Small Business Website Maintenance Checklist: Monthly and Quarterly Tasks

Start with access and ownership

Make sure your business knows who owns the domain registration, hosting account and website files. Keep administrative access documented in a secure password manager rather than in an email chain or spreadsheet. Use appropriate multi-factor authentication and role-based permissions where available. If an agency manages everything, agree on how access can be transferred if you change suppliers.

Create a small maintenance record with the site URL, hosting provider, renewal dates, responsible person and emergency contact. Don't publish that record publicly: it is an internal operational document.

Monthly checks that protect inquiries

1. Test contact forms: submit a real test message and verify it is delivered.
2. Review critical pages: services, hours, address, team details and prices where shown.
3. Check mobile navigation: make a test visit on a smaller screen.
4. Review backups: confirm backup jobs completed and retention matches your needs.
5. Apply appropriate updates: review platform, theme, plugin or dependency updates with a rollback plan.
6. Review security: investigate alerts, unexpected accounts and unusual changes.

If the site sells products or handles bookings, test the path up to—but not necessarily through—a paid transaction using supported test modes or non-billable methods.

Quarterly checks for quality and growth

Review your most important search landing pages and whether their information still reflects your business. Check that old campaigns, discontinued services and outdated downloads no longer mislead visitors. Inspect broken internal links, redirects, readability and important accessibility issues.

Performance deserves attention as features and third-party scripts accumulate. Google explains current performance metrics in its Core Web Vitals documentation. A single lab score isn't the whole customer experience, but repeated real-user problems are a useful signal to investigate.

Maintenance depends on the technology

A static website may need fewer software updates but still requires domain, DNS, links and content checks. WordPress may need scheduled plugin, theme and platform updates plus a tested recovery process. E-commerce and booking systems also require checking integrations, operational permissions and customer notifications.

A maintenance service should state what is included. “Everything covered” is not a reliable agreement. Define response times, backup restoration responsibilities, third-party fees and exclusions in writing.

A simple maintenance log you can copy

Track incidents and recurring failures rather than spending time polishing reports nobody uses. When the same issue keeps returning, ask whether your system needs a structural change. Our WordPress vs custom website guide can help explain the maintenance trade-offs before a redesign.

A monthly test that can save an inquiry

Submit your main contact form from a real phone using an external email address. Confirm the business receives the request and someone is responsible for answering. An uptime check alone cannot prove customer messages arrive.

Practical check: Record test date, result, person responsible and any corrective action.