Website Maintenance Checklist: Weekly, Monthly, and Yearly Tasks for Small Business

Most small businesses maintain their website the way people maintain a smoke alarm. Nothing happens for ages, and then something goes wrong at the worst possible time.

The worst way to discover your contact form is broken is from a customer who tried it twice, gave up, and rang the business down the road. By the time they mention it, you have no idea how many others quietly did the same.

A written checklist fixes that. It turns a vague worry ("I should probably look at the website") into a short list with dates attached. Ten minutes a week costs far less than a month of lost leads, an emergency developer bill, or a hacked site that Google has flagged as unsafe.

It also makes the cost conversation easier. Once you know what the routine involves, you can decide whether to run it yourself or pay someone, and you can judge a care plan quote properly. Our guide to website maintenance costs for small business covers that side in detail.

"Maintenance" gets used as a catch-all, which is how people end up paying for things they don't need and skipping the things they do. It helps to split it into five jobs.

• Security: software updates, backups, logins, and HTTPS. This stops the site being broken into or held to ransom.
• Performance: speed, especially on mobile. Slow pages lose visitors before they've read a word.
• Content: prices, services, staff, opening hours, and photos that still match the business you run today.
• Search visibility: indexing, broken links, and making sure Google can still read and trust the site.
• The enquiry path: forms, phone links, booking tools, and the emails that land in your inbox.

The last one matters most commercially, and it's the one people forget most often. Plenty of care plans will update plugins every week without ever sending a test enquiry. The site is technically healthy. It just doesn't make the phone ring.

Weekly checks are about catching the obvious stuff fast. Pick a slot (Monday morning with the first coffee works for most people) and run through this on your phone, because that's how most of your customers see the site.

The form test matters more than everything else on this list. A form that silently fails is the most expensive bug a small business site can have, because nothing looks wrong. The page loads, the button works, the thank-you message appears. The email just never arrives, and nobody knows until someone complains.

Reviews sit on this list because they build trust on both your site and your Google listing. If that side feels neglected, see how to get more Google reviews.

Once a month, set aside 30 to 60 minutes for the jobs that keep the site secure and visible. Run them in this order. The order is what stops an update turning into a disaster.

1. Take a fresh backup. Before you touch anything, make sure you can roll back.
2. Apply updates. On WordPress, that means core, theme, and plugins. On hosted builders like Squarespace, Wix, or Webflow, the platform handles core updates, but check any third-party apps or embedded tools.
3. Re-test the site after updating. Load the key pages and send another test enquiry. Updates are one of the most common reasons forms and layouts break.
4. Confirm automatic backups are running. Check that recent backups exist and that a copy is stored somewhere other than the server the site runs on.
5. Open Google Search Console. Look at the Pages report for new indexing problems and the Performance report for any sharp drop in clicks.
6. Count your enquiries. Check the key events in Google Analytics against what actually arrived in your inbox.

A backup you've never tested is a hope, not a plan. Once or twice a year, ask your host or developer to restore a backup to a staging copy so you know it works before you need it. Our guide to website security for small business goes deeper on logins, backups, and HTTPS.

If Search Console shows pages dropping out of the index, don't panic and don't start rewriting everything. Work through the causes one by one with our Google not indexing fix checklist. And if your analytics has never been set up to record enquiries properly, the GA4 guide for small business will get you there in an afternoon.

Every three months, zoom out. These checks catch the slow drift that weekly glances miss: pages getting heavier, details going stale, and links pointing at nothing.

For speed, Google's Core Web Vitals guidance on web.dev sets the benchmarks most people use. A good result means the main content loads within 2.5 seconds, the page responds to taps within 200 milliseconds (the Interaction to Next Paint measure), and the layout doesn't jump around while it loads. You can test any page for free at PageSpeed Insights.

If the scores have slipped, the cause is usually images, unused scripts, or cheap hosting. Our plain-English list on how to speed up a small business website covers the fixes in order. For the listing side, keep your details consistent using our Google Business Profile optimisation guide. For the accessibility checks, the website accessibility guide includes a 30-minute self-check.

Once a year, step back from the technical side and look at ownership, renewals, and whether the website still reflects the business. Put it in the calendar around your end-of-year admin so it actually happens.

Renewal pricing is where a lot of owners get caught. Introductory hosting deals can jump noticeably in year two. Our breakdown of website hosting costs explains what's normal and when switching is worth the hassle.

A website that's technically perfect but describes the business you ran three years ago is still a broken website. It just breaks in the sales conversation instead of the code.

Read your homepage as a new customer would. If you'd need to ring the business to understand what it does, the content needs more work than the plugins.

None of these mistakes look serious on the day. That's exactly why they're common.

There's also a softer mistake: treating maintenance as purely technical. A site can pass every security scan and still lose customers because the hero headline is vague or the pricing page is two years out of date. Our list of signs your website is costing you customers covers the commercial side of that.

You can run this website maintenance checklist yourself. Plenty of owners do. The real question is whether your time and patience cost less than paying someone, and how much risk you're comfortable carrying.

These are typical ranges, not quotes. A five-page site on a hosted builder needs far less care than a WordPress store running fifteen plugins.

A simple rule of thumb: DIY works when the site is small, the platform handles core updates, and you'll genuinely run the checks. Paying for care makes more sense when the site brings in most of your leads, runs on WordPress, or handles payments. Whichever route you choose, ask exactly what's included. A care plan that never tests your forms is protecting the software, not the business.

You don't need paid software for most of this. Free tools cover nearly the whole checklist.

• Google Search Console: indexing problems, search performance, and security warnings straight from Google.
• PageSpeed Insights: speed and Core Web Vitals for any page, on mobile and desktop.
• Google Analytics 4: traffic and, once set up properly, enquiries as key events.
• An uptime monitor: several free services email you when the site goes down, so you hear about it before customers do.
• Your host's backup tool: most decent hosts include scheduled backups. Check where they're stored and how long they're kept.
• A broken link checker: free online scanners and browser extensions will find dead links on a small site in minutes.

If you want the background on how Google crawls and understands your site, its own SEO starter guide is clear and free, and it explains why many of these checks matter. For accessibility standards, the W3C's WCAG overview is the source most guidance is built on.

Maintenance keeps a good site good. It can't turn a weak site into a strong one. At some point, paying to keep an old build alive costs more than replacing it.

One of these on its own doesn't mean you have to rebuild. Two or three together usually do. If you're heading that way, plan it properly with our website redesign checklist so you don't lose rankings or enquiries during the switch.

Our view is simple. The easiest website to maintain is the one built with fewer moving parts in the first place. Every unnecessary plugin, bloated script, and confusing page structure becomes a maintenance job later. So we try to remove those jobs at the build stage rather than charge to manage them forever.

We're a young studio, so we'd rather show you clear thinking than a wall of claims. If you can't tell whether your current site needs a maintenance routine or a rebuild, get a free website audit and we'll tell you what's working, what's leaking enquiries, and what to fix first. If you already know you need something new, compare our website packages and pricing.

The point of a website maintenance checklist is simple: catch the small failures before your customers do. That means ten minutes a week to test the form and the phone link, and an hour a month for updates, backups, and Search Console. Add a quarterly look at speed and content, then a yearly check on renewals, logins, and whether the site still sells.

Run it yourself or pay someone to run it, but make sure somebody does. A website left alone doesn't stay the same. It slowly gets worse while looking exactly as it did the day it launched.

Want a clear starting point? Start with a free audit and we'll show you which items on this list your site is already failing.