If your website is meant to bring in leads or sell something, it shouldn’t be the first thing that breaks when you’re busy. Most small business sites need about an hour of focused attention a month to stay fast, secure, and indexed. The trick is doing the same handful of things every time. Here’s the checklist we use for our managed sites, and the order matters.
1. Back up before you touch anything
Before you update a single plugin, generate a full backup of files and database. Verify it by checking the file size against last month’s. A backup that doesn’t exist or won’t restore is the most expensive kind of surprise. Most hosting providers offer backups, but very few owners actually test that the restore works. Once a quarter, do a test restore to a staging environment to confirm.
2. Run updates, in order
Update WordPress core first, then themes, then plugins. Do them one at a time, checking the homepage between each. Updating everything at once is faster but makes it impossible to identify which update broke the site. After the updates, open the site in an incognito window and click through the main pages. Most issues show up in the first five minutes.
3. Check what’s broken
Broken links, missing images, and 404 errors quietly degrade SEO and frustrate visitors. Free tools like Screaming Frog (limited free tier), Ahrefs Webmaster Tools, or even Google Search Console’s Pages report will surface these. Fix the broken ones, redirect the deleted ones to a relevant page (never leave 404s on URLs that used to have content).
4. Review performance and security signals
Run PageSpeed Insights on the homepage and one inner page. If Largest Contentful Paint creeps above 2.5 seconds, investigate before it costs you traffic. Check your security plugin’s log for blocked attempts. A sudden spike usually means a bot has found a new entry point, and you should update faster than usual. Confirm your SSL certificate isn’t within 30 days of expiring.
5. Clean up content
Empty trash on posts and media, remove plugins you’re not using anymore, prune spam comments, and check that the contact form still emails the right address (this one breaks more often than you’d think). Five minutes of housekeeping prevents the database bloat that eventually slows everything down.
If an hour a month sounds like a lot
It is, especially when something on the list goes wrong. Ongoing website maintenance services hand the whole checklist (and the troubleshooting when steps four or five surface a real issue) to someone who runs through it every month for dozens of sites. If you’d rather skip the spreadsheet and have the hour back, Web Stark handles all of this for Australian small businesses.
