Website Maintenance Checklist: What to Check Weekly, Monthly, Quarterly and Yearly

Most website maintenance checklists are lists of chores: update the plugins, run a backup, check for broken links, look at analytics. All of that matters. But it leaves out the part that actually causes most website problems.

The updates are rarely the disaster. The disaster is what an update quietly changes: a contact form that stops sending, an analytics tag that disappears from the new theme template, a "noindex" setting that comes back after a plugin reset, a checkout button that moves below a broken layout. Nobody decided to break those things. They broke as a side effect, and nobody noticed for weeks.

So this checklist does two jobs. It covers the routine tasks every site needs, on a schedule you can actually keep. And for each task, it tells you how to confirm nothing broke, which is the step most maintenance routines skip.

What website maintenance actually covers#

Website maintenance is everything you do after launch to keep a site working, secure, findable and accurate. It breaks down into five jobs:

1. Keep it online. The site loads, fast enough, with a valid SSL certificate.
2. Keep it secure. Software is patched, access is controlled, backups exist and restore.
3. Keep it findable. Search engines can crawl and index the pages that matter, with the titles, descriptions and canonicals you intended.
4. Keep it working. Forms send, checkouts complete, buttons go where they should, tracking records conversions.
5. Keep it current. Prices, hours, team pages, policies and content are accurate.

Most checklists cover jobs 1, 2 and 5 well. Jobs 3 and 4 are where sites lose money without anyone noticing, because a site can be online, secure and up to date while its signup button is gone and Google has been told not to index the pricing page.

How often to do each task#

Here's the whole schedule in one place. Times are rough estimates for a typical small business site with a CMS like WordPress, Shopify or Webflow.

If you only remember one row, make it "check key pages after updates". It's the cheapest task on the list and it catches the most expensive problems.

Continuous: let tools watch these for you#

Some things can't wait for your weekly slot. Set these up once and let alerts come to you.

Uptime. A monitor that checks your homepage every few minutes and emails you when it stops responding. If you only find out your site is down when a customer tells you, you've lost hours. Our guide on checking whether a website is down covers what to do when the alert fires.

SSL certificate expiry. Most certificates renew automatically, until the one time they don't. An expired certificate puts a full-page browser warning in front of every visitor. Get an alert at least two weeks before expiry. You can check any site's certificate with our SSL certificate checker.

Security scanning. A security plugin or your host's scanner should check for malware and known vulnerabilities on a schedule and email you when it finds something.

Backups. Daily automatic backups, stored somewhere other than the server the site runs on. More on verifying them below.

Weekly website maintenance checklist#

1. Confirm backups ran and are recent#

Don't just trust that backups are "on". Open your backup tool or hosting panel and confirm the latest backup is from the last day or two and isn't suspiciously small compared with previous ones. A backup that silently stopped running three months ago is the most common way people discover they have no backup.

How to know it's fine: the newest backup is recent, the size is in line with earlier ones, and it's stored off the server.

2. Apply updates, then check your key pages#

Update your CMS core, theme, plugins or apps. Security updates should go in promptly. For major version updates, use a staging copy first if you have one.

Then comes the step that matters: look at your most important pages after updating. Not a glance at the homepage, but a check of the pages that bring in money or leads:

• Does the page still look right on desktop and on a phone?
• Are the signup, contact, add-to-cart and checkout buttons still there and still clickable?
• Is the title in the browser tab still correct?
• Does the page still load your analytics?

For a handful of pages this takes ten minutes. For dozens of pages across several sites, it's exactly the kind of comparison a monitoring tool should do for you. For WordPress specifically, our guide on how to safely update WordPress plugins walks through a full update routine.

3. Test forms and checkout#

Submit every important form yourself: contact, quote request, newsletter signup, booking. Confirm the email actually arrives in the inbox it's supposed to reach. If you sell online, run a test purchase through checkout (most platforms have a test or sandbox mode).

Forms fail silently. The page says "Thanks, we'll be in touch!" while the email goes nowhere because an SMTP setting changed or a spam filter started catching it. A form that's been broken for a month is a month of leads you'll never get back.

How to know it's fine: the test submission arrives where it should, and a test order shows up in your order system.

4. Confirm analytics is still recording#

Open Google Analytics (or whatever you use) and look at yesterday's numbers. A sudden drop to near zero almost never means visitors disappeared. It usually means the tracking tag disappeared, often after a theme change, a page builder update, or a cookie banner change.

You can confirm the tag is present on any page with our free analytics tag checker, and our guide to Google Analytics not tracking covers the eleven most common causes.

How to know it's fine: yesterday's traffic is in a normal range, and the tag is present on your key templates, not just the homepage.

5. Look for broken links and new 404s#

Links break as pages get renamed, products get removed, and other sites you link to change their URLs. Run a broken link check on your key pages (try our broken link checker) and look at your 404 reports in Search Console or analytics.

Fix internal broken links by updating them to the correct URL. For pages that moved, add a 301 redirect from the old URL. Our guide to finding and fixing broken links goes deeper.

Monthly website maintenance checklist#

6. Review Google Search Console#

Once a month, open Search Console and check three reports:

• Performance: compare clicks and impressions with the previous month. A drop concentrated on a few pages usually points to a change on those pages.
• Pages (indexing): look for pages that moved into "Not indexed". If important pages appear there, our guide to pages not indexed by Google explains every status.
• Security and manual actions: both should say no issues detected.

If traffic did drop, our seven-step diagnosis for why website traffic drops is the place to start.

7. Check the SEO tags on your key pages#

Titles, meta descriptions, canonical tags and robots meta tags change more often than people realize. Themes, SEO plugins and page builders all generate them, and an update or settings reset can change them across the whole site at once.

The dangerous ones:

• A "noindex" tag on a page that should be in Google. This removes the page from search results.
• A canonical tag pointing to the wrong URL, such as a staging domain or a different page.
• Titles replaced by a template default, like every page titled with just your brand name.

Check your key pages with our meta tag checker or the noindex checker. Our on-page SEO checklist covers what each tag should look like.

8. Check speed and page weight#

Run your homepage and one or two key templates through Google PageSpeed Insights. Don't chase a perfect score. Look for change: is the page noticeably heavier or slower than last month? Common causes are uncompressed images uploaded by an editor, a new embedded video, or a new script added by a marketing tool.

Our page size checker shows how heavy a page is and what's taking up the space.

9. Review third-party scripts#

Every chat widget, heatmap, ad pixel and A/B testing tool adds a script to your pages. Over time sites collect scripts from tools nobody uses anymore, and occasionally scripts nobody remembers adding at all.

Once a month, list the scripts on your key pages (our script detector does this in one click) and ask two questions: do we still use each of these, and did any we rely on disappear? A missing analytics, tag manager or payment script is a problem. An unknown script you didn't add is a bigger one.

Quarterly website maintenance checklist#

10. Test restoring a backup#

A backup you've never restored is a hope, not a backup. Once a quarter, restore your latest backup to a staging site or a local copy and confirm the site actually works: pages load, images appear, you can log in. If the restore fails, you've found out on a calm Tuesday instead of during an emergency.

11. Review users, passwords and access#

List every account with admin or editor access to your CMS, hosting, domain registrar and analytics. Remove people who've left and freelancers whose projects have ended. Make sure two-factor authentication is on for admin accounts. Change any shared passwords.

12. Do a content accuracy pass#

Walk through your key pages as a customer would. Are prices, opening hours, team members, service descriptions, contact details and screenshots still correct? Outdated content won't take your site down, but it quietly costs trust and sales.

13. Check mobile and browsers#

Open your key pages on a real phone, and in at least two browsers. Tap through the menu, fill out a form, try the checkout. Layout problems that only happen at certain screen sizes are easy to miss from a desktop.

14. Review redirects#

Over time redirects pile up: old campaign URLs, renamed pages, previous site structures. Check that important old URLs still redirect in a single hop to the right place, not through a chain of three redirects or to the homepage. Our redirect chain checker shows every hop.

Yearly website maintenance checklist#

15. Domain, hosting and certificates#

Confirm your domain is set to auto-renew with a valid payment method, and that the renewal contact email is one someone actually reads. Review your hosting plan: is it still the right size for your traffic? Check when any manually managed certificates expire.

16. Legal and policy pages#

Review your privacy policy, cookie notice, terms and any accessibility statement. Laws and the tools you use both change. Update the copyright year in the footer while you're there (or make it automatic).

17. A full site audit#

Once a year, crawl the whole site, not just your key pages. Look for broken pages, redirect chains, duplicate titles, missing descriptions, orphaned pages nothing links to, and pages that shouldn't be indexed. A site crawler or SEO audit tool handles this.

18. A content audit#

Using a year of Search Console and analytics data, find pages that lost traffic, pages with high impressions but few clicks, and pages that no longer serve a purpose. Refresh the first two, and consider merging or removing the third.

19. Review this checklist#

Your site changes over a year: new forms, new integrations, new important pages. Update your list of key pages and your maintenance routine to match.

The step most checklists skip: check what changed#

Look back at the list and notice how many tasks are really the same task. Checking forms, checking analytics, checking SEO tags, checking scripts, checking the layout after an update: each one asks "is this still the way it was when it worked?"

That's the heart of maintenance, and it's why the most useful thing you can have is a record of how your key pages looked when everything was right. With that record, every check becomes a comparison: same title? same canonical? analytics tag still there? signup button still visible? Without it, you're relying on memory, and memory doesn't notice that the meta description changed three weeks ago.

Doing that comparison by hand works for a few pages on one site. It stops working at ten sites, or after every deploy, or for changes made by someone else on a Friday afternoon.

If you maintain websites for clients#

Agencies and freelancers running care plans have the same checklist multiplied by every client, plus one extra job: proving the work happened.

A few things make it manageable:

• Standardize the key pages for each client. Homepage, main service or product pages, pricing, contact, checkout. Monitor these closely and the rest less often.
• Record a baseline after every approved change, so "it looked different last month" becomes a before-and-after you can show.
• Send a monthly report. Uptime, updates applied, issues found and fixed. Clients renew care plans when they can see what they paid for.
• Find problems before the client does. Nothing damages a care plan faster than the client discovering a broken form you were supposed to be watching.

Where MyKavo fits into this#

MyKavo is our product, so here's exactly what it does on this checklist and what it doesn't.

You add your site, pick your key pages, and approve a baseline: a screenshot of each page plus its title, meta description, canonical, robots tags, headings, links, scripts and page weight. From then on, MyKavo scans those pages on a schedule and compares each one against its approved baseline. When something important changes, you get one email that says what changed, where, and how serious it is, with before and after side by side.

On this checklist, that covers:

• Check key pages after updates (task 2): visual changes and missing elements show up with before-and-after screenshots.
• Analytics still recording (task 4): an analytics, tag manager or payment script disappearing is flagged as high severity.
• Broken links (task 5): internal links that start returning errors are grouped into one alert instead of a flood.
• SEO tags (task 7): a page flipping to noindex is critical, a canonical changing or disappearing is high, a changed title is flagged with old and new values.
• Page weight (task 8) and scripts (task 9): significant weight increases and added or removed third-party scripts.
• Uptime and SSL: MyKavo checks each monitored site's availability every few minutes and warns before certificates expire.
• Forms and buttons: on Pro and Agency you can monitor specific elements, like a signup button or checkout link, and get alerted when they go missing, get hidden, or point somewhere new.
• Client reports: shareable reports on every plan, and reports under your own brand on Agency.

Honest limits: MyKavo watches the pages you choose (5 on the free plan, 15 per website on Pro, 25 per website on Agency). It doesn't do your backups, apply your updates, scan for malware, or test that a form email actually arrives. Keep a backup tool, a security plugin and a monthly form test for those.

And if MyKavo finds something you don't have time to fix yourself, our team can fix it at a fixed price agreed before any work starts. See MyKavo Services.

Your website maintenance checklist at a glance#

Continuous (set up once)

• Uptime monitoring with alerts
• SSL expiry alerts
• Security scanning
• Daily off-server backups

Weekly

1. Confirm backups ran and are recent
2. Apply updates, then check key pages
3. Test forms and checkout
4. Confirm analytics is recording
5. Look for broken links and new 404s

Monthly

6. Review Search Console
7. Check SEO tags on key pages
8. Check speed and page weight
9. Review third-party scripts

Quarterly

10. Test restoring a backup
11. Review users, passwords and access
12. Content accuracy pass
13. Check mobile and browsers
14. Review redirects

Yearly

15. Domain, hosting and certificates
16. Legal and policy pages
17. Full site audit
18. Content audit
19. Review this checklist

The bottom line#

Website maintenance isn't about doing chores for their own sake. It's about catching the moment something important changes, before it costs you traffic, leads or sales. Keep the routine tasks on a schedule, and after every change, check that your key pages still look and work the way they did when everything was right.

MyKavo does that comparison for you on every scan, across every site you manage. Start monitoring free: one website and five key pages, no card needed.