Average

Score Report

altrax.sk

Scanned on October 7, 2026

PrestaShop
Toastr
openresty
Company:ALTRAX s.r.o.· NACE 4712
NIS2: out of scope
Risk:15/100low
Credit:A+
VAT registered
Top 13% in sector
Full company profile →
Last scanned: October 7, 2026
AI verdict

Your store performs solidly but has security gaps to close. Priority one: enable HSTS headers on your server to enforce encrypted connections everywhere. On the bright side, your accessibility and vulnerability protection are excellent.

Not subject to NIS2 cybersecurity duties.Based on NACE sector + company size, Article 21 compliance is not mandatory. Security best practices still recommended.
Supplying a NIS2-regulated company?Even outside direct scope you may inherit supply-chain duties — regulated companies cascade them to suppliers by contract (security, incident reporting, encryption). ICT and managed-service providers are in scope regardless of size.
Check supplier obligations Legal basis: NIS2 Art. 21 · SK 366/2024 §21 · NIS2 Art. 21(2)(d)
Action plan

Action plan by impact and effort

Every problem found, sorted by how much fixing it helps and how much work the fix takes. Start with the quick wins.

How we rank →

Quick wins

5

High impact, little work. Do these first.

Bigger projects

4

High impact, but the fix needs planning.

Small fixes

16

Lower impact, quick to do.

+11 more

Later

40

Lower impact and more work. Plan them once the rest is done.

+35 more

Performance

Weight: 25% · 16 passed · 2 warnings · 1 failed · 2 SPA (verify manually)

What we found: Only 0% of 1 scripts optimized — most are render-blocking

Why it matters: 1 render-blocking scripts can add 1-3 seconds to page load. Each synchronous script creates a sequential download-parse-execute chain.

How to fix: Add defer or async to all <script src='...'> tags. Render-blocking scripts are a leading cause of slow FCP. Defer maintains execution order, async does not.
Evidence:HTML-heuristic· Confidence: high

What we found: 80 KB unused (CSS: 0 KB, JS: 80 KB)

Why it matters: Unused code is downloaded and parsed but never executed — pure waste. Removing it speeds up parse time and reduces bandwidth.

Note: This check uses heuristic detection and may produce false positives. Manual verification recommended.

How to fix: Remove unused CSS with PurgeCSS or UnCSS. Code-split JavaScript so only needed code loads per page. Audit plugins — each adds CSS/JS.
Evidence:PSI-lab· Confidence: low

What we found: no-store, no-cache, must-revalidate

Why it matters: no-cache/no-store forces browsers to re-download resources on every visit. Repeat visitors load your entire site from scratch every time.

How to fix: Set appropriate cache headers: static assets should have max-age=31536000 with versioned filenames. HTML pages can use max-age=0 with ETag for revalidation.
Evidence:HTTP-header· Confidence: high

3 issues found in Performance. Room for improvement.

Your store doesn't qualify for the Zulien Score Badge yet. Score 80+ to earn it!

📧 Re-scan reminders

We'll email you monthly when it's time to re-scan and track your improvements.

🚀 Improve your score

Our PrestaShop modules can fix most of these issues automatically.

Free 15-min consultation · No commitment

Share & Export

This is an automated heuristic estimate, not a professional audit. Findings reflect publicly observable signals at scan time and may include false positives.Learn about our methodologyReport inaccuracyRemove this report