Your website health checklist
The complete checklist we run through to assess and maintain a healthy website: covering security, performance, content, and functionality.
This is the full checklist we use when assessing the health of a website. It covers every major area: security, performance, content, functionality, and accessibility. Use it to understand what we're checking, and as a reference for your own periodic reviews.
Full reference Quarterly reviewTroubleshooter
Which parts should you check?
Security
0 of 10 done
- All software is up to date (WordPress core, plugins, themes)
- No outdated or end-of-life software is running
- SSL certificate is active and not expiring within 30 days
- Google has not flagged the site as hacked or harmful (a flagged site can show a warning label in search results, or a warning page in the visitor's browser)
- No unauthorized admin users exist on the WordPress dashboard
- Login page has brute-force protection active
- Two-factor authentication is enabled on admin accounts
- Daily backups are completing successfully
- Most recent backup has been verified (can be restored)
- No malware or suspicious code detected in security scans
Saved in this browser only.
Performance
0 of 5 done
- Homepage loads in under 3 seconds (test on a mobile connection)
- No large uncompressed images are present on key pages
- Caching is active on the server
- No unnecessary plugins are installed (especially deactivated but not deleted)
- No JavaScript or CSS errors visible in browser console
Saved in this browser only.
Functionality
0 of 8 done
- All navigation menu links work correctly
- Footer links are accurate and working
- Contact form delivers to the correct email address
- Order or booking forms work correctly end-to-end
- Search function works (if applicable)
- Any integrations (CRM, mailing list, chat widget) are connecting
- No broken links detected in automated scan
- Videos and embeds load correctly
Saved in this browser only.
Content accuracy
0 of 8 done
- Business name, address, phone, and email are correct throughout
- Business hours are current
- All services and products listed are current and accurate
- Prices are accurate and consistent
- Staff and team bios reflect the current team
- No expired promotions, events, or offers are showing
- Blog and news content is not misleadingly outdated
- Copyright year in footer is current
Saved in this browser only.
Trust & credibility
0 of 5 done
- Every page loads over HTTPS (the address starts with https://)
- No "Not secure" warning appears on any page
- Reviews and testimonials are recent (within the last 12 months where possible)
- Social media profile links are accurate and profiles are active
- Google Business Profile information matches the website
Saved in this browser only.
Accessibility basics
0 of 6 done
- All images have meaningful alt text
- Heading structure is logical (H1 → H2 → H3, no levels skipped)
- Text is readable against its background (sufficient color contrast)
- Links describe their destination (no "click here" links)
- Forms have labeled fields
- Site can be navigated using a keyboard alone
Saved in this browser only.
Backups & recovery
0 of 5 done
- Daily backup is configured and running
- Backups are stored offsite (not only on the hosting server)
- Backup retention covers at least 30 days
- Most recent backup has been tested (can be restored successfully)
- We know where the restore process is documented
Saved in this browser only.
How to use this checklist
We run the technical rows automatically as part of your care plan. For the content and trust rows, we recommend you do a self-review monthly. It takes about 20 minutes.
Use the simpler What to check on your site monthly guide for your monthly review. This full checklist is useful for a quarterly deep-dive or for reviewing a site that hasn't had regular care.
If you find anything on this list that needs attention, open a ticket on our support portal or email support@chykalophia.com.
Common questions
Do I need to run this whole checklist every month?
No. The shorter monthly checklist at What to check on your site monthly covers the essentials for a routine review. This full checklist is for a thorough quarterly review or a site audit.
Some of these items are things I can't check myself: what do I do?
The technical items (backups, security scans, SSL monitoring, broken link checks) are handled automatically by us as part of your care plan. You don't need to check those yourself. Focus on the content accuracy and trust sections.
My site is failing several of these: how do I prioritize?
Fix security issues first (expired SSL, outdated software, malware). Then fix functionality issues (broken forms, broken navigation). Then content accuracy. Accessibility and cosmetic issues come last. Contact us and we'll help you build a prioritized action plan.
Related guides
Was this page helpful?
Keep a copy of this checklist
We’ll email you this checklist so you can tick through it later. Or print this page, it’s set up to print cleanly.
We use your email to send this checklist and, only if you tick the box, our tips.
Go deeper on chykalophia.com
- Our full guideWebsite maintenance: costs and risksWhat upkeep costs, and what goes wrong without it.
- Website careThe Boring StuffOur care plan: updates, backups, security and speed, looked after for you.
- Our approachWebsite optimizationTesting, performance work and analytics hygiene that keep your site earning.
Talk it through
Want a second pair of eyes on this?
Book a free discovery call, up to an hour. Bring the question you're stuck on and we'll tell you honestly what we'd do.
Already a client? Email support@chykalophia.com.
Last updated