Small Business Website Audit Checklist: Benchmarks, Priorities, and What to Do Next

You can find a dozen website audit checklists online. They all tell you to "check your page speed" and "review your meta tags." None of them tell you what score means your site is actually hurting you, which problems to fix before others, or what to do once you have a list of twenty findings and no idea where to start.

This small business website audit checklist is different. It comes from the same methodology we use at Designly when we audit client sites before every project -- specific score thresholds, a severity framework for prioritizing what matters, and a post-audit action plan that most guides skip entirely. If you have already read our breakdown of DIY websites vs. professional web design, this is the natural next step: how to evaluate what you have right now.

Every tool referenced here is free. The whole audit takes two to four hours. By the end, you will know exactly where your site stands -- and what to do about it.

What Does a Website Audit Check For?

A website audit is a structured review of your site across six core areas: performance, SEO, design and user experience, security, accessibility, and content quality. It identifies what is working, what is broken, and what is actively hurting your visibility or driving visitors away.

That is broader than most people expect. A lot of business owners hear "website audit" and think "SEO audit" -- keywords, backlinks, meta tags. But an SEO audit is one piece of a full website audit. A comprehensive audit also checks whether your site loads fast enough to keep visitors, whether it works on mobile, whether it meets accessibility standards, and whether your content is still accurate. For most small businesses, a full audit catches more revenue-impacting issues than an SEO-only review.

Here are the six categories this checklist covers:

1. 1. Performance -- page speed, Core Web Vitals, mobile responsiveness, hosting reliability
2. 2. SEO -- on-page basics, technical SEO, local SEO signals
3. 3. Design and User Experience -- navigation, conversion paths, visual consistency
4. 4. Accessibility -- WCAG 2.1 AA compliance, common failures, legal context
5. 5. Security -- HTTPS, software updates, spam protection
6. 6. Content -- freshness, accuracy, broken links, thin pages

How to Use This Checklist

Each item includes three things: what to check, the free tool to use, and the benchmark that separates "fine" from "fix this now."

Every item also carries a severity level to help you prioritize:

• • Critical -- fix immediately. These issues affect whether visitors can use your site, whether search engines can find it, or whether you have legal exposure.
• • High -- fix within 30 days. These directly affect your search rankings or conversion rate.
• • Medium -- address in your next scheduled update. Real problems, but not bleeding revenue today.
• • Low -- nice-to-have improvements. Fix them when you have capacity.

You do not need technical skills to run this audit. Every tool listed has a free tier, and every check runs from a browser. Set aside two to four hours on a quiet afternoon and you can work through everything in one session.

How Long Does a Website Audit Take?

A website audit takes 30 minutes to two days depending on depth. A quick health check using automated tools takes about 30 minutes. A thorough DIY audit covering all six categories -- the one described in this post -- takes two to four hours for a site with fewer than 20 pages. A professional audit with written recommendations and a remediation roadmap takes one to two days.

Start with the DIY checklist below. If the findings reveal problems you do not know how to fix, that is when a professional audit earns its cost.

Performance Audit Checklist

Performance is the first category for a reason. A slow site loses visitors before they see your design, read your copy, or find your phone number. Google also uses page speed as a ranking signal, so poor performance hits you twice -- fewer visitors arrive, and fewer stay.

Page Speed and Core Web Vitals

What to check: Open Google PageSpeed Insights and enter your homepage URL. Run the test on mobile (the default). Look at three numbers:

• • Largest Contentful Paint (LCP) -- how long until the main content appears. Under 2.5 seconds is good. Over 4 seconds is poor.
• • Cumulative Layout Shift (CLS) -- how much the page jumps around while loading. Under 0.1 is good. Over 0.25 is poor.
• • Interaction to Next Paint (INP) -- how fast the page responds when someone taps or clicks. Under 200ms is good. Over 500ms is poor.

Then check the overall Performance score at the top.

Benchmark: A Performance score of 90-100 is good. 50-89 needs improvement. Below 50 is a problem that is costing you visitors and search visibility right now.

Severity: Critical if your score is below 50. High if 50-74. Medium if 75-89.

For context: at Designly, we treat a 90+ Lighthouse performance score as a deployment requirement, not a goal. Every site ships at 90 or above. In our audits of small business sites, we have seen DIY platform sites (Wix, Squarespace) score between 35 and 55, while custom-built sites we have audited typically score 88-100. That gap is structural -- platform overhead loads scripts your site may never use.

Tool: Google PageSpeed Insights (free). Test your homepage and your most important landing page.

Mobile Responsiveness

What to check: Pull up your website on your phone. Not just the homepage -- check your services page, contact page, and any page with forms or images. Look for:

• • Horizontal scrolling (you should never need to scroll sideways)
• • Text too small to read without zooming
• • Buttons or links too close together to tap accurately (44x44 pixels is the recommended minimum per Apple and Google platform guidelines, though WCAG AA requires at least 24x24 CSS pixels)
• • Images overflowing their containers

Benchmark: Your site should pass with no issues on any modern smartphone. Over 60% of small business website traffic comes from mobile devices. If your site is hard to use on a phone, you are frustrating the majority of your visitors.

Severity: Critical. A site that does not work on mobile is broken for most of your audience.

Tool: Your own phone, plus Google PageSpeed Insights mobile test (which flags mobile usability issues).

Uptime and Hosting Reliability

What to check: Is your site consistently available, or does it go down without you knowing? Also check your Time to First Byte (TTFB) -- how quickly your server responds to a request.

Benchmark: TTFB under 200ms is excellent. Google considers under 800ms acceptable, but anything over 600ms warrants investigation -- your hosting may be holding you back. For uptime, 99.9% availability is the industry standard. That allows about 8 hours and 45 minutes of downtime per year. Anything less, and your visitors are hitting error pages more often than they should.

Severity: High. You cannot convert a visitor who gets a blank page.

Tool: UptimeRobot (free tier monitors every 5 minutes). Google PageSpeed Insights also reports TTFB.

What Is a Good Website Audit Score?

A good website audit score depends on the tool and category you are measuring. Google Lighthouse -- the industry standard -- scores sites on a 0-100 scale across four categories: Performance, Accessibility, Best Practices, and SEO. A site can score 95 on SEO and 40 on Performance at the same time, so one "overall" number rarely tells the full story.

Here are the thresholds that matter:

These scores are independent. A site with a 98 SEO score and a 35 Performance score looks good to a crawler but terrible to a visitor. Both numbers matter.

At Designly, we use Skora -- our audit tool that scores sites across 10 dimensions including design quality and content effectiveness, which Lighthouse does not cover. But Lighthouse is the right starting point for a DIY audit because it is free, Google uses it internally, and it gives you the four scores that affect your search rankings most directly.

SEO Audit Checklist

A fast site that nobody can find is still a problem. SEO is the set of signals that help search engines understand, index, and rank your pages. The good news: the highest-impact SEO fixes for small business sites are also the simplest.

On-Page SEO Basics

What to check: Open your site in a browser and view the page source (right-click, "View Page Source"). For each key page, look for:

• • Title tag -- unique for every page, under 60 characters, includes your primary keyword or service. If your homepage title is just "Home" or your business name with no context, that is a missed opportunity.
• • Meta description -- unique for every page, under 160 characters, describes what the page offers. Google does not always use it, but a strong meta description improves click-through rates from search results.
• • H1 heading -- one per page, unique, describes the page content. Zero H1s or multiple H1s on a single page confuses search engines.
• • Heading hierarchy -- H2s nest under H1, H3s nest under H2s. Skipping levels (H1 straight to H4) makes your page structure unclear.

Benchmark: Every page has a unique title tag and meta description. No page has duplicate or missing H1 tags.

Severity: High. These are table-stakes ranking signals.

Tool: Screaming Frog free tier (crawls up to 500 URLs) gives you a full report of every title, meta description, and heading on your site.

Technical SEO

What to check:

• • XML sitemap -- does your site have one? Is it submitted in Google Search Console? A sitemap helps Google find and index your pages faster.
• • Robots.txt -- visit yourdomain.com/robots.txt. Make sure it is not accidentally blocking search engines from crawling important pages. We have seen small business sites where the robots.txt file blocked the entire site from indexing -- a leftover from development that nobody removed.
• • Broken internal links -- any link on your site that leads to a 404 error page. Every broken link is a dead end for both visitors and search engine crawlers.
• • Redirect chains -- a page that redirects to another page that redirects to a third page. Each hop slows down crawling and dilutes link value. No chain should exceed two hops.

Benchmark: Sitemap submitted in Google Search Console. Zero broken internal links. No redirect chains longer than two hops.

Severity: High for broken links and missing sitemaps. Medium for redirect chains and canonical tag issues.

Tool: Google Search Console (free) for sitemap status and crawl errors. Screaming Frog for broken links and redirects.

Local SEO (for Small Businesses)

If your business serves customers in a specific area, local SEO signals can matter more than general SEO. Most generic audit checklists skip this section entirely -- but for a small business, it is often where the biggest wins hide.

What to check:

• • Google Business Profile -- is it claimed, complete, and accurate? Are your hours, address, phone number, and website URL correct? Do you have at least 5 photos?
• • NAP consistency -- your Name, Address, and Phone number should appear the same way everywhere: your website footer, Google Business Profile, Yelp, Facebook, industry directories. Inconsistencies confuse search engines about which listing is authoritative.
• • Local business schema markup -- structured data on your website that tells search engines your business type, address, hours, and service area. Most DIY sites do not have this. It is one of the few technical SEO tasks that genuinely requires code.

Benchmark: Google Business Profile 100% complete. NAP identical across all listings. Local schema markup present on your site.

Severity: High for any business that depends on local customers.

Tool: Search your business name on Google. Review what appears in the Knowledge Panel. Check your Google Business Profile dashboard for completeness.

Design and User Experience Audit Checklist

Design is subjective, but usability is not. This section focuses on the elements that directly affect whether a visitor takes action -- calls you, fills out a form, makes a purchase -- or leaves.

Navigation and Information Architecture

What to check:

• • Count your primary navigation items. More than 7 top-level links creates decision fatigue before a visitor clicks anything.
• • Can a first-time visitor find your contact information within two clicks from any page?
• • Are there orphan pages -- pages on your site with no links pointing to them? If a page is not linked from your navigation or other pages, visitors cannot find it and search engines may not index it.

Benchmark: 5-7 top-level navigation items. Contact accessible within two clicks. No orphan pages.

Severity: High for missing or buried contact information. Medium for navigation bloat.

Conversion Rate Basics

What to check:

• • Does every key page have a clear call to action? "Contact us," "Get a quote," "Schedule a call" -- something specific that tells the visitor what to do next.
• • Is your phone number or contact form visible above the fold on your most important pages?
• • Do you display trust signals? Testimonials, client logos, credentials, review scores. A visitor who does not trust you will not contact you, no matter how good the design looks.

Benchmark: Every key page has at least one visible call to action and at least one trust signal.

Severity: High. These elements directly affect revenue.

Visual Consistency

What to check:

• • Fonts -- are you using more than 2-3 font families across the site? Inconsistent typography looks unintentional and undermines credibility.
• • Colors -- does your site stick to a defined palette, or do different pages use slightly different shades? Inconsistency signals "this site was built piecemeal."
• • Image quality -- are any images blurry, stretched, or obviously different in style from the rest of the site?

Benchmark: Consistent font families, color palette, and image treatment across all pages.

Severity: Medium -- unless the inconsistency is severe enough to make the site look outdated, in which case it becomes High.

Accessibility Audit Checklist

Most audit checklists mention accessibility as a single bullet point: "make sure your site is accessible." That tells you nothing. Accessibility affects real people, carries real legal exposure, and has specific, testable requirements.

What WCAG 2.1 AA Means for Small Business Owners

WCAG 2.1 AA is the accessibility standard that courts and regulators reference most often in ADA-related web accessibility cases. It is not just for large companies or government sites.

In plain terms, WCAG 2.1 AA requires that your website is usable by people who navigate with a keyboard instead of a mouse, use screen readers to hear content read aloud, have low vision or color blindness, or have motor impairments that make precise clicking difficult. The standard covers things like text contrast, alt text on images, form labels, and keyboard navigation.

Here is the part that catches small business owners off guard: according to UsableNet, over 4,600 ADA-related web accessibility lawsuits were filed in 2023 -- including both federal and state cases. The trend has not slowed. You do not need to panic, but you do need to check.

Severity: Critical for any business with a public-facing website.

Common Accessibility Failures to Check

What to check:

• • Image alt text -- every meaningful image needs a text description. Decorative images should have empty alt attributes (alt=""). Missing alt text is the single most common accessibility failure.
• • Color contrast -- text must have a contrast ratio of at least 4.5:1 against its background for normal-sized text. Light gray text on a white background? That fails.
• • Keyboard navigation -- can you tab through your entire site using only a keyboard? Can you reach every link, button, and form field? Can you tell which element is currently focused?
• • Form labels -- every form field needs a visible label that is programmatically associated with the input. Placeholder text alone does not count.
• • Skip-to-content link -- a hidden link at the top of the page that lets keyboard users skip past the navigation. Most sites do not have one. It takes five minutes to add.

Benchmark: Lighthouse Accessibility score of 90 or above. Zero errors in the WAVE report on your homepage and key landing pages.

Severity: High to Critical depending on the issue. Missing alt text and keyboard traps are Critical. Color contrast issues are High.

Tool: WAVE Web Accessibility Evaluator (free) and the axe browser extension (free). Both flag specific issues with explanations of what is wrong and how to fix it.

Security Audit Checklist

Security problems are invisible until they are not. A compromised site, an expired SSL certificate, or an outdated CMS plugin can cost you visitor trust, search rankings, and in the worst case, your data.

What to check:

• • HTTPS -- does your site load with a padlock icon in the browser address bar? If not, your connection is not encrypted. Google flags non-HTTPS sites with a "Not Secure" warning, and visitors notice.
• • Mixed content -- even if your site has HTTPS, loading images, scripts, or fonts over HTTP creates "mixed content" warnings. Check your browser console (F12 > Console) for these.
• • CMS and plugin updates -- if you use WordPress, Wix, or any platform with plugins, are they all running the latest stable versions? Outdated plugins are the number one attack vector for small business websites.
• • Contact form spam protection -- does your contact form have a CAPTCHA or honeypot field? Without it, you will get dozens of spam submissions per day and may miss real inquiries buried in the noise.
• • Admin URL exposure -- can anyone reach your admin login page by going to yourdomain.com/admin or yourdomain.com/wp-admin? If so, bots are already trying to brute-force your password.

Benchmark: SSL Labs grade of A or A+. No mixed content warnings. All software on current stable versions.

Severity: HTTPS is Critical. Plugin updates are High. Everything else is Medium.

Tool: SSL Labs Server Test (free) for SSL grade. Browser developer console for mixed content warnings. Your CMS dashboard for update status.

Content Audit Checklist

Your content is what visitors actually came for. If it is outdated, thin, or broken, nothing else on this checklist matters as much as you think.

Content Quality and Freshness

What to check:

• • Outdated information -- are your prices still accurate? Does your team page list people who left two years ago? Is the copyright year in your footer still 2024? Outdated content tells visitors (and Google) that nobody is maintaining this site.
• • Thin pages -- any page with fewer than 300 words and no clear purpose (no image gallery, no interactive tool, no form) is likely too thin to rank. It may also dilute your site's overall quality in Google's eyes.
• • Duplicate content -- do any of your pages say roughly the same thing in slightly different words? Common on sites with separate pages for similar services. Google may not know which page to rank, so it picks neither.

Benchmark: All core service pages updated within the last 12 months. No thin pages indexed unless deliberately set to noindex. No significant duplication.

Severity: High for outdated pricing or discontinued services. Medium for general freshness.

Tool: Google Search Console (Coverage report) shows which pages Google has indexed. A manual review catches content issues that automated tools miss.

Broken Links and Orphan Pages

What to check:

• • Broken internal links -- links on your site that lead to 404 error pages. Every one is a dead end for visitors and a crawl waste for search engines.
• • Orphan pages -- pages with no internal links pointing to them. If you cannot reach a page through your site's navigation or from another page, neither can Google. Either link to it or remove it.

Benchmark: Zero broken internal links. Zero orphan pages (unless intentionally unlisted, like thank-you pages).

Severity: High. Broken links compound over time -- one turns into five turns into twenty.

Tool: Screaming Frog free tier crawls your site and flags every broken link and orphan page in one report.

How Often Should You Audit Your Website?

Most small businesses should run a basic website audit once a year and a quick health check quarterly. If your site supports active marketing campaigns, e-commerce transactions, or appointment booking, quarterly comprehensive audits are more appropriate. After major site changes -- a redesign, a CMS migration, a new hosting provider -- always audit immediately.

You do not need to do health checks manually. Set up UptimeRobot for uptime alerts, enable Google Search Console email notifications for crawl errors, and run PageSpeed Insights on your homepage once a month. Five minutes catches the most urgent problems between full audits.

How Much Does a Website Audit Cost?

A professional website audit costs between $500 and $7,500 depending on site size and depth of analysis. A basic audit from a freelancer runs $500-$1,500 and typically covers SEO and performance. A comprehensive agency audit with written recommendations and a prioritized remediation roadmap runs $2,500-$7,500. DIY audits using the free tools in this checklist cost nothing but two to four hours of your time.

The DIY approach catches the most common and most impactful issues. If you run through this checklist and find problems you understand, fix them yourself. If you find problems you cannot explain -- a performance score stuck in the 40s despite no obvious issues, crawl errors you cannot trace -- that is where a professional audit pays for itself.

Designly offers free website audits through Skora, our audit tool that scores sites across 10 dimensions. It will not replace a manual audit, but it gives you an instant benchmark and shows which categories need the most attention.

Can I Audit My Own Website Without Hiring Someone?

Yes. You can audit your own website using the free tools in this checklist -- Google PageSpeed Insights, Google Search Console, WAVE, Screaming Frog, and SSL Labs. A DIY audit catches the most common and impactful issues: slow load times, missing SEO tags, broken links, security gaps, and accessibility failures. No technical background required.

The limitation is scope. A DIY audit identifies what is wrong but does not always reveal why or how to fix it efficiently.

What a DIY audit catches reliably:

• • Performance scores and Core Web Vitals thresholds
• • Missing or duplicate title tags and meta descriptions
• • Broken internal links
• • SSL certificate issues and mixed content
• • Mobile rendering problems
• • Basic accessibility failures (missing alt text, poor contrast)

What is harder to catch without expertise:

• • Root cause of performance issues (server configuration, render-blocking resources, JavaScript bloat)
• • Complex redirect chains and crawl budget problems
• • Schema markup errors and structured data gaps
• • Server-side rendering issues
• • WCAG compliance beyond automated checks (automated tools can only fully test about a third of WCAG success criteria, so many accessibility issues require manual review)

Start with the DIY approach. If you hit a wall -- the numbers are bad but you cannot figure out why -- bring in help. That is not a failure. It is exactly what the DIY approach is designed to reveal.

How to Prioritize What You Fix After an Audit

After a website audit, prioritize fixes by severity and business impact. Start with anything that blocks search engines from crawling your site or creates security vulnerabilities. Then fix issues that directly affect conversions -- slow load times, broken contact forms, missing calls to action. Address content and visual improvements last.

Fix immediately (Critical):

• • Site not loading or returning errors
• • No HTTPS / expired SSL certificate
• • Site not mobile-friendly
• • Major crawl errors blocking indexing
• • Keyboard traps or navigation failures (accessibility)

Fix within 30 days (High):

• • Performance score below 50
• • Missing title tags or meta descriptions on key pages
• • Broken contact form or missing call to action
• • No Google Analytics or Search Console connected
• • Missing image alt text on key pages

Fix within 90 days (Medium):

• • Thin content pages still indexed
• • Inconsistent NAP across business listings
• • Missing local business schema markup
• • Color contrast below 4.5:1 ratio
• • Outdated content (old team members, discontinued services)

Fix when capacity allows (Low):

• • Image compression and format optimization
• • Font and color consistency cleanup
• • Internal link structure improvements
• • Adding a skip-to-content link

When to Fix It Yourself vs. Hire Help

Some audit findings take five minutes. Others take expertise you should not spend a week learning for a one-time fix.

Fix it yourself:

• • Adding alt text to images
• • Updating meta descriptions and title tags
• • Fixing broken links (update or remove)
• • Updating outdated content (prices, team bios, copyright year)
• • Adding your site to Google Search Console
• • Claiming and completing your Google Business Profile

Hire out:

• • Improving a Lighthouse performance score stuck below 50
• • Fixing server configuration or hosting issues
• • Redesigning for mobile responsiveness
• • WCAG remediation at scale
• • Implementing schema markup and structured data
• • Resolving complex redirect chains

If you are on a Designly support subscription, these are the kinds of fixes we handle monthly -- from content updates to performance tuning. If you are not, any qualified developer or agency can work from your audit findings. The checklist gives you the language to describe what is wrong, which makes hiring faster and cheaper.

Frequently Asked Questions

What is the difference between a website audit and an SEO audit?

An SEO audit focuses on search engine ranking factors -- keywords, backlinks, meta tags, and technical crawlability. A website audit is broader: it covers performance, security, design, user experience, accessibility, and content alongside SEO. Most small businesses benefit more from a full website audit because the issues hurting them most -- slow load times, missing contact forms, accessibility gaps -- are not SEO problems. They are website problems.

What are the most common website audit mistakes?

Four mistakes come up repeatedly. First, auditing once and never following up -- your site changes, the web changes, and findings from a year ago may not reflect reality today. Second, treating every finding as equal priority. A missing SSL certificate is not the same severity as a slightly low color contrast ratio. Third, fixing low-priority items first because they are easier while Critical issues keep costing you visitors. Fourth, running automated tools and accepting the numbers without understanding what they mean. A Lighthouse score of 72 is not "pretty good." It means your site is measurably slower than competitors scoring 90+.

Do I need a website audit if my site was just redesigned?

Yes -- a post-launch audit is one of the most valuable audits you can run. Redesigns routinely introduce performance regressions (new design frameworks are heavier than old ones), broken links from URL structure changes, missing redirects from old pages to new ones, and accessibility issues from new visual elements. We audit every site we build before launch for this exact reason. If your developer or agency did not run a post-launch audit, you should.

What Comes Next

A website audit is not a one-time project. It is a practice -- one that keeps your site performing as hard as your business does.

You have the checklist, the benchmarks, and the prioritization framework. If you want to run the audit yourself, every tool listed above is free. Set aside a quiet afternoon, work through each category, and write down your findings.

Want a head start? Run your site through Skora -- our free audit tool that scores your site across 10 dimensions in seconds. It will not replace the full manual audit, but it shows you where you stand and which categories need attention first.

And if the audit reveals problems you do not know how to fix, that is what we do. Designly builds, fixes, and maintains small business websites. We are happy to look at your results and tell you what is worth fixing, what is worth hiring out, and what you can safely ignore.

Photo credits: [Featured] by Luke Chesser on Unsplash, [How to Use This Checklist] by Vitaly Gariev on Unsplash, [Mobile Responsiveness] by dlxmedia.hu on Unsplash, [Local SEO] by ThisisEngineering on Unsplash, [How to Prioritize] by Behnam Norouzi on Unsplash