Website maintenance is the regular work of keeping a website fast, secure, accurate and working: software updates, backups, security scans, broken links, form tests and content reviews. Done on a fixed rhythm, website maintenance is a short list, not an open-ended chore.
Left undone, a business website slowly stops winning enquiries, and the security vulnerabilities in old software stay open. Good site maintenance is a routine process that protects website security, website content and search engine rankings.
A launched website is not finished. Software ages, links die, staff change, offers expire and browsers move on. None of that shows on launch day, which is why maintenance is so easy to postpone. Website owners rarely see the damage until a visitor does.
This website maintenance checklist is for business owners and managers who rely on a website to win enquiries. It splits the maintenance tasks into weekly, monthly, quarterly and yearly lists, then helps you decide who does them and what maintenance services should cover.
Why is website maintenance important for a business website?
A business website has one job: to turn a stranger’s interest into a conversation. Every maintenance task protects some part of that job. A slow page loses the visitor before they read a word. A broken form loses the enquiry after they have decided to write.
That is the way to judge the work. Do not ask whether a task is technical. Ask what it would cost you if it failed silently for a month. Regular website maintenance keeps the site functioning properly and protects the user experience that visitors judge you on.
Most failures are silent. A contact form can stop delivering email while looking perfect on screen. A certificate can lapse overnight. A plugin can break a page that nobody has opened since last year. You find out when a client mentions it, or never.
Proactive maintenance has four jobs:
- Keep it working. Forms, booking links, checkout steps and phone numbers all do what they say.
- Keep it safe. Keep the site secure: software is up to date, access is controlled and a recent backup exists.
- Keep it fast. Every web page loads and responds quickly on a phone, not only on your office computer, which keeps the site user friendly.
- Keep it true. Names, prices, services and dates match what you sell today, which keeps the site relevant.
Poor user experience also reaches your search rankings. Search engines favour pages that load quickly, work on a phone and stay accurate, so regular maintenance supports your website’s SEO and search engine optimisation work as well as your enquiries.
Broken pages affect user experience and can slip down search engine results pages. A well kept site also supports a positive customer experience.
The website maintenance checklist at a glance
Use this table as the master website maintenance checklist. The sections that follow explain each task, and you can copy the table into a shared document and add a named owner to every row.
| How often | Website maintenance tasks |
|---|---|
| Weekly | Test the contact form, check key pages on a phone, review enquiries, read uptime alerts |
| Monthly | Apply software updates and security patches, run security scans, check for broken links, test page speed, review Google Search Console |
| Quarterly | Restore a backup, review user accounts, audit outdated content on top pages, remove unused plugins |
| Yearly | Renew domain and certificate, review web hosting, run accessibility testing, update dates and team details |
Routine tasks like these take far less time than recovering from a hacked or broken site.
Weekly website maintenance checklist: quick checks that protect enquiries
The weekly maintenance checklist covers the checks that show whether the website is doing its job right now. They need no tools beyond a browser and a phone.
Check the site regularly by working through these five weekly maintenance tasks:
- Open the home page, your main service page and the contact page on your phone, on mobile data rather than office wifi.
- Submit your own contact form and confirm the message arrives in the inbox that is meant to receive it.
- Click every button in the main menu and every call to action on the home page.
- Check that the website opens with a padlock and no browser warning.
- Look at your enquiry count for the week. A sudden drop with no explanation is a signal to look harder.
The form test matters most. Forms fail quietly after email settings change, after a spam filter update or after a plugin is replaced. Testing takes two minutes and protects the point of the whole website.
Monthly website maintenance checklist: updates, security and links
Monthly website maintenance is where most of the technical work sits. It is also the part most likely to be forgotten, so give it a fixed calendar slot.
Keep software updates and security patches current
Most website attacks are not aimed at you personally. Automated tools scan the internet for websites running software with known weaknesses, and the fix for those security threats is nearly always an update. A secure website is a maintained one.
Your website almost certainly runs on a content management system, a theme and a number of add-ons. Each is code written by somebody else, and each receives security patches. An old, unmaintained add-on is the usual weak point, because its author may have stopped fixing it.
Each month:
- Apply software updates. Install updates to the content management system, themes and plugins as they appear, and apply security patches as soon as they are released.
- Remove what you do not use. A disabled plugin that is still installed can still be exploited. Delete it.
- Control access. Give each person their own login, remove people who have left, and turn on two-step sign-in for every administrator.
- Use strong, unique passwords. A password manager makes this practical for a whole team.
- Run security scans. Use your host’s scanner or a reputable security plugin for regular security scans that check for known malware and changed files. These security checks protect your website data.
Software updates can occasionally break a page, and website security patches are no exception. That is why a backup comes first.
Back up your website data before you change anything
A backup you have never restored is a hope, not a backup. Keep copies of both the website files and the database, store them somewhere other than the web server, and keep several dates so that a problem noticed late can still be undone.
For a website that changes rarely, a weekly backup is usually enough. For one that takes orders or bookings, back up daily, because every day of lost data is lost customers. Backups are your protection against data loss.
Check for broken links every month
Broken links frustrate visitors and waste the attention of search engines. They appear without anyone touching the website, because the pages you link to move or disappear. Use a link scanner to check for broken links each month, so that every link on the website keeps working.
When a page is moved or deleted on your own website, set up a redirect from the old address to the new one. Fixing broken links is mostly this: either repair the link or redirect it. Google Search Console also reports pages it cannot reach.
Test page speed and Core Web Vitals
Speed is part of the first impression, and it is central to website performance and the site’s performance in search. Google publishes three measures of page experience, called Core Web Vitals.
According to Google’s web.dev guidance on Core Web Vitals, a page should have its largest content element load within 2.5 seconds, respond to interaction in 200 milliseconds or less, and keep layout movement to 0.1 or below.
| Measure | What the visitor notices | Good result |
|---|---|---|
| Largest Contentful Paint | How soon the main content appears | Within 2.5 seconds |
| Interaction to Next Paint | How quickly a tap or click gets a response | 200 milliseconds or less |
| Cumulative Layout Shift | Whether the page jumps as it loads | 0.1 or below |
Google recommends measuring at the 75th percentile of page loads, across mobile and desktop. In plain terms, three out of four visits should meet the threshold, not only the best one.
Run a free test such as Google’s PageSpeed Insights on your three most important pages once a month and write the results down. A trend you can see is easier to act on than a single number. Fast pages keep bounce rates down and support SEO, because visitors who wait leave.
Fix the usual causes of a slow website
Slow websites are rarely mysterious. The same few causes recur, and this performance optimisation list can be checked in order:
- Oversized images. A photograph straight from a camera can be many times larger than the page needs. Resize and compress before uploading.
- Too many add-ons and scripts. Each plugin, tracking tag and chat widget adds weight. Remove any that nobody can justify.
- Slow web hosting. If the server is slow to answer, no amount of tidying fixes it. Review your hosting once a year.
- No caching. Caching serves a stored copy of a page instead of building it each time.
- Fonts and embedded video. Load only the font weights you use, and link to video instead of autoplaying it.
Check mobile responsiveness at the same time. Open the key pages on a small screen and confirm that text, buttons and forms are easy to use.
Quarterly website maintenance checklist: backups, access and content
Quarterly maintenance tasks are slower checks that catch problems the weekly and monthly lists miss.
- Restore a backup. Restore a recent backup to a test location and open it. If it works, you have data loss covered. If it does not, you have saved yourself from finding out during an emergency.
- Review user accounts. Remove old logins and check that each administrator still needs access.
- Remove unused plugins and themes. Fewer add-ons means fewer places for security issues to hide.
- Audit outdated content. Review your most visited pages for facts that have aged.
Outdated content does quiet damage. A page that lists a former colleague, a discontinued service or last year’s price tells a buyer that nobody is looking after the business. Ask three questions of each page:
- Is every fact on this page still true?
- Does it still describe what we sell and who we sell to?
- Does it point to the right next step?
Content updates for the pages that earn enquiries should happen at least monthly if prices or services change. Check titles and meta descriptions for outdated details, and monitor SEO regularly so visibility does not drift.
Fresh content helps too. Keeping existing pages accurate is more useful than publishing many new blog posts, though a new blog post on a real customer question is worth adding when you have one. For the pages and signals that matter, what makes a good B2B website is a useful companion.
Yearly website maintenance checklist: renewals, hosting and accessibility
Yearly website maintenance covers the items that fail rarely but cost the most when they do.
- Domain renewal. Put the renewal date in a calendar and make sure the registration is under a company email, not a former employee’s.
- Certificate expiry. An expired security certificate shows visitors a full-page warning. Most hosts renew automatically, but confirm that yours does.
- Hosting review. Check that your web hosting still suits the traffic and the size of the site.
- Accessibility testing. Check that text can be read against its background, that images have descriptions, and that the website can be used with a keyboard. These standards make the website easier for everyone.
- Security audit. Commission or run a comprehensive security audit of accounts, add-ons and settings.
- Legal compliance. Assess data privacy and cookie consent against the rules where you operate, and update legal notices.
- Business details. Update dates, team members and addresses.
Performance monitoring and uptime monitoring catch problems before clients do
Some failures happen between your checks. Uptime monitoring solves this: a service requests your website every few minutes and emails you when it does not answer. Many are free for a single website, and setting one up takes minutes. A website’s uptime is then checked all day.
Add these automatic alerts:
- Uptime and downtime. One email when the site stops answering, another when it returns.
- Google Search Console. It emails you about indexing problems, security issues and page experience. Read the messages.
- Analytics tools. Connect the website to Google Analytics so that you can see enquiries, not only visits, and spot technical issues that change them. Regular audits of analytics data show traffic drops or errors early, and the trends reveal how the website performs over time.
If you are unsure which figures matter, the guide to keeping your website improving after launch explains how to choose one change at a time and judge it against enquiries.
Build a website maintenance plan from the checklist
A checklist only works if somebody owns it. A website maintenance plan assigns each maintenance activity to a person and a date, so that nothing depends on memory. Ongoing maintenance is an ongoing process, so write the plan down.
- Copy the checklist table into one shared document.
- Name one owner for each row.
- Put the weekly, monthly, quarterly and yearly slots in everyone’s calendar.
- Add a short log: date, task, result.
The log makes handovers easy, shows what changed when something breaks, and proves the work is happening.
Should you handle website maintenance yourself or use web maintenance services?
Both routes work. The right one is whichever gets the tasks done every time.
DIY maintenance suits smaller sites with a capable owner. The weekly and monthly tasks need little technical knowledge, so most owners can handle basic tasks. The risk is that the work slips when the person who cares is busy, so give it an owner and a calendar slot.
Web maintenance services suit a site with bookings, orders, members or many integrations, and teams without technical knowledge. The site’s complexity decides how much support you need.
If you hire one, ask what the maintenance cost actually covers before you compare it with another quote:
- Which updates are applied, and how often?
- Where are backups stored, and has a restore ever been tested?
- Who watches uptime, and how quickly does a person respond?
- What happens when an update breaks a page?
- What is reported to you each month, and in what form?
A vague answer to any of these is information. Choose the provider who can answer plainly and show you a sample report. Whichever route you take, keep the accounts in your own name: domain, hosting and analytics.
How much does website maintenance cost?
Website maintenance cost depends on the size of the site, how often it changes and what the provider includes. A small brochure site needs little. A site with orders, members and integrations needs more attention, and web maintenance costs rise with it.
Web maintenance is priced in many ways, from a flat monthly fee to a charge for each task.
So compare what each price covers, not the number alone. Two quotes are only comparable if they list the same updates, backups, monitoring and response times.
Brandesis does not publish a stand-alone maintenance price.
If you want this rhythm handled as part of a broader growth plan, see the Brand Growth Program: accountability to your Roadmap, with a monthly report and a quarterly strategy review at the Foundations level. Entry requires Discovery, because nobody can run a brand against a Roadmap that does not exist.
Add a weekly letter. Ground Truth arrives on Wednesdays, and our State of Brands reports are the next read. If you are about to rebuild rather than maintain, read whether you should redesign your website first, and see our website design service for how we build websites.
For the wider picture, start with the full guide to B2B website design.
FAQ
What does website maintenance include?
Website maintenance includes software updates, security patches, backups, security scans, working forms, broken link checks, fast pages and accurate content. Run quick checks weekly, updates and scans monthly, backup restores and content reviews quarterly, and renewals and a hosting review yearly. The checklist above sets this out.
How often should website maintenance be done?
Weekly for quick checks such as the contact form and key pages, monthly for updates, scans and link checks, quarterly for backup restores and content reviews, and yearly for domain, certificate and hosting. A website that takes orders or bookings needs the checks more often.
Can I maintain my own website?
Yes, if your website is small and you are comfortable logging in and applying updates. Take a backup first, keep a log, and set calendar reminders. If the website has bookings, orders or many integrations, a maintenance service is often safer.
What is legally required on a website?
It depends on where you operate and what you collect. Common requirements include a privacy notice where you gather personal data, cookie consent where the law asks for it, and accurate company details. Ask a qualified adviser in your own country rather than relying on a general guide.
How much do people charge for website maintenance?
It varies with the size and complexity of the website and what the provider includes, so compare what each price covers rather than the number alone. Brandesis does not publish a stand-alone maintenance price; our plans page sets out what we do charge for.