Telegram
App Quality Report
Powered by Testers.AI
B86%
Quality Score
7
Pages
73
Issues
7.8
Avg Confidence
7.6
Avg Priority
27 Critical31 High15 Medium
Testers.AI
>_ Testers.AI AI Analysis

Telegram was tested and 73 issues were detected across the site. The most critical finding was: AI/LLM endpoint usage detected on page load (privacy risk). Issues span Security, Performance, A11y, Other categories. Persona feedback rated Visual highest (7/10) and Accessibility lowest (6/10).

Qualitative Quality
Telegram
Category Avg
Best in Category
Issue Count by Type
Content
26
UX
19
A11y
7
Security
1
Pages Tested · 7 screenshots
Detected Issues · 73 total
1
AI/LLM endpoint usage detected on page load (privacy risk)
CRIT P9
Conf 9/10 Other
Prompt to Fix
Find all AI/LLM endpoint calls that occur on page load in the frontend codebase. Remove direct calls from initial render, favor lazy-loading or user-triggered requests. Implement a user consent prompt before any data is sent to AI services, and add instrumentation to log when such calls occur and what data is sent.
Why it's a bug
Console logs show repeated "⚠️ AI/LLM ENDPOINT DETECTED" entries, indicating frontend code may be invoking AI/LLM endpoints automatically on load. This poses privacy concerns (potential data sent to third-party AI services) and performance issues (unnecessary network activity).
Why it might not be a bug
If detection is caused by a monitoring tool rather than actual production behavior, the issue may be a false positive. However, the visible logs strongly suggest AI endpoints are being touched on load.
Suggested Fix
Audit the frontend build to locate any AI/LLM endpoint calls that occur on page load. Remove or defer such calls until explicit user interaction. Implement explicit user consent for any data sent to AI services and batch/limit requests with proper rate limiting. Add logging around any AI calls for clearer observability.
Why Fix
Mitigates privacy risks, reduces unnecessary network traffic, and improves user trust and performance.
Route To
Frontend Engineer / Security Engineer
Page
Tester
Jason · GenAI Code Analyzer
Technical Evidence
Console: ⚠️ AI/LLM ENDPOINT DETECTED
Network: N/A (no specific AI endpoint URL visible in screenshot)
2
Privacy risk: AI endpoints invoked without explicit user consent
CRIT P9
Conf 8/10 Other
Prompt to Fix
Add a user-consent mechanism for AI features, ensure all AI-related network calls are gated behind consent, implement a toggle to disable AI endpoints by default, and validate that no PII is transmitted to AI services without explicit user approval.
Why it's a bug
Network activity and logs indicate AI endpoint usage without shown consent mechanisms, exposing potential user data to AI services. This is a privacy risk that can trigger compliance concerns.
Why it might not be a bug
If AI features are optional and the page provides clear opt-in/off controls, this may not be a bug; however, the screenshot provides no evidence of consent controls.
Suggested Fix
Introduce explicit consent flow for AI features, provide a clear opt-in toggle, and ensure requests to AI services are data-minimized and sanitized. Move AI calls behind consent and remove forceful preloads. Add a privacy section describing AI data handling.
Why Fix
Mitigates privacy and compliance risks, increases user trust, and reduces potential regulatory exposure.
Route To
Security/Privacy Engineer
Page
Tester
Jason · GenAI Code Analyzer
Technical Evidence
Console: ⚠️ AI/LLM ENDPOINT DETECTED
Network: GET https://telegram.org/js/main.js?47
3
Excessive number of network requests
CRIT P9
Conf 9/10 PerformanceOther
Prompt to Fix
Audit the landing page's asset graph to identify which assets can be combined or deferred. Implement code-splitting for JS, consolidate CSS where possible, remove unused images, and add rel preload/prefetch for critical resources. Ensure images below the fold use lazy loading.
Why it's a bug
The page makes a high number of network requests (106), which increases connection setup overhead and can degrade load times, especially on slow/mobile connections.
Why it might not be a bug
Some sites intentionally load many assets to render a rich landing page; however, performance can still be optimized without sacrificing UX.
Suggested Fix
Audit and consolidate assets where possible (combine CSS/JS), remove unused resources, lazy-load below-the-fold images, implement asset bundling and code-splitting, use sprites or inline SVGs where feasible, and add resource hints (preconnect, prefetch, preload) for critical assets. Consider switching to HTTP/2 or HTTP/3 and enabling server push where appropriate.
Why Fix
Fewer requests and smarter loading reduce latency, improve LCP and TTI, and enhance user perception of speed and responsiveness.
Route To
Frontend Engineer / Performance Engineer / Backend for asset optimization
Page
Tester
Tariq · Performance Specialist
Technical Evidence
Network: Total network requests: 106
+27
27 more issues detected  View all →
Early LLM API calls on page load (AI/LLM endpoint detected)
Missing Cache Headers on bootstrap.min.css
Render-blocking JavaScript: rlottie-wasm.js and potentially ...
and 24 more...
Unlock All 73 Issues
You're viewing the top 3 issues for Telegram.
Sign up at Testers.AI to access the full report with all 73 detected issues, detailed fixes, and continuous monitoring.
Sign Up at Testers.AI or let us run the tests for you