Most small business owners look at their website twice: once when it launches, and once when a customer mentions something is broken. Everything in between, a year or two or more, the site just sits there, quietly going out of date while nobody checks.
That's the gap this checklist closes. Before the calendar flips to a new year, walk through these ten checks. None of them require a developer. None of them take more than five minutes on their own. But run together, they catch the stuff that costs you calls and quietly tanks your rankings without ever throwing an error message.
The honest answer is that a year-end audit isn't about finding one catastrophic problem. It's about finding five small ones that compound: a stale year in the footer, a form that's been silently failing since a plugin update, a service page nobody's touched since the site went live. Individually, none of them sink you. Together, they tell Google and your customers the same thing — nobody's home.
Technical health
Start here. These three checks are pass/fail, they take under five minutes each, and a failure on any one of them undercuts everything else on this list.
1. Confirm your SSL certificate hasn't lapsed
Type your domain into your browser bar. If you see a warning instead of the padlock icon, your certificate expired or was never renewed automatically. CISA's website security guidance puts HTTPS enforcement at the top of the list for a reason: browsers now flag plain HTTP sites as "Not Secure," and that warning shows up right in the address bar before a visitor reads a word of your copy.
How to check it: load your homepage in an incognito window. Click the padlock. If it says "Certificate is valid," you're fine. If it doesn't load at all, or Chrome interstitials you with a red warning page, that's a call to your host today, not next week.
2. Load your site on your actual phone
Not a browser resize. Your phone, on cell data, standing in your kitchen. Pinch-to-zoom, text that runs off the edge of the screen, buttons stacked so close together you tap the wrong one. These are the things a desktop check will never catch, and they make up a huge share of your real traffic.
How to check it: open your homepage, your contact page, and whatever page gets the most traffic (usually a service page). Try to fill out the contact form with your thumbs. If it's annoying for you, it's costing you leads.
3. Run a Core Web Vitals check
Google measures how fast your pages feel to real visitors using three numbers: Largest Contentful Paint under 2.5 seconds, Interaction to Next Paint under 200 milliseconds, and Cumulative Layout Shift under 0.1 are the current "good" thresholds. Miss those and it's not just visitors who notice. It factors into how you rank, too.
How to check it: open Google Search Console, click Core Web Vitals in the left sidebar, and look for anything marked "Poor." The Core Web Vitals report groups similar URLs together, so one flagged group often means every service page built on the same template has the same problem. Fix the template and you fix them all.
You don't need a full redesign to move those numbers. Compressing oversized images, removing an unused plugin, and deferring a chat widget script are usually enough to cut load time in half. That's the "basic cleanup" this chart is showing, not a full rebuild.
Content & accuracy
These checks feel small. They're the ones customers actually notice.
4. Update the copyright year in your footer
It sounds trivial. It's the single most common thing we find. A footer that still reads "© 2023" tells anyone who looks, customers, and yes, other web designers sizing up the competition, that the site hasn't been touched in years. It takes ninety seconds to fix and it's a credibility tell nobody should be giving away for free.
How to check it: scroll to the bottom of every page template you use (footers sometimes differ between the homepage and interior pages on older sites). Fix all of them, not just one.
5. Re-read your hours, pricing, and service area
Did you add a new service this year? Change your hours? Stop serving a zip code you used to cover? Stale information here doesn't just annoy customers. It generates the exact kind of phone call that wastes everyone's time ("do you still do X?").
How to check it: compare your website's hours and service list against your Google Business Profile. They should match exactly. If they don't, whichever one is right is the one you should trust, and that's usually your Business Profile, since it's easier to edit.
6. Check every photo is actually current
A team photo with an employee who left two years ago, a "before" project shot that's now your oldest work on the site, seasonal imagery still up from last spring. These accumulate quietly. None of them break anything. They just make the site feel abandoned to anyone paying close attention.
Conversion & lead capture
This is the section that actually costs you money when it's wrong, and it's the one owners test least, because the form "worked fine when we launched it."
7. Actually submit your own contact form
Not just glance at it. Fill it out with a real message and send it. Plugin updates, hosting migrations, and spam filter changes can quietly break form delivery without any visible error on the page. The visitor sees "Thanks, we'll be in touch." You never get the email. You will never know that lead existed.
How to check it: submit the form from your phone and from a desktop browser, using an email address you don't normally check as the "from." Confirm it lands in your actual inbox, not a spam folder, within a few minutes.
8. Click every phone number and "Get a Quote" button
On mobile, does your phone number actually dial when tapped, or is it just plain text? Do your CTA buttons go where they're supposed to, or does one still point to an old landing page from a campaign that ended eight months ago? Broken links compound the longer they sit. The same audit approach works when you're sizing up a competitor's site, and it's just as revealing pointed at your own.
Want someone else to run this audit for you?
We'll go through all ten checks on your actual site: technical, content, conversion, and SEO. Then we'll hand you a plain-English list of what to fix first. No obligation.
Get a free site audit →SEO fundamentals
The last two checks won't fix a broken site, but they're what stops Google from finding the good work you've already done.
9. Resubmit your sitemap in Search Console
If you've added pages, blog posts, or new services this year, make sure Google actually knows about them. A sitemap that hasn't been resubmitted since launch means new pages can sit undiscovered for months. This pairs directly with getting comfortable in Search Console generally. It's the single most useful free tool a small business site owner has, and most never open it after setup.
How to check it: in Search Console, go to Sitemaps, and check the "last read" date next to your sitemap.xml. If it's more than a few months old, click Submit again. It costs nothing and takes ten seconds.
10. Run a quick on-page SEO pass
Titles, meta descriptions, and header tags drift out of date the same way copy does. A page titled "Emergency Plumber Denver | 2023 Rates" is actively working against you two years later. Walk your top five pages and confirm the title tag still matches what you actually offer. If you want the full version of this check, our on-page SEO checklist for local businesses covers it in more depth than fits here.
What most small business owners get wrong
They treat the website like a business card they printed once. A business card doesn't need updating because nothing about it changes. The phone number's the phone number. A website is different. It's supposed to reflect the business as it exists right now: current hours, current services, current proof that you're still operating and still good at what you do.
The other mistake is assuming "nothing broke" means "everything's fine." A form can fail silently for months. A page can slide off Google's first two pages without a single visible sign on the site itself. Nothing turns red. Nothing sends you an alert. That's exactly why this has to be a checklist you run on a schedule, not something you wait to notice.
And a smaller one worth naming: owners fix the thing they happen to notice, usually a typo, and stop there, feeling like the audit is done. One fix isn't an audit. Working the whole list is.
The bottom line
Set aside an hour before January, work through all ten checks in order, and write down what you find instead of fixing as you go. You'll move faster and won't lose your place. Most of what turns up costs nothing to fix and takes minutes. The value isn't in any single item. It's in doing all ten at once, on a schedule, instead of only reacting when a customer points something out.
If you get through the list and the fixes start looking bigger than a footer date (a form that needs backend work, a redesign that's overdue, page speed baked into the platform itself), that's the point where it's worth a second set of eyes. Knowing what your site is actually worth to your business makes that call a lot easier.
Frequently asked questions
How long does a year-end website audit actually take?
For a typical small business site with 5–10 pages, budget 45–60 minutes to work through all ten checks yourself. Each individual check takes under five minutes; the time adds up because you're clicking through multiple pages, not because any one step is hard.
Do I need a developer to fix what I find?
Most of what a year-end audit turns up is not developer work. Updating a copyright year, fixing a typo, swapping a stale photo, or resubmitting a sitemap in Search Console is something any site owner can do. The items that do need a developer are usually SSL/HTTPS misconfigurations, broken forms tied to backend code, or Core Web Vitals fixes that involve image compression pipelines or script loading order.
What's the single most common thing you find in these audits?
An expired copyright year in the footer, followed closely by a contact form nobody has test-submitted since launch. Neither one is expensive to fix, but both quietly tell a visitor the business isn't paying attention.
Should I do this audit more than once a year?
Once a year is the minimum, not the target. If you run any kind of paid traffic, add a lighter version of this checklist (mobile check, form test, page speed) every quarter. Google's Core Web Vitals data and your own broken links don't wait for January.
Is it worth paying someone to run this audit instead of doing it myself?
If your site drives real leads and you don't have an hour to spare, yes. A second set of eyes tends to catch things an owner glosses over because they're too familiar with their own site. If you're comfortable clicking through ten checks methodically, you can do this one yourself for free.
