Launch day is the start, not the finish
Most small businesses treat a website like a shop sign: put it up, admire it, forget it. But a website is closer to a van than a sign. It runs on software that keeps changing underneath it, and it needs the occasional service to stay reliable.
The good news is that maintenance for a typical small-business site is not a big monthly project. It is a short list of jobs, most of them quick, done on a predictable rhythm. Here is what actually matters and how often to do it.
The jobs that protect you
Updates and security. If your site runs on WordPress, the core, theme and plugins all release updates, and out-of-date plugins are the most common way small sites get hacked. Check monthly, update promptly, and remove plugins you no longer use rather than leaving them dormant. On a modern stack like Next.js there is less to patch, but dependencies still need occasional attention.
Backups you have actually tested. Plenty of businesses believe they have backups because the hosting company mentioned them once. Confirm three things: that a backup runs automatically, that it is stored somewhere separate from the site itself, and that someone knows how to restore it. An untested backup is a guess, not a safety net.
Domain and SSL renewal. A domain that quietly expires can take your email down with the website, and it is a miserable problem to fix under pressure. Put the renewal dates in a calendar and keep the registrar account details somewhere you can find them.
The jobs that keep the site earning
Test your contact forms. This is the single most valuable ten minutes of maintenance there is. Email settings change, spam filters get stricter, form services change their rules — and a broken form fails silently while you assume business is slow. Send yourself a real test enquiry every month and confirm it lands in the inbox you actually read.
Check that Google still sees you. Once a quarter, open Google Search Console and look for crawl errors, pages dropping out of the index, or a sudden fall in impressions. Also search for your own business name and check that your Google Business Profile details, opening hours and phone number still match reality.
Fix the small content lies. Old prices, a staff member who left, last winter's opening hours, a service you no longer offer. Each one is minor on its own, but together they tell a visitor the business is not paying attention.
A realistic schedule
- Monthly: run software updates, send a test enquiry through every form, glance at the site on a phone.
- Quarterly: review Search Console, check page speed, update prices and service details, confirm a backup restores.
- Yearly: review the whole site as a stranger would, refresh photos, check domain and hosting renewals, revisit whether the site still matches what the business sells.
Doing it yourself or paying for it
Most of this is genuinely doable in-house if someone is comfortable logging in and following a checklist. What usually pushes businesses towards a maintenance plan is not difficulty but time and risk: nobody wants to be the person updating plugins on a Friday evening when the site goes white. If you do pay for support, ask exactly what is included — updates, backups, monitoring, small content edits — and how quickly someone responds when the site is down. Vague plans are where money disappears.
Final thought
A neglected website does not usually fail dramatically. It drifts: a form that stopped sending, a page that no longer loads, details that went stale two years ago. An hour a month of unglamorous checking keeps the site you paid for working like the site you paid for.