If your business has a website, the five things worth checking today have nothing to do with how it looks.
A website is not a finished object. It is a running service with dependencies, and dependencies expire.
-
Who owns the domain. Not who built the site, but who the registrar actually bills and emails. If that is an ex-contractor's inbox, you do not control your own address, and you will find out on the day it lapses.
-
Whether your contact form actually delivers. Submit it yourself from your phone. Forms break quietly: a mail provider tightens rules, a plugin updates, and the page still says "thank you" while nothing arrives. Nobody reports a form that swallows messages, they just go to a competitor.
-
Who gets the alert when it goes down. Hosting rarely notifies the business owner. If nobody is on that list, your outage lasts as long as the gap until a customer bothers to call you.
-
What is on the update path. Themes, plugins, libraries, code that reaches your site automatically. Most compromises we see are not clever attacks on the site itself: they come through the channel that ships code into it. Know what updates itself and whether anyone reviews it.
-
Whether there is a restore, not just a backup. A backup is a file. A restore is a rehearsed procedure that produces a working site. Until someone has actually restored one, you probably have a file of unknown quality.
None of these are design questions, which is why they rarely get asked. They are ownership questions, and they only have answers if someone's name is attached to each one.
Worth working out which of the five you can answer right now without asking anyone.