For a site served through cloudflare it seems a bit slow, are you generating the featured schools list every time the home page is hit? CF doesn't seem to be ab

For a site served through cloudflare it seems a bit slow, are you generating the featured schools list every time the home page is hit? CF doesn't seem to be able to cache the page very long (I keep seeing cache misses). Maybe either add some modified-GET processing so Cloudflare can cache the page, or generate the page every N minutes so Cloudflare is just grabbing a static page which it can cache. Alternately use some JavaScript to generate the featured schools list, serve that as a static file and have your code randomly select schools to feature on the homepage. Unclear that this site is for Tanzania schools until one reads around a bit. Consider using "button type="submit" for the search button (or just <input type="submit">). Presently entering a search term and hitting enter has no effect. I cannot tell what's making a call to m.addthis.com but loading a link from the search results is stopped until the addthis.com server replies. I had searched on "swahili" and clicked on "Kiswahili" from the results. The POST request to m.addthis.com for their beacon is killing response time for the site, the rest of the page load blocks on a response from that server. Looking at that page for Kiswahili, http://matokeo.co/subject/kisw/ http://matokeo.co/subject/kisw/ , three requests for that page over only a couple of minutes each resulted in a cache miss at cloudflare. It could be as simple as your CSRFTOKEN cookie is set to expire the moment it is served, or your server is not handling modified-GET requests and is serving new content each time. You are getting almost no benefit from Cloudflare at the moment, every request seems to be uncacheable by Cloudflare and results in a hit on your server. Would recommend trying to make the content more cacheable. Also, you appear to be using integrity hashes on some but not all of your third party JS and CSS. If possible try to add hashes for all third party content. Even if the target audience is solely in Tanzania, a few bots hitting your site via cloudflare could really impact your users since every hit is being forwarded to your origin server.