Website
A website does not break down, it goes out of date
Almost every website failure is silent: nothing stops, nothing alerts, and nobody notices before a customer does.
When a site goes down you know within the hour: somebody calls. It is the only failure on this page that announces itself, and it is the rarest. Everything else degrades quietly — a certificate expiring, a form that stopped delivering, a page advertising opening hours abandoned two years ago.
These failures share one property: they produce no signal. The site displays, it looks well made, it appears to work. Visitors are the ones who find them, and they do not tell you — they leave, which is exactly the opposite of a noisy incident.
This article describes what to watch after launch, how often, and how to handle each category. The companion article covers speed, with its figures and its measurement protocol; none of that is repeated here.
It carries no chart because none of its claims concerns a quantity. It is an article about procedure, and its content fits into a checklist you can work through yourself.
Website failures are silent
A server that stops produces a phone call within half an hour. It is unpleasant and it is the best kind of failure, because it gets fixed straight away: somebody knows, somebody acts, and the whole problem is measured in hours.
The other failures have no such quality. A form that stops sending its messages changes nothing on screen: the visitor fills it in, sees a thank you, and leaves satisfied. On your side nothing happens, and an absence of enquiries looks exactly like a quiet week.
That is what makes looking after a website different from looking after a server. It is not about reacting fast, it is about regularly looking at things that ask for nothing. Monitoring that waits for an alert will see none of the failures on this page.
The consequence is that you need a list and a rhythm, and the list has to be short to be kept. The sections that follow hold eleven points; they take half an hour a month and half a day a year, and they are the only ones whose absence costs customers.
The four renewals that expire without warning
Four things behind a website have an end date, and none of them is yours in the sense of being under your control. The domain name, the certificate that allows the secure address, the hosting, and the payment method settling all three.
The fourth is the most frequent cause and the least suspected. A card expires, an automatic renewal fails, and the notice goes to an email address belonging to somebody who left the business. The chain breaks at the administrative link rather than the technical one.
The domain is the most serious because it is the only one whose loss can be permanent. Once released, a name can be taken by anybody, and getting it back becomes a negotiation rather than a payment. It is the one line on this page where the risk is not proportional to the delay.
The remedy is two actions and takes an hour. Put all four dates in a calendar several people can see, with a reminder two months ahead. And point their notices at a generic company address rather than at the personal mailbox of whoever opened the account.
The form that stopped arriving, and since when
This is the most expensive failure a brochure site can have, because it hits precisely the one place that produces customers. And it is the quietest: on the visitor side everything goes well, on the business side nothing happens, and nothing distinguishes it from a slow period.
The causes are nearly always outside the site. A change at the host, a spam filter that started classifying your own messages, a destination address that no longer exists, a sending service whose account went unpaid. The site is intact; the path after it is cut.
Checking is mechanical and takes two minutes: send yourself an enquiry through your own form, from a phone, off the office network. Do it on the first Monday of each month. It is the most profitable point on this page, and the one I would keep even if you did nothing else.
One extra protection costs little: have every submission leave a trace somewhere other than a message — a line in a sheet, a record somewhere. Then on the day the mail stops going out, the enquiries are not lost but merely waiting, and you find them.
Who may change the site, and who actually does
A site nobody can change without calling a supplier will not be changed. It is not a question of cost but of friction: an opening time that changes on a Thursday is not worth an email, so it does not get corrected, and it stays wrong for months.
Conversely, a site everybody can change quickly becomes inconsistent, with three spellings of the company name and two different phone numbers depending on the page. Both extremes produce the same visible result: a site nobody quite believes.
The split that works in a smaller business is simple to state. One person inside can change facts — hours, contact details, published prices, short texts. The supplier handles anything touching structure and appearance. The boundary is content against container, and it is understood without training.
This assumes somebody is named, and one person is enough in most businesses. A site with no designated owner does not have several guardians, it has none, and that explains most of the out-of-date sites one sees.
Content that stopped being true
This is the most visible form of ageing to a visitor and the most invisible to the business, because nobody rereads their own home page. The text was written once, it was correct, and it stayed there while reality moved on.
The cases repeat from site to site: hours from an exceptional period that became permanent, an old address, a service you no longer offer, a price that changed, a team page listing people who left. None is a technical defect and all cost the same thing: the reader trust at the precise moment they were checking something.
The most damaging is dated content that does not announce itself as dated. A news page whose latest item is two years old tells a visitor something stronger than its content: it suggests the business may have stopped trading. A page with no date is preferable to a page whose date is old.
The treatment is the annual review in section nine, with one exception to handle immediately: facts anybody can check in three seconds — hours, address, phone. Those are not reread once a year, they are corrected on the day they change, which is only possible if section four has been settled.
Links that lead nowhere any more
Links break on their own, and this is the one category on this page where the business did nothing wrong. A partner site reorganises, a document moves, an online service changes its addresses, and your links to them stop working without anything on your side having moved.
There are two severities not to confuse. A broken outbound link is annoying but ordinary; the visitor goes back. A broken internal link — to your own contact page, your catalogue, your form — is a lost customer, and to the visitor it looks like an abandoned site.
Checking is done with any free tool that walks the site and lists what does not answer. Once a quarter is enough, and the first pass always turns up more than expected, which is normal and does not mean the site was badly built.
One case deserves particular treatment: pages you remove yourself. A page withdrawn without a redirect breaks every link others placed to it, including those in your own older publications. Redirecting to the nearest page costs a minute at the moment of removal and nothing afterwards.
The backup nobody has ever restored
Nearly every hosting plan offers backups, and almost nobody has ever tried one. A backup never restored is not a backup, it is an intention: you know neither what it contains, nor how long recovery would take, nor whether it works.
Two questions qualify it better than frequency does. What exactly does it hold — the files alone, or also the database carrying the texts and the enquiries received? And where does it live: on the same server as the site, or elsewhere? A backup stored on the machine it protects protects against almost nothing.
The trial is done once and need not be dramatic: ask for yesterday version to be restored to a test address, and watch what happens. The result is instructive either way — either you know it works, or you learn otherwise at a moment you chose.
There is one backup you can make yourself which depends on nobody: a copy of your site texts and images, filed in your own folders. It does not put the site back online, but it guarantees the writing and the photography do not disappear along with a host.
Updates: breaking by doing them, breaking by not
A site built on a platform receives regular updates, and there is no comfortable option. Applying them can break a layout; not applying them leaves known, published flaws open, which is the main route by which a brochure site ends up hosting something other than your business.
The reasonable compromise for a business with no technical team fits in a sentence: apply anything touching security quickly, and group the rest on fixed dates a few times a year. That reduces the number of chances to break something without letting the genuinely dangerous accumulate.
A site not updated for a very long time poses a different problem, worth knowing before starting: the update itself becomes risky, because several versions separate the current state from the target. It is one of the three rebuild signals, and it is observed rather than decided.
Whatever the cadence, an update is done with a fresh, verified backup — the one from the previous section — and never on a Friday evening. That is not superstition: it is that discovering the problem and having somebody available to fix it must fall on the same day.
What to watch, and how often
This whole page fits into three rhythms, and a site held by those three will meet none of the failures described above. The value is in the brevity: a list of thirty points will not get done.
Every month, two actions of two minutes: send yourself an enquiry through the form from a phone off the office network, and open the home page on that same phone to check the facts that change — hours, phone, address.
Every quarter, two slightly longer checks: run a broken-link tool, and look at the four renewals from section two to see whether one is approaching. Twenty minutes, four times a year.
Every year, the half day in the next section. And one thing continuously, which takes no effort because it is automatic: monitoring that warns you if the site stops answering. It is the only point on this page where a tool replaces a look, precisely because it is the only noisy failure.
The annual review in half a day
Once a year, somebody reads the entire site the way a customer who does not know you would. It sounds trivial and it is never done, because everybody believes they know their own site — whereas in fact everybody knows the page they wrote.
The reading is done on a phone, page by page, with one question per page: is everything written here still true? Not is this page any good — that question leads to a rebuild and never concludes. True or false, and a list of corrections.
Add three checks only an annual pass catches: pages nobody opens any more and which could go, services described that you no longer provide, and the consistency of contact details from one page to another. That last one nearly always turns something up.
The half day produces a list, and the list is worked through in the following month. A review whose corrections wait for next year is a review that only documented the problem — better than nothing, and far less than what it costs.
Access: the list nobody has
A living website rests on five or six accounts, and it is rare for a business to be able to name them all: the domain registrar, the hosting, the site administration, the associated mailbox, the audience measurement tool, sometimes a form-sending service.
The question to ask is not where the passwords are, but whose name the accounts are in. An account opened with the personal address of a former employee or a supplier is an account you do not have, even if you know its password today: recovery goes through that address.
The useful list fits on a page and is made once: for each service, what it does, whose name it is in, which address receives its notices, and when it renews. It is not a security document, it is an inventory — and it earns its hour on the day of a supplier change or a departure.
The time to make it is now rather than when it is needed, because it is easy while the people involved are reachable. Made after a departure it becomes an investigation; made beforehand it takes an hour and is updated in five minutes a year.
What we do, and what we refuse
Our share is whatever needs technical access: monitoring that warns when the site stops answering, grouped updates with a verified backup taken first, redirects when a page disappears, one trial restore, and the access inventory. That fits in a modest contract, and it has to stay modest to be renewed.
We refuse to take on the monthly form check, and that is not us saving effort: the test only has value done from outside, on a phone, off your network — and by somebody who will notice an enquiry is missing. A supplier testing their own form from their own office reproduces the lie the neighbouring article describes for speed.
We also refuse to propose a rebuild in place of upkeep. An out-of-date site is not a badly designed site: it is a site nobody updated, and building it again produces exactly the same out-of-date site three years later for ten times the budget. A rebuild is justified on the signals in the neighbouring article, not on an impression of age.
Finally, the part that protects most needs no development and needs nothing from us: put the four renewal dates in a shared calendar with a reminder two months ahead, point their notices at a company address, and send yourself an enquiry through your form on the first Monday of every month. An hour today, two minutes a month afterwards.
Frequently asked questions
How do I know my contact form still works?
Send yourself an enquiry through your own form, from a phone, off the office network, on the first Monday of each month. The causes are nearly always outside the site — a spam filter, a deleted destination address, an unpaid sending service — and nothing signals them: on the visitor side everything goes well, and on your side an absence of enquiries looks like a quiet period.
Which renewal is the most dangerous to forget?
The domain name, because it is the only one whose loss can be permanent: once released, a name can be taken by anybody and recovering it becomes a negotiation. The most frequent cause is administrative rather than technical — an expired card, or a renewal notice sent to the address of somebody who left the business.
Should every site update be applied?
Anything touching security quickly, and the rest grouped on fixed dates a few times a year. Applying nothing leaves published flaws open, which is the main route by which a brochure site ends up hosting something else. Always with a fresh, verified backup, and never on a Friday evening — discovering the problem and having somebody available to fix it must fall on the same day.
Is my backup good enough?
Two questions beat frequency. What does it hold: the files alone, or also the database carrying the texts and the enquiries? And where does it live: on the same server as the site, or elsewhere? A backup never restored is not a backup but an intention — try one, once, to a test address.
Who in the business should be able to change the site?
One named person inside who can change facts: hours, contact details, published prices, short texts. The supplier keeps structure and appearance. The boundary is content against container. A site nobody can change without calling will not be changed, and a site everybody changes becomes inconsistent: both extremes produce a site nobody quite believes.
My site is five years old. Should it be rebuilt?
Not because it is five years old. An out-of-date site is not badly designed, it is a site nobody updated, and rebuilding produces the same out-of-date site three years later for a much larger budget. Start with the annual review and the correction list it produces; a rebuild is decided on precise signals, not on an impression of age.
Where we come in
Four dates in a diary — domain, certificate, hosting, payment method — protect you more than a maintenance contract, and take ten minutes to enter.
- We watch and warn you when the site stops responding.
- We apply the technical updates you should not be doing alone.
- We leave you the monthly form test, because it has to stay yours.
We will not replace upkeep with a rebuild: a site that has aged is not a site that is broken, and the difference is the budget.
Read next
Why your website is slow — and what it costs you
Site speed is not measured on your desktop, and that is where the whole misunderstanding starts.The decision queue: what the project is waiting on at your end, and what each wait costs in weeks
A project at this level almost never waits on code. It waits on a decision, a piece of data, or a photograph nobody has taken yet.Website, app or custom software: which one, and in what order
Three very different things share the name "IT project". Choosing the wrong one costs more than building the right one badly.
Let us talk about your project
A free audit, no commitment: we look at your online presence and tell you what is holding it back.