// checklist //
The website maintenance
checklist.
A practical website maintenance checklist organized by cadence: what to do weekly, monthly, and quarterly across updates, backups, security, SEO health, performance, and content - and which parts to automate so they actually happen.
Continuous (automate these - they should never be calendar tasks)
- Uptime monitoring with immediate alerts.
- SSL certificate expiry warnings.
- Change detection on key pages - layout, content, SEO tags, links, scripts - against approved baselines.
- Automated backups on a schedule appropriate to how often the site changes.
Weekly
- Apply CMS, plugin, theme, and dependency updates (security patches same-day).
- Verify the updates:review what actually changed on key pages after updating - not just “the homepage still loads”.
- Confirm the latest backup exists and is the expected size.
- Scan the week's change alerts; approve intentional changes, fix regressions.
- Check error logs or error-monitoring for new recurring entries.
Monthly
- Broken-link sweep across the site (start with the free Bulk URL Status Checker).
- Submit-test every form and conversion path: contact, signup, checkout.
- Performance check on top pages - page weight, response time, Core Web Vitals trend.
- SEO spot check: titles, descriptions, canonicals, robots meta on money pages.
- Review analytics and tag coverage - pixels present and firing on key pages.
- Content pass: prices, dates, offers, team info still accurate.
- Remove unused plugins, themes, and admin accounts.
Quarterly
- Restore a backup to staging - a backup you have never restored is a hope, not a plan.
- Access audit: rotate credentials, prune users, enforce 2FA.
- Dependency deep-clean: major version upgrades you deferred.
- Review legal pages (privacy, terms, cookies) against current practice.
- Crawl the site for orphaned pages and outdated landing pages.
- Re-review your monitoring coverage: new pages monitored, dead ones retired.
The maintenance trap: doing the work, skipping the proof
Most maintenance failures are not missed tasks - they are unverified ones. The update ran, the checkbox got ticked, and the contact form has been broken for three weeks. Closing the loop is cheap when it is automated: MyKavo baselines your key pages and tells you, after every update or edit, exactly what changed and whether it matters - with the before-and-after to prove it. Agencies attach those reports to retainers; see pricing.
Frequently asked questions
What does website maintenance include?
Four buckets: software (CMS, plugin, theme, dependency updates), safety (backups, security scans, SSL, uptime), health (broken links, SEO tags, performance, forms), and content (accuracy, legal pages, freshness). A good checklist assigns each task a cadence - weekly, monthly, or quarterly - and an owner.
How often should website maintenance be done?
Weekly for updates, backup verification, and reviewing what changed on key pages; monthly for broken-link sweeps, performance checks, form tests, and content review; quarterly for access audits, dependency cleanups, and restore drills. Uptime and change detection should be continuous and automated, not calendar tasks.
What is the most commonly skipped maintenance task?
Verifying that updates did not break anything. Most teams run updates and glance at the homepage. The damage usually lands elsewhere - a form on the contact page, SEO tags on category pages, a script on checkout. Post-update verification across key pages is exactly what change monitoring automates.
How do agencies use a maintenance checklist?
As the backbone of maintenance retainers: the checklist defines the service, monitoring provides the evidence, and the monthly report proves the work. Automated change reports with before-and-after evidence make the retainer tangible to clients.