuelle Verifizierung empfohlen.

So beheben: You're loading ${unusedTotalKB} KB of code that isn't used on this page. 1) Audit plugins and remove unused ones, 2) Use code-splitting for page-specific JS, 3) Run PurgeCSS on your stylesheets.

Was wir gefunden haben: 2.6 MB, 162 requests (optimal: <1.5 MB, <50 req)

Warum es wichtig ist: A 3 MB page takes 6+ seconds on 3G mobile. Over 50% of global e-commerce traffic is mobile — heavy pages lose customers in emerging markets and poor connectivity areas.

So beheben: Reduce page weight: compress images to WebP (saves 30-50%), enable text compression (gzip/brotli), lazy load below-fold images, remove unused CSS/JS.

Request quote for speed audit

Was wir gefunden haben: no-store

Warum es wichtig ist: no-cache/no-store forces browsers to re-download resources on every visit. Repeat visitors load your entire site from scratch every time.

So beheben: Set appropriate cache headers: static assets should have max-age=31536000 with versioned filenames. HTML pages can use max-age=0 with ETag for revalidation.

Request quote for speed audit

Was wir gefunden haben: Custom fonts detected without preload hints

Warum es wichtig ist: Fonts are discovered late in the render pipeline (after CSS is parsed). Preloading tells the browser to download them immediately, reducing Flash of Invisible Text (FOIT) by 200-500ms.

So beheben: Preload your primary font: <link rel='preload' href='/fonts/main.woff2' as='font' type='font/woff2' crossorigin>. For Google Fonts: preconnect to fonts.gstatic.com.

Request quote for speed audit

6 Probleme gefunden in Performance. Verbesserungspotenzial vorhanden.

Ihr Shop qualifiziert sich noch nicht für das Zulien Score-Badge. Erreichen Sie 80+, um es zu verdienen!

📧 Erinnerungen für Re-Scans

Wir senden Ihnen monatlich eine E-Mail, wenn ein erneuter Scan ansteht und Sie Ihre Verbesserungen verfolgen können.

Ich stimme den Datenschutzerklärung. Wir senden Ihnen Ihren Bericht und optionale Re-Scan-Benachrichtigungen.

🚀 Verbessern Sie Ihren Score

Unsere PrestaShop-Module beheben die meisten dieser Probleme automatisch.

Kostenlose 15-Min-Beratung · Unverbindlich

Teilen & Exportieren

Bereit, Ihren Score zu verbessern?

Ihr Shop verliert täglich Kunden. Die obigen Probleme kosten Sie Umsatz.

Selbst beheben

Schauen Sie sich unsere Module an und beheben Sie die Probleme mit 2 Klicks.

Zulien-Module ansehen

Wir erledigen es für Sie

Beschreiben Sie Ihr Ziel und wir senden Ihnen innerhalb von 48 Stunden ein Angebot — ohne Telefonat.

Schriftliches Angebot anfordern

Antwort innerhalb von 48 h · Kein Verkaufsgespräch

Dies ist eine automatisierte heuristische Schätzung, kein professionelles Audit. Befunde spiegeln öffentlich beobachtbare Signale zum Scan-Zeitpunkt wider und können False Positives enthalten.Mehr zu unserer MethodikUngenauigkeit meldenDiesen Bericht entfernen

Zulien Score

Komplexný audit e-shopu — 50+ kontrol v 7 kategóriách

67/100

Grade D

www.muziker.sk

Dátum auditu: June 7, 2026

Online report: https://score.zulien.sk/r/muziker.sk

Executive summary

Chýb

Upozornení

131

Spolu kontrol

Skóre po kategóriách

Kategória	Skóre	Váha	Chyby	Upozornenia	OK
Performance	65/100	25%	3	3	12
SEO	79/100	20%	1	6	16
Security	55/100	15%	3	9	5
Mobile	70/100	10%	1	8	7
AI Readiness	55/100	10%	7	13	10
GDPR	67/100	10%	1	5	7
Vulnerability	71/100	10%	2	4	8

Kritické zistenia

Total Blocking Time (TBT)· Performance

TBT over 600ms means your page is unresponsive for over half a second. Users who can't interact within 100ms perceive the site as broken. This kills conversions.

Cumulative Layout Shift (CLS)· Performance

CLS >0.25 fails Core Web Vitals. Users experience constant content jumping — extremely frustrating on mobile where accidental clicks lead to unwanted purchases or page changes.

Unused Code (CSS + JS)· Performance

Over 200 KB of unused code significantly slows parsing and execution. This is one of the easiest performance wins — removing dead code requires no trade-offs.

H1 Heading· SEO

The H1 is the primary content signal for search engines. Pages without H1 rank significantly lower for target keywords.

HSTS (Strict-Transport-Security)· Security

Without HSTS, attackers can intercept the first HTTP request and downgrade the connection. This is the #1 way to steal session cookies on public WiFi.

Content-Security-Policy (CSP)· Security

CSP is the most powerful defense against XSS attacks. Without it, any injected script runs with full privileges. CSP blocks inline script injection, the #1 web attack vector.

Clickjacking Protection· Security

Clickjacking overlays your site in a hidden iframe. Attackers trick users into clicking buttons (like 'Confirm Purchase') without knowing it.

Form Input Labels (WCAG 3.3.2)· Mobile

EAA 2026 (European Accessibility Act) vstupuje do platnosti 28.6.2025. E-shopy nad 10 zamestnancov alebo €2M obrat musia byť WCAG 2.1 AA kompatibilné — chýbajúce labely sú jedna z najčastejších žalovateľných chýb.

llms.txt (AI Site Descriptor)· AI Readiness

llms.txt is the emerging standard for AI-readable site descriptions — like robots.txt was for search engines. Early adopters (Yoast, Cloudflare, Stripe) are already using it. Without it, AI assistants have no guided overview of your store.

Content Accessibility for AI· AI Readiness

AI crawlers see only raw HTML. The LLMClicks audit tool found that JS-dependent pages score 70% lower in AI readiness. Server-rendered content is the #1 prerequisite for AI visibility.

Heading Hierarchy for AI· AI Readiness

AI extracts information based on heading structure. Pages with proper H1→H2→H3 hierarchy are more accurately parsed by ChatGPT, Perplexity, and Google AI Overviews. Without it, AI may misinterpret your content.

Content Freshness Signals· AI Readiness

No freshness signals = AI assumes your content is stale. ChatGPT and Perplexity both weight recency in their citation algorithms. Competitors who show recent updates will be cited instead of your static pages.

Performance

65/100

Váha: 25% · 12 OK · 3 upozornení · 3 chýb · spolu 18

Total Blocking Time (TBT)Zlyhalo

652ms (good: <200ms)

Prečo je to dôležité: TBT over 600ms means your page is unresponsive for over half a second. Users who can't interact within 100ms perceive the site as broken. This kills conversions.

Ako opraviť: Critical: audit all JavaScript. 1) Remove unused plugins/modules, 2) Defer analytics and chat widgets, 3) Code-split large bundles, 4) Move heavy computation to web workers.

Cumulative Layout Shift (CLS)Zlyhalo

0.271 (good: <0.1) — Core Web Vital FAILING

Prečo je to dôležité: CLS >0.25 fails Core Web Vitals. Users experience constant content jumping — extremely frustrating on mobile where accidental clicks lead to unwanted purchases or page changes.

Ako opraviť: Urgent layout stability issues. 1) Add width/height to all <img> and <video>, 2) Reserve space for ads with min-height, 3) Use font-display: swap for web fonts, 4) Don't dynamically inject content above visible area.

Unused Code (CSS + JS)Zlyhalo

746 KB wasted on unused code!

Prečo je to dôležité: Over 200 KB of unused code significantly slows parsing and execution. This is one of the easiest performance wins — removing dead code requires no trade-offs.

Ako opraviť: You're loading ${unusedTotalKB} KB of code that isn't used on this page. 1) Audit plugins and remove unused ones, 2) Use code-splitting for page-specific JS, 3) Run PurgeCSS on your stylesheets.

Total Page WeightUpozornenie

2.6 MB, 162 requests (optimal: <1.5 MB, <50 req)

Prečo je to dôležité: A 3 MB page takes 6+ seconds on 3G mobile. Over 50% of global e-commerce traffic is mobile — heavy pages lose customers in emerging markets and poor connectivity areas.

Ako opraviť: Reduce page weight: compress images to WebP (saves 30-50%), enable text compression (gzip/brotli), lazy load below-fold images, remove unused CSS/JS.

Cache-Control StrategyUpozornenie

no-store

Prečo je to dôležité: no-cache/no-store forces browsers to re-download resources on every visit. Repeat visitors load your entire site from scratch every time.

Ako opraviť: Set appropriate cache headers: static assets should have max-age=31536000 with versioned filenames. HTML pages can use max-age=0 with ETag for revalidation.

Font PreloadingUpozornenie

Custom fonts detected without preload hints

Prečo je to dôležité: Fonts are discovered late in the render pipeline (after CSS is parsed). Preloading tells the browser to download them immediately, reducing Flash of Invisible Text (FOIT) by 200-500ms.

Ako opraviť: Preload your primary font: <link rel='preload' href='/fonts/main.woff2' as='font' type='font/woff2' crossorigin>. For Google Fonts: preconnect to fonts.gstatic.com.

Server Response Time (TTFB)Prešlo

49ms

First Contentful Paint (FCP)Prešlo

0.65s

Largest Contentful Paint (LCP)Prešlo

1.25s — Core Web Vital ✓

Speed IndexPrešlo

1.43s

Render-blocking ResourcesPrešlo

No render-blocking resources found

Text Compression (gzip/brotli)Prešlo

All text resources properly compressed

Resource Hints (Preload/Preconnect)Prešlo

1 preload, 0 preconnect hint(s)

Lazy LoadingPrešlo

69% of images use native lazy loading (126/183)

HTTP/3 (QUIC) SupportPrešlo

HTTP/3 enabled via Alt-Svc header

Script Loading StrategyPrešlo

91% of scripts use async/defer/module (0 async, 10 defer, 0 module)

CSS File CountPrešlo

1 CSS file(s) — well consolidated

Critical CSS StrategyPrešlo

Critical CSS / async CSS loading detected

SEO

79/100

Váha: 20% · 16 OK · 6 upozornení · 1 chýb · spolu 23

H1 HeadingZlyhalo

Prečo je to dôležité: The H1 is the primary content signal for search engines. Pages without H1 rank significantly lower for target keywords.

Ako opraviť: Add exactly one H1 tag containing your primary keyword. It should be the most prominent heading on the page.

Meta TitleUpozornenie

24 chars (optimal: 30-60)

Prečo je to dôležité: Short titles waste valuable ranking real estate in search results.

Ako opraviť: Your title is very short. Add descriptive keywords and your brand name for better ranking signals.

Canonical URLUpozornenie

og:url present (https://www.muziker.sk/) but <link rel=canonical> missing

Prečo je to dôležité: og:url helps social platforms but Google officially ranks the canonical tag higher. With both present, you avoid any duplicate-content ambiguity.

Ako opraviť: Add <link rel='canonical' href='https://www.muziker.sk/'> to <head>. og:url covers social sharing; canonical covers Google + AI crawlers explicitly.

Image Alt AttributesUpozornenie

Only 58% of 183 images have alt text

Prečo je to dôležité: Missing alt text means zero visibility in Google Image Search (which drives 20%+ of total search traffic for e-commerce).

Ako opraviť: 77 images are missing alt attributes. Add descriptive, keyword-rich alt text to every image.

Text-to-HTML RatioUpozornenie

5% — low content density (4411 words)

Prečo je to dôležité: Low text-to-HTML ratio signals thin content to Google. Pages with more useful text rank higher and convert better.

Ako opraviť: Add more unique text content. Write detailed product descriptions, buying guides, and FAQ sections.

Image Format OptimizationUpozornenie

0% next-gen formats — 59 JPEG, 27 PNG images

Prečo je to dôležité: Your images are using legacy formats only. Switching to WebP typically reduces page weight by 30-50% — one of the highest-impact performance optimizations.

Ako opraviť: Convert all images to WebP format. Most CMS platforms have plugins for automatic WebP conversion. Use AVIF for even better compression.

Color Contrast SignalUpozornenie

15 very light text colors found — potential contrast issues

Prečo je to dôležité: Low contrast text is the #1 accessibility issue found on 83.6% of home pages (WebAIM Million 2024). It affects 8% of men with color vision deficiency and everyone in bright sunlight.

Ako opraviť: Ensure text has minimum 4.5:1 contrast ratio against background (WCAG AA). Use tools like WebAIM Contrast Checker. Light gray text on white is the most common violation.

Meta DescriptionPrešlo

147 chars

Content Structure (H2 Headings)Prešlo

37 H2 subheadings found

Open Graph TagsPrešlo

og:description, og:image, og:type

Open Graph Image FormatPrešlo

image/png

Twitter/X CardsPrešlo

Card type: summary_large_image

Structured Data (JSON-LD)Prešlo

1 block(s): Organization, PostalAddress, ImageObject, WebSite

robots.txtPrešlo

Present, references sitemap

XML SitemapPrešlo

Found with ~9+ URLs

HTML Language AttributePrešlo

lang="sk-SK"

Hreflang Tags (Multilingual)Prešlo

36 language(s): en-AL, de-AT, sr-BA, nl-BE, bg

FaviconPrešlo

Favicon detected

Semantic HTML StructurePrešlo

4/6 semantic elements: <nav>, <main>, <header>, <footer>

Content DepthPrešlo

4411 words — sufficient content

Deep Heading HierarchyPrešlo

H2: 37, H3: 3 — well-structured content

Internal LinkingPrešlo

100 internal links — strong site navigation

Accessibility FundamentalsPrešlo

3/4 a11y signals: 2823 ARIA roles, 474 ARIA labels, lang="sk-SK"

Security

55/100

Váha: 15% · 5 OK · 9 upozornení · 3 chýb · spolu 17

HSTS (Strict-Transport-Security)Zlyhalo

Prečo je to dôležité: Without HSTS, attackers can intercept the first HTTP request and downgrade the connection. This is the #1 way to steal session cookies on public WiFi.

Ako opraviť: Add header: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload — then submit to hstspreload.org.

Content-Security-Policy (CSP)Zlyhalo

Prečo je to dôležité: CSP is the most powerful defense against XSS attacks. Without it, any injected script runs with full privileges. CSP blocks inline script injection, the #1 web attack vector.

Ako opraviť: Implement a CSP header. Start with: Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: — then gradually tighten.

Clickjacking ProtectionZlyhalo

Prečo je to dôležité: Clickjacking overlays your site in a hidden iframe. Attackers trick users into clicking buttons (like 'Confirm Purchase') without knowing it.

Ako opraviť: Add X-Frame-Options: DENY (or SAMEORIGIN if iframes are needed). Better: use CSP frame-ancestors 'self'.

DNSSECUpozornenie

No DNSKEY records — zone is unsigned

Prečo je to dôležité: Without DNSSEC, attackers controlling intermediate resolvers can forge responses for your domain — sending users to phishing sites with valid HTTPS that match your name. EU national CSIRTs (SK-CERT, NÚKIB) recommend DNSSEC for all in-scope entities.

Ako opraviť: Enable DNSSEC at your DNS host (most modern registrars offer 1-click activation: Cloudflare, Route 53, Google Cloud DNS, web.sk, websupport.sk). Verify via dnsviz.net afterwards.

CAA DNS RecordUpozornenie

No CAA records — any CA can issue certificates for this domain

Prečo je to dôležité: CAA records limit which Certificate Authorities can issue certificates for your domain. Without CAA, a compromised or rogue CA can issue valid certs that browsers will trust — a documented breach pattern (DigiNotar 2011, Symantec 2017).

Ako opraviť: Publish CAA TXT records pinning your CA. For Let's Encrypt: `0 issue "letsencrypt.org"`. For multiple CAs add additional `0 issue "..."` records. Add `0 iodef "mailto:security@yourdomain.tld"` for misissuance reports.

X-Content-Type-OptionsUpozornenie

Prečo je to dôležité: Without nosniff, browsers may execute uploaded files as scripts. An attacker could upload a .jpg that's actually JavaScript and trick the browser into running it.

Ako opraviť: Add header: X-Content-Type-Options: nosniff

Referrer-PolicyUpozornenie

Prečo je to dôležité: Without a referrer policy, browsers send the full URL to third parties. This can leak sensitive data like session tokens in URLs or internal page paths.

Ako opraviť: Add header: Referrer-Policy: strict-origin-when-cross-origin — this is the best balance between functionality and privacy.

Permissions-PolicyUpozornenie

Prečo je to dôležité: Without Permissions-Policy, any third-party script (ads, analytics, chat widgets) can access camera, microphone, and geolocation without your knowledge.

Ako opraviť: Add: Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=() — disable APIs your site doesn't need.

Subresource Integrity (SRI)Upozornenie

Only 1/12 external scripts have integrity hashes

Prečo je to dôležité: Without SRI, if a third-party CDN is compromised, attackers can inject malicious code into your site. The British Airways breach (£20M fine) was exactly this attack vector.

Ako opraviť: Add integrity='sha384-...' and crossorigin='anonymous' attributes to all third-party <script> tags. Use srihash.org to generate hashes.

security.txt (RFC 9116)Upozornenie

Prečo je to dôležité: security.txt lets ethical hackers report vulnerabilities responsibly. Without it, they may disclose publicly or not report at all. Required by ISO 27001 and SOC 2.

Ako opraviť: Create /.well-known/security.txt with Contact, Expires, and Preferred-Languages fields. See securitytxt.org for the generator.

Iframe SandboxingUpozornenie

1/1 iframe(s) without sandbox attribute

Prečo je to dôležité: Unsandboxed iframes can access your DOM, run scripts, and navigate the top window. Third-party iframes (ads, widgets) should always be sandboxed to prevent clickjacking and XSS.

Ako opraviť: Add sandbox attribute to all <iframe> elements. Use sandbox='allow-scripts allow-same-origin' for third-party embeds. This restricts iframe capabilities to only what's needed.

Password Field SecurityUpozornenie

1 password field(s) block autocomplete

Prečo je to dôležité: NIST SP 800-63B explicitly recommends ALLOWING password paste and autofill. Blocking password managers forces users to choose weaker, memorable passwords — the #1 cause of account compromise.

Ako opraviť: Remove autocomplete='off' from password fields. Password managers improve security by enabling unique, strong passwords. Blocking them encourages password reuse.

SSL/TLS CertificatePrešlo

Valid HTTPS connection established

HTTP → HTTPS RedirectPrešlo

HTTP properly redirects to HTTPS

Cookie Security FlagsPrešlo

No cookies set on initial response

Technology DisclosurePrešlo

Server: cloudflare (no version)

CDN / WAF ProtectionPrešlo

Cloudflare detected — DDoS protection and edge caching active

Mobile

70/100

Váha: 10% · 7 OK · 8 upozornení · 1 chýb · spolu 16

Form Input Labels (WCAG 3.3.2)Zlyhalo

Iba 3/12 inputs má label (25%)

Prečo je to dôležité: EAA 2026 (European Accessibility Act) vstupuje do platnosti 28.6.2025. E-shopy nad 10 zamestnancov alebo €2M obrat musia byť WCAG 2.1 AA kompatibilné — chýbajúce labely sú jedna z najčastejších žalovateľných chýb.

Ako opraviť: 9 input elementov nemá label. Každý input musí mať priradený <label for="id">Text</label> alebo aria-label. Placeholder NIE je label (WCAG 3.3.2). Ak je checkout/registrácia formulár — toto znižuje konverziu a porušuje EN 301 549 (EAA 2026).

Mobile Performance ScoreUpozornenie

68/100 (target: 90+)

Prečo je to dôležité: Over 65% of e-commerce traffic is mobile (Statista 2024). Google ranks based on mobile performance, not desktop. Mobile score <50 means you're penalized in mobile search.

Ako opraviť: Optimize for mobile: compress images to WebP, defer non-critical JS, reduce CSS file size. Mobile CPUs are 3-5x slower than desktop — what's fast on desktop is slow on mobile.

Touch Target SizeUpozornenie

Prečo je to dôležité: Small tap targets cause 37% more mis-taps on mobile (Google UX research). In e-commerce, a mis-tap on 'Remove from cart' instead of 'Checkout' directly loses revenue.

Ako opraviť: Ensure ALL interactive elements (buttons, links, form fields) are at least 48×48px with 8px minimum spacing between them. Pay special attention to: navigation menus, filter buttons, product variant selectors, and footer links.

Font Size ReadabilityUpozornenie

Prečo je to dôležité: Text smaller than 16px forces mobile users to pinch-zoom. This breaks the responsive layout and creates a frustrating experience. Users over 40 are especially affected — and they have the highest purchasing power.

Ako opraviť: Set minimum 16px font size for body text. Use relative units (rem/em) instead of px for scalability. Product titles: 18px+, prices: 20px+, CTAs: 16px+ with bold.

Apple Mobile Web AppUpozornenie

Missing: apple-mobile-web-app-capable, status-bar-style

Prečo je to dôležité: These tags enable 'Add to Home Screen' on iOS with a full-screen experience. 45% of mobile shoppers use iOS — a polished home screen presence increases return visits.

Ako opraviť: Add: <meta name='apple-mobile-web-app-capable' content='yes'>, <meta name='apple-mobile-web-app-status-bar-style' content='default'>, <link rel='apple-touch-icon' href='/icon-180.png'>.

Form Input TypesUpozornenie

phone fields use type='text' instead of type='tel'

Prečo je to dôležité: Correct input types show specialized mobile keyboards — email keyboard with @, phone with number pad. This reduces input errors by 30% and speeds up form completion (Baymard Institute).

Ako opraviť: Use semantic input types: type='email' for email (shows @ keyboard), type='tel' for phone (shows number pad), type='search' for search (shows search button). These trigger optimized mobile keyboards.

Print StylesheetUpozornenie

Order/invoice page without print styles

Prečo je to dôležité: Customers print order confirmations and invoices. Without print styles, they get navigation bars, cookie banners, and broken layouts. This is a common usability complaint for e-commerce.

Ako opraviť: Add @media print CSS rules to hide navigation, ads, and non-essential elements. Ensure order details, prices, and company info are visible when printed.

Fixed Width ElementsUpozornenie

Large fixed-width elements detected — may cause horizontal scroll

Prečo je to dôležité: Fixed-width elements wider than the viewport cause horizontal scrolling on mobile. Google's mobile-friendly test specifically checks for this.

Ako opraviť: Replace fixed pixel widths with max-width: 100% or use relative units (%, vw). Add 'overflow-x: hidden' to body as a safety net.

Heading Hierarchy (WCAG 1.3.1)Upozornenie

Preskočené úrovne: h3→h6

Prečo je to dôležité: Preskočené heading levely (napr. h1 priamo na h3) zlomia navigáciu pre screen reader používateľov a signalizujú Googlu zlú štruktúru dokumentu. Aj SEO je negatívne ovplyvnené.

Ako opraviť: Dodržuj poradie nadpisov h1 → h2 → h3 → h4 bez preskočenia. Screen readers používajú hierarchiu nadpisov na navigáciu. Ak potrebuješ menšie písmo ale rovnakú úroveň, použi CSS triedu, nie nižší heading tag.

Viewport ConfigurationPrešlo

width=device-width, initial-scale=1

Content Fits ViewportPrešlo

No horizontal scrolling needed

Responsive Design TechniquesPrešlo

Media queries detected

Theme ColorPrešlo

theme-color meta tag present

Mobile Navigation (Semantic)Prešlo

<nav> element present — proper navigation landmark

Responsive Images (srcset)Prešlo

111 image(s) use srcset for responsive sizing

Link Text Quality (WCAG 2.4.4)Prešlo

Všetky odkazy majú popisný text

AI Readiness

55/100

Váha: 10% · 10 OK · 13 upozornení · 7 chýb · spolu 30

llms.txt (AI Site Descriptor)Zlyhalo

Prečo je to dôležité: llms.txt is the emerging standard for AI-readable site descriptions — like robots.txt was for search engines. Early adopters (Yoast, Cloudflare, Stripe) are already using it. Without it, AI assistants have no guided overview of your store.

Ako opraviť: Create /llms.txt in Markdown format: # Your Store Name > One-line summary of your business and key offerings. Detailed description paragraph. ## Products - [Product Category](URL): Description ## About - [About Us](URL): Company history and values See llmstxt.org for the full specification.

Content Accessibility for AIZlyhalo

Only 4411 words visible in HTML — content may be JS-dependent

Prečo je to dôležité: AI crawlers see only raw HTML. The LLMClicks audit tool found that JS-dependent pages score 70% lower in AI readiness. Server-rendered content is the #1 prerequisite for AI visibility.

Ako opraviť: Your page has very little content in the HTML source. If you're using a JavaScript framework (React, Vue, Angular), implement Server-Side Rendering (SSR) or Static Site Generation (SSG).

Heading Hierarchy for AIZlyhalo

0 H1, 37 H2, 3 H3 — poor structure

Prečo je to dôležité: AI extracts information based on heading structure. Pages with proper H1→H2→H3 hierarchy are more accurately parsed by ChatGPT, Perplexity, and Google AI Overviews. Without it, AI may misinterpret your content.

Ako opraviť: Use exactly 1 H1 (page title), then organize content with H2 sections and H3 subsections. Each heading should describe the content that follows. Never skip heading levels (H1→H3 without H2).

Content Freshness SignalsZlyhalo

Prečo je to dôležité: No freshness signals = AI assumes your content is stale. ChatGPT and Perplexity both weight recency in their citation algorithms. Competitors who show recent updates will be cited instead of your static pages.

Ako opraviť: Add dateModified and datePublished to your JSON-LD schema, and display a visible 'Last updated' date on the page. Update content quarterly at minimum. AI heavily favors fresh, maintained content.

Canonical Tag for AI DeduplicationZlyhalo

Prečo je to dôležité: Without a canonical tag, AI models may index multiple versions of the same page (with/without trailing slash, with parameters, etc.), diluting your AI visibility across duplicate URLs.

Ako opraviť: Add <link rel='canonical' href='https://your-absolute-url'> to every page. This tells AI engines which URL is the authoritative version of this content.

Image Alt Text Quality for AIZlyhalo

Only 5% quality alt text — 77 missing, 97 poor

Prečo je to dôležité: Poor alt text means your product images are invisible to AI visual search (Google Lens, Bing Visual Search). This is also an accessibility requirement (WCAG 2.1 AA) — many regions enforce this legally.

Ako opraviť: Audit all images: add descriptive alt text (3-15 words) to every <img>. Include product names, features, materials, colors. This is critical for visual AI search and accessibility compliance.

Content-to-Boilerplate RatioZlyhalo

Only 10% in main content — mostly boilerplate

Prečo je to dôležité: Token density measures useful content vs noise. Pages with <30% content ratio are scored 'not machine-readable' by tools like LLMClicks. AI literally can't find your content in the boilerplate.

Ako opraviť: Wrap your primary content in <main> or <article> tags. AI extracts content from these semantic containers — without them, your product descriptions are mixed with navigation and footer text.

llms-full.txt (Complete AI Content)Upozornenie

Prečo je to dôležité: llms-full.txt provides AI models with your entire site content in one parseable file. It's the difference between an AI having a brief overview vs. deep knowledge of your products and services.

Ako opraviť: Create /llms-full.txt containing your complete site documentation in a single Markdown file — product catalog summaries, FAQs, policies, brand story. This gives AI models maximum context about your store.

FAQ Schema (Direct AI Answers)Upozornenie

Prečo je to dôležité: FAQ schema provides 30% higher AI citation rates (LLMClicks research). ChatGPT, Perplexity, and Google AI Overviews pull FAQ answers verbatim. It's the fastest way to get your content cited by AI.

Ako opraviť: Add FAQPage schema to every product page and category page. Include 3-5 Q&As per page covering: product specifications, shipping, returns, usage instructions. Format: question (full sentence) + answer (75-150 words).

Answer-First Content FormatUpozornenie

Content doesn't start with a strong summary paragraph

Prečo je to dôležité: AI assistants extract content from the first 100 words to generate summaries. The LLMClicks analyzer found pages with answer-first format get 40% more AI citations. Most AI systems read top-down.

Ako opraviť: Place your most important information in the first 100 words of the page. Use the BLUF method (Bottom Line Up Front): start with what the product IS and why it matters, then elaborate.

Structured Content (Lists & Tables)Upozornenie

158 lists found — consider adding comparison tables

Prečo je to dôležité: AI models are biased toward extracting data from HTML lists and tables. Perplexity and ChatGPT pull bullet points and table data with much higher accuracy than paragraph text. Structured content = more AI citations.

Ako opraviť: Add comparison tables to your content. Use <ul>/<ol> for feature lists, specifications, and benefits. Use <table> for product comparisons, pricing tiers, and specifications. AI extracts structured content exponentially faster than paragraphs.

Entity Clarity & Brand SignalsUpozornenie

7 sameAs links but incomplete OG tags

Prečo je to dôležité: AI needs to confidently identify your brand entity. Open Graph + sameAs create a cross-platform identity that AI models recognize. The HubSpot AEO Grader found entity clarity is a top-3 factor for AI brand recognition.

Ako opraviť: For full entity clarity: 1) Complete Open Graph tags (og:title, og:description, og:image, og:type), 2) Add sameAs in Organization schema linking to Wikipedia, LinkedIn, Facebook, and other profiles.

Author Expertise Signals (E-E-A-T)Upozornenie

Prečo je to dôležité: AI models weight author expertise heavily. Pages from identified experts get cited 3x more than anonymous content. This is especially important for product guides, reviews, and advice content.

Ako opraviť: For content pages (blog, guides, about): add Article/BlogPosting schema with author property linking to Person schema. Include the author's jobTitle, credentials, and social profiles.

Extractable Answer BlocksUpozornenie

7 paragraphs, avg 14 words — too short for citation

Prečo je to dôležité: Pages with 40-80 word paragraphs earn 70% more AI citations (Otterly 2026 data). AI extracts individual paragraphs as answer snippets — dense walls of text get skipped.

Ako opraviť: Optimal paragraphs for AI citation are 40-80 words. Break long paragraphs into focused, self-contained answer blocks. Each should make one clear point that AI can extract and quote.

Q&A Format HeadingsUpozornenie

Prečo je to dôležité: Q&A content format matches how people query AI assistants. Without question-format headings, your content is harder for AI to map to user queries.

Ako opraviť: Add H2/H3 headings phrased as questions your customers ask: 'How much does shipping cost?', 'What sizes are available?', 'How do I return an item?' Follow each with a direct, concise answer.

Content Readability for AIUpozornenie

Grade 20 — too complex for broad AI citation (technical threshold: 14)

Prečo je to dôležité: Content above grade 12 readability is harder for AI to extract as clear, concise answers. Pages using clear headers and approachable language are 28% more likely to be cited by AI.

Ako opraviť: Simplify sentences (target 15-20 words average), use common words, break complex ideas into shorter paragraphs. AI extracts content for general audiences — if it's too academic, AI skips it.

Expert Quotations & CitationsUpozornenie

Prečo je to dôležité: Content without citations or expert quotes appears unverified to AI. AI assistants prefer content backed by named sources, data references, and expert opinions.

Ako opraviť: Add 2-3 expert quotes or data citations per major page. Use <blockquote> for quotes and link to authoritative sources (.gov, .edu, Wikipedia, industry reports).

ai.txt (AI Permissions)Upozornenie

Prečo je to dôležité: ai.txt is an emerging standard (proposed May 2025) for fine-grained AI permissions beyond robots.txt. Early adoption signals AI-forward thinking and gives you control over how AI uses your content.

Ako opraviť: Create /ai.txt or /.well-known/ai.txt to declare granular AI permissions per content type: which AI actions (summarization, training, extraction) are allowed for which content sections.

WebMCP Agentic ReadinessUpozornenie

Prečo je to dôležité: WebMCP is called 'the new Schema.org moment' — it's how AI agents will interact with your store (search products, add to cart, check availability). Google and Microsoft are co-developing this standard.

Ako opraviť: WebMCP (W3C Community Group standard, Chrome 146+) lets pages declare structured tools for AI agents. Add toolname and tooldescription attributes to <form> elements, or include a <script type='application/webmcp+json'> manifest.

Customer Reviews — AggregateUpozornenie

1 source: Heureka Ověřeno

Prečo je to dôležité: Without a second review source and a machine-readable reviewCount, AI assistants can't verify scale of social proof — single-source ratings are routinely deweighted as potentially curated.

Ako opraviť: Single review source detected without published reviewCount. Add AggregateRating JSON-LD (ratingValue + reviewCount + bestRating) so the count is machine-readable, and add a second source (Heureka Ověřeno + Trustpilot is the SK/CZ standard).

AI Bot Access PolicyPrešlo

No AI bot restrictions (allowed by default)

Structured Data FoundationPrešlo

1 JSON-LD blocks with 6 schema types: Organization, PostalAddress, ImageObject, WebSite, SearchAction, EntryPoint

Organization Schema + Entity LinkingPrešlo

Organization found with 7 sameAs links — strong entity identity

Site Search Schema (SearchAction)Prešlo

WebSite SearchAction configured — AI can search your store

Content Depth for AIPrešlo

4411 words — rich content for AI analysis and citation

Semantic HTML StructurePrešlo

4/6 semantic elements: <nav>, <main>, <header>, <footer>

Statistics & Data PresencePrešlo

6 data points found — strong citation magnet

Internal Link DensityPrešlo

23 contextual internal links per 1,000 words — strong knowledge graph signal

Knowledge Graph ReadinessPrešlo

3/4 entity signals — strong Knowledge Graph presence

Heureka Ověřeno WidgetPrešlo

Heureka trust widget detected

Prečo je to dôležité: Heureka Ověřeno is the dominant SK/CZ social-proof program — buyers trust it 2× more than generic ratings. Verified shops with a public obchody.heureka.* profile show stronger long-term provenance than just a widget script.

GDPR

67/100

Váha: 10% · 7 OK · 5 upozornení · 1 chýb · spolu 13

Cookie Consent Banner (CMP)Zlyhalo

Prečo je to dôležité: Since 2024, EU regulators actively enforce cookie consent. CNIL fined Google €150M and Amazon €35M for non-compliant cookie banners. Fines can reach 4% of global annual revenue.

Ako opraviť: Install a certified consent management platform: Cookiebot, OneTrust, Usercentrics, or CookieYes. The CMP must block ALL non-essential cookies and scripts until explicit consent is given (opt-in, not opt-out).

GDPR Art. 6(1)(a) · GDPR Art. 7 · SK 18/2018 § 14 · CZ § 5

Cookie PolicyUpozornenie

Prečo je to dôležité: The ePrivacy Directive requires transparent cookie disclosure. Vague statements like 'we use cookies for functionality' don't meet the specificity requirement.

Ako opraviť: Create a separate cookie policy page listing every cookie by: name, provider, purpose, category (necessary/analytics/marketing), and expiration. Most CMPs auto-generate this.

Personal Data Exposure in SourceUpozornenie

1 email(s) found in page source: meno@domena.sk

Prečo je to dôležité: Exposing personal email addresses in HTML violates the data minimization principle (GDPR Art. 5). It also invites spam harvesting.

Ako opraviť: Remove plain-text email addresses from HTML source. Use contact forms instead, or obfuscate emails with JavaScript encoding.

Right to Erasure (Data Deletion)Upozornenie

Prečo je to dôležité: GDPR Article 17 gives users the 'right to be forgotten.' EU regulators expect a clear, accessible process. Italian DPA fined companies €20M+ for obstructing erasure requests.

Ako opraviť: Provide a clear mechanism for users to request data deletion — either a dedicated page, a form, or explicit instructions in your privacy policy. Include a 'Delete my account' option in user settings.

Newsletter ConsentUpozornenie

Newsletter signup found without visible consent checkbox

Prečo je to dôležité: GDPR requires 'freely given, specific, informed' consent for marketing emails. A newsletter form without explicit opt-in violates Article 7. Italian DPA fined companies for pre-checked newsletter boxes.

Ako opraviť: Add an unchecked consent checkbox to your newsletter form: 'I agree to receive marketing emails and have read the Privacy Policy [link].' Pre-checked boxes are not valid consent under GDPR.

Withdrawal of Consent MechanismUpozornenie

Prečo je to dôležité: GDPR Article 7(3): 'It shall be as easy to withdraw as to give consent.' If users can subscribe in one click, unsubscribing must be equally simple. Missing this is a common regulatory finding.

Ako opraviť: Provide a clear way to withdraw consent: an 'unsubscribe' link in emails, a 'cookie settings' button in the footer, and a 'revoke consent' section in your privacy policy.

Tracking Scripts & ConsentPrešlo

No tracking scripts detected

Privacy Policy PagePrešlo

/ochrana-osobnych-udajov

Legal Contact / Imprint PagePrešlo

/o-nas

Terms & Conditions PagePrešlo

/vseobecne-obchodne-podmienky

Data Encryption (No Mixed Content)Prešlo

All resources loaded over HTTPS

Third-party Data SharingPrešlo

2 third-party domain(s)

Data Protection Officer ContactPrešlo

DPO / data protection contact found

Vulnerability

71/100

Váha: 10% · 8 OK · 4 upozornení · 2 chýb · spolu 14

Suspicious Inline Script PatternsZlyhalo

Detected: Dynamic script injection

Prečo je to dôležité: These patterns (Base64 decode, eval with encoding, dynamic script injection) are hallmarks of Magecart payment skimmers. The 2024 Akamai report found skimmers disguised as Google Tag Manager on thousands of e-commerce sites.

Ako opraviť: Review all inline scripts for obfuscated code. Magecart attackers inject payment skimmers disguised as analytics or GTM scripts. Compare your current HTML with a known-good version. Consider using CSP with strict nonces.

Clickjacking on Sensitive PageZlyhalo

Prečo je to dôležité: Clickjacking on payment/login pages is a high-severity vulnerability. Users unknowingly submit credentials or payments through invisible iframes. PCI DSS requires frame-busting on payment pages.

Ako opraviť: URGENT: Add X-Frame-Options: DENY and CSP frame-ancestors 'none' to pages with login forms or payment fields. Attackers can overlay your page in a transparent iframe.

Form CSRF ProtectionUpozornenie

4/5 forms have CSRF tokens

Prečo je to dôležité: Forms without CSRF tokens allow cross-site request forgery — an attacker's site can submit orders, change settings, or modify data on behalf of your logged-in users.

Ako opraviť: Ensure ALL forms include a CSRF token. In PrestaShop, use {$csrf_token} in templates. In WordPress, use wp_nonce_field().

DMARC Policy (Email Auth)Upozornenie

DMARC set to p=none (monitoring only, no enforcement)

Prečo je to dôležité: DMARC p=none provides zero protection against email spoofing. It only generates reports. Move to p=quarantine to actually block forged emails from reaching your customers' inboxes.

Ako opraviť: Upgrade DMARC policy from p=none to p=quarantine or p=reject. p=none only monitors — it doesn't block spoofed emails. Start with quarantine, then move to reject after verifying legitimate emails pass.

Cross-Origin IsolationUpozornenie

Prečo je to dôležité: Without cross-origin isolation headers, your site is vulnerable to Spectre attacks that can leak sensitive data across browser tabs. These headers are required for SharedArrayBuffer and high-resolution timers.

Ako opraviť: Add Cross-Origin-Opener-Policy: same-origin and Cross-Origin-Resource-Policy: same-origin headers. These protect against Spectre-type side-channel attacks.

Login Form SecurityUpozornenie

Prečo je to dôležité: NIST guidelines recommend allowing password autofill. Blocking it forces users to choose weak, memorable passwords — the #1 cause of credential compromise.

Ako opraviť: Remove autocomplete='off' from login forms. Password managers improve security by enabling unique, complex passwords per site.

CMS Version DisclosurePrešlo

No generator tag — CMS identity hidden

Sensitive Files ExposedPrešlo

.env, .git, composer.json — all properly blocked

Install Script ExposedPrešlo

No /install/ or /setup/ paths accessible

Directory ListingPrešlo

Disabled — file structure hidden

Admin Panel at Default URLPrešlo

Not found at common paths (/admin, /wp-admin, /administrator, /backoffice)

Debug Mode / Error ExposurePrešlo

No debug indicators found in page output

SPF Record (Email Security)Prešlo

SPF configured: v=spf1 ip4:185.2.43.107 ip4:185.115.1.85 ip4:185.115.1.84 ip4:185.115.1.94 inclu

DKIM Signing (Email Auth)Prešlo

DKIM configured (selectors: selector1)

Ďalšie kroky

Začnite s chybami — každá červená položka má návod Ako opraviť. Zamerajte sa na kategórie Bezpečnosť a GDPR, ktoré majú zákonné dôsledky.
Opakujte audit po oprave — spustite nový sken na score.zulien.sk a porovnajte skóre.
Konzultujte zložitejšie problémy — pre hlboký audit alebo expertné posúdenie navštívte inger.sk.
Sledujte súlad s NIS2 a GDPR — ak váš e-shop spadá pod NIS2 (obrat >10 mil. EUR alebo >50 zamestnancov), potrebujete formálny rámec súladu.

Online report

Plnú interaktívnu verziu s klikateľnými odkazmi a možnosťou opätovného skenu nájdete tu:

https://score.zulien.sk/r/muziker.sk

Upozornenie: Tento report je automaticky vygenerovaný nástrojom Zulien Score. Zistenia vychádzajú z verejne dostupných dát a technickej analýzy. Pre právne záväzné posúdenie (napríklad súladu s GDPR) odporúčame konzultáciu s DPO alebo advokátom špecializujúcim sa na ochranu osobných údajov. Zulien Score nie je licencovaná právna ani auditná spoločnosť.

Zulien Score · score.zulien.sk · by Zulien · Hosted at inger.sk