Most websites do not fail dramatically. They decay. An update goes unapplied for a month, a backup job stops running after a platform change, a contact form breaks quietly and nobody notices until a customer mentions it in person. None of those problems announces itself, and all of them are cheap to catch early and expensive to discover late. The organizations with reliable websites are not spending a secret budget on them; they are spending about twenty minutes a week, on the same day, with the same short list.

This is the first Monday Web Check, and it is the post every later Monday builds on. The purpose is to give you one maintenance ritual, short enough to survive a busy week and complete enough that the serious failures cannot hide for long. If you only ever adopt one habit from this blog, this is the one to adopt. Everything else in October's security posts assumes the check is running.

Why a weekly ritual beats good intentions

The platform your site runs on, its plugins, and its theme publish updates continuously, and a meaningful share of those updates close security holes that are publicly documented the day the update ships. An unapplied update is an advertised vulnerability, and automated scanners look for exactly those advertisements. Hosted platforms such as Squarespace and Wix handle this invisibly; sites on WordPress and its open-source relatives own the problem.

Good intentions do not keep the gap short; a fixed appointment does. The organizations that keep their update lag under a week have a half hour on the calendar with a name, and the name is the point.

The check, in order

Protect twenty to thirty minutes on the same morning each week. Then work down this list without skipping steps, because each one makes the next one safe.

  1. Confirm the backup. Open the host's backup panel or your backup plugin and confirm the most recent backup ran and is reachable. If the host offers one-click snapshots, take a fresh one now. Never update a site whose last backup you have not seen.

  2. Apply the waiting updates. Plugins first, then the theme, then the platform core, on a staging site first if you have one. For a simple brochure site, automatic updates plus this weekly confirmation is a reasonable policy; for a site that takes orders, keep updates manual and scheduled, with security-only updates left automatic.

  3. Glance at uptime. Look at the monitor's past week. One short outage is weather; a pattern is a conversation with your host.

  4. Click through the five pages that matter. Homepage, contact, donation or checkout, and the two pages visitors use most. Load the homepage on your own phone.

  5. Submit the contact form. Confirm the test message arrives in the right inbox. A form that silently stopped delivering is one of the most common failures on small sites and one of the least visible.

  6. Log it. One line in a maintenance log: the date, what updated, anything odd. Most weeks the line reads "all clear." That uneventfulness is the product.

Done looks like a dated log entry, every update applied, a backup you have seen with your own eyes, and a test message from the contact form sitting in the inbox.

When an update breaks something

Eventually one will, and knowing the response in advance keeps the habit alive past its first bad Monday. The most recent update is the suspect; deactivate the plugin that just updated, or restore the snapshot from step one, and the site is back in minutes. A component that breaks on routine updates belongs on the replacement list. Staying outdated to avoid the annoyance trades a visible, recoverable problem for the invisible kind.

The honest time budget

Professional-grade maintenance at this scale runs three to five hours a month: this weekly half hour, a monthly hour, and quarterly blocks for a restore test and an access review. The weekly check holds the rest together. Most weeks it finishes early; the weeks it does not are the weeks it was for.

Get the checklist. The Monday Web Check fits on one card, and the full Annual Web Maintenance Calendar from Chapter 7 puts the monthly, quarterly, and annual tasks around it. Both are free in the Web Managers Portal with a free account, along with the weekly Web Managers letter.

Categories

Trending  Fundamentals