Interaction to Next Paint (INP)
Interaction to Next Paint: how long the page takes to visibly answer a tap or a click. Under 200 ms is good.
Interaction to Next Paint measures responsiveness: from the moment a visitor taps, clicks or presses a key until the browser draws the next frame showing a reaction. The reported value is roughly the slowest interaction of a visit, so one sluggish menu or filter is enough to spoil it. INP replaced First Input Delay as a Core Web Vital in March 2024.
Thresholds and where the number comes from
200 ms or less is good, up to 500 ms needs improvement, more is poor — the limits SiteScan uses to colour the row. INP can only be measured on real interactions, so it appears only in the real-user rows from the Chrome UX Report: the 75th percentile over the last 28 days. A site without enough Chrome traffic has no INP figure at all; the closest lab hint is Total Blocking Time in the Lighthouse rows, which SiteScan calls good up to 200 ms.
How to improve it
Almost always the cause is the main thread being busy with JavaScript.
- Split long tasks and yield back to the browser between chunks, for example with
await scheduler.yield()orsetTimeout. - Show visual feedback first, then do the heavy work.
- Ship less JavaScript: drop unused libraries and load third-party scripts late.
- Avoid huge DOMs that make every re-render expensive.
See this check on your own site
Run a free scan: the report shows this row for your domain along with the other checks of the site audit.
More in “Core Web Vitals”
What SiteScan checks
TLS certificate
- TLS certificate expiry
- Outdated TLS versions (TLS 1.0/1.1)
- TLS certificate chain
- TLS certificate issuer
- Certificate signature algorithm
Domain registration
- Domain registration expiry
- Registered domain name
- Domain registrar
- Domain registration date
- Domain last updated date
- Domain status codes (EPP)
- Domain transfer lock
- Registrar abuse contact
- RDAP and WHOIS data source
Indexing
- robots.txt file
- CSS and JS blocked in robots.txt
- XML sitemap
- Sitemap index file
- Off-domain URLs in the sitemap
- Sitemap lastmod dates
- Broken URLs in the sitemap
- RSS and Atom feed
Addresses & redirects
Security headers
- HTTP security headers and grade
- Strict-Transport-Security (HSTS) header
- Content-Security-Policy (CSP) header
- X-Content-Type-Options: nosniff
- X-Frame-Options and clickjacking
- Referrer-Policy header
- Permissions-Policy header
- HSTS preload list
- CORS and cross-origin reads
- HTTP TRACE method
Delivery & reputation
- Cache-Control header for HTML
- ETag and Last-Modified revalidation
- HTTP/3 and QUIC support
- Server version disclosure in headers
- DNS blocklist (DNSBL) check
Internal links
Exposure
- Exposed sensitive files (.env, .git, backups)
- Directory listing enabled
- Public JavaScript source maps
- Exposed WordPress endpoints
Well-known files
- security.txt file
- llms.txt for AI assistants
- llms-full.txt file
- ads.txt authorized sellers file
- humans.txt file
- Well-known change-password URL
DNS & email
- MX records (mail servers)
- SPF record
- DMARC record and policy
- DNSSEC signing
- CAA record
- Nameserver redundancy
- IPv6 support (AAAA record)
- MTA-STS policy
- TLS-RPT reporting record
- BIMI record (brand logo in email)
- Wildcard DNS record
- Dangling CNAME and subdomain takeover
Privacy & consent
- Analytics and tracking scripts
- Cookie consent banner
- Privacy policy link
- Terms of service link
- Imprint (Impressum)
- Accessibility statement
Core Web Vitals
- Lighthouse performance score
- Largest Contentful Paint (LCP)
- Cumulative Layout Shift (CLS)
- Interaction to Next Paint (INP)
- CrUX field data vs lab data