The Website Maintenance Checklist Most Business Owners Overlook

A website is like a physical shop: once it's open, the work isn't done. Shelves need tidying, lights need checking, expired stock needs pulling. The difference is that damage in a physical shop is visible immediately, while damage on a website is often only noticed after prospects have already left.

Here's the checklist we use when auditing client websites that have been running for over a year, ordered by how often each item turns out to be broken.

Load speed, re-checked every 3 months

A site that was fast at launch can slow down over time as new uncompressed images get uploaded, extra plugins pile up, or content keeps growing without optimization. Check your site's speed periodically, ideally every 3 months, especially before launching a new ad campaign. A slow site immediately raises your cost per click on platforms like Google Ads, since your page quality score drops along with it.

Security certificate and "not secure" warnings

An expired SSL certificate makes browsers show visitors a "Not Secure" warning — an instant trust killer, especially for a business with a consultation form or online transactions. Many owners only realize this is a problem after a prospect asks, "why does it say your site isn't safe?"

Regular backups, not "it's probably running"

Many business owners assume automatic backups are running but never actually confirm it. They only find out there's a problem when the site actually goes down or gets hacked, and the last available backup turns out to be eight months old. Ideally, confirm a backup actually exists (not just assume it does) every month.

Broken links piling up over time

Every time you rename a product, delete an old page, or restructure your menu, there's a risk of old links breaking. Piled-up broken links aren't just a bad visitor experience — they're also a negative signal to Google when it evaluates your site's overall quality.

Content that's no longer relevant but still live

Last year's promo still pinned to the homepage, an old phone number that's no longer active, or a price that changed but was never updated on the site — each one seems small on its own, but they cumulatively erode trust with prospects who cross-check information carefully.

A consultation form that quietly stops working

This is one of the most expensive problems precisely because it's the least visible. A form can stop sending notifications due to a plugin change, an email integration error, or an incompatible system update — and the owner only notices months later when no leads have come in, even though traffic kept flowing. Test your own consultation form periodically, ideally once a month, to confirm notifications are actually arriving.

Display compatibility on newer devices and browsers

A phone OS update or new browser version can occasionally break a layout that used to render cleanly on certain devices. Check your site's display on both Android and iPhone every few months, since the majority of local business traffic comes from mobile devices.

Domain and hosting renewal dates that quietly lapse

This is one of the most embarrassing incidents that can happen: a website suddenly becomes completely inaccessible, not from a hack or a technical error, but because the domain renewal was forgotten and it lapsed into someone else's hands, or hosting got deactivated over an unpaid annual bill. This usually happens because domain and hosting responsibility sits with one person who's left the company or simply forgot, with no automatic reminder in place. Ideally, domain and hosting renewal dates get logged on a shared team calendar, not held in one person's memory, and set to auto-renew or at least flagged a month ahead of time.

Analytics and tracking that quietly stop recording data

Google Analytics or an ad pixel that stops working because of a website code change, a platform migration, or a cookie consent update is a problem that's nearly invisible, since the site still looks completely normal to visitors. What's actually lost is your ability to make data-driven decisions, since ad performance and organic traffic reports become inaccurate without you realizing it. Check your own analytics dashboard periodically, at least once a month, to confirm visitor data is genuinely being recorded and not just an empty display nobody's actually looked at.

Who should actually own this checklist

For a business with no internal technical team, this checklist often falls to "whoever happens to be free," usually an admin staffer with no technical background at all, and ends up not getting done because nobody feels it's their responsibility. If your business has an internal team, assign one person as the clear owner with a written checklist and schedule, rather than leaving it as a shared responsibility that ends up being nobody's responsibility. If there's no internal technical team, this is an area best handed to an outside vendor with routine reporting, so the checklist actually gets run rather than just intended to be run.

Why maintenance gets neglected, and what it costs

The most common reason: a website gets treated as a "finish it once" project instead of an asset that needs ongoing care like any other business asset. The consequences build slowly — ad costs creep up for reasons nobody notices, leads shrink without anyone suspecting the broken form, until the cost of fixing everything at once ends up far higher than routine upkeep would have been.

Our Website Maintenance service essentially runs through this entire checklist on a routine basis so you don't have to remember it yourself, while reporting your site's condition every month in language that's easy to understand, not a confusing technical report.

If it's been more than six months since anyone actually checked the items above on your business website, chances are at least one or two of them have already started slipping without you noticing.