Website Maintenance Checklist for Small Businesses (Weekly, Monthly, Quarterly)

Website maintenance is the routine work that keeps a site secure, fast, backed up and working: updates, backups, uptime and security monitoring, broken-link and form checks, speed checks, and a review of what Google Search Console reports. Most of it is a weekly 20-minute habit plus a monthly hour, and skipping it is how small-business sites get hacked, go offline or quietly lose rankings. Here is the full checklist, grouped by how often each task needs doing, with what each one prevents.

Weekly

1. Confirm backups ran, and that you can restore one. A backup that has never been test-restored is a hope, not a backup. Keep copies off the hosting server.

2. Apply updates. On WordPress: core, theme and plugins. Update on a staging copy first if the site is business-critical, then on live. Outdated plugins are the most common way small-business sites are compromised.

3. Check uptime and errors. An uptime monitor (free ones exist) should have emailed you about any downtime. Look at the server error log for repeated errors.

4. Test the contact form. Submit it. Forms break silently when a plugin updates or an email setting changes, and a broken form is lost inquiries with no alarm.

5. Scan for malware and review login attempts. A security plugin or your host's scanner. Note unusual admin logins.

Monthly

6. Review Google Search Console. Three reports: Pages (anything newly "not indexed"?), Performance (which queries and pages are growing or falling?), and Core Web Vitals (any URLs flagged "poor"?). This is where ranking problems appear first. See our guide on SEO, AEO and GEO for what to do with what you find.

7. Run a speed test on the home page and one key page. PageSpeed Insights on mobile. Watch for new large images, new scripts from a plugin or tag, and render-blocking resources. Slow pages lose both visitors and rankings; see WordPress speed optimization for the usual fixes.

8. Crawl for broken links and redirects. A free crawler (Screaming Frog's free tier, or an online checker) finds 404s, redirect chains and missing images. Fix or redirect each.

9. Check analytics for anomalies. A sudden drop in traffic to one page, a spike in 404s, or referral spam. Confirm Google Analytics is still firing (tag changes break it).

10. Review and remove unused plugins, themes and users. Each one is attack surface and update burden. Old admin accounts for former staff or agencies should go.

11. Renew what expires. Domain, SSL certificate (usually automatic, but confirm), hosting, premium plugin licences. An expired domain is the most avoidable disaster in web hosting.

12. Check the site on a phone. Menus, forms, popups and new content. Most of your visitors are on mobile.

Quarterly

13. Audit content for accuracy. Prices, team, services, addresses, opening hours, legal pages. Stale content costs trust, and inconsistent business facts hurt how AI tools and Google understand you. See how to get cited by ChatGPT and AI Overviews.

14. Review structured data. Run key pages through Google's Rich Results Test. Theme and plugin updates can break schema.

15. Test every form and every payment path end to end, including the confirmation emails and where the data lands (inbox, CRM, spreadsheet).

16. Check accessibility basics. Alt text on new images, colour contrast, keyboard navigation of menus and forms.

17. Review hosting. Resource usage, PHP version (old versions are slow and insecure), and whether the plan still fits traffic.

18. Re-check your Google Business Profile and key directory listings for accuracy and new reviews.

19. Review security settings. Two-factor login for admins, strong passwords, login attempt limits, file permissions, a web application firewall if the host offers one.

20. Decide what to improve next quarter. Maintenance keeps the site working; small improvements (a clearer service page, a new guide, a faster template) are what move inquiries. Keep a short list and do one thing a quarter.

What each task prevents

Task	Prevents
Backups and test restores	Losing the site to a hack, a bad update or a hosting failure
Updates	The majority of WordPress compromises
Uptime monitoring	Days of downtime nobody noticed
Form testing	Silent loss of inquiries
Search Console review	Ranking drops discovered months late
Speed checks	Slow creep from new images and plugins
Broken-link crawl	Dead pages, lost link value, poor experience
Renewals	Expired domain or certificate taking the site offline
Content audit	Wrong prices, old staff, inconsistent facts

When to hand it to a maintenance service

Do it yourself if you have a simple site, enjoy the routine and will actually keep the weekly habit. Hand it over when:

• the site takes inquiries or payments you cannot afford to lose,
• it runs on WordPress with more than a handful of plugins,
• nobody on the team has done it for the last two months,
• a past update has broken something and you did not know how to fix it,
• you want someone to also make small improvements, not only keep the lights on.

A website maintenance service covers the checklist above on a schedule, with a monthly report of what was done and what was found. Ours includes a fixed number of hours for small changes each month, because keeping a site working and making it better should be the same conversation.

If your site has not had this attention for a while, tell us the platform and what worries you or book a free consultation. We will run the checklist once and tell you what we find.

Frequently asked questions

What does website maintenance include?

Updates, backups, security and uptime monitoring, form and payment testing, speed checks, broken-link fixes, Search Console review, renewals, and periodic content and accessibility audits. Many services also include a monthly allowance for small changes.

How often should a website be maintained?

Weekly for backups, updates, uptime, forms and security; monthly for Search Console, speed, links, analytics and renewals; quarterly for content, structured data, hosting and security settings.

Do WordPress websites need more maintenance than others?

Yes. WordPress's plugin ecosystem is its strength and its maintenance burden: each plugin needs updating and can conflict with others. A site with many plugins needs the weekly routine without fail.

What happens if I do not maintain my website?

Typically, in this order: it slows down, forms or features break silently, rankings slip, and eventually an unpatched plugin is exploited. Recovery costs far more than routine maintenance.

How much does website maintenance cost?

It depends on the platform, the number of plugins and integrations, how often content changes and whether you want small improvements included. We quote a fixed monthly plan after a short review of the site.