Many people treat a website like a shop window or a piece of furniture: you have it made once, you pay, and for years you take it for granted that it will sit there and work. But a website is not an object, it is a small system that runs on a server, uses third-party software, depends on a domain, a certificate and an email service, and lives inside an environment, the internet, that keeps changing.
That is why, if nobody looks after it, a website does not stay as it is: it ages. It usually does not break all at once, but loses security, speed and relevance a piece at a time, until the day something visible happens (a crash, a browser warning, a customer who cannot write to you). Here is what regular care involves and what you risk if you skip it.
The cycle of a month of care
Updates: the least visible and most urgent part
A site built with WordPress, or with any content management system, relies on a core, a theme and several plugins. Their developers release updates to fix errors, add features and close vulnerabilities. If you do not install them, those vulnerabilities stay open and are publicly known, including to those who exploit them.
Updating, however, is not clicking “update all”. An update can break a contact form, change the look of a page or clash with another plugin. Done properly, it involves a backup beforehand, the update and a check of the main pages straight afterwards. It is precisely the part that, because it is not urgent on any particular day, gets put off until it becomes a problem.
Security: prevention costs less than recovery
A compromised site can show pages that are not yours, send spam in the name of your domain or be flagged by browsers as dangerous. For a local business that means losing trust at the very moment a customer is looking for you. Regular care includes:
- automatic backups, stored away from the site’s server and tested every now and then (a backup that has never been restored is not a guarantee);
- a check on who has access, removing anyone who no longer works with you;
- strong passwords and, where possible, a second factor for logging in;
- a check that the security certificate (https) is valid and the domain is not about to expire.
Domain expiry deserves a separate note: if it is not renewed, the site stops working and, in unlucky cases, the address can end up with someone else. It is a trivial and frequent mistake.
Speed: it is lost a little at a time
A site that was fast on launch day tends to slow down over time. New photos are uploaded without reducing their size, plugins are added, useless data piles up in the database. None of these steps, on its own, is noticeable. Together, though, they make the page reach people on a phone more slowly, and impatient visitors leave before they have even read anything.
Checking performance every month, even just with PageSpeed Insights, lets you notice a decline while it is still small and fix it with little effort.
Content: a site that stands still says the business has stopped
Opening hours that no longer match, services you do not offer, a price list from years ago, an “upcoming” event that has already passed, a photo of the staff with people who no longer work for you. These are details that visitors notice and that undermine trust more than you think. For search engines, and for assistants based on artificial intelligence too, a site with outdated information or information that contradicts the Google listing is a less reliable source.
You do not need to publish a lot: you need to keep the important content true and add, at a sustainable pace, something useful, such as the answer to a question customers keep asking or a recent piece of work.
Monitoring: noticing before your customers do
A contact form that stops sending emails, a page that returns an error, a certificate that expires: these faults give no signals to anyone who is not looking. That is what monitoring is for, with automatic checks that alert you if the site does not respond, and with a monthly read of Google Search Console, where indexing errors, pages losing visibility and mobile usability problems show up.
The difference between a well-kept site and a neglected one is often this: in the first, a problem is found quickly by whoever manages it; in the second, it is found by a customer, who does not always tell you.
What happens if you don’t do it
There is no precise moment when the damage “kicks in”, and that is what makes it easy to put off. The concrete risks are five: a hacked or unusable site, browser security warnings, ever slower pages, wrong information that costs you enquiries and a slow loss of visibility in searches. Each of these problems has a cost of recovery that is often higher than the maintenance that would have prevented it, and in some cases it means business interruptions.
Not every site needs the same intensity of care. A simple site, with little content and few plugins, needs fewer interventions than one with an online shop, bookings or many features. But “fewer” does not mean “none”.
Before deciding where to invest, check where you are starting from: the free SEO and GEO audit from Trovavio shows how Google and AI see your site today.
Where to start tomorrow
- Check when your domain and hosting expire and who has the login details: note it down in a safe place.
- Check whether a recent backup exists and where it is kept; if nobody can answer, that is the priority.
- Open the site’s updates section and see how many are waiting and for how long.
- Reread the main pages (home, services, contact) and correct whatever is no longer true.
- Set a recurring appointment, once a month, with a written checklist, or hand the care over to a professional who will do it consistently.
