Upkeep by the calendar

SEO Maintenance: The Monthly, Quarterly and Yearly Checklist That Stops Rankings From Leaking

Nobody launches a website and decides to let it rot. It happens quietly: a plugin nobody updated, a page still quoting last year's prices, a redirect that broke during a spring cleanup. Rankings rarely crash from neglect. They leak, a few clicks a month, until somebody finally opens the report.

November 1, 2026 · 12 min read

The short answer

SEO maintenance is the recurring work that keeps a site findable after launch. Every month, check Search Console for new errors, fix broken links, apply updates and confirm tracking and backups. Every quarter, test redirects, refresh pages losing clicks and review speed. Every year, run a full crawl, renew the domain and certificate, audit access and reset the plan.

On this page
  1. Sites decay on a schedule nobody wrote down
  2. The whole maintenance calendar in one table
  3. Monthly SEO tasks: errors, updates, links and the phone number
  4. The quarterly afternoon: redirects, decaying pages and speed
  5. Once a year: the crawl, the renewals and the keys
  6. Checks that should follow events, not dates
  7. WordPress, Shopify and custom builds keep different chore lists
  8. Doing the rounds yourself, or paying someone to

Sites decay on a schedule nobody wrote down

A website starts aging the day it launches. Software gets patched, and the patch changes something. Prices go up while the service page stays put. A supplier renames its site and your link to it dies. A competitor rewrites the page that used to sit below yours. None of this is dramatic, and that is the problem: each change is too small to notice and large enough, added up over a year, to move a business from the top three to the bottom of page one.

Maintenance is the dull answer. It is not a strategy and it is not content marketing. It is a calendar of checks, each with a place to look and a fix that usually takes minutes. Our SEO guide covers how search works and where to start. This page assumes the site is built and ranking, and asks what keeps it that way.

The whole maintenance calendar in one table

Here is the routine we would hand an owner who wants to keep a site of a few dozen pages in order. The timing is our practice, built on Google's documentation, not a Google rule. Busy sites with daily publishing tighten every interval; a twelve-page brochure site can stretch some of them.

SEO maintenance tasks by frequency, where to check, and rough time for a small business site
TaskHow oftenWhere to checkRough time
New indexing, security or manual action issuesMonthly, plus email alertsSearch Console10 minutes
Core, plugin and theme updates, with a backup firstMonthly at leastCMS dashboard, host20 minutes
Broken internal links and lost backlinked pagesMonthlyA crawler, Search Console Links20 minutes
Forms, calls and key events still recordingMonthlyGA4 Realtime, a test submission10 minutes
Hours, phone and holiday hoursMonthly, and before each holidayGoogle Business Profile, other listings10 minutes
Redirects resolve in one hopQuarterlycurl, browser DevTools, URL Inspection30 minutes
Pages losing clicks year over yearQuarterlySearch Console Performance, compare mode1 hour
Core Web Vitals on phonesQuarterlySearch Console, PageSpeed Insights20 minutes
Sitemap lists only live, indexable URLsQuarterlySitemaps report, a crawl20 minutes
Structured data still validQuarterly and after template changesRich Results Test20 minutes
Full site crawl and technical auditYearlyA desktop crawler, Search ConsoleHalf a day
Domain, certificate and hosting renewalsYearly, or automatedRegistrar, host30 minutes
Who can log in to whatYearly, and when staff or agencies changeSearch Console, GA4, Business Profile, registrar30 minutes
Keyword map and plan for next yearYearlySearch Console, your sales recordsHalf a day

Add it up and the routine costs about two hours a month, an afternoon a quarter and a day a year. That is the honest size of the job for a small site, and it is why so many owners skip it.

The monthly pass catches anything that broke since the last one. Our Google Search Console guide already has a twenty-minute routine for the first Monday of the month, so we will not repeat it here. These are the jobs that sit around it.

  1. 1

    Make sure the alarms reach a person

    Search Console emails users about new problems such as indexing issues, security issues and manual actions. Open Email preferences under your user settings and confirm notifications are on, and that the address belongs to someone who still works for you.

  2. 2

    Back up, then update

    Since WordPress 5.5, administrators can switch on automatic updates plugin by plugin and theme by theme; WordPress runs them twice a day and emails the owner about successes and failures. WordPress's own documentation suggests making sure you can roll back first, so schedule automatic backups before you trust automatic updates.

  3. 3

    Crawl for broken links

    Run a crawler over the site and list internal links that point at 404s or redirects. Fix the link at its source rather than adding another redirect. Our broken link and 404 repair service does this at scale when the list runs long.

  4. 4

    Rescue pages other sites still link to

    Compare the Links report with your crawl. A deleted page that other websites link to should get a permanent redirect to its closest replacement, so the links keep working. A dead page nothing links to can stay a 404.

  5. 5

    Submit a test lead

    Fill in your own contact form and tap your own phone number from a phone. Then check that the key event appeared in GA4. A tracking tag that broke in an update makes every later report wrong, and our SEO KPIs guide shows what those events should be.

  6. 6

    Read your listing as a customer

    Check hours, phone and services on your Google Business Profile. Google's help page suggests confirming hours for official holidays even when they match your regular hours, which takes a minute before each one.

If the site is down or crawling slowly when you look, start with whether the site is down and the host before anything else on this list. A server problem outranks every SEO task.

The quarterly afternoon: redirects, decaying pages and speed

Quarterly work is slower and more interesting, because it looks for things getting worse rather than things that broke. Three months is long enough for a trend to show and short enough to catch it before a season is lost.

  • Test the redirects. Request your ten most valuable old URLs and confirm each lands on a live page in a single 301 or 308. Chains grow with every redesign, and our guide to 301 redirects explains how to flatten them.
  • Find the pages that are slipping. In Search Console, compare the last three months with the same three months a year earlier, group by page and sort by the clicks difference. The top five losers are your refresh list.
  • Refresh honestly. Update prices, photos, steps and dates of real changes. Google's helpful content guidance asks whether you are changing the date of pages to make them seem fresh when the content has not substantially changed. Our content relaunch guide covers rewriting, merging and deleting.
  • Read Core Web Vitals on the mobile tab. A new chat widget or a heavier hero image can turn a good group to poor. If the fix runs past a plugin setting, that is Core Web Vitals work.
  • Check the sitemap against reality. Every listed URL should return a 200, be indexable and be canonical. The XML sitemaps guide explains why a sitemap full of redirects teaches Google to ignore it.
  • Retest structured data. Run key templates through the Rich Results Test, and delete markup for features Google retired, such as FAQ rich results, which stopped showing on May 7, 2026. See schema markup.
  • Ask the machines. Put three customer questions through the free AI visibility check and note whether the answers name you and get your details right. AI answers repeat old facts as happily as new ones.

A page that loses clicks for two quarters in a row is rarely broken. It has been outwritten, or the question changed. Freshness also matters in AI answers: an Ahrefs study of about 17 million citations, from July 2025, found pages cited by AI assistants were on average fresher than those in Google's organic results. Our page on content freshness covers what that study can and cannot prove.

Once a year: the crawl, the renewals and the keys

The yearly pass is about the things that expire, the people who come and go, and the plan itself. Most of the disasters we are called in to fix trace back to one of these, ignored for three years.

A full technical crawl

Crawl every URL, not a sample, and work through the technical SEO checklist. Screaming Frog's free SEO Spider handles up to 500 URLs, and our roundup of SEO audit tools compares the alternatives.

Certificates on autopilot

In April 2025 the CA/Browser Forum, which sets the rules for public website certificates, approved cutting the maximum lifetime of a certificate from 398 days to 47 days, in steps from March 2026 to March 2029. If anyone at your company renews the certificate by hand, ask the host to automate it now.

The domain itself

Turn on auto-renew at the registrar, check that the card on file is current, and make sure the registrar account is in the business's name. An expired domain takes every ranking with it.

The server's software

On WordPress and other PHP sites, ask the host which PHP version runs the site. As of October 2026, php.net lists PHP 8.0 and 8.1 as past end of life, and security support for 8.2 ends on December 31, 2026.

Who holds the keys

List everyone with access to Search Console, GA4, the Business Profile, the registrar and the CMS. Remove former staff and former agencies, and check Search Console's ownership list for verification tokens left behind.

History you would hate to lose

Search Console keeps 16 months of performance data. Export a yearly summary, or set up its bulk export to BigQuery; Google says that export does not backfill older data and is billed by Google Cloud above a free usage level.

Then put the year's numbers beside the plan. Which pages earned leads, which services had no page, which towns brought work? That review is the start of next year's SEO strategy, and it takes a morning if the monthly checks were done.

Checks that should follow events, not dates

A calendar catches slow decay. It is useless against the Tuesday a developer pushes a new template. Some changes deserve their own checklist, run the same day, whatever the calendar says.

After a launch, redesign or host move

  • No noindex or robots.txt block carried over from staging
  • Every old URL redirects once to its new home
  • The tracking tag fires on every template
  • The sitemap lists the new URLs and was resubmitted
  • URL Inspection on the five most valuable pages

After a smaller change

  • Plugin or theme update: load the home page, a service page and the form
  • Price change: every page, PDF and listing that quotes it
  • New phone number: site, Business Profile, directories and ads
  • Retired service: redirect its page, do not just unlink it
  • Staff change: their logins, and any page that names them

A redesign is where maintenance turns into migration, and the stakes rise. Our website migration service maps every old URL before launch, and the free website health check catches a stray noindex in seconds afterward.

WordPress, Shopify and custom builds keep different chore lists

The calendar above applies to every site, but the platform decides how much of it lands on you. A rough guide, from what we see on client sites:

How the maintenance load shifts by platform
PlatformWhat the owner maintainsWhat usually breaksWhere help comes from
WordPressCore, plugins, themes, PHP version, backups, securityAn update that conflicts with another plugin, or a theme that drops a tagThe host, a developer, or plugin repair
ShopifyApps, theme code, product data, redirects when handles changeAn app that injects scripts and slows the storeShopify support for the platform, a developer for the theme
Custom Next.js siteContent, and the code dependencies the developer updatesChanges made without testing the buildWhoever built and hosts it

WordPress carries the longest list because it does the most with third-party code, and in our experience an outdated plugin is the usual way spam pages get injected into a small site. If Search Console's Security issues report ever lights up, malware removal comes before any SEO work. For a sense of what upkeep costs across platforms, see our guide to website maintenance costs.

Doing the rounds yourself, or paying someone to

Two hours a month is within reach of most owners, and the first three months teach you the site better than any report. The routine fails in a predictable way: it gets skipped in the busy season, then the next one, and the checks that would have caught a problem in March catch it in October. Much of the watching can be handed to software, as our guide to SEO automation explains. The fixing still needs a person.

If you would rather not own the calendar, DataCram's hosting and maintenance plans keep the software, backups, certificates and uptime in order, and our SEO programs run the search side of this checklist every month with a report that leads with calls and forms. Programs start at $575 a month, adjusted for complexity, setup and budget, as the SEO pricing page lays out. On sites we build, Athena CMS agents help with the watching: Argus keeps an eye on the site, Hestia keeps hours and contact details the same everywhere, and Iris drafts titles and structured data for approval.

For a free starting point, the site audit checks speed signals, SEO, mobile, security and content and emails a report with the fixes, which makes a decent first month's to-do list.

Questions owners ask about SEO

SEO maintenance covers the recurring checks that keep a site findable: new errors in Search Console, software updates with backups, broken links, working tracking, accurate business listings, redirects, refreshed pages that are losing clicks, speed on phones, valid structured data, renewals and account access. It is separate from new content and link building, though it protects the results of both.

For a small business site, a short pass every month, a longer review every quarter and a full audit once a year works well. That is our practice, not a Google rule. Some checks should also follow events rather than dates, such as a redesign, a host move, a plugin update or a new phone number.

Google says that, in general, 404 errors won't impact a site's search performance, and many are not worth fixing. They matter when the URL is in your sitemap, when other sites link to it, or when customers keep landing on it. Redirect those to the closest live page and fix internal links at the source.

For most small sites, yes, with backups in place first, which WordPress's own documentation recommends. Since version 5.5 you can switch auto-updates on plugin by plugin, and WordPress emails you after each attempt. Leave auto-updates off for a plugin that has broken the site before, and test it by hand.

Update a page when its facts change or when it loses clicks for a quarter or two, not on a fixed timer. Google's guidance warns against changing dates to make pages look fresh when the content has not substantially changed. Our content relaunch guide covers how to decide between rewriting, merging and deleting.

They overlap. Website maintenance keeps the site running: hosting, software, backups, security and certificates. SEO maintenance keeps it findable: indexing, links, redirects, content, speed and listings. A hacked plugin or an expired certificate is both kinds of problem, which is why the two calendars work best when one person or team owns them.

Keep reading

Free · No obligation

Hand over the calendar, keep the rankings

Tell us what the site runs on and what has been slipping. We will look at it and reply with what needs fixing now and what a monthly routine would cover.

Which of these sounds like you? (pick any)

Rather talk now? Call (210) 346-0848.

CallGet a quote