{ "url": "https://zoom.us", "auditedAt": "2026-07-18T05:48:55.991Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete agentic audit of six representative task/template paths plus an invalid-route recovery path. Not covered: authenticated meetings, checkout after purchase, account cancellation, and completed form submissions because they require credentials, purchases, or transmission of personal data.", "page": { "appType": "hybrid", "framework": "server-rendered multi-page marketing and account surfaces with client-side enhancement", "notes": "zoom.us redirects the public homepage to www.zoom.com. Fresh isolated browser profiles consistently received a blocking consent dialog." }, "evidenceUsed": [ "screenshot", "dom+computed-css", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "lighthouse", "robots/sitemap fetch", "Modern Web Guidance search/retrieve" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage first viewport with consent overlay", "condition": "fresh visitor", "findingIds": [ "F-COOKIE" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Mobile homepage with consent dialog obscuring most of the viewport", "condition": "viewport: 360x800; fresh visitor", "findingIds": [ "F-COOKIE", "F-TARGETS" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Dark-preference capture remains identical to light presentation", "condition": "prefers-color-scheme: dark", "findingIds": [ "F-DARK" ] }, { "type": "screenshot", "path": "evidence/pricing.png", "caption": "Pricing page on a fresh session, with consent overlay", "condition": "fresh visitor", "findingIds": [ "F-COOKIE" ] }, { "type": "screenshot", "path": "evidence/meetings.png", "caption": "Meetings product page on a fresh session, with consent overlay", "condition": "fresh visitor", "findingIds": [ "F-COOKIE" ] }, { "type": "screenshot", "path": "evidence/signup.png", "caption": "Signup flow on a fresh session, with consent overlay", "condition": "fresh visitor", "findingIds": [ "F-COOKIE" ] }, { "type": "screenshot", "path": "evidence/join.png", "caption": "Join flow on a fresh session, with consent overlay", "condition": "fresh visitor", "findingIds": [ "F-COOKIE" ] }, { "type": "screenshot", "path": "evidence/contact-sales.png", "caption": "Contact sales form on a fresh session, with consent overlay", "condition": "fresh visitor", "findingIds": [ "F-COOKIE" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Mobile layout metrics and layout-shift observer", "condition": "viewport: 360x800", "findingIds": [ "F-CWV", "F-CLS" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools performance trace of homepage load", "findingIds": [ "F-CWV", "F-DELIVERY" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Trace summary: LCP 2.82s and 43.79ms TBT", "findingIds": [ "F-CWV" ] }, { "type": "har", "path": "evidence/home.har", "caption": "HAR of homepage load", "findingIds": [ "F-DELIVERY", "F-UNUSED", "F-THIRDPARTY", "F-MEDIA-BUDGET" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "HAR summary: 119 requests and 3.34MB transferred", "findingIds": [ "F-DELIVERY", "F-UNUSED", "F-THIRDPARTY", "F-MEDIA-BUDGET" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse report: performance 43, accessibility 73, best practices 54, SEO 77", "findingIds": [ "F-CWV", "F-CLS", "F-A11Y-NAMES", "F-CONTRAST", "F-FOCUS", "F-TARGETS", "F-ASSETS", "F-HYGIENE", "F-CRAWL", "F-UNUSED" ] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "Raw HTML vs rendered DOM comparison: 91% coverage and not a JS shell" }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "Browser-rendered homepage" }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "Crawler/no-JavaScript homepage" }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response-header inspection", "findingIds": [ "F-HEADERS", "F-POLICIES" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie attribute inspection", "findingIds": [ "F-HEADERS", "F-POLICIES" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party and tracker origin inspection", "findingIds": [ "F-THIRDPARTY" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Image dimensions, formats, loading and alt inspection", "findingIds": [ "F-ASSETS", "F-OPTIMISE" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client secret-pattern scan; hits assessed as non-actionable public/vendor values" }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "Baseline readable V8 heap summary", "findingIds": [ "F-MEMORY" ] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "Heap summary after 20 repeated disclosure clicks", "findingIds": [ "F-MEMORY" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered homepage DOM and CSS" }, { "type": "other", "path": "evidence/page-probe.json", "caption": "Metadata, headings, links, scripts and agent capability probe", "findingIds": [ "F-CRAWL", "F-TRANSITIONS", "F-AGENT" ] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "Platform primitive, focus, container and transition probe", "findingIds": [ "F-TRANSITIONS", "F-CONTAINERS", "F-SEMANTIC", "F-FOCUS" ] }, { "type": "other", "path": "evidence/form-probe.json", "caption": "Contact-sales field label and autocomplete probe", "findingIds": [ "F-AUTOFILL" ] }, { "type": "other", "path": "evidence/a11y-probe.json", "caption": "Landmark, unnamed-button and missing-alt probe", "findingIds": [ "F-A11Y-NAMES" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Reduced-motion animation probe" }, { "type": "screenshot", "path": "evidence/404.png", "caption": "Useful not-found recovery page" }, { "type": "other", "path": "evidence/404-probe.json", "caption": "Not-found status content and recovery-link probe" }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt fetched directly" }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap.xml fetched directly" }, { "type": "other", "path": "evidence/mwg-search.json", "caption": "Modern Web Guidance search result" }, { "type": "other", "path": "evidence/mwg-guides.md", "caption": "Retrieved mapped Modern Web Guidance catalog content" } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "The dark emulation screenshot is pixel-identical in appearance and size to the light capture; computed color-scheme is normal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F-DARK" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "medium", "method": "evaluate under prefers-reduced-motion: reduce", "evidence": "The media query matched and the only active autoslider animation reported duration 0.01ms, effectively disabled.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse color-contrast audit failed on the rendered homepage.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-CONTRAST" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Platform probe found no view-transition usage in the rendered document.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F-TRANSITIONS" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "recon and representative-path applicability review", "evidence": "No scrollytelling, parallax or entry/exit reveal interaction was present on the exercised paths.", "reason": "No scrollytelling, parallax or entry/exit reveal interaction was present on the exercised paths." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "HAR records swiper-bundle.min.js as a parser-inserted script and one of the slowest requests; no scroll timeline usage was found.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-GESTURES" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "DOM computed styles show a fixed header, while platform probes found no scroll-state or scroll-timeline implementation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F-SCROLL-CHROME" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "recon and representative-path applicability review", "evidence": "No tooltip or edge-positioned anchored overlay was part of the representative tasks.", "reason": "No tooltip or edge-positioned anchored overlay was part of the representative tasks." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "visual review of navigation and headings", "evidence": "Screenshots show clear active navigation, large page headings and visually distinct primary actions across templates.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/pricing.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Six screenshots show a 600px-wide modal over the homepage, pricing, product, signup, join, and contact-sales paths; on 360x800 it occupies most of the viewport.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/pricing.png", "evidence/signup.png" ], "findingIds": [ "F-COOKIE" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Platform probe found 0 dialog, 0 popover and 2 role=dialog elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F-SEMANTIC" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "medium", "method": "visual review", "evidence": "Outside the separately reported consent interruption, content cards and typography dominate the marketing and product layouts.", "pathIds": [ "home" ], "artifacts": [ "evidence/meetings.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "medium", "method": "layout at 360x800", "evidence": "Layout reported scrollWidth=clientWidth=360 and horizontalOverflowPx=0 with a viewport meta tag.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Platform probe found no @container text, despite cards and navigation reused across narrow and wide layouts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/platform-probe.json" ], "findingIds": [ "F-CONTAINERS" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse target-size audit failed; direct focus probe returned outline none and no box shadow for the first focusable control.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/platform-probe.json" ], "findingIds": [ "F-TARGETS" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "medium", "method": "first-viewport visual review", "evidence": "Homepage, pricing, Meetings, Signup, Join and Contact Sales each expose a specific heading and primary next action behind the separately reported consent wall.", "pathIds": [ "home" ], "artifacts": [ "evidence/meetings.png", "evidence/signup.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Signup, Join, pricing purchase, product exploration and contact-sales screenshots all place the consent dialog over the next required action.", "pathIds": [ "home" ], "artifacts": [ "evidence/contact-sales.png", "evidence/join.png", "evidence/signup.png" ], "findingIds": [ "F-FLOW" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "medium", "method": "form and 404 state review", "evidence": "Signup and Join visibly disable continuation before required input, and the 404 page explains the failure and offers recovery links.", "pathIds": [ "home" ], "artifacts": [ "evidence/signup.png", "evidence/404.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse measured LCP 16.6s and CLS 0.28 (performance 43); first-party trace still measured LCP 2.82s.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F-CWV" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Mobile layout observer measured CLS 0.238 with two shifts; Lighthouse measured 0.28 and found four shifts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/lighthouse.json" ], "findingIds": [ "F-CLS" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "medium", "method": "trace and Lighthouse", "evidence": "Trace found 43.79ms TBT with two long tasks; Lighthouse TBT was 130ms, both within the good TBT proxy range.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "HAR records 119 requests/3.34MB and parser-inserted CSS plus classic scripts; Lighthouse estimates 1.83s render-blocking savings.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F-DELIVERY" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse estimates 186KiB unused CSS, 385KiB unused JS and 138KiB unminified JS; HAR has 55 scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F-UNUSED" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse fails button-name, link-name, image-alt, aria-allowed-attr and aria-required-children; image probe reports 14 missing alt values and custom probe counts 13 unnamed buttons.", "pathIds": [ "home" ], "artifacts": [ "evidence/a11y-probe.json", "evidence/images.json", "evidence/lighthouse.json" ], "findingIds": [ "F-A11Y-NAMES" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse color-contrast audit failed on the rendered homepage.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-CONTRAST" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse reports malformed accessibility-tree/ARIA relationships; direct focus probe found no visible outline or shadow.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/platform-probe.json" ], "findingIds": [ "F-FOCUS" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "medium", "method": "desktop/mobile screenshot review", "evidence": "Body and heading text reflow cleanly with comfortable sizing and no clipping in captured paths.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/meetings.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse target-size audit failed; direct focus probe returned outline none and no box shadow for the first focusable control.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/platform-probe.json" ], "findingIds": [ "F-TARGETS" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "medium", "method": "Lighthouse runtime audit", "evidence": "Lighthouse did not report a console-errors or JavaScript-execution error failure.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Image primitive found 57/93 images without dimensions; Lighthouse reports incorrect aspect ratios and unsized images.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ], "findingIds": [ "F-ASSETS" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse reports four deprecation warnings, inspector issues, third-party-cookie issues and one BFCache failure reason.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-HYGIENE" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "medium", "method": "DOM metadata probe", "evidence": "Homepage has descriptive title “One platform to connect | Zoom” and a detailed meta description.", "pathIds": [ "home" ], "artifacts": [ "evidence/page-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Lighthouse fails crawlable-anchors and link-text with four generic links; page probe found two anchors without href and nine generic labels.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/page-probe.json" ], "findingIds": [ "F-CRAWL" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "medium", "method": "metadata plus robots/sitemap fetch", "evidence": "Homepage returned 200 with canonical https://www.zoom.com/, index,follow, a robots file and a 432KB sitemap.", "pathIds": [ "home" ], "artifacts": [ "evidence/page-probe.json", "evidence/robots.txt", "evidence/sitemap.xml" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "medium", "method": "metadata probe", "evidence": "Homepage exposes two JSON-LD blocks and complete Open Graph title, description, URL and image metadata.", "pathIds": [ "home" ], "artifacts": [ "evidence/page-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Header probe found no CSP or nosniff; cookie probe found one non-Secure consent cookie and an auth-like cookie without HttpOnly.", "pathIds": [ "home" ], "artifacts": [ "evidence/cookies.json", "evidence/headers.json" ], "findingIds": [ "F-HEADERS" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Tracker probe saw 11 third-party origins including GTM; HAR attributes 112/119 requests and 3.30MB to non-main-origin hosts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F-THIRDPARTY" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "medium", "method": "load behavior and DOM review", "evidence": "No browser permission prompt appeared on load; authentication was linked as a separate user-initiated path.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/page-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Headers probe found no frame-ancestors/X-Frame-Options, Referrer-Policy, Permissions-Policy or X-Content-Type-Options; HSTS was present.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F-POLICIES" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "medium", "method": "raw HTML/rendered comparison", "evidence": "Discoverability primitive found 91% rendered-word coverage in raw HTML and no empty JS shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "overlay and viewport visual review", "evidence": "Menus and the consent overlay remained inside captured desktop/mobile viewports without clipping.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/pricing.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "recon and representative-path applicability review", "evidence": "The audited public marketing and live meeting service is intrinsically online; installability is not required for these web entry surfaces.", "reason": "The audited public marketing and live meeting service is intrinsically online; installability is not required for these web entry surfaces." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "medium", "method": "direct invalid-route request", "evidence": "Invalid route returned HTTP 404 and rendered “Uh-Oh!” with Join, Download, blog and demo recovery links.", "pathIds": [ "home" ], "artifacts": [ "evidence/404.png", "evidence/404-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "medium", "method": "DOM and localized-route review", "evidence": "Rendered documents declare lang=en, and language/currency selectors are exposed; LTR default direction matches English content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/pricing.png" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "medium", "method": "localized pricing visual review", "evidence": "Pricing selected British Pounds and rendered £ currency values with localized decimal formatting.", "pathIds": [ "home" ], "artifacts": [ "evidence/pricing.png" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "recon and representative-path applicability review", "evidence": "No rendered event time or scheduling-time value appeared in the exercised marketing, pricing, signup, join or lead paths.", "reason": "No rendered event time or scheduling-time value appeared in the exercised marketing, pricing, signup, join or lead paths." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "consent and pricing visual review", "evidence": "Consent presents equally prominent Decline and Accept actions without confirmshaming; pricing and billing cadence are visible.", "pathIds": [ "home" ], "artifacts": [ "evidence/pricing.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "medium", "method": "form structure review", "evidence": "Required contact-sales fields have explicit labels and required state; Signup and Join prevent premature submission.", "pathIds": [ "home" ], "artifacts": [ "evidence/form-probe.json", "evidence/signup.png" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Form probe shows email, name, phone, postal code, company and job-title controls all use autocomplete=off.", "pathIds": [ "home" ], "artifacts": [ "evidence/form-probe.json" ], "findingIds": [ "F-AUTOFILL" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "medium", "method": "pricing/signup visual review", "evidence": "Pricing shows Free/Pro/Business costs, billing cadence and VAT note before purchase; signup states account terms.", "pathIds": [ "home" ], "artifacts": [ "evidence/pricing.png", "evidence/signup.png" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Image probe found 37 legacy-format images, 20 missing srcset and two oversized images; Lighthouse estimates 317KiB image savings.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ], "findingIds": [ "F-OPTIMISE" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Tracker probe saw 11 third-party origins including GTM; HAR attributes 112/119 requests and 3.30MB to non-main-origin hosts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F-THIRDPARTY" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "HAR transferred 3.34MB: 1.64MB images, 0.97MB scripts and 0.30MB fonts; chat and GTM load before user intent.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-MEDIA-BUDGET" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "Page probe found no WebMCP capability while the site promotes AI products and links to Zoom developer MCP material.", "pathIds": [ "home" ], "artifacts": [ "evidence/page-probe.json" ], "findingIds": [ "F-AGENT" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "recon and representative-path applicability review", "evidence": "The exercised pages do not offer an in-browser inference task where a built-in model or summarizer would improve the experience.", "reason": "The exercised pages do not offer an in-browser inference task where a built-in model or summarizer would improve the experience." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "issues", "confidence": "medium", "method": "active visual/objective probe mapped to finding evidence", "evidence": "After 20 repeated clicks, heap self-size rose 27.17MB to 31.63MB (+16%), node count 393,355 to 470,476 and closures 16,050 to 21,068. Separate-run snapshots make causality medium confidence.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ], "findingIds": [ "F-MEMORY" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "baseline heap summary", "evidence": "Baseline heap self-size was 27.17MB for a media-rich 93-image marketing page; no single constructor dominated retained object self-size.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "before/after heap constructor review", "evidence": "Neither readable heap summary surfaced Detached* constructors among retained-size leaders; listener growth was not visible in the summaries.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-CONTRAST", "F-DARK" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F-GESTURES", "F-TRANSITIONS" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-SCROLL-CHROME" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F-COOKIE", "F-SEMANTIC" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-CONTAINERS", "F-TARGETS" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F-FLOW" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F-CLS", "F-CWV", "F-DELIVERY", "F-UNUSED" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-A11Y-NAMES", "F-CONTRAST", "F-FOCUS", "F-TARGETS" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F-ASSETS", "F-HYGIENE" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F-CRAWL" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-HEADERS", "F-POLICIES", "F-THIRDPARTY" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F-AUTOFILL" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F-MEDIA-BUDGET", "F-OPTIMISE", "F-THIRDPARTY" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "issues", "findingIds": [ "F-AGENT" ] }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F-MEMORY" ] } ], "paths": [ { "id": "home", "description": "Public homepage and global marketing template; tested at desktop, mobile, dark and reduced-motion conditions.", "url": "https://www.zoom.com/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "no JavaScript crawler" ], "result": "issues" }, { "id": "pricing", "description": "Commercial plan comparison and purchase-entry archetype.", "url": "https://zoom.us/pricing", "conditions": [ "desktop", "fresh visitor" ], "result": "issues" }, { "id": "meetings", "description": "Representative product detail page for Zoom Meetings.", "url": "https://www.zoom.com/en/products/virtual-meetings/", "conditions": [ "desktop", "fresh visitor" ], "result": "issues" }, { "id": "signup", "description": "Primary account-creation flow entry.", "url": "https://zoom.us/signup?signUpFrom=homepage", "conditions": [ "desktop", "fresh visitor" ], "result": "issues" }, { "id": "join", "description": "Primary meeting-join task entry.", "url": "https://zoom.us/join", "conditions": [ "desktop", "fresh visitor" ], "result": "issues" }, { "id": "contact", "description": "Representative multi-step lead form.", "url": "https://www.zoom.com/en/contact/contact-sales/", "conditions": [ "desktop", "fresh visitor" ], "result": "issues" }, { "id": "not-found", "description": "Invalid route used to inspect HTTP failure and recovery behavior.", "url": "https://www.zoom.com/this-path-does-not-exist-web-uplift", "conditions": [ "desktop" ], "result": "pass" } ], "findings": [ { "id": "F-COOKIE", "severity": "high", "confidence": "high", "summary": "Consent dialog blocks core content and actions on every fresh-session archetype.", "evidence": "Six screenshots show a 600px-wide modal over the homepage, pricing, product, signup, join, and contact-sales paths; on 360x800 it occupies most of the viewport.", "suggestedFix": "Replace the blocking on-load modal with a compact non-modal consent surface where legally possible; preserve equally prominent accept/reject controls and defer optional scripts until consent.", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/home-mobile.png", "evidence/pricing.png", "evidence/signup.png" ] }, { "id": "F-DARK", "severity": "medium", "confidence": "medium", "summary": "The public surface does not adapt to the user’s dark color preference.", "evidence": "The dark emulation screenshot is pixel-identical in appearance and size to the light capture; computed color-scheme is normal.", "suggestedFix": "Declare color-scheme and provide preference-driven dark surface/text tokens with adequate contrast.", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ] }, { "id": "F-TRANSITIONS", "severity": "low", "confidence": "medium", "summary": "State and route changes do not use View Transitions.", "evidence": "Platform probe found no view-transition usage in the rendered document.", "suggestedFix": "Add same-document or cross-document View Transitions for meaningful route and state changes, while respecting reduced motion.", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/platform-probe.json" ] }, { "id": "F-GESTURES", "severity": "low", "confidence": "medium", "summary": "Carousel behavior ships a custom Swiper runtime rather than relying on native scroll-snap/declarative behavior.", "evidence": "HAR records swiper-bundle.min.js as a parser-inserted script and one of the slowest requests; no scroll timeline usage was found.", "suggestedFix": "Prefer CSS scroll snap and declarative carousel affordances, keeping scripting to controls and state synchronization.", "principleId": "implement-natural-interactions", "principleCheckId": "physical-gestures", "guidanceId": "carousel-slide-effects", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/home-summary.json" ] }, { "id": "F-SCROLL-CHROME", "severity": "low", "confidence": "medium", "summary": "Fixed navigation does not expose scroll-aware feedback.", "evidence": "DOM computed styles show a fixed header, while platform probes found no scroll-state or scroll-timeline implementation.", "suggestedFix": "Use a scroll-state container query or lightweight declarative progress/affordance treatment where long pages benefit.", "principleId": "provide-guided-navigation", "principleCheckId": "shrinking-header-on-scroll", "guidanceId": "shrinking-header-on-scroll", "effort": "small", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/home-dom.json", "evidence/platform-probe.json" ] }, { "id": "F-SEMANTIC", "severity": "medium", "confidence": "medium", "summary": "Consent overlays are custom role=dialog structures rather than native dialog/popover primitives.", "evidence": "Platform probe found 0 dialog, 0 popover and 2 role=dialog elements.", "suggestedFix": "Use for modal consent or popover for non-modal disclosure, with native focus and light-dismiss behavior where appropriate.", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/platform-probe.json" ] }, { "id": "F-CONTAINERS", "severity": "low", "confidence": "medium", "summary": "The large reusable marketing surface has no detectable container-query adaptation.", "evidence": "Platform probe found no @container text, despite cards and navigation reused across narrow and wide layouts.", "suggestedFix": "Adopt container queries for reusable cards and navigation regions that appear in different available widths.", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png" ] }, { "id": "F-TARGETS", "severity": "medium", "confidence": "medium", "summary": "Some controls have insufficient target spacing and visible focus is inconsistent.", "evidence": "Lighthouse target-size audit failed; direct focus probe returned outline none and no box shadow for the first focusable control.", "suggestedFix": "Provide at least 24x24 CSS px targets with spacing and a strong :focus-visible indicator.", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "effort": "small", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/platform-probe.json" ] }, { "id": "F-FLOW", "severity": "high", "confidence": "high", "summary": "The fresh-visitor consent wall interrupts every representative primary flow before task completion.", "evidence": "Signup, Join, pricing purchase, product exploration and contact-sales screenshots all place the consent dialog over the next required action.", "suggestedFix": "Move consent out of the critical path and keep primary controls operable while optional processing remains disabled.", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/signup.png", "evidence/join.png", "evidence/contact-sales.png" ] }, { "id": "F-CWV", "severity": "high", "confidence": "high", "summary": "Homepage loading misses the good Core Web Vitals range.", "evidence": "Lighthouse measured LCP 16.6s and CLS 0.28 (performance 43); first-party trace still measured LCP 2.82s.", "suggestedFix": "Prioritize the LCP resource, shorten rendering chains, reserve layout space and defer non-critical scripts.", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "effort": "large", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ] }, { "id": "F-CLS", "severity": "high", "confidence": "high", "summary": "The page shifts substantially during load.", "evidence": "Mobile layout observer measured CLS 0.238 with two shifts; Lighthouse measured 0.28 and found four shifts.", "suggestedFix": "Add explicit dimensions/aspect-ratio to media and reserve stable space for banners, fonts and injected modules.", "principleId": "be-fast-and-stable", "principleCheckId": "visual-stability", "guidanceId": "visually-stable-font-fallbacks", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/lighthouse.json" ] }, { "id": "F-DELIVERY", "severity": "high", "confidence": "high", "summary": "Critical delivery is heavy and contains blocking chains.", "evidence": "HAR records 119 requests/3.34MB and parser-inserted CSS plus classic scripts; Lighthouse estimates 1.83s render-blocking savings.", "suggestedFix": "Inline only critical CSS, defer classic scripts, improve cache lifetimes and prioritize the true LCP resource.", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-preload-priority", "effort": "large", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse.json" ] }, { "id": "F-UNUSED", "severity": "medium", "confidence": "medium", "summary": "Substantial unused CSS and JavaScript ship on first load.", "evidence": "Lighthouse estimates 186KiB unused CSS, 385KiB unused JS and 138KiB unminified JS; HAR has 55 scripts.", "suggestedFix": "Code-split by page/interaction, remove duplicate/legacy payloads and lazy-load chat/carousel code after intent.", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "effort": "large", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/home-summary.json" ] }, { "id": "F-A11Y-NAMES", "severity": "high", "confidence": "high", "summary": "Controls and images have missing or invalid accessible names/roles.", "evidence": "Lighthouse fails button-name, link-name, image-alt, aria-allowed-attr and aria-required-children; image probe reports 14 missing alt values and custom probe counts 13 unnamed buttons.", "suggestedFix": "Use native semantics first, supply accurate accessible names/alt text and repair invalid ARIA ownership.", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/images.json", "evidence/a11y-probe.json" ] }, { "id": "F-CONTRAST", "severity": "high", "confidence": "high", "summary": "Text and controls fail minimum color contrast.", "evidence": "Lighthouse color-contrast audit failed on the rendered homepage.", "suggestedFix": "Adjust foreground/background tokens to meet WCAG AA in every interaction and preference state.", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "effort": "small", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/lighthouse.json" ] }, { "id": "F-FOCUS", "severity": "high", "confidence": "high", "summary": "Keyboard focus and structural semantics are unreliable.", "evidence": "Lighthouse reports malformed accessibility-tree/ARIA relationships; direct focus probe found no visible outline or shadow.", "suggestedFix": "Repair landmark/ARIA structure and apply a consistent high-contrast :focus-visible treatment.", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/platform-probe.json" ] }, { "id": "F-ASSETS", "severity": "medium", "confidence": "medium", "summary": "Image sizing and aspect-ratio hygiene is poor.", "evidence": "Image primitive found 57/93 images without dimensions; Lighthouse reports incorrect aspect ratios and unsized images.", "suggestedFix": "Set width/height or aspect-ratio on every image and ensure object-fit does not distort intrinsic ratios.", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ] }, { "id": "F-HYGIENE", "severity": "medium", "confidence": "medium", "summary": "Deprecated APIs, inspector issues and a BFCache blocker remain.", "evidence": "Lighthouse reports four deprecation warnings, inspector issues, third-party-cookie issues and one BFCache failure reason.", "suggestedFix": "Remove deprecated calls, resolve DevTools Issues and eliminate the reported BFCache blocker.", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/lighthouse.json" ] }, { "id": "F-CRAWL", "severity": "medium", "confidence": "medium", "summary": "Some links are not crawlable or descriptively named.", "evidence": "Lighthouse fails crawlable-anchors and link-text with four generic links; page probe found two anchors without href and nine generic labels.", "suggestedFix": "Use real href destinations and specific link text that names the destination or action.", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "effort": "small", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/page-probe.json" ] }, { "id": "F-HEADERS", "severity": "high", "confidence": "high", "summary": "The main document lacks CSP and sets weak cookie attributes.", "evidence": "Header probe found no CSP or nosniff; cookie probe found one non-Secure consent cookie and an auth-like cookie without HttpOnly.", "suggestedFix": "Deploy a restrictive CSP and nosniff, and mark all cookies Secure with HttpOnly for auth-like values and the narrowest SameSite policy.", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ] }, { "id": "F-THIRDPARTY", "severity": "medium", "confidence": "medium", "summary": "The fresh page has a broad third-party collection and execution footprint.", "evidence": "Tracker probe saw 11 third-party origins including GTM; HAR attributes 112/119 requests and 3.30MB to non-main-origin hosts.", "suggestedFix": "Treat Zoom-owned subdomains as a first-party boundary where justified, but defer analytics/chat until consent and remove vendors that do not support the task.", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ] }, { "id": "F-POLICIES", "severity": "high", "confidence": "high", "summary": "Browser-enforced defensive policies are incomplete.", "evidence": "Headers probe found no frame-ancestors/X-Frame-Options, Referrer-Policy, Permissions-Policy or X-Content-Type-Options; HSTS was present.", "suggestedFix": "Add frame-ancestors, nosniff, a strict referrer policy and a least-privilege Permissions-Policy; evaluate Trusted Types for script-heavy surfaces.", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/headers.json" ] }, { "id": "F-AUTOFILL", "severity": "medium", "confidence": "medium", "summary": "The contact-sales form disables useful autofill.", "evidence": "Form probe shows email, name, phone, postal code, company and job-title controls all use autocomplete=off.", "suggestedFix": "Use semantic autocomplete tokens such as email, given-name, family-name, tel, postal-code, organization and organization-title.", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "forms", "effort": "small", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/form-probe.json" ] }, { "id": "F-OPTIMISE", "severity": "medium", "confidence": "medium", "summary": "Image delivery wastes bytes and misses responsive sizing.", "evidence": "Image probe found 37 legacy-format images, 20 missing srcset and two oversized images; Lighthouse estimates 317KiB image savings.", "suggestedFix": "Serve AVIF/WebP where appropriate, add srcset/sizes and ensure image requests match rendered size.", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "effort": "medium", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ] }, { "id": "F-MEDIA-BUDGET", "severity": "medium", "confidence": "medium", "summary": "Initial third-party and media weight is disproportionate to the first task.", "evidence": "HAR transferred 3.34MB: 1.64MB images, 0.97MB scripts and 0.30MB fonts; chat and GTM load before user intent.", "suggestedFix": "Set a route-level budget, defer chat/carousels and below-fold media, and subset/preload only necessary fonts.", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "effort": "large", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/home-summary.json" ] }, { "id": "F-AGENT", "severity": "low", "confidence": "medium", "summary": "Agent-facing capability is not exposed on the public task surface.", "evidence": "Page probe found no WebMCP capability while the site promotes AI products and links to Zoom developer MCP material.", "suggestedFix": "For safe high-value actions, expose constrained WebMCP tools or agentic forms with explicit user confirmation.", "principleId": "be-agent-ready", "principleCheckId": "structured-agent-capabilities", "guidanceId": "webmcp", "effort": "large", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/page-probe.json" ] }, { "id": "F-MEMORY", "severity": "medium", "confidence": "medium", "summary": "Repeated disclosure interaction retained materially more heap in the post snapshot.", "evidence": "After 20 repeated clicks, heap self-size rose 27.17MB to 31.63MB (+16%), node count 393,355 to 470,476 and closures 16,050 to 21,068. Separate-run snapshots make causality medium confidence.", "suggestedFix": "Reproduce in one controlled session with baseline/target/final snapshots and GC, then remove accumulating listeners, closures or cached state revealed by retaining paths.", "principleId": "be-memory-efficient", "principleCheckId": "no-leak-under-repeated-interaction", "guidanceId": "manage-recurring-intervals", "effort": "large", "pathId": "home", "url": "https://www.zoom.com/", "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] } ], "taskList": [ { "id": "T1", "title": "Remove consent from the critical path", "priority": 1, "findingIds": [ "F-COOKIE", "F-FLOW" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T2", "title": "Fix accessible names, ARIA, contrast and focus", "priority": 2, "findingIds": [ "F-A11Y-NAMES", "F-CONTRAST", "F-FOCUS", "F-TARGETS" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T3", "title": "Stabilize and accelerate first load", "priority": 3, "findingIds": [ "F-CWV", "F-CLS", "F-DELIVERY", "F-UNUSED" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T4", "title": "Deploy missing security headers and tighten cookies", "priority": 4, "findingIds": [ "F-HEADERS", "F-POLICIES" ], "guidanceId": "security", "status": "open" }, { "id": "T5", "title": "Reduce third-party and media weight", "priority": 5, "findingIds": [ "F-THIRDPARTY", "F-OPTIMISE", "F-MEDIA-BUDGET" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T6", "title": "Repair image dimensions and responsive delivery", "priority": 6, "findingIds": [ "F-ASSETS", "F-OPTIMISE" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T7", "title": "Enable autofill on lead forms", "priority": 7, "findingIds": [ "F-AUTOFILL" ], "guidanceId": "forms", "status": "open" }, { "id": "T8", "title": "Add preference-driven dark colors", "priority": 8, "findingIds": [ "F-DARK" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T9", "title": "Re-test suspected retained-memory growth in one controlled session", "priority": 9, "findingIds": [ "F-MEMORY" ], "guidanceId": "manage-recurring-intervals", "status": "open" }, { "id": "T10", "title": "Adopt native/declarative interaction primitives", "priority": 10, "findingIds": [ "F-TRANSITIONS", "F-GESTURES", "F-SCROLL-CHROME", "F-SEMANTIC", "F-CONTAINERS" ], "guidanceId": "same-document-transitions", "status": "open" }, { "id": "T11", "title": "Repair crawlable and descriptive links", "priority": 11, "findingIds": [ "F-CRAWL" ], "guidanceId": "html", "status": "open" }, { "id": "T12", "title": "Evaluate safe agent-facing task tools", "priority": 12, "findingIds": [ "F-AGENT" ], "guidanceId": "webmcp", "status": "open" } ], "budget": { "pathCount": 7, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-18T05-48-55-991Z" }