Most business websites are treated like furniture. You buy them once, you put them in the corner, and you assume they will keep working forever. Then one Tuesday in March a customer calls to say your contact form has been silently failing for two months, or your domain expires over a long weekend and your email dies with it.

A website health check once a year prevents almost all of these ugly surprises. It is not glamorous work. Nobody brags about renewing a domain on time. But the cost of skipping it is measured in lost customers who tried to reach you and could not, and you never even find out they tried.

I run this website health check on every site I am responsible for, usually in December when the year is winding down and traffic is quiet. Most of the twelve items below take minutes. Discovering any one of them broken later costs real money. Here is the full list.

Domain, hosting, and certificates: the expiry timers

The first four items are the things that expire on a date whether you are watching or not.

  1. Domain renewal date. Log into your registrar and confirm when your domain expires and that auto-renew is on with a valid card. An expired domain is the single most damaging failure on this list, because it takes down your website and your email at the same time, and recovery can take days.
  2. Hosting subscription. Same check for your hosting plan. Confirm the billing card is current. Hosting that lapses over a holiday can mean your site is down until someone reaches support.
  3. SSL certificate. Visit your site and confirm the padlock is present with no warning. Note the certificate's expiry date. A lapsed SSL certificate shows visitors a frightening "not secure" browser warning that sends most of them straight back to Google. If it is not on auto-renew, put a reminder two weeks before it expires.
  4. Email deliverability. Send a test message from your business email to a Gmail and a Yahoo address. Confirm it lands in the inbox, not spam. While you are there, check that your domain's basic email records still exist, because these quietly break during hosting changes.

These four are the ones that fail on a calendar, not on usage. A single spreadsheet of renewal dates, checked once a year, eliminates the entire category.

The customer-facing basics: does it actually work

Now stop looking at admin panels and start behaving like a customer. This is where most silent failures hide.

  1. Submit a real test order or inquiry through your own site. Fill in the contact form. Complete a checkout if you sell online. Then confirm the message or order actually arrived where it should. This is the most skipped and most important check on the list. Forms break constantly and silently, usually after a plugin update or an email change, and you only find out when a customer complains, if they bother to.
  2. Click through your main navigation. Every menu item, on a phone and on a desktop. Dead links and pages that 404 make a business look abandoned. Free tools can crawl your site for broken links in minutes if you would rather not click manually.
  3. Load the site on a phone. Most Indonesian traffic is mobile, so this is not optional. Check that text is readable without zooming, buttons are tappable, and nothing overflows the screen. Sites drift out of mobile shape over time as content gets added.
  4. Check your page speed on mobile data. Not office WiFi, actual 4G. A homepage that takes eight seconds to load is bleeding customers before they see a word. If it feels slow to you, it is losing sales. This connects directly to the numbers that matter, which I cover in website analytics: the only metrics worth your attention.

If items five through eight all pass, your site is doing its actual job. If any fail, fix them before anything cosmetic, because a beautiful site with a broken contact form is worse than a plain one that works.

Content, backups, and access: the slow rot

The last four items are about the things that decay quietly over a year rather than breaking outright.

  1. Hunt for stale content. Prices from last year, "coming soon" banners for events that already passed, an team page listing people who left, a copyright year stuck in the past. Stale content signals neglect and quietly erodes trust. Fix the copyright year and any obviously dated claims.
  2. Verify your backups exist and restore. Confirm your site is actually being backed up, and then test it by restoring one file or database to a staging location. A backup you have never restored is a hope, not a safety net. This overlaps with the broader access review I describe in the year-end security audit you can do in one afternoon.
  3. Apply pending updates. If you run WordPress or any CMS, count the pending updates for core, plugins, and themes, and schedule them. Outdated plugins are the most common way Indonesian SME sites get hacked. Delete plugins you no longer use, because inactive code is still attackable.
  4. Review who has admin access. List every account that can log into your site's back end and remove anyone who no longer needs it: the freelancer from last year's redesign, the ex-employee, the agency you stopped working with. Fewer admins means fewer ways in and fewer people who can accidentally break things.

None of these will take your site down tomorrow. All of them make it slowly worse, less trustworthy, and more vulnerable if you never look.

Turn the check into a habit

The point of an annual website health check is not the heroic afternoon of fixing. It is building a small, boring rhythm so that next year there is almost nothing to fix.

Close the check by doing three things:

  • Write down every renewal date in one place: domain, hosting, SSL. This alone kills the worst failures.
  • Log what you found and fixed so next year's check has a baseline to compare against.
  • Put next December's check on the calendar now, as a recurring reminder, so it never depends on you remembering.

For a brochure site, once a year is enough. If your site takes payments, handles bookings, or is central to how you get customers, run the customer-facing checks quarterly. The whole thing still fits in an afternoon.

The takeaway: quiet maintenance beats loud emergencies

A website health check is the cheapest insurance a business owns. Twelve checks, most of them a few minutes each, protect you from the expensive, embarrassing failures: the dead domain, the broken form, the expired certificate, the site nobody can log into because the only admin left.

Do the customer-facing checks first if you only have thirty minutes. Submit a real inquiry through your own contact form right now and confirm it arrives. If it does not, you just found the most valuable thing on this list. If you would rather hand the whole ritual to someone who will keep your site healthy year-round and tell you before things break, that is the kind of ongoing partnership I take on selectively, and you can read how I work at /partner.