A simple web audit checklist for DIY Beginners

DIY Web A simple web audit checklist for DIY Beginners
February 18, 2026
Karl Karl
All Articles →

DIY Website Checklist for beginners (Version 1)

Many small business clients and those just getting started out sometimes ask a lot of questions many of which are trivial if you already know but not necessarily impossible to understand and do yourself given a bit of a nudge in the right direction. Usually I'll say give it a try yourself first and if you struggle give me a shout. If anything this will give a basic understanding on what is needed and why.

So here is a DIY checklist that small businesses who run their own website can follow to get a head start, I've tried to keep this as simple as possible for a target audience with minimal experience. This won't make you an expert or put specialists out of a job as this can only scratch the surface but hopefully it will either empower you to perform some of these optimisations yourself or at least help you build a vocabulary you can discuss with specialists so they don't need to rip you off.

This is by no means comprehensive, I'd encourage users to do some additional follow up research but the aim here is to take it one step at a time one section at a time!

Try your best to follow along a few at a time, maybe start with the low effort / easy ones in one category and go from there, if you get stuck take a break and come back later and try again. If you still struggle, feel overwhelmed or simply just can't be arsed head over to our contact page and drop us a message via our contact page :) Downloadable spreadsheet near the bottom of this article.

With any of these measures I'd say keeping a backup copy before making changes so you can always roll back if it's not working out or you make a mistake!

Seo Checklist

SEO

SEO Checklist

CheckWhy this mattersHow to check thisHow to remediate / applyEffortImpact
Page is indexed by GoogleUnindexed pages cannot rank or receive organic traffic**Search site:yourdomain.com/page-url or use GSC "URL Inspection"Remove noindex tags, fix blocked URLs, or request indexing in GSCLowHigh
Unique page titlesPrevents keyword cannibalisation and improves rankingsOpen multiple pages and compare browser tab titles (hover over the tab or right click the page view source, look for <title>)Write unique, keyword-focused titles (under 60 chars)LowHigh
Meta descriptions presentImproves click-through rate from search resultsView page source (right click view source) or SEO browser extensionAdd concise summaries (140–155 chars) with a Call to ActionLowMedium
One H1 per pageHelps search engines understand main topic hierarchyInspect page headings using browser dev tools (right click inspect page or similar)Ensure a single clear H1; move secondary titles to H2 or H3LowMedium
Clean, readable URLsClear URLs improve crawlability and user trustLook at address barUse hyphens; remove IDs, symbols, and "stop words"MediumMedium
Sitemap exists and submittedHelps search engines find all pages, including deep onesCheck /sitemap.xml or Search Console (Also can view page source and look for sitemap as it may be a different address e.g. /sitemap_index.xml)Generate sitemap via CMS or plugin and submit to GSCLowHigh QUICK WIN
Robots.txt not blocking pagesAccidental blocks can remove site from searchVisit /robots.txtRemove incorrect Disallow rules blocking core content or CSSLowHigh QUICK WIN
Internal links existDistributes "link equity" and helps crawlers find pagesUse GSC "Links" report to find "Orphan Pages"Add contextual links between related pagesMediumMedium
Image alt text presentImproves accessibility and image search rankingRight-click image → Inspect → alt attributeAdd descriptive alt text to images (avoid keyword stuffing)LowMedium

A word on SEO

SEO isn't just something that you have or do not. Even with the best SEO in the world you are not guaranteed visitors. Be aware of competition for your keywords and user intent based on their searches. There's a lot of misinformation regarding SEO on the web and many older techniques that are no longer relevant. Ultimately you can't force Google (or other search engines) crawlers to do anything you can request crawls, and provide hints for the search engines and guide them. Do focus on local search as competion will be smaller and your potential audience will be more accessible and relevant. I encourage further reading on this subject but take any information with a pinch of salt.

Old McDonald had a farm AEO SEO GEO

While Answer Engine Optimization (AEO) and Generative Engine Optimization (GEO) are evolving fields, they are largely extensions of high-quality SEO, they are also out of scope of this article, if you're following the best principles to building your content well for humans, you should be already headed in the right direction but if you're not discoverable to begin with the optimisation is moot. Feel free to read up on AEO and GEO and decide for yourself if they're just a subset of SEO or not.

The SEO Toolkit (If you're feeling brave)

ToolBest ForCostWhy use it?
Google Search ConsolePerformance & IndexingFreeThe "source of truth" for how Google sees your site and any crawl errors.
Screaming Frog SEO SpiderTechnical AuditsFree/PaidAn industry-standard "crawler" that finds broken links and missing meta data.
Semrush / AhrefsKeywords & CompetitorsPaidPowerful "Swiss Army knives" for seeing what keywords your competitors rank for.
Google PageSpeed InsightsSpeed & UXFreeChecks your "Core Web Vitals" to ensure your site isn't too slow for users.
AnswerThePublicContent IdeationFree/PaidVisualizes the actual questions people type into Google to help you plan posts.
Surfer SEO / ClearscopeContent OptimizationPaidUses AI to tell you exactly which terms to include in a post to help it rank.

For those just starting out, Google Search Console and the free version of Screaming Frog are the ultimate "power couple," providing almost all the technical insights you need without costing a penny.

Further Reading

Performance Checklist

Performance

Performance Checklist

CheckWhy this mattersHow to check thisHow to remediate / applyEffortImpact
LCP under 2.5sLargest Contentful Paint measures perceived load speedPageSpeed Insights → LCP metricOptimize hero images, use a CDN, and prioritize critical CSSMediumHigh
INP under 200msInteraction to Next Paint is the 2026 standard for responsivenessGSC → Core Web Vitals → INPDefer non-critical JS, minify scripts, and use web workersHighHigh
Text compression (Brotli)Reduces the "weight" of HTML, CSS, and JS filesPageSpeed → "Enable text compression"Enable Brotli (preferred) or Gzip via server or CDNLowHigh QUICK WIN
HTTP/2 or HTTP/3 enabledFaster parallel asset loading and zero round-trip (0-RTT)WebPageTest → ProtocolEnable via hosting provider or CDN (e.g., Cloudflare)LowHigh
Lazy loading enabledPrevents loading off-screen images until neededInspect <img> tags for loading="lazy"Add loading="lazy" attribute to all non-hero imagesLowHigh QUICK WIN
No self-hosted videoLarge video files stall page loading and eat bandwidthCheck if videos are hosted on your own serverUse YouTube, Vimeo, or a dedicated video CDN for embedsLowHigh
Modern image formatsAVIF and WebP are significantly lighter than JPEG/PNGPageSpeed → "Efficiently encode images"Convert images to AVIF; use <picture> tags for fallbacksLowMedium QUICK WIN
Browser caching enabledReturning visitors load pages significantly fasterPageSpeed Insights → Caching warningsSet Cache-Control headers via server (.htaccess/nginx)LowMedium
Eliminate render-blockingPrevents the "blank screen" while CSS/JS loadsPageSpeed → "Eliminate render-blocking resources"Inline critical CSS; use defer or async on script tagsMediumHigh
Layout stability (CLS < 0.1)Cumulative Layout Shift prevents frustrating "page jumps"PageSpeed → CLS scoreSet explicit width/height on images and ad containersMediumMedium

A word on Performance

In 2026, "fast enough" is no longer a fixed number; it’s about responsiveness. With the replacement of FID with INP (Interaction to Next Paint), Google now measures how quickly your site reacts when a user actually clicks something, not just how fast the pixels appear.

Don't fall into the trap of "plugin bloat"—every "speed-up" plugin you add can ironically slow you down by adding more JavaScript. Start with the basics: high-quality hosting, HTTP/3 protocol, and a solid CDN. If your server is slow, no amount of front-end optimisation can save the user experience.

Performance Toolkit

ToolBest ForCost
PageSpeed InsightsComprehensive Google-official lab and field dataFree
WebPageTestAdvanced "waterfall" charts and multi-location testingFree/Paid
Squoosh.appManual one-off image compression (AVIF/WebP)Free
DebugBearMonitoring Core Web Vitals and INP over timePaid

Further Reading

Security Checklist

Security

Security Checklist

CheckWhy this mattersHow to check thisHow to remediate / applyEffortImpact
HTTPS enforcedPrevents data interception; required by browsersVisit http:// version of siteForce HTTPS redirect in hosting or CMSLowHigh QUICK WIN
Valid SSL certificateInvalid certs scare users and break trustBrowser lock icon or SSL LabsRenew or install SSL certificate (e.g., Let's Encrypt)LowHigh
Sensitive files blockedExposed configs (.env, .git) leak credentialsTry visiting /​.env or /​.gitBlock via server rules (.htaccess/nginx)LowHigh QUICK WIN
Admin area protectedPrevents brute-force attacksIf you have a CMS or visit /admin,/login or /wp-login for example. If your site is static this will likley not apply.Add strong passwords and 2FAMediumHigh
Software up to dateOutdated software is the #1 hack vectorCheck CMS/plugin versionsEnable auto-updates for security patchesLowHigh QUICK WIN
No mixed contentMixed HTTP/HTTPS assets break the secure padlockBrowser console warningsReplace HTTP asset links with HTTPS versionsLowMedium
Automated BackupsThe only "undo" button for a total site compromiseCheck for recent backups in hosting/CMSSchedule daily off-site backupsMediumHigh
Principle of Least PrivilegeReduces damage if one account is compromisedReview User/Admin listDelete old users; only give "Admin" to those who need itLowMedium

A word on Security

Security is not a "once and done" task—it is a continuous practice of reducing your attack surface. Most hacks aren't targeted strikes; they are automated bots looking for the easiest possible door to kick in. By keeping your software updated and enforcing Two-Factor Authentication (2FA), you essentially move your site to a "safer neighborhood."

For those looking to go further, a Content Security Policy (CSP) is a powerful way to prevent cross-site scripting (XSS) by telling the browser exactly which scripts are allowed to run. However, it can be incredibly tedious for beginners to configure correctly and often breaks legitimate tools like analytics or video embeds. It is worth investigating once your fundamentals are solid, but handle it with care.

Security is a huge landscape that is ever growing as new threats and vulverabilities are discovered, especially with the rise of vibe coding. Depending on your industry and purpose of your business, site, application you may require more extensive security auditing in which case a DIY approach may not be the best and you may have additional compliance requirements. Get in touch with us if you believe this to be the case and we can either assist or connect you with suitable specialist security professionals.

Security Toolkit

ToolBest ForCost
Qualys SSL LabsDeep analysis of your SSL certificate healthFree
Google CSP EvaluatorChecking the strength of your Content Security PolicyFree
Have I Been PwnedChecking if your admin email has been leakedFree
Wordfence / SucuriReal-time firewall and malware scanningFree/Paid
UpdraftPlus / VaultPressManaging automated off-site backupsFree/Paid

Further Reading

UI / UX Checklist

User Interface & User Experience

UI / UX Checklist

CheckWhy this mattersHow to check thisHow to remediate / applyEffortImpact
Purpose clear in 5sUsers leave if they don't understand the value immediatelyLoad homepage and perform a "squint test"Rewrite the H1 headline to state exactly what you doMediumHigh
Mobile-friendly60%+ of traffic is mobile; Google uses mobile-only indexingUse GSC "Mobile Usability" or test on a real phoneUse a responsive theme; ensure no horizontal scrollingLowHigh
Touch targets (44px+)Thumbs are less precise than mice; tiny buttons frustrateTry clicking buttons on a mobile deviceIncrease button size and add padding between linksLowHigh QUICK WIN
Accessible contrast1 in 12 men are colorblind; low contrast is unreadableCheck with WebAIM Contrast CheckerEnsure text-to-background ratio is at least 4.5:1LowMedium
Clear NavigationConfused users don't convertAsk a friend to find a specific page in <10sUse plain-language labels (e.g., "Pricing" vs "Investment")MediumHigh
Legible TypographyTiny or thin fonts cause eye strain and high bounce ratesCheck if body text is at least 16px-18pxIncrease font size and use a line-height of 1.5–1.7LowMedium QUICK WIN
Visual HierarchyGuides the user's eye to the most important actionIdentify the "loudest" element on the pageUse size and color to make your primary CTA button popMediumMedium

A word on UI/UX

In 2026, great design isn't about how your site "looks"—it's about how it functions for the user. Modern UX is heavily focused on Accessibility. If a user with a visual impairment or a motor disability can't navigate your site, you aren't just being exclusive; you're losing a massive portion of your potential audience and hurting your SEO.

Keep it simple. White space is your friend. Don't try to be clever with navigation or icons that nobody recognises. A user should never have to "think" about how to use your website; it should feel like an invisible slide leading them directly to the information or product they need.

UI / UX Toolkit

ToolBest ForCost
Hotjar / ClarityVisualizing where users click and "rage-click"Free/Paid
WebAIM Contrast CheckerEnsuring your colours are accessible to all usersFree
UizardAI-powered wireframing for non-designersFree/Paid
FigmaThe industry standard for mockups and design systemsFree/Paid

Further Reading

This isnt a checklist!! I can't use this!

Yep, theres a lot of supporting information interspersed between, the attachment below can be used as a checklist with each category it's own sheet and checkboxes and notes columns for your convenience.

Give it a go and see how many of these items you can check off! Feel free to use it as a template and add your own to the list from your own research & discovery.

websitechecklistv1.xlsx

Document/Spreadsheet

Download

Part 2 coming soon

I wanted to keep this bite sized but these lists have already gotten quite long while still only touching the surface, if you've managed to get through all of the points above or at least considered them, stay tuned for part 2 where I'll list further metrics, checks and improvemnts you can apply and perhaps go more indepth into some of the measures.

Possible future guides

If it is of any help at all, I may further expand this guide to some of the following, in the meantime you can use the below as search phrases or prompts for your favourite LLM:

  • How to read, understand & action Google Page Speed Insights
  • Setting up redirects for SEO the right way
  • How to [Any of the checklist items above] in detail

Let me know if any of these guides would be of help!

Share this article

Spread the knowledge with your network

← Back to Articles