The Website Maintenance Checklist: Monthly, Quarterly, Yearly
Every task that keeps a business site healthy, sorted by how often it needs doing. Thirty minutes a month covers the essentials if you run the list in order.
A website maintenance checklist works for the same reason a pre-flight checklist works: the tasks are individually trivial and collectively easy to forget. Nothing below requires technical skill. What it requires is a repeating 30-minute calendar slot and the discipline to run the list in order instead of from memory.
This page gives you the full set: ten monthly tasks, a shorter quarterly pass, and a yearly review. It also names the tasks owners skip most, because skipped tasks follow a pattern, and the pattern is exactly where sites quietly break. Copy the lists into your task manager and the whole system is set up in five minutes.
What belongs on a website maintenance checklist?
Four categories, whatever the site runs on. Protection: backups exist and can be restored, software is current, SSL is valid. Function: forms submit, links resolve, pages load at reasonable speed on a phone. Accuracy: prices, hours, staff, and services on the site match reality. Visibility: search rankings and traffic have not quietly dropped, and nothing in Google Search Console is flagged red.
Frequency then sorts the categories into lists. Protection and function need monthly eyes because they fail without warning. Accuracy needs a quarterly sweep because reality drifts slowly. Visibility needs both: a monthly glance and a quarterly review. Sites on hosted builders can trim the protection column, since updates and SSL are handled; everything else applies to every site equally.
The monthly checklist: 10 tasks in 30 minutes
In order. One: confirm the latest backup exists and note its date. Two: apply pending software and plugin updates, then load the homepage and one inner page. Three: submit every form on the site and confirm the notification arrives. Four: open the site on your phone and tap through the main navigation. Five: run the money page through a speed test and log the number. Six: click the top ten internal links, or run a broken link scan. Seven: open analytics and compare traffic to the previous month. Eight: open Search Console and check for coverage errors or manual actions. Nine: read the homepage once as a stranger and fix anything stale. Ten: write one line recording what you found.
The log line matters more than it looks. Trends across months are where slow problems become visible.
What goes on the quarterly checklist?
Quarterly is the deeper pass, about an hour. Run a restore test on a backup: actually restore it somewhere safe, because an unrestorable backup is indistinguishable from no backup until the day it matters. Audit user accounts and remove anyone who left. Review every page for factual drift: prices, team, services, photos. Check page speed against Core Web Vitals thresholds rather than a generic score. Compress or remove oversized images added during the quarter.
Then the visibility review: which pages gained or lost rankings, which queries appear in Search Console that no page answers, and whether any competitor now outranks you for your own service terms. That last review is where maintenance shades into growth, and it is the quarterly item most worth an outside pair of eyes.
The yearly checklist: renewals and big reviews
Once a year, usually in the quietest month. Confirm domain renewal is set to automatic and the payment card on file has not expired; expired domains still take out functioning businesses every week. Review hosting: price, speed, and whether the tier still matches traffic. Change admin passwords and enable two-factor authentication anywhere it is missing. Export a full copy of the site content and store it outside the hosting account.
Then the honest review: does this site still represent the business, and did it produce customers this year? Read analytics for the full year, count the leads, and decide whether next year needs upkeep or investment. A site that produced nothing needs a different conversation from one that needs a paragraph updated, and the yearly review is where that gets decided rather than postponed again.
Which website maintenance checklist tasks get skipped?
Three, reliably, and they share a trait: no visible symptom until failure. Restore tests get skipped because backups appear to work; the checkmark is green, so nobody rehearses the recovery. Form tests get skipped because forms look fine from the outside; meanwhile a plugin update broke the email notification two months ago and every lead since has landed nowhere. Mobile checks get skipped because owners browse their own site on a desktop, while most of their visitors do not.
The pattern: tasks that verify function get skipped in favor of tasks that produce a feeling of activity. If you only keep three items from this entire page, keep the restore test, the form test, and the phone check. They catch the failures that cost actual customers, and they take eight minutes combined.
How do you make the checklist actually happen?
The failure mode is never the list; it is the calendar. Month one goes fine, month two slips a week, month four disappears into a busy season, and the site runs unwatched until something breaks publicly. The fix is structural: a recurring calendar slot treated like a customer appointment, plus the one-line log that makes skipped months visible instead of silent.
The alternative is paying someone to be the calendar. That is most of what maintenance plans really sell: not rare expertise, but guaranteed consistency. At WebsiteOS we go a step further and publish the work: every task our engine or team completes lands in a log our customers can read any day, which replaces trust with checking. Whichever route you take, the site needs the same thing: someone who shows up every month, without fail.
Frequently asked questions
How often should website maintenance be done?
Monthly for the core pass: backups, updates, form tests, speed, and a look at analytics. Quarterly for the deeper work: restore tests, content accuracy, image cleanup, and a ranking review. Yearly for renewals, passwords, and the strategic review. Weekly maintenance only pays on stores and high-traffic sites where a broken checkout costs meaningful revenue per day.
How long does a website maintenance check take?
The monthly list takes about 30 minutes once you have run it twice; the first pass takes an hour while you find where everything lives. Quarterly adds roughly an hour, and the yearly review about two. Total commitment for a small business site: eight to ten hours a year. One hacked-site cleanup or one month of lost leads from a dead form costs more than all of it.
What tools do I need to run the checklist?
Less than the tool market suggests. A speed tester like PageSpeed Insights, a broken link checker, Google Analytics, and Google Search Console, all free. Your CMS handles update notifications and backups, or your host does. Paid monitoring earns its fee on commerce sites where minutes of downtime cost money; a brochure site does fine on the free stack plus a calendar reminder.
What happens if I skip website maintenance entirely?
Nothing, for a while, which is exactly the trap. Then the failures arrive in ascending order of cost: outdated software becomes a security hole, a form dies silently and leads stop, rankings drift down as content goes stale, and eventually an update or expiry takes the site offline. Recovery from a hacked or long-neglected site typically runs $250 to $1,000, against 30 minutes a month of prevention.
Should I do the checklist myself or pay someone?
Do it yourself if you will genuinely protect the 30 minutes; the tasks need no technical background. Pay someone if two months in a row have slipped, because the third will too, and the whole value of maintenance is the streak. A fair price for having it done reliably is $49 to $299 a month depending on how much human editing is included alongside the checks.
Your website, running itself.
Get a Free Quote