What Does Website Maintenance Cover?

01Why Is Maintenance Needed?

A website is not a finished job the day it goes live. Server software gets updated, browsers change, new vulnerabilities are discovered and content goes stale. A site without maintenance slows down, breaks or becomes exposed to attack before anyone notices.

The real value of maintenance is catching problems before visitors notice. A broken contact form can go unnoticed for weeks, and every inquiry in that time is lost. An expired SSL certificate shows visitors a full-page security warning and almost stops them from entering the site.

The scope of maintenance widens with the type of site. For a corporate site that only presents the company, the main risk is reputation loss; for an e-commerce platform that takes orders and payments, even a few hours of downtime directly means lost sales. That is why backup frequency, monitoring and response time must be kept much tighter on sites that take orders.

The checklist below groups the tasks that belong in a website maintenance service by frequency. You can turn the list into a calendar for your own site or hand these tasks to a professional team.

02Backups: The First Rule of Maintenance

Everything else can go wrong; if you have a proper backup, the site can be recovered. A backup should cover both files and the database and should run automatically. Backups taken by hand get forgotten just when they are needed most.

The widely accepted 3-2-1 rule is a good start: keep at least three copies of the data, on two different media, with one of them in a different location. Keeping the backup only on the server where the site lives means the backup goes too when the server fails.

• Frequency: Daily for sites with frequently changing content or orders, at least weekly for others.
• Retention: Keep a few weeks of history, since a problem may be noticed late.
• Restore test: Try at regular intervals to confirm the backup actually opens; an untested backup is not a backup.

03Security and Updates

Most sites are attacked through known but unpatched vulnerabilities. So server software, the programming language version and the libraries the site uses must be updated regularly. A website update check also includes taking a backup before updating and testing that the site works afterward.

curl -I https://alanadiniz.com

openssl s_client -connect alanadiniz.com:443 -servername alanadiniz.com </dev/null 2>/dev/null | openssl x509 -noout -dates

Regular Security Scanning

You should regularly check the site for unexpected file changes, malicious code injections or strange pages in search results. The security issues report in Google Search Console shows whether your site has been flagged as harmful.

Access and Passwords

Review who has access to the admin panel, the server and the domain account. Close the accounts of departed employees and former suppliers, turn on two-step verification and avoid shared passwords.

SSL and Domain Expiry

Mark the expiry dates of the SSL certificate and the domain in your calendar. Even with auto-renewal on, it is common for a renewal to fail because the payment card has expired. With the commands below you can check the site's response code and certificate dates from the terminal.

04Speed and Performance Checks

Sites slow down over time: newly added large images, accumulated database records and tracking codes added later all increase the load. Measuring the home page and the most visited pages with PageSpeed Insights once a month catches regressions early.

Use Google's Core Web Vitals thresholds as the reference when measuring: LCP ≤ 2.5 s, INP ≤ 200 ms, CLS ≤ 0.1. We explained what these metrics mean in our what are Core Web Vitals article and how to improve them in our how to increase site speed guide. If you would rather leave regular measurement and improvement to a team, our speed and performance management service exists for exactly that.

05Broken Link and Form Checks

A broken link check matters for both user experience and search engines. Deleted pages, changed addresses and closed external sites lead to 404 errors over time. The page indexing report in Search Console and crawling tools list these links; each one should either be fixed or redirected to a suitable page.

Forms are the most skipped item in maintenance. Once a month, actually fill in and submit your contact, quote and booking forms; check that the email arrives, does not land in spam and that the thank-you page opens.

The same check applies to phone numbers and WhatsApp links. In a few minutes you can verify that the number that starts a call when tapped on mobile is correct, that the map link opens the right location and that social media icons do not point to closed old accounts. These small-looking errors lose the hottest lead at the last step.

06Content and SEO Health

Outdated opening hours, an old campaign or a service no longer offered shakes the visitor's trust. Add a content check to your maintenance list: contact details, conditions that affect price, team and references.

Indexing errors, mobile usability issues and click trends in Search Console should be reviewed monthly. A sudden drop in traffic is often the first sign of a technical problem. For regular reporting and interpretation of this data, you can get support from our SEO & analytics service.

07Maintenance Schedule: A Checklist

The table below is a workable starting schedule for most corporate sites. On sites that take orders or reservations, the frequencies should be increased.

• Set up an uptime tool that monitors your site's availability from the outside; get notified by email or message when the site goes down.
• Keep a short note after every maintenance task: date, work done, problem found.
• Put in writing who does the maintenance and who to call in an emergency.

08When Is Maintenance Not Enough?

Regular maintenance extends the life of a site but not forever. If the infrastructure can no longer be updated, if every update breaks something else, or if speed problems cannot be solved with patches, the cost of maintenance starts to exceed the investment in a new site.

We collected the signs that help you recognize this point in our website redesign article. For other guides on backups, browse the backup tag.