Silverbush Website Build Services · Phase 1 of 10

D1: Website Analysis Report · Phase 1: Full Website Analysis

© Silverbush AG, confidential · do not distribute, process, or use in any other way

EVOCEAN logo

Phase 1 — Website Analysis: EVOCEAN GmbH

0. Document control

FieldValue
ClientEVOCEAN GmbH (website brand: EVOCEAN GmbH — verify, see Q1)
Domainhttps://www.evocean.com → 301 → https://evocean.com/
Date31.Oct.2026
Version1.0
StatusDraft — awaiting client confirmation
SourcesLive crawl (Python requests/BeautifulSoup), HTTP checks, Playwright Chromium measurements, rendered CSS extraction
Unavailable dataGoogle Search Console, analytics, Lighthouse lab score, backlink data, field CrUX data, CSS background images
Companion filesPhase1_Assets_EVOCEAN GmbH.csv · Phase1_Dashboard_EVOCEAN GmbH.json · Phase1_Analysis_EVOCEAN GmbH.pdf (print of /report/phase-1)
Source tags[C] crawl/content · [T] technical check · [P] performance measurement · [V] visual/design analysis · [+] own derivation

1. Executive summary

1.1 Key findings

1. Critical security exposure on the live server (H) [T]
/wp-content/debug.log is publicly downloadable (469 MB) and the server announces PHP 8.1.34, which is end-of-life. Security score 3.0/10.

2. Home page does not guide B2B buyers (H) [C] [V]
The home page has 0 H1 headings, 1 CTA ('Learn more') and a text-only hero with hashtags. 19 products and 12 services sit in mega menus without prioritisation; 2 of 5 live subdomains (worktransformation, evolvia) are not linked.

3. SEO and accessibility basics missing at scale (M) [C] [T]
115 of 179 pages have no meta description, 165 have no og:image, and 278 of 311 image references have no alt text. Sitemap exposes 8 '…-this-is-not-display' helper pages.

1.2 Scorecard — overall 41/100

AreaScoreBasisRationale
Technical SEO4/10[C] [T]Sitemap and canonicals exist, but 115/179 pages lack meta description, 168 titles exceed 60 chars, home has no H1, sitemap lists 8 internal helper pages.
AI search readiness4/10[T] [C]All AI crawlers receive full server-side HTML (200). No llms.txt, no Organization/Service/Product schema, no FAQ content.
Performance7/10[P]Desktop LCP 0.85-1.54 s; simulated mobile LCP 1.9-2.1 s; CLS ~0. TTFB ~0.6-0.7 s with no-cache headers.
Content depth5/10[C] [+]Median 565 words/page; deep product pages, but legacy offers (Watson IoT, DOORS classic) and no pages for IBM ELM consulting, Rhapsody training hub, Perforce P4 for CAD/Unity.
Trust / proof4/10[C]8 EN customer stories, partner pages, memberships; but '1880 Founded' and '20+ customers' figures conflict with 2006 founding; no logos/testimonials on home.
Conversion3/10[C] [V]Home has one CTA 'Learn more'; contact page is a generic form; no booking, no service-specific lead paths, newsletter form only.
Design consistency4/10[V]Roboto + #4178BE consistently used, but logo colours (#5A267D/#603422) differ from UI blue; home hero is text-only with hashtags; dated imagery.
Accessibility3/10[C] [+]278/311 image references lack alt text; home has no H1; primary blue 4.51:1 passes AA body; teal #6BB1C9 fails (2.4:1).
Security (Sicherheit)3.0/10[T]10 − 2×2 H − 2×1 M − 2×0.5 L = 3.0. Public 469 MB debug.log and EOL PHP 8.1 exposed.

Overall = mean of 9 area scores × 10 = 41. All 9 areas measured. [+]

1.3 Top 10 actions

#ActionWhyEffortPhase
1Delete /wp-content/debug.log and block *.logPublic 469 MB log may leak paths, queries, user dataXSnow
2Upgrade PHP to supported 8.3/8.4 and hide X-Powered-ByPHP 8.1 EOL; CVE-2026-109618/9 (PHP2Shell)Snow
3Add HSTS, X-Frame-Options, X-Content-Type-Options, CSPNo security headers presentSnow
4Define one clear home value proposition with H1 and primary CTAHome has no H1 and only 'Learn more'MPhase 3
5Build hubs for IBM ELM consulting, Rhapsody training and Perforce P4Key services without dedicated pagesLPhase 2
6Link all 5 live subdomains from the home pageworktransformation & evolvia not linked from main siteXSnow
7Write meta descriptions and shorten titles115 pages without meta description, 168 titles > 60 charsMPhase 5
8Add alt text to all content images278/311 references without altSnow
9Clean sitemap and fix broken assets8 helper pages in sitemap; 6 broken assets; 1 404 product pageSnow
10Add Organization/Service/Product schema and llms.txtWeak machine-readable entity dataSPhase 5

Can be done now on the live site: Delete debug.log (TOP 1) · Hide PHP version (TOP 2) · Link worktransformation & evolvia subdomains · Remove '1880 Founded' figure (verify) · Noindex '…-this-is-not-display' pages · Self-host Google Fonts · Fix 404: /products/serenity, 2 PDFs

2. Business and market

2.1 Company facts [C]

FactValueSource
Legal entity (CH)EVOCEAN GmbH, Grundstrasse 8, CH-6343 Rotkreuz/legal-notice
Register / VAT (CH)CH-170.4.006.238-2 · CHE-112.800.858/legal-notice
Legal entity (DE)EVOCEAN Deutschland GmbH, Adams-Lehmann-Strasse 56, D-80797 München · HRB 204836 · DE 289 331 303/legal-notice
ManagementPhilip Zollinger (founder, since 2006)/legal-notice, /about
Contacts+41 41 790 78 88 · info@evocean.ch / .de / .com (three variants)/legal-notice
OperationsSwitzerland, Germany, Austria, France/about
SocialLinkedIn /company/evocean-group · Twitter @EVOCEAN_GmbH · Facebook /evoceanfooter
MembershipsINCOSE CH/DE/FR chapters, swissT.net, SwissICT, SAQ, SWEN, Technologie Forum Zug, TCBE/about
PartnersIBM, Perforce, ReqTeam, Willert Software Tools, CodeSecure, Newired, Mandelz Consulting/partners/*

2.2 Business model check

ModelEvidenceVerdictImplication
WholesalerNot on the websiteNot evidencedDo not position as wholesaler
Distributor / reseller19 vendor product pages (IBM, Perforce, CodeSecure, Newired, monday.com affiliate links), 'licences and support' [C]EvidencedLicence sales need product pages with quote CTA
Service provider12 service pages, trainings (25 event URLs), consulting, coaching, competence centers [C]Evidenced — dominantLead with services; products as enablers

EVOCEAN is a consulting and training service provider that also resells engineering tool licences. The relaunch should lead with expertise and treat vendor products as proof of capability. [+] verify

2.3 Audiences

AudienceServed today byGap
B2B — engineering leads in regulated / safety industriesHome hero text, service pagesNo industry pages except lifesciences subdomain; no role-based entry
B2B — tool admins / ITProduct pages, /supportNo ELM administration offer page; support page outdated
B2B — engineers seeking training/events, training PDFsNo training catalogue with dates/prices
B2G — public sectorNot on the websiteNo public-sector references, procurement or compliance info

2.4 Product / service matrix [C]

GroupItems on siteNote
IBM ELMELM, DOORS Next, DOORS (classic), EWM (RTC), Rhapsody, Rhapsody Model Manager, RQA, Publishing Engine, Watson IoTELM consulting/admin not a separate offer
PerforceHelix Core, Helix Swarm, Helix ALM, HansoftUses old 'Helix Core' name; vendor now 'P4' — verify
Security / qualityCodeSonar, CodeSentry (CodeSecure)
Own / partner toolsReqEdit (ReqIF), ConDisSca, Node-RED, Newired, monday.comSerenity product page is 404
ServicesDigital Adoption, Systems Engineering, Rhapsody Competence Center, Workshops & Trainings, MDD, IoT, Requirements Mgmt, Config Mgmt, Tool Evaluation, DevSecOps, Continuous Improvement11 in menu, 12 incl. 'Expert Workshops' alias
Key figures'1880 Founded' · '60 years combined experience' · '20+ customers'verify — conflicts with founding year 2006

2.5 Positioning

Observed core promise [C]: “We help businesses in regulated and safety-driven industries turn human potential into operational and R&D excellence.” Tagline: “guiding you beyond”.

Evidenced differentiators: 20 years IBM Rhapsody / ELM expertise, own ReqIF tool (ReqEdit), INCOSE memberships, DACH presence with Swiss and German entities. [C]

3. Site structure

MetricValueTag
Unique HTML pages (200)179[C]
LanguagesEN 113 · DE 41 · FR 25[C]
PDF documents (200)22[C]
Redirecting URLs (reported separately)5[C]
404 URLs3[C]
Sitemap URLs (excl. images)188[T]
Sitemap URLs not linked internally33[T]
www behaviourwww and http → 301 → https://evocean.com/[T]
hreflangen/de/fr on home; Polylang language switcher[C]

Navigation as built [C]: About · Services (11) · Products (19) · Events · Support · language switcher · search. Mega menus list items alphabetically without grouping. Subdomains linked from main site: digital-adoption, lifesciences, reqif. Not linked: worktransformation, evolvia.

IA issues: product list mixes vendors and generations; trainings split between Services and Events; 5 live subdomains form a second, unconnected IA. [+]

4. Content inventory (EN core pages)

PageTypeH1 todayWordsCTA todayContent · SEO · UXRedundancyRecommendation
/Home— none —896—medium · low · confusinguniqueimprove: Add meta description, proof, CTA
/aboutAboutAbout2519—high · medium · clearuniquekeep: Keep content, new template
/blogsBlogsBlog741—medium · low · clearuniqueimprove: Add meta description, proof, CTA
/customer-storyCustomer-StorySuccessful stories198—poor · low · confusinguniqueimprove: Add meta description, proof, CTA
/eventsEventsEvents454—poor · low · clearuniqueimprove: Add meta description, proof, CTA
/get-a-consultationGet-A-ConsultationGet in touch37—poor · low · confusinguniqueimprove: Add meta description, proof, CTA
/newsletterNewsletterSign Up to EVOCEAN Newsletter40—poor · low · confusinguniqueimprove: Add meta description, proof, CTA
/productsProductsProducts1577—high · low · clearuniqueimprove: Add meta description, proof, CTA
/servicesServicesServices1220—high · low · clearuniqueimprove: Add meta description, proof, CTA
/supportSupportSupport184—poor · low · confusinguniqueimprove: Add meta description, proof, CTA
/products/codesentry-codesecureProductsCodeSentry1777—high · medium · clearuniquekeep: Keep content, new template
/products/codesonarProductsCodeSonar1120—medium · low · clearuniqueimprove: Add meta description, proof, CTA
/products/condisscaProductsConDisSca644—medium · low · outdateduniqueremove: Legacy offer, verify with client
/products/engineering-lifecycle-managementProductsIBM Engineering Lifecycle Management807—medium · medium · clearpartialrewrite: Rewrite as IBM ELM consulting & administration hub
/products/hansoftProductsPerforce Hansoft641—medium · medium · outdateduniqueimprove: Add meta description, proof, CTA
/products/helix-swarmProductsPerforce Helix Swarm710—medium · low · clearpartialmerge: Merge into Perforce P4 hub page
/products/ibm-doors-nextProductsIBM Rational DOORS Next671—medium · low · clearuniqueimprove: Add meta description, proof, CTA
/products/ibm-rational-doorsProductsIBM Rational DOORS645—medium · medium · outdatedredundantmerge: Merge into DOORS Next / IBM ELM page
/products/ibm-rational-publishing-engineProductsIBM Rational Publishing Engine734—medium · medium · clearuniqueimprove: Add meta description, proof, CTA
/products/ibm-requirements-quality-assistantProductsIBM Requirements Quality Assistant952—medium · medium · clearuniqueimprove: Add meta description, proof, CTA
/products/ibm-rhapsodyProductsIBM Rhapsody – Engineering Systems Design1148—medium · medium · clearuniqueimprove: Add meta description, proof, CTA
/products/ibm-watson-iotProductsIBM Watson IoT Platform662—medium · low · outdateduniqueremove: Legacy offer, verify with client
/products/mondayProductsMonday723—medium · medium · outdateduniqueimprove: Add meta description, proof, CTA
/products/newired-for-empowering-digital-adoptionProductsDigital Adoption Platform – Newired747—medium · medium · clearredundantmerge: Merge into digital-adoption subdomain
/products/node-redProductsNode-RED884—medium · medium · outdateduniqueimprove: Add meta description, proof, CTA
/products/perforce-helix-almProductsPerforce Helix ALM1019—medium · medium · outdateduniqueimprove: Add meta description, proof, CTA
/products/perforce-helix-coreProductsPerforce Helix Core571—poor · medium · clearpartialrewrite: Rewrite as Perforce P4 (Helix Core) hub, 571 words today
/products/rational-team-concertProductsIBM Engineering Workflow Management641—medium · low · outdatedpartialmerge: Merge into IBM ELM hub page
/products/reqifProductsReqEdit – your ReqIF Tool797—medium · high · clearredundantmerge: Live subdomain reqif.evocean.com covers topic
/products/rhapsody-model-managerProductsIBM Rhapsody Model Manager657—medium · medium · clearuniqueimprove: Add meta description, proof, CTA
/services/configuration-managementServicesConfiguration Management1111—medium · low · clearuniqueimprove: Add meta description, proof, CTA
/services/continuous-improvementServicesContinuous Improvement1183—medium · low · clearuniqueimprove: Add meta description, proof, CTA
/services/devsecops-consultingServicesDevSecOps Consulting747—medium · low · clearuniqueimprove: Add meta description, proof, CTA
/services/digital-adoptionServicesDigital Adoption1328—high · medium · clearredundantmerge: Live subdomain digital-adoption.evocean.com covers topic
/services/expert-workshops-trainingsServicesExpert Workshops and Trainings1173—medium · medium · clearpartialmerge: Merge trainings with Rhapsody training hub
/services/ibm-rhapsody-competence-centerServicesIBM Rhapsody Competence Center901—medium · high · clearpartialrewrite: Rewrite as Rhapsody training & competence hub
/services/internet-of-thingsServicesInternet of Things1290—high · medium · outdateduniquekeep: Keep content, new template
/services/model-driven-developmentServicesModel Driven Development972—medium · low · clearuniqueimprove: Add meta description, proof, CTA
/services/requirements-management-engineeringServicesRequirements Engineering and Management2464—high · medium · clearuniquekeep: Keep content, new template
/services/systems-engineeringServicesSystems Engineering1685—high · medium · clearuniquekeep: Keep content, new template
/services/tool-evaluation-integrationServicesTool Evaluation & Integration913—medium · low · clearuniqueimprove: Add meta description, proof, CTA

Ratings are rule-based [+]: content high ≥1200 words, medium ≥600; SEO = meta description + single H1 + title ≤60. Word counts include repeated template blocks inside <main> — verify.

Summary: 41 EN core pages · 4 redundant · median word count (all 179 pages) 565 · high-SEO but unclear-UX pages: 0 (none).

5. Visual asset inventory (D2 summary)

TypeCount
favicon4
image49
logo1
pdf23
video1
Total (de-duplicated)78
ReuseCount
no8
yes15
yes_with_edit55

Priority assets

IDAssetTypeUseAction
A001favicon.pngfaviconall pagesyes
A002cropped-EVO_Favicon_Round-180x180.pngfaviconall pagesyes
A003cropped-EVO_Favicon_Round-192x192.pngfaviconall pagesyes
A004cropped-EVO_Favicon_Round-32x32.pngfaviconall pagesyes
A054logo-evocean.svglogo/;/about;/blogs;/blogs/change-management;/blogs/change-managyes
A078videoseries?list=PL-oYpyahP3QjTKbS_jvUdxujhgjul420Lvideo/services/ibm-rhapsody-competence-centeryes
A018EVOCEAN_ReqEdit_Overview_2_English.jpgimage/products/reqifyes_with_edit — 0.80 MB - compress / convert to WebP alt='ReqEdit showing a ReqIF file, from left to right: navigator panel, requirements and auto-backup panel'
A036EVOCEAN_Embedded_World_2019.jpgimage/blogs;/blogs/company-news;/blogs/company-news/embedded-worlyes_with_edit — 0.67 MB - compress / convert to WebP alt='Embedded World 2019'
A037EVOCEAN_Steam_Engine_2.jpgimage/blogs/company-news/embedded-world-2019-a-short-retrospectivyes_with_edit — 0.59 MB - compress / convert to WebP alt='Steam Engine'
A033Systems-Engineering-EVOCEAN-1.pngimage/blogs/systems-engineering/looking-for-an-effective-approachyes_with_edit — 0.34 MB - compress / convert to WebP alt='Systems Engineering'
A017EVOCEAN_ReqEdit_Editions_English.jpgimage/products/reqifyes_with_edit — Uploaded 2018 - check relevance alt='ReqEdit - Tool - Editions'
A047Image_WP_Supplier_Data_Exchange.pngimage/services/requirements-management-engineering;/services/systyes — no alt text
A042monday.com-in-action.pngimage/blogs/digital-transformation/garfield-we-love-monday;/de/pryes_with_edit — Uploaded 2019 - check relevance no alt text
A044Overview_IBM_ELM.pngimage/products/engineering-lifecycle-managementyes — alt='Overview IBM Engineering Lifecycle Management'
A039Board-shot-2.pngimage/de/products/monday-2;/products/mondayyes_with_edit — Uploaded 2019 - check relevance no alt text
A043LP_Requirements_Engineering_AI.pngimage/services/requirements-management-engineeringyes_with_edit — Uploaded 2019 - check relevance no alt text
A061WP_Overview_Serenity_e.pdfpdf/wp-landing/serenity-a-cutting-edge-framework-to-drive-systeyes_with_edit — Published 2018 - review content
A062WP_Systems_Engineeering_e.pdfpdf/de/services/systems-engineering-2;/services/systems-engineeyes_with_edit — Published 2018 - review content
A074WP_Global_Configuration_Management_e.pdfpdf/wp-landing/configuration-management-across-the-engineering-yes_with_edit — Published 2020 - review content
A075WP_Supplier_Data_Exchange_e.pdfpdf/wp-landing/improving-suppliers-communication-with-easy-lossyes_with_edit — 0.32 MB - compress / convert to WebP

★ Primary logo: https://evocean.com/wp-content/themes/evocean/assets/img/logo-evocean.svg (SVG, 207×27, colours #5A267D, #603422, #CECFCF). No dark/negative or icon-only logo variant found.

Assets needing edit: EVOCEAN_ReqEdit_Overview_2_English.jpg (0.80 MB); Systems-Engineering-EVOCEAN-1.png (0.34 MB); EVOCEAN_Embedded_World_2019.jpg (0.67 MB); EVOCEAN_Steam_Engine_2.jpg (0.59 MB); Flyer_Rhapsody_User_Group_e.pdf (0.48 MB); 2019_Newired_Ovum_Report.pdf (0.41 MB); WP_Supplier_Data_Exchange_e.pdf (0.32 MB); WP_DevOps_Principles_Techniques_Success_Factors_e.pdf (0.88 MB).

Broken / unusable: http://evocean.bitsens.com/wp-content/uploads/2018/04/Bernina-880-Sowing-Machine.jpg; http://evocean.bitsens.com/wp-content/uploads/2018/04/Bernina-Sowing-Machine-1932.jpg; http://evocean.bitsens.com/wp-content/uploads/2018/04/Giovanni-Annunzio.jpg; https://documentation.reqteam.com/wp-content/uploads/2021/10/demo5.png; https://evocean.com/wp-content/uploads/2022/05/Image_LP_Devops.jpg; https://static.wixstatic.com/media/719315_97ce697da0d7438391a3aa57c7199471~mv2.png/v1/fill/w_980,h_510,al_c,q_90,usm_0.66_1.00_0.01,enc_auto/Group%2052.png; https://evocean.com/wp-content/uploads/2018/03/PI_Rhapsody_Shortscuts_e.pdf; https://evocean.com/wp-content/uploads/2018/09/Flyer_Rhapsody_User_Group_e.pdf.

Missing assets: team photos in usable resolution (verify), client logos, office photos, hero imagery for IBM ELM / Rhapsody training / Perforce P4, Open Graph images. Limit: CSS background images were not catalogued.

Full list: Phase1_Assets_EVOCEAN GmbH.csv (78 rows).

6. Technical SEO

What worksEvidence
HTTPS + single hostAll variants 301 to https://evocean.com/ [T]
XML sitemapYoast sitemap index, 8 sub-sitemaps, 188 URLs [T]
Canonical tags179/179 pages [C]
Base schemaWebSite, WebPage, BreadcrumbList on all pages [C]
hreflangen/de/fr [C]
IDProblemPagesImpact
SEO-01115/179 pages without meta descriptionsite-wideM
SEO-02168/179 titles longer than 60 characters (site name suffix)site-wideM
SEO-033 home pages (EN/DE/FR) without H1; 17 form pages with 2 H1 ('Thank you!')site-wideM
SEO-04Sitemap lists 8 helper pages '…-this-is-not-display' and 33 URLs not linked internallysite-wideM
SEO-05165/179 pages without og:imagesite-wideL
SEO-06robots.txt is a Joomla template; no Sitemap: linesite-wideL
SEO-07404: /products/serenity and 2 linked PDFssite-wideM
SEO-0824 crawled pages missing from sitemap (incl. partner pages)site-wideL

Schema.org inventory [C]: BreadcrumbList (179), EntryPoint (179), ListItem (179), PropertyValueSpecification (179), SearchAction (179), WebSite (179), ReadAction (152), WebPage (152), CollectionPage (27), ImageObject (11). Gaps: Organization, LocalBusiness, Service, Product, Event, Course, FAQPage, Person.

6b. Security basics

CheckStatusFindingSeverityRecommendation
Admin-URL exposure✓/wp-admin/ → 302 to /404/; /wp-login.php, /admin, /login → 404. No login link in HTML.—Keep.
User enumeration✓/wp-json/wp/v2/users → 401; ?author=1 → 404.—Keep.
Technology & version exposure✗X-Powered-By: PHP/8.1.34, PleskLin. PHP 8.1 is end-of-life (security support ended 31.Dec.2025). Server: nginx (no version).HRecommendation: set expose_php = Off; upgrade to supported PHP 8.3/8.4 latest patch; check exposure to CVE-2026-109618 / CVE-2026-109619 (PHP2Shell).
HTTP security headers✗HSTS, X-Frame-Options, X-Content-Type-Options, Content-Security-Policy: all absent.MRecommendation: add the four headers at nginx level.
TLS / HTTPS⚠Let's Encrypt cert valid until 20.Dec.2026; http→https 301 works. 3 images on a customer story load via http://evocean.bitsens.com (mixed content, broken).LRecommendation: remove legacy http image references.
Backup & file exposure✗/wp-content/debug.log is publicly reachable (HTTP 200, 469,155,395 bytes). .env, backup.zip, wp-config.php.bak → 404.HRecommendation: delete debug.log, set WP_DEBUG_LOG false, block *.log at nginx. Do now.
Outdated CMS indicators⚠No generator meta tag. /readme.html and /license.txt reachable (WordPress identified).LRecommendation: block or delete readme.html and license.txt.
Cookie & consent⚠No consent banner. Only first-party cookies before consent (PHPSESSID, pll_language). Google Fonts loaded from fonts.googleapis.com before consent (IP transfer to US).MRecommendation: self-host Roboto; add consent banner when analytics are introduced.

Security score [+]: 10 − 2 H×2 − 2 M×1 − 2 L×0.5 = 3.0/10. Checks were passive GET/HEAD requests only.

7. AI search readiness

CrawlerStatusFull HTML
GPTBot200✓
OAI-SearchBot200✓
ClaudeBot200✓
PerplexityBot200✓
Google-Extended200✓

Content is delivered server-side (WordPress). robots.txt does not block any AI crawler. [T]

IDGapWhyFix (Recommendation)
AI-01No llms.txtNo curated summary for LLMsPublish llms.txt
AI-02No Organization/Service schemaEntity facts not machine-readableAdd JSON-LD
AI-03No FAQ / Q&A contentLLMs quote direct answersAdd FAQ per hub
AI-04Inconsistent facts (1880 / 2006)LLMs may repeat wrong figuresFix figures

8. Performance

PageModeWeight KBRequestsTTFB msLCP msCLSLoad ms
Homedesktop345286909760.001942
Homemobile34428699210403009
Product: Perforce Helix Coredesktop105165928520.0011519
Product: Perforce Helix Coremobile10416581192402181
Overview: Productsdesktop183226209240.001884
Overview: Productsmobile18122609209602126
About (heaviest on mobile)desktop4262860915440.0011086
About (heaviest on mobile)mobile63828606213604825
Service: Requirements Mgmtdesktop650186108600.001855
Service: Requirements Mgmtmobile64818597205204201

Method [P]: Playwright Chromium, single cold run per page from a cloud sandbox. Desktop 1440×900 unthrottled; mobile 390×844, CDP 150 ms latency / 1.6 Mbps, 4× CPU slowdown. Weight = transferSize of navigation + resources. Limits: one run, no field data, cross-origin sizes may be under-reported.

Root causes: no HTML caching (Cache-Control: no-store), jQuery from ajax.googleapis.com, Google Fonts external, unoptimised JPG/PNG up to 0.8 MB, no WebP. [T][C]

MetricTarget for relaunch
LCP mobile< 2.0 s
CLS< 0.05
Home weight< 500 KB
TTFB< 300 ms (CDN)
Requests< 30

9. Trust and conversion

SignalWhereVisible?Action (Recommendation)
Customer stories (8 EN)/customer-storyNot on homeSurface 3 on home
Partner logos (IBM, Perforce…)/partners/*, /aboutPartlyLogo strip on home
Memberships (INCOSE…)/aboutDeep in pageTrust row
Team bios/aboutYesAdd photos per hub
Key figures/aboutYes — inconsistentCorrect '1880 Founded'
Certifications / ISONot on the website—Ask client (Q3)
Testimonials / quotesNot on the website—Collect 3–5

Conversion path [C]: primary action = 'Get in touch' form (/get-a-consultation, 37 words). Form friction: maths captcha, no topic selector. Self-qualification: no prices, training PDFs downloadable, whitepapers gated behind form (/download-document). Low-commitment steps: newsletter, whitepapers, Newired self-service demo. Lead routing: single form → email (verify).

10. Consolidated issue register

IDIssueSourceSeverityEffortFixed in
SEC-01Public /wp-content/debug.log (469 MB)[T]HXSnow
SEC-02PHP 8.1.34 (EOL) exposed via X-Powered-By; potentially vulnerable to CVE-2026-109618[T]HSnow
SEC-03Missing HSTS / XFO / XCTO / CSP headers[T]MSnow
SEC-04Google Fonts loaded before consent; no consent banner[T]MSnow
SEC-05Mixed content: 3 http images from evocean.bitsens.com[T]LXSnow
SEC-06readme.html / license.txt reveal WordPress[T]LXSnow
SEO-01115/179 pages without meta description[C]MMPhase 5
SEO-02168/179 titles longer than 60 characters (site name suffix)[C]MSPhase 5
SEO-033 home pages (EN/DE/FR) without H1; 17 form pages with 2 H1 ('Thank you!')[C]MSPhase 3
SEO-04Sitemap lists 8 helper pages '…-this-is-not-display' and 33 URLs not linked internally[T]MXSnow
SEO-05165/179 pages without og:image[C]LSPhase 5
SEO-06robots.txt is a Joomla template; no Sitemap: line[T]LXSnow
SEO-07404: /products/serenity and 2 linked PDFs[C]MXSnow
SEO-0824 crawled pages missing from sitemap (incl. partner pages)[T]LXSPhase 5
AI-01No llms.txt[T]LXSPhase 5
AI-02No Organization / Service / Product / FAQ schema[C]MSPhase 5
CNT-01No dedicated pages for IBM ELM consulting & administration, Rhapsody training hub, Perforce P4 multi-domain[C]HLPhase 2
CNT-024 EN pages redundant with live subdomains or sibling products[C] [+]MMPhase 2
CNT-03Legacy offers still listed (IBM Watson IoT, DOORS classic, Hansoft, Node-RED) - verify[C]MSPhase 2
CNT-04Support page lists Rhapsody 8.4 as most recent version - verify[C]LXSnow
TRU-01'1880 Founded' and '20+ customers' conflict with legal notice (founded 2006)[C]MXSnow
TRU-02No client logos, testimonials or certifications on home[V]MMPhase 3
CNV-01Home has single CTA 'Learn more'; no consultation booking[C] [V]HMPhase 3
CNV-02worktransformation & evolvia subdomains not linked from main site[C]MXSnow
CNV-03Forms use maths captcha (14+4=) and generic fields; no lead routing per topic[C]LSPhase 6
PRF-01Cache-Control: no-store on HTML; TTFB ~0.6-0.7 s[P] [T]LSPhase 8
PRF-028 assets > 300 KB (largest 0.80 MB JPG)[C]LSPhase 7
ACC-01278/311 image references without alt text[C]HSnow
ACC-02Teal #6BB1C9 (2.4:1) and grey #CECFCF (1.56:1) fail AA on white[+]MXSPhase 7
DES-01Logo colours (purple/brown) disconnected from UI blue #4178BE[V]MMPhase 7
DES-02No site.webmanifest; favicon.png 404; /favicon.ico is a 302 to PNG[T]LXSPhase 7
DES-03Broken image /2022/05/Image_LP_Devops.jpg on 4 service pages[C]MXSnow

Totals: H 5 · M 16 · L 11 · 32 issues.

11. Source reconciliation

TopicWhat the measurements sayResolution
Founding year/about: '1880 Founded'; /legal-notice: © 2006–2026; /about bio: 'Since 2006'2006 used; 1880 flagged (verify)
Page countCrawl 179 unique pages vs sitemap 188 URLsCrawl count used; 33 sitemap-only URLs listed in appendix
Company nameBrief typo corrected by clientEVOCEAN GmbH used throughout
Contact e-mailinfo@evocean.com / .ch / .deAll three reported; Q2
Words per pageTemplate blocks inflate countsTreated as relative values

12. KPI baseline

MetricTodayTarget
Overall score41/100≥ 80/100
Security score3.0/1010/10
Pages with meta description64/179100 %
Images with alt text33/311100 %
Mobile LCP home2104 ms< 2000 ms
CTAs on home1≥ 3 (primary + 2 secondary)
Live subdomains linked from home3/55/5
Lead conversions / monthnot availablebaseline after analytics

13. Implications for Phases 2–3 (hypotheses, not decisions)

14. Open questions for the client

#QuestionWhy it mattersBlocks phase
1Keep French (25 pages) in the relaunch?Brief lists EN + DE onlyPhase 2
2Which contact e-mail is canonical (.com/.ch/.de)?Consistency, schemaPhase 3
3Certifications, client logos and testimonials we may publish?Trust sectionPhase 3
4Which legacy products are still sold (Watson IoT, DOORS classic, Hansoft, Node-RED, ConDisSca)?Content removalPhase 2
5Who fixes the server findings (debug.log, PHP) — hosting partner?Must happen nownow
6Should subdomains stay separate or move under evocean.com paths?IA and SEO strategyPhase 2
7Is there B2G / public-sector proof to show?Configured segment without evidencePhase 2
<div class="page-break"></div>

Part B — Design guidelines extracted

B1 Brand mark

FileFormatVariantNote
https://evocean.com/wp-content/themes/evocean/assets/img/logo-evocean.svgSVGFull colour on white207×27; colours #5A267D, #603422, #CECFCF
Favicon EVO_Favicon_RoundPNG 32/180/192Round icon2025 upload
Dark / mono / icon-only logo—MissingNeeded for footer & social

B2 Colour palette (WCAG 2.x, calculated)

HexRoleUseContrast on whiteAA body (4.5:1)AA large (3:1)
#4178BEprimaryHeadings H2, links, filled sections (33 text + 10 bg uses on home)4.51:1✓✓
#5A267DlogoLogo word mark (purple)10.46:1✓✓
#603422logoLogo pixel mark (brown)10.44:1✓✓
#6579CFaccentLink colour 'Learn more' (9 uses)4.05:1✗✓
#6BB1C9accentTile background (teal)2.4:1✗✗
#CECFCFneutralLogo tagline 'guiding you beyond' (grey)1.56:1✗✗
#000000textBody text (350 uses)21.0:1✓✓
#FFFFFFbackgroundPage background1.0:1✗✗

B3 Product colours

Not applicable — no product/finish colours on the website. [C]

B4 Typography [V]

RoleFamilySizeWeight / case
All textRoboto (Google Fonts, external)—400
H1 (inner pages)Robotoverify400
H2Roboto32 px400, sentence case, #4178BE
H3Roboto16 px400
Body / heroRoboto12 px base; hero ~30 px400

B5 Layout [T]

Desktop-first CSS with max-width media queries; 25 distinct breakpoints incl. 413, 600, 767/768, 820, 950, 1023/1024/1025, 1100, 1112, 1200, 1365, 1400, 2000 px. Content column ~1100 px. No consistent spacing scale (verify).

B6 Components [V]

ComponentToday
ButtonsText links 'Learn more' / 'View all'; no button style on home
CardsColoured tiles (teal/indigo/blue) for services
Mega menu4 dropdowns with 'View all'
FormsContact, newsletter, event, download — maths captcha
Consent bannerNone
Language switcherEn / De / Fr dropdown
Tabs / accordionLocation tabs on /about
Video1 YouTube playlist embed (Rhapsody)

B7 Icons

Font/SVG icons for menu arrows and search only; no service icon system. Recommendation: introduce one line-icon set. [V]

B8 Imagery

Strengths: authentic tool screenshots (ReqEdit, ELM, monday). Weaknesses: event photos 2018–2019, steam-engine metaphor, 3 broken customer images, no people or office photos on home. [V][C]

B9 Favicons and app icons [T]

FormatFile foundURLDimensionsBrowser tabGoogle SearchQuality
favicon.ico302 → cropped-EVO_Favicon_Round-32x32.png/favicon.ico32×32 PNG (not ICO)✓verifyOK
favicon.png (theme)✓ in <head>, root /favicon.png 404/wp-content/themes/evocean/favicon.png261 bytes——Low — legacy, remove
icon 32×32✓cropped-EVO_Favicon_Round-32x32.png32×32✓verifyGood
icon 192×192✓cropped-EVO_Favicon_Round-192x192.png192×192——Good
apple-touch-icon✓cropped-EVO_Favicon_Round-180x180.png180×180——Good
SVG favicon✗————Missing
site.webmanifest / manifest.json✗ 404————Missing
Google Search display could not be verified from the sandbox (verify).

B10 Design debt register

#AreaObservationRiskPriority
1BrandLogo purple/brown vs UI blueWeak recognitionH
2Contrast#6BB1C9 2.4:1, #CECFCF 1.56:1AA failureH
3HeroText-only hero with hashtags and '.' separatorsLow engagementH
4ButtonsNo button componentWeak CTAsM
5Breakpoints25 ad-hoc breakpointsInconsistent layoutM
6FontsExternal Google FontsGDPR + perfM
7ImageryDated / broken imagesTrustM
8IconsNo icon systemScanabilityL

B11 Starting tokens for Phase 7 (Recommendation)

TokenValueReason
--color-primary#4178BEExisting UI blue, 4.51:1 passes AA
--color-primary-strong#2F5E9EHover/heading, 6.53:1
--color-brand-purple#5A267DFrom logo, 10.46:1
--color-brand-brown#603422From logo, 10.44:1
--color-accent-teal#2E7F99Darkened #6BB1C9 to pass AA (4.55:1)
--color-muted-text#5F6368Replaces #CECFCF (6.05:1)
--font-sansRoboto (self-hosted) or similarKeep familiarity, fix GDPR
--breakpoints640 / 768 / 1024 / 1280Replace ad-hoc set
--radius8 pxModern, neutral

Appendix

Method and limits

Crawl: recursive same-host link crawl from https://www.evocean.com/, URLs normalised (www/http/trailing slash/fragment). Assets: <img>, iframes, icons and linked PDFs; CSS backgrounds not included. Security: passive GET/HEAD only — debug.log was not inspected for content. Contrast: WCAG 2.x relative luminance formula. [+] derivations: all scores, ratings, redundancy and hypotheses.

Complete URL list (unique HTML, 200)

Redirects

404

Sitemap URLs not linked internally

PDF documents

Silverbush AG © www servicesEVOCEAN GmbH31.Oct.2026Page numbers added by the PDF print dialog