The 15-Point Website Health Checklist

Performance and speed

• Mobile load under 3 secondsTest on a real phone and on a throttled connection, not just office wifi. Most traffic is mobile, and speed drives both conversions and Google ranking.
  Critical
• Images optimized and lazy-loadedOversized images are the most common speed killer. They should be compressed, correctly sized, and served in modern formats.
  High
• Core Web Vitals in the greenLargest Contentful Paint, Interaction to Next Paint, and Cumulative Layout Shift all passing in Google Search Console.
  High

Conversion and user experience

• One clear primary call to action per pageEvery key page should make the next step obvious. Competing or buried CTAs lose ready buyers.
  Critical
• Checkout or contact flow is short and frictionlessCount the clicks and fields. Each extra step drops completion. Forms ask only for what you truly need.
  Critical
• Navigation is simple and consistentA visitor should find any major page in two clicks. Menus match across pages.
  Standard
• Trust signals are visibleReviews, logos, guarantees, and contact details near decision points. Buyers need proof before they act.
  High

Search visibility (SEO)

• Every page has a unique title and meta descriptionDuplicate or missing tags waste ranking opportunities and hurt click-through from search.
  High
• Clean URL structure and working internal linksNo broken links, no orphan pages, a logical hierarchy search engines can follow.
  Standard
• XML sitemap submitted and indexing healthyCheck Search Console for coverage errors and pages excluded from the index.
  Standard

Security and reliability

• Valid SSL and HTTPS everywhereNo mixed-content warnings. A site flagged "Not secure" loses trust instantly.
  Critical
• Core, plugins, and themes are up to dateOutdated components are the number one hack vector. Updates are tested, not skipped.
  Critical
• Automated backups with tested restoresA backup you have never restored is a guess. Daily backups, periodically verified.
  High

Foundation and ownership

• You own your code, hosting, and domainYou should hold the keys to everything. If a vendor controls your domain or source code, you are exposed.
  High
• Analytics and conversion tracking are workingIf you cannot measure where leads and sales come from, you cannot improve them. Verify events actually fire.
  Standard