Last updated: October 5, 2026 · 3 min read · By Ali Raza
Website maintenance is a routine: weekly check backups, uptime and security alerts and apply tested updates; monthly test forms, speed and broken links and review analytics; quarterly test a full restore, remove unused plugins and users and refresh key content; yearly renew the domain and SSL, review hosting, accessibility and legal pages, and plan improvements.
Most website problems are not sudden. A form stops sending, a plugin goes unpatched, backups quietly fail, pages get slower. By the time someone notices, leads have been lost for weeks.
This checklist is the routine we follow for the websites we look after. Print it, put it in your calendar, or hand it to whoever manages your site.
Your maintenance calendar
Weekly tasks
- Confirm the latest backup completed and is stored off the server.
- Check uptime reports and security alerts.
- Apply WordPress core, theme and plugin updates after a backup, ideally testing on a staging copy first.
- Check the homepage, a service page and the contact page still look right after updates.
- For stores: place or review a recent order to confirm checkout works.
Monthly tasks
- Submit every form and confirm the enquiry arrives in your inbox or CRM.
- Run key pages through PageSpeed Insights and compare to last month.
- Scan for broken links and 404 errors in Google Search Console.
- Review analytics: traffic, top pages, enquiries and their sources.
- Check Search Console for security issues or manual actions.
- Update any outdated content: prices, team, opening hours, offers.
Quarterly tasks
- Test a full restore of a backup to a staging site. See our backup guide for how.
- Remove unused plugins, themes and user accounts; check every admin account is still needed.
- Review plugin list for abandoned plugins with no recent updates.
- Refresh your top pages with new projects, reviews and FAQs.
- Check the site on several phones and browsers.
Yearly tasks
- Renew the domain and confirm SSL certificates renew automatically.
- Review hosting: speed, PHP version, resources and support.
- Review privacy policy, cookie consent and terms.
- Run an accessibility check against WCAG 2.2 AA.
- Review licences for premium plugins and themes.
- Plan new pages, guides and improvements for the year.
Which tasks matter most for security?
Updates, removing unused plugins and accounts, and strong logins with two-factor authentication. Our WordPress security guide explains why plugins are where most risk lives.
Should you do this yourself?
If you have the time and a staging site, yes. If not, a care plan covers it for a predictable monthly fee. Our guide to website maintenance costs explains what a good plan includes, and our website care plans start with a free health check.
Frequently asked questions
How often should a website be maintained?
Check backups, uptime and updates weekly, test forms and speed monthly, test restores and clean up quarterly, and review renewals, hosting and legal pages yearly.
What happens if I do not maintain my website?
Security holes stay open, backups may fail unnoticed, forms can stop working and pages slow down, which costs leads and rankings.
Should WordPress updates be automatic?
Automatic minor and security updates help, but larger updates are safer when tested on a staging copy first, with a fresh backup.
How do I know if my contact form is working?
Submit it yourself at least monthly and confirm the message arrives where it should, including your CRM.