Website Maintenance Checklist 2026: Monthly, Quarterly and Yearly Tasks

Plenty of businesses invest real effort into a new website, launch it beautifully, and then leave it alone for a year or two. Then one day they discover the contact form has not been delivering email for months, an old plugin has been exploited, or the site is so slow customers close it before it loads.

A website is like a car: it needs regular servicing. This article is a practical website maintenance checklist, split into monthly, quarterly and yearly tasks. Whether you do it yourself, have staff handle it, or are looking for website maintenance services, you can use it as a benchmark, along with what a good maintenance contract should include.

What Website Maintenance Is, and How It Differs From a New Build

Website maintenance is the ongoing work after launch that keeps a site online, secure, fast and accurate. It is different from a new build or redesign, which is a project with an end date.

Maintenance falls into four groups:

1. Availability: the site loads, and the domain and SSL do not expire
2. Security: system updates, protection against attacks, and backups that actually restore
3. Performance: speed, Core Web Vitals and mobile usability
4. Content and business: contact details, prices, promotions, forms and links stay correct and working

If you only cover some groups, for example updating plugins but never testing forms, you still have blind spots that cost you customers.

Why Regular Maintenance Matters

• Security: most vulnerabilities on WordPress sites come from outdated plugins and themes
• No silent customer loss: broken forms, wrong phone buttons, old LINE links. Customers do not tell you, they just leave.
• SEO: slow sites, lots of broken links or frequent downtime lose out in rankings
• Emergency fixes cost more: recovering a hacked site without a backup takes far more time and money than preventive care
• Credibility: a footer copyright that is years out of date or long-expired promotions suggest the business is not paying attention

Monthly Website Maintenance Checklist

Monthly tasks are a basic health check. They do not take long if done regularly.

1. Backups

• Confirm automatic backups are actually running and new files appear on schedule
• Backups must include files + database, with at least one copy stored off the server (such as cloud storage)
• Keep several historical versions, in case malware sat unnoticed for a while

2. Updates

• Update core, themes and plugins (WordPress) or dependencies (custom-built sites)
• Always back up before updating, and test on a staging copy first if possible
• Delete unused plugins and themes instead of just deactivating them

3. Uptime and SSL

• Review your uptime monitoring report for any outages last month and how long they lasted
• Check SSL and domain expiry dates

4. Forms and contact channels

• Submit every form for real and confirm the email arrives in the inbox, not spam
• Tap the call, LINE and WhatsApp buttons on a phone and confirm they open the right destination
• Run a full test booking or checkout (if you have one)

5. Basic security

• Review who has admin access and remove accounts for staff who have left
• Check failed-login records and alerts from your security plugin
• Run a malware scan

6. Search Console

• Open Google Search Console and look for new issues such as 404s, indexing problems or security warnings

Quarterly Website Maintenance Checklist

Every three months, go a little deeper.

• Speed and Core Web Vitals: measure with PageSpeed Insights on mobile and desktop and compare with last quarter (see our WordPress speed optimization guide)
• Broken links: scan for broken internal and external links, then fix them or add redirects
• Test-restore a backup: restore to a test site once. A backup you have never restored does not really count as a backup.
• Review content: are prices, packages, opening hours, address, team photos and promotions still correct?
• Check on real devices: go through the key pages on Android, iPhone and a tablet
• Review plugins and third-party tools: which are no longer maintained and need replacing?
• Look at visitor data: which pages have unusually high exits, and which forms have falling conversions?

Yearly Tasks and the Full Summary Table

Yearly tasks are mostly about contracts and structure.

• Renew the domain, hosting and paid plugin licences
• Confirm the domain and hosting accounts are in the business’s name, not a former employee’s or contractor’s
• Review your privacy policy and cookie banner (see website privacy policy under Thailand’s PDPA)
• Run a full site SEO audit (see our SEO audit checklist)
• Assess whether the site still serves the business, or whether it is time to restructure

If your site is an online shop or booking system with daily transactions, back up daily or more often.

Do It Yourself or Hire a Maintenance Provider?

An approach that works well for small businesses is to split the work: the owner or staff handle content and prices, while a specialist handles technical tasks such as backups, updates and security.

What a Good Maintenance Contract Should Include

Before you hire someone to maintain your site, ask for the scope in writing and check these points:

1. Clear scope: what is included (backups, updates, monitoring, minor edits) and what is billed separately (new pages, new features)
2. Backup frequency and method: where backups are stored, how many versions, and who can access them
3. Response time: how to report problems, how fast you get a reply, and what happens on holidays
4. Content edits: how many edits or hours per month are included
5. Reporting: do you get a monthly summary of what was updated and what issues came up?
6. Hacks: is recovery included in the contract?
7. Ownership: the domain, hosting and admin accounts must be in the business’s name, with credentials handed over if you end the contract
8. Cancellation: notice period and how data is handed over

A contract without point 7 is the biggest risk. Many businesses change maintainers only to discover they have no access to their own domain.

Common Website Maintenance Mistakes

• Believing you have a backup but never testing a restore, then finding the files are corrupted or incomplete when you need them
• Updating everything at once on the live site, so when it breaks you do not know which update caused it
• Using nulled plugins, which often carry malicious code
• Reusing passwords and sharing one admin account across the whole office
• Never testing forms, until a customer reaches you another way to ask why nobody replied
• Forgetting to renew the domain because reminders went to someone who left. If your site is already unreachable, see what to do when your website is down.

Let the Southern Whale Team Look After Your Website

The Southern Whale freelance team maintains both WordPress and custom-built websites, covering backups, tested updates, uptime monitoring, security, form testing and easy-to-read reports. We define the scope clearly, and your domain, hosting and all accounts stay in your name. See our website maintenance service or message us on LINE OA and we can assess your current site first.

Frequently Asked Questions

Does an Astro or static site need maintenance?

Yes, but far less than WordPress, because there are no plugins or database to attack. You still need to look after the domain, SSL, source code backups, dependencies, forms and content.

How often should I back up?

It depends on how often your data changes. A company brochure site that rarely changes may be fine with weekly backups. Sites with daily orders or bookings should back up the database at least daily.

A plugin update broke my site. What now?

Restore the backup taken before the update, or disable the plugin you just updated by renaming its folder, then investigate on a staging site. See WordPress plugin not working: step-by-step fixes.

If I hire a maintainer, do I still need to do anything?

Yes. Tell them about business changes such as prices, opening hours and promotions, and read the reports you receive. Your technical maintainer does not know your business as well as you do.

I cannot reach my previous maintainer. What should I do?

First check whose name the domain and hosting are registered in, contact the providers to confirm ownership, change all passwords, then have a new maintainer review the site and set up fresh backups.

Does website maintenance help SEO?

Indirectly. A fast, secure site with no broken links and little downtime is the foundation that lets SEO work. But maintenance does not replace SEO work such as keyword targeting and content.

Summary

Good website maintenance is not a big job, but it is small work done consistently: monthly, check backups, updates, uptime, forms and security; quarterly, measure speed, test a restore and review content; yearly, renew and review the big picture. If you choose website maintenance services, focus on scope, backups, response time and account ownership, and your site will keep working for your business every day.