Most websites don't break all at once — they degrade slowly through a dozen small issues that quietly stack up: an unpatched plugin here, a broken link there, a slow-loading image nobody noticed. This checklist covers the 12 things worth checking every month to keep a website secure, fast and ranking well.
Security & software
1. Update your CMS core software
WordPress, Joomla and similar platforms release security patches regularly. Outdated core software is the single most common way sites get hacked.
2. Update plugins and themes
Plugins are often the weakest link — an outdated, abandoned plugin can be an open door even if your core CMS is fully patched.
3. Check your SSL certificate
Make sure your certificate hasn't expired and that every page loads over HTTPS, not just the homepage.
4. Review user accounts and permissions
Remove access for anyone who no longer needs it, and check for any unfamiliar admin accounts.
Performance & reliability
5. Test your page load speed
Page speed affects both user experience and Google rankings. A page that's crept from 2 seconds to 6 seconds over a year is worth investigating.
6. Confirm backups are actually running
A backup schedule that silently stopped working months ago is worse than no backup at all, because you think you're covered when you're not.
7. Check uptime monitoring
If you don't already have uptime alerts set up, this is the month to add them — downtime you don't know about is downtime you can't fix quickly.
Content & SEO
8. Scan for broken links
Broken internal and external links hurt both user trust and SEO. A free broken-link checker tool can scan your whole site in minutes.
9. Update outdated content
Old prices, expired offers or outdated statistics on live pages damage credibility — and Google increasingly favours freshly updated content.
10. Check your Google Search Console for errors
Crawl errors, mobile usability issues and indexing problems all show up here first, often before they become visible anywhere else.
Forms & functionality
11. Test every form on the site
Contact forms silently breaking is one of the most common (and costly) issues — test submissions monthly to make sure enquiries are actually reaching you.
12. Check checkout and payment flows (for eCommerce)
If you run a store, a broken checkout step can go unnoticed for weeks while directly costing sales — test the full purchase flow regularly, not just the homepage.
DIY vs. outsourcing maintenance
Doing this yourself is entirely possible if you're comfortable with your CMS and can commit an hour or two a month. Where it usually breaks down is consistency — the monthly check quietly slips for three months, then six, until something goes wrong. That's the point most businesses move to a fixed monthly maintenance plan instead.
Prefer to hand this list to someone else?
Our website maintenance packages cover everything above for a fixed monthly cost, with UK-based support.
See Maintenance PackagesFrequently asked questions
How often should I check my website for issues?
Most websites benefit from a monthly maintenance check covering updates, backups and broken links, with weekly checks recommended for eCommerce or high-traffic sites.
What happens if I never maintain my website?
Outdated software becomes a security risk, broken links and slow pages hurt SEO rankings, and small issues compound until a full rebuild becomes cheaper than fixing the accumulated problems.
Can I do website maintenance myself?
Yes, if you're comfortable with your CMS and have the time each month. Many business owners eventually outsource it once the time cost outweighs a fixed monthly maintenance fee.
What's the difference between a backup and a maintenance plan?
A backup is one task within maintenance — a full maintenance plan also covers updates, security monitoring, broken link fixes, content changes and technical support.