SEO: og:image uses SVG which is unsupported by most social platforms
Performance: logo.svg is 348KB (SVG logos should be <10KB)
Bug: Missing favicon and web app manifest
Security: CORS defaults to allow all origins in development
Dev: Helmet CSP blocks Vite HMR WebSocket in development
Security: Production build generates sourcemaps (exposes source code)
Security: No form spam protection (honeypot, captcha, or turnstile)
Bug: api.js retries 409 Conflict responses (duplicate lead submissions)
Bug: Support page secondary CTA bg-secondary-bg is undefined in Tailwind config
Bug: Support page phone numbers and email are not clickable
Bug: Footer phone tel: links missing +1 country code
Bug: Header desktop nav has no Services/Industries dropdown
SEO/a11y: Navigation uses Button onClick instead of Link elements
Bug: Contact page links to itself (Request Consultation on Contact page)