The Website Maintenance Checklist That Prevents 90% of Emergencies

Almost every "emergency" website fix I get called for follows the same pattern: a small, preventable issue left unattended until it became visible to customers. Here's the checklist that catches those issues while they're still small.

Weekly

• Check uptime monitoring alerts — resolve any downtime incidents and understand root cause, not just restart-and-move-on.
• Scan for broken links on key pages (homepage, top landing pages, checkout flow).
• Review contact form and checkout submissions to confirm they're actually arriving — a silently broken form can go unnoticed for months.

Monthly

• Apply WordPress core, theme, and plugin updates (staging environment first, then production) — or confirm Shopify's automatic updates haven't introduced a visual regression.
• Run a fresh Lighthouse audit and compare against baseline — catch performance regressions from new content or apps early.
• Review Google Search Console for new crawl errors, manual actions, or a sudden drop in indexed pages.
• Check SSL certificate expiry and domain renewal dates — both are common causes of sudden, embarrassing outages.
• Back up the full site and database, and confirm the backup actually restores correctly, not just that it completed.

Quarterly

• Full accessibility spot-check — keyboard navigation, color contrast, screen reader pass on key user flows.
• Audit installed plugins and apps — remove anything unused, since every active integration is both a performance cost and a security surface.
• Review analytics for pages with high bounce rate or drop-off, and investigate whether a technical issue (not just content) is contributing.
• Rotate and review admin access — remove former employee or contractor accounts.

Annually

• Full security audit — check for outdated dependencies, exposed admin paths, and weak password policies across all accounts with site access.
• Reassess hosting — confirm your plan still matches actual traffic and doesn't need scaling up (or down).
• Review and refresh outdated content, especially pricing pages, service descriptions, and anything with a date reference.

Why this matters more than it seems

Most of these tasks take minutes individually. Skipped consistently, they compound into the kind of emergency that costs real revenue — a checkout that's been silently broken for two weeks, a plugin vulnerability that gets exploited before it's patched, or a Google penalty from crawl errors that piled up unnoticed. A maintenance retainer exists specifically to make sure this list gets run on schedule rather than "whenever there's time," which in practice means never.