
Tech
11 min read

Most businesses know their website is due a proper look. They just keep putting it off. Mid-2026 is actually a practical time to do it, before the end-of-year rush and with enough runway to fix anything serious before 2027.
A website that worked fine two or three years ago may be quietly losing you traffic, leads, and revenue right now, not because it broke, but because the standards moved and the site did not. Google's Core Web Vitals thresholds tightened. Mobile traffic now accounts for more than 60% of searches. Security vulnerabilities have multiplied. And AI search engines are changing which content gets found and how.
This is not a technical checklist for developers. It is a plain-language guide for business owners and marketing managers who want to know what a proper website health check actually covers and what to do with the results.
Here is a number worth sitting with: 53% of mobile visitors leave a page that takes over three seconds to load. And that is just speed, one dimension of a website health check that most businesses have never formally reviewed. Meanwhile, emerging website security threats are targeting business sites at a scale that most owners do not expect until something actually goes wrong.
The case for auditing before 2027 specifically is straightforward. Google's algorithm has continued evolving through 2025 and 2026. The metric INP (Interaction to Next Paint) officially replaced FID as a Core Web Vital, meaning sites being measured against the old metric may not even know they are failing the new one. AI Overviews in Google Search are now returning structured content from websites directly, which means sites with poor schema markup are getting bypassed even when they rank. And accessibility compliance requirements in the UK are tightening. A site that clears the bar today may not clear it next year.
Speed is the foundation. Everything else builds on whether the page loads before the visitor loses patience. The 2026 targets to know are: LCP (Largest Contentful Paint) under 2.5 seconds, INP (Interaction to Next Paint) under 200ms, and CLS (Cumulative Layout Shift) below 0.1. These are not aspirational, they are Google's thresholds for what counts as a "good" page experience, and they affect both rankings and conversion.
Check your site through Google PageSpeed Insights and the Core Web Vitals report in Google Search Console. Drive all metrics that are in amber or red to green. Typical solutions are image compression and next-gen formats(WebP), elimination of render-blocking scripts and proper caching. If you are on shared hosting, which is a bottleneck, managing high-volume website traffic starts with infrastructure choices not your code.
More than 60% of web traffic now passes through mobile. Google will index the mobile version of your site first and not the desktop one. So if you set your site up several years back with a responsive design and haven't looked since, it might be worth running the Mobile-Friendly Test from Google and trying your site out on a phone.
Accessibility issues that tend to "appear" from time to time on older sites that were responsive: text that is fine for the screen, but too tiny for a finger, tap targets (buttons, clickable links) that are too close together, forms that are fine on desktop but die on mobile, images that travel outside the view ports or appear distorted. These all aren't picked up as errors on Google Search Console you just present silently to the visitor causing a barrier to conversion.
A website technical audit looks at how search engines crawl and index your site, which is a prerequisite for anything else you do with SEO. The key things to check:
A basic technical audit on a site under 100 pages takes around four to eight hours to do properly. Larger sites take considerably longer. Dotsquares' website development services include technical audits as part of development engagements, useful if the audit is going to lead to a rebuild or significant update anyway.
This isn't me trying to cause unnecessary fear, it's merely the state of having a CMS-based site that isn't regularly updated or being monitored. Examples of what often go wrong are the existence of old plugin versions with exploited flaws, a weak admin password not being coupled with a two-factor authentication, lack of a Web Application Firewall, and absence of security headers.
A website security check should ensure: HTTPS has been properly configured throughout the site, all software (CMS plugins themes) is up to date, admin access is correctly restricted, there is a backup, that has been tested and can be restored, and a monitoring tool that is looking out for unusual behavior. The financial impact that could arise from a security incident, such as losing time data reputation, and potential legal exposure under UK GDPR, is usually quite a bit greater than the cost of prevention. In case of a Drupal based site, it's recommended that the site be managed and security updated by a Drupal Developer who's knowledge includes familiarity with Drupal's security issue announcement and advisory procedures.
A website SEO audit in 2026 covers more ground than it did two or three years ago. The standard elements still matter: title tags, meta descriptions, header structure, keyword targeting, internal linking. But two areas have become significantly more important.
First, AI search readiness. Google AI Overviews and tools like ChatGPT and Perplexity are increasingly the first point of contact between a user's question and your content. Sites with clear structured data, answer-first content formats, and proper schema markup are being cited in these responses. Sites without them are not, even when they rank in traditional search.
Second, content quality and freshness. Thin pages, outdated statistics, and content that does not fully answer the query it is targeting are all being deprioritised more aggressively in 2026. If your service pages or blog content were written two or three years ago and have not been touched since, they need a review.
WCAG 2.2 accessibility compliance is increasingly a legal expectation for UK businesses, not just a best practice. Beyond compliance, accessibility issues tend to overlap with UX problems that affect everyone: poor colour contrast hurts people in bright sunlight on a phone, keyboard navigation is essential for power users, and properly labelled form fields help all users, not just those using assistive technology.
An accessibility check should cover colour contrast ratios, keyboard navigation through the whole site, image alt text, focus states on interactive elements, form labels, and whether the site works without CSS or JavaScript for critical functions. Tools like WAVE or Lighthouse's accessibility audit give a starting point, but they do not catch everything; a manual review by someone who actually uses a screen reader finds things automated tools miss.
This one gets missed more often than it should. Forms break. Tracking tags fire on the wrong pages or stop firing entirely after a site update. Email notifications from contact forms go to inboxes that nobody monitors. CRM integrations that were set up years ago quietly stop passing data through.
Go through every form on the site and actually submit a test entry. Check that the confirmation message shows, the email notification arrives at the right inbox, and the submission appears wherever it is supposed to, CRM, spreadsheet, email platform. Then check Google Tag Manager or your tag setup to confirm conversion events are still firing correctly. If you do not know what is being tracked or where the data goes, that is itself a problem worth addressing before 2027.
These seven checks cover the technical and performance foundations. The remaining three, content freshness, competitor benchmarking, and infrastructure review, are covered in a full audit but depend on the specifics of your business and site. If you want a structured approach to all ten, a professional audit brings them together as a prioritised action plan rather than a list of individual findings.
Probably one of the key results of a detailed website audit checklist check-up has been to be presented with a varied scenario: some issues that require immediate fixing, some that will need looking into during the next few months and others that are actually already in a great state. The main task which follows the audit is to sort things out logically, rather than to give up and run wild.
The order of the fixes would be this: first of all, any security problems as they really must not be neglected. Then technical issues that result in problems with indexing or lead to user experience failures. After that, Core Web Vitals if there are any issues. Next come SEO and the improvement of content, and finally, accessibility and tracking. Matters that involve substantial development, like platform migration, template rebuild, or structural site changes, should not be tackled when they become the top priority, but instead when there is still an opportunity to have a proper discussion of their scope.
One way of predicting website development costs for the year 2026 is through identifying what the different levels of fixes require. Some fixes are simple and can be executed without any hassle. Other issues are serious ones that involve planning, budgeting, and having the right people on board.
In case the audit shows that the site has been around for more than five years, uses an unsupported platform, has performance issues, and a rebuild is the only way to get things under control, the discussion would change from the aspect of maintenance to the one of the replacement of the entire website. Collaborating with a website development agency that is able to carry out both audits and any of what comes next work guarantees that the discovered problems will be translated into a remediation plan, rather than having to start over with a new team that hasn't yet familiarised themselves with all the problems of the site.
A full website health check covers speed and Core Web Vitals, mobile responsiveness, technical SEO (crawling, indexing, schema), security vulnerabilities, on-page SEO, accessibility, user experience, forms and tracking, content quality, and infrastructure. The depth of each area depends on the size and complexity of the site, a 10-page brochure site and a 500-page ecommerce site need different levels of attention in each category.
A comprehensive audit once a year is a sensible baseline for most business sites. Core Web Vitals and security monitoring should be continuous, not reviewed annually. Sites that publish content regularly or run ecommerce should audit SEO performance quarterly. After any significant site update, a focused technical review should happen regardless of the annual cycle.
A website technical audit covers crawlability and indexation status, HTTPS configuration and mixed content, site speed and Core Web Vitals, duplicate content and canonical tag issues, URL structure, internal linking, XML sitemap health, schema markup validity, and mobile compatibility. It is distinct from an SEO content audit, technical issues affect whether search engines can access and understand the site at all, which is a prerequisite for ranking.
Start with the basics: confirm everything loads over HTTPS, check that all CMS software and plugins are on their current versions, test admin credentials and access controls, verify backups are running and restorable, and run a malware scan using a tool like Sucuri SiteCheck. For a thorough website security check, a security-focused developer should also review server configuration, security headers, user permissions, and any third-party integrations that handle personal data.
A rebuild makes sense when: the site is more than five years old and cannot be updated to meet current performance or security standards without essentially rewriting it, the platform is unsupported or at end-of-life, Core Web Vitals failures cannot be resolved within the existing architecture, or the site is so far behind current mobile and accessibility standards that incremental fixes would cost more than a structured rebuild. A Dotsquares technical review can clarify whether remediation or replacement is the more practical path for your specific situation.
Dotsquares provides professional website audits and remediation services for UK businesses, covering technical SEO, performance, security, and accessibility. Whether you need a focused health check or a full ecommerce website development project off the back of it, our team handles both.
Review the key areas of a website health check, from speed and SEO to security, accessibility, lead tracking and technical performance before 2027.
Keep ReadingDiscover how Zoho CRM for financial Services streamlines client management,and portfolio tracking. Get expert Zoho CRM development.
Keep ReadingDiscover how AI and ServiceNow ITOM help reduce alert overload, support root cause analysis, improve CMDB insights and enable proactive IT operations.
Keep Reading