The 15-Minute Website Health Check You Can Do Right Now

Grab your phone, a notebook, and let’s get started.

1. The Mobile Test (1 minute)

Pull out your smartphone and visit your website. Right now. I’ll wait.

What you’re looking for:

• Does everything fit on the screen, or are you scrolling sideways like it’s 2005?
• Can you tap buttons without accidentally hitting three things at once?
• Do images load properly, or are they stretched, squished, or missing entirely?
• Is the text readable without zooming in like you’re examining fine print?

Why it matters: More than half of your visitors are probably on mobile devices. If your site looks terrible on a phone, you’re alienating the majority of your audience before they even read a word.

2. The Speed Test (1 minute)

Open a new incognito/private browser window and visit your homepage. How long did it take to load?

If you’re counting “one-Mississippi, two-Mississippi, three-Mississippi”—you’ve got a problem.

For a more official diagnosis, head to Google’s PageSpeed Insights and plug in your URL. It’ll give you a score and tell you what’s slowing you down.

Why it matters: Studies show that 53% of mobile users abandon sites that take longer than 3 seconds to load. Every extra second is costing you potential clients.

3. The “Does This Actually Work?” Test (2 minutes)

Click on your contact form (and any other forms you have) and try to submit it. Click on your phone number… does it trigger a call? Try your email address… does it open your email app? Opt-in to your newsletter or lead magnet… are you sent to a thank-you page and/or receive emails?

Check your navigation menu. Do all the links work, or do any lead to dead ends (the dreaded 404 error page)?

Why it matters: Nothing says “unprofessional” quite like a broken contact form. If people can’t reach you easily, they’ll reach out to your competitor instead.

4. The Accuracy Audit (2 minutes)

Read through your homepage like you’re a first-time visitor who knows nothing about your business.

Check:

• Are your business hours current?
• Is your phone number correct?
• Do your services/products reflect what you actually offer today?
• Are there any references to “2022” or outdated promotions?
• Does your About page still reflect who you are and what you do?

Why it matters: Outdated information makes you look out of touch or, worse, out of business. Trust is built on accuracy.

5. The Trust Factor Scan (2 minutes)

Take a step back and look at your site with fresh eyes.

Ask yourself:

• Would I trust this business based on what I’m seeing?
• Are there testimonials or reviews visible?
• Is there proof that you’re a legitimate business (address, real photos, credentials)?
• Does the site look professionally designed, or like it was thrown together in an afternoon?

Why it matters: Your website needs to overcome the skepticism of strangers on the internet. Social proof and professionalism go a long way.

6. The Security & Privacy Check (3 minutes)

Look at your browser’s address bar when you’re on your site. Do you see a little padlock icon next to your URL? Click on it.

What you’re looking for:

• Does it say “Connection is secure” or something reassuring like that?
• Or does it say “Not secure” (which is basically a giant red flag to visitors)?

While you’re thinking about security, ask yourself:

When was the last time you backed up your website? (If the answer is “never” or “I think it does that automatically?”, we need to talk).

Do you have a privacy policy page? Is it actually relevant to your business, or is it generic template text from 2010?
If you collect emails or any customer data, are you complying with privacy laws? (GDPR, CCPA, etc.)

Why it matters: An SSL certificate (that’s what creates the padlock) isn’t just nice to have—Google actually penalizes sites without one in search rankings. Plus, modern browsers will literally warn visitors that your site is “not secure,” which is about as welcoming as a “Beware of Dog” sign on your front door.

As for backups? If your site gets hacked, breaks, or accidentally deleted, a backup is the difference between “minor inconvenience” and “existential business crisis.”

And privacy compliance isn’t just legal CYA—it shows customers you respect their data. Which, you know, people appreciate.

7. The “Behind the Scenes” Maintenance Check (2 minutes)

If you’re using WordPress (and statistically, you probably are), log into your dashboard and look for those little notification bubbles.

Check:

• Are there plugin updates waiting?
• Theme updates?
• WordPress core updates?
• How many updates are we talking? One or two, or is it looking like a software graveyard in there?

Why it matters: Those updates aren’t just about getting shiny new features. They’re often security patches protecting your site from vulnerabilities that hackers love to exploit. Running outdated software is like leaving your back door unlocked because “nobody’s tried to break in yet.”

Plus, sometimes outdated plugins conflict with each other and cause your site to break in weird, mysterious ways. It’s the digital equivalent of your check engine light—ignore it long enough and you’ll end up stranded.

8. The Security Monitoring Reality Check (2 minutes)

This one’s quick: Do you have any idea if someone tried to hack your site last week? Last month? Ever?

Ask yourself:

• Do you have security monitoring in place?
• Would you even know if someone was trying to break in?
• Have you ever checked your site for malware?

Why it matters: Here’s an uncomfortable truth: small business websites get targeted all the time. You might not have state secrets, but hackers don’t care—they want to use your server to send spam, steal customer data, or inject malicious code.

If you don’t have any security monitoring (even basic stuff like Wordfence or Sucuri for WordPress sites), you’re basically hoping for the best. And hope is not a security strategy.