The monthly website checklist most small businesses never run

Your site was built once and then left alone. Here is the round worth running, why each item matters commercially, and what to check every quarter.

Most business websites get built once, launched with fanfare, and then left alone. No one budgets time to look after them, so nobody does — until something breaks, a client mentions the site looks odd on their phone, or a competitor turns up above you in a search for your own business name. None of that is inevitable. A website isn’t a brochure you print once — it’s infrastructure, and infrastructure needs maintenance.

This is the checklist every small business should run monthly. None of it needs deep technical skill. Most of it takes twenty minutes if you know what you’re looking for. The point isn’t to gold-plate your site — it’s to catch small things before they cost you an enquiry, a sale, or a customer’s trust.

Security, updates and backups

Websites run on software: a platform, a theme, a set of plugins or add-ons. All of it gets updated regularly, often to patch security holes that are publicly known the moment the update ships. Leave updates unapplied and you’re an open door for automated scans looking for vulnerable sites. Most hacked small business sites aren’t targeted specifically — they’re caught in a sweep.

Check monthly that your platform, theme and plugins are up to date. If updates run automatically, don’t assume that means safe — automatic updates can still break things, so you need a backup regardless.

Which brings us to backups. Having a backup is not the same as having a backup that works. A backup file sitting untested is a comforting story, not a safety net. Once a month, actually restore it — to a staging copy of the site, not the live one — and check that what comes back is complete and functional. If you’ve never tested a restore, assume it doesn’t work until you’ve proven otherwise.

Broken links and forms

Every broken link is a small vote of no confidence from your website to your visitor. A few won’t sink you. A site full of them looks neglected, and neglected sites don’t get trusted with money or enquiries.

The bigger risk sits in your contact form. Fill it in yourself, once a month, exactly as a customer would. Then confirm the message actually arrived — not in a spam folder, not in an inbox nobody checks, but somewhere a real person reads regularly. Contact forms fail silently. A plugin updates, an email setting changes, a filter gets tightened upstream, and the form keeps showing “message sent” while nothing arrives. You could lose enquiries for months without a clue, because the one signal that would tell you never appears. Test it yourself — don’t wait for a customer to mention they never heard back.

Page speed

Slow pages lose visitors before those visitors ever read a word. On small business sites, speed problems almost always come down to the same three causes: images uploaded at full camera resolution instead of resized for the web, too many plugins or third-party scripts each adding their own weight, and cheap hosting shared with hundreds of other sites competing for the same server resources. Check your homepage and your busiest two or three pages once a month. If they feel sluggish on a normal connection, they’ll feel worse to a visitor on their phone with patchy signal.

The mobile check

Do this on an actual phone, not by shrinking a browser window on your laptop. Load your site on your own mobile, on normal mobile data rather than office wifi. Check the menu opens properly, buttons are big enough to tap without missing, and text doesn’t need pinching to read. More visitors reach most small business sites on a phone than a desktop now, so this is how most people actually experience your business.

Business information accuracy

Websites drift out of date quietly. Opening hours change for a season and never change back. A price goes up everywhere except the website. A staff member leaves and their photo stays up for another year. A service you stopped offering is still listed, so you keep getting enquiries for it anyway. Each of these chips away at trust the moment a customer notices. Check the copyright year in the footer too — it’s often the first thing a visitor uses to judge whether a business is still active.

Search visibility basics

Search a few of your key terms, and your own business name. Does your site still appear? Is it still the top result for your own name — if a directory listing or a competitor outranks you there, something’s wrong. Check the site is actually indexed; it’s rare, but plugin changes can quietly tell search engines not to list a page, or the whole site. Also check your business listing details match your website — mismatched addresses or phone numbers between the two undermine both.

Analytics sanity check

If you have analytics installed, check it’s still firing. Tracking code breaks more often than people realise — a platform update, a cookie consent tool, a theme change — and then you’re making decisions on data that stopped updating months ago without anyone noticing. Once confirmed, glance at your top pages and top exit points. If visitors land somewhere and leave straight away, that page is worth a look.

Accessibility quick wins

A handful of small habits make your site usable by more people, and read better to search engines at the same time. Add alt text to images — a short, honest description of what’s in the picture. Check text has enough contrast against its background to read comfortably in daylight. And replace any link text that just says “click here” with words that describe where it goes — it helps screen reader users, and everyone else too.

Monthly versus quarterly

Not everything needs checking every month. Here’s a reasonable split.

The honest bit

Most “we need a redesign” conversations are really deferred maintenance wearing a bigger, more expensive hat. A site checked monthly rarely needs rebuilding — just the odd afternoon of attention. A site ignored for years needs everything at once, which is expensive, disruptive, and avoidable. Run this checklist monthly and you’ll almost never need the dramatic version.