How often should a small-business website be updated?

How often should you update your small-business website? Short version: in small ways, often, rather than big ways, rarely.

A small-business website needs three layers of updating: security and software patches the moment they’re released, content and offers reviewed every few weeks, and a full design, copy and SEO review once a year. A site that’s gone two years untouched is the digital version of a shop with a faded sign and last summer’s poster still in the window.

The mistake most owners make is treating a website as a one-off project. You build it, you launch it, you forget it. But a website is more like a van than a leaflet: it keeps running, and it needs servicing.

The three things that need updating (and how often)

There isn’t one answer, because a website isn’t one thing. Split it into three jobs and the cadence becomes obvious. Security needs patching the day a fix lands. Content needs a look every few weeks. The whole site needs a proper review once a year.

What actually needs changing on a small site

Most owners freeze here because “update the website” sounds like a big project. It isn’t. It’s a short list of small things, and most weeks you’ll touch none of them.

Worth a regular check: your prices and packages, opening hours (especially around bank holidays), staff or team changes, new services you’ve started offering, any seasonal promotion, and the copyright year in the footer. That last one’s tiny, but a ”© 2023” tells a sharp-eyed visitor nobody’s been near the site in a while.

Security patches: the update you can’t skip

This is the one that bites silently. Unpatched software is how the overwhelming majority of small sites get hacked, and they’re rarely targeted on purpose. Automated bots scan the whole web for known holes and walk straight through the ones left open.

A hacked site can be defaced, used to send spam, or quietly injected with links that get you flagged by Google. Often you won’t know until a customer tells you, or your site vanishes from search. Apply critical patches within a day or two. If you don’t want to track this yourself, it’s exactly the kind of thing a managed service handles in the background, alongside regular backups so a bad update can always be rolled back.

Content updates: fresh enough to stay accurate

You don’t need to publish constantly. You need your information to be true. There’s a difference, and chasing the wrong one wastes a lot of effort.

Accuracy first: anything a customer relies on must be current. After that, fresh content (a blog post, a new project, an updated service page) gives Google a reason to come back and check you out. It’s not magic, but a site that grows beats one frozen in time. If you’re weighing whether regular content is worth it at all, that’s its own decision, covered in do I need a blog for my business.

What a sensible year actually looks like

To make this concrete, here’s a realistic schedule for a busy owner who isn’t going to babysit a website. Most of it takes minutes, and whole months go by where you touch nothing.

Set a recurring fifteen-minute slot on the first of each month. Open the site on your phone, read it as a stranger would, and check three things: are the prices and packages still right, are the opening hours correct (especially around a bank holiday), and does anything look broken? That’s the monthly job done.

Every three months, do a slightly longer pass. Add one fresh thing: a recent project, a new review, a short post answering a question customers keep asking. This is what gives Google a reason to come back and keeps the site from feeling frozen.

Once a year, block out an afternoon for the proper review. Be honest about the design, the photos and the copy. Does it still describe what the business does now, not what it did three years ago? Update the bits that have drifted.

Security sits outside this rhythm because it can’t wait for a calendar slot. When a critical patch lands, it goes on within a day or two, full stop. That’s the one piece most worth handing to someone who watches for it daily.

Common mistakes owners make

The first is the big-bang rebuild trap: ignoring the site for three years, then paying for a full rebuild because it’s too far gone to fix. Little-and-often is far cheaper than that cycle, and it spares you the disruption.

The second is fiddling for the sake of it. Some owners swing the other way, tinkering with fonts and layouts weekly while the boiler-repair page still lists last year’s prices. Accuracy beats restyling every time. A correct, plain page outperforms a pretty, wrong one.

The third is forgetting the dull stuff: the contact form nobody’s tested in a year, the booking link that quietly broke, the email address that bounces. These cost you real enquiries and you’d never know. Click your own contact form once a month and actually send the test.

When little-and-often turns into “time to rebuild”

Regular updates buy you years. But eventually a site reaches the point where patching it is putting fresh paint on a tired frame. The signs: it’s slow on mobile, the design clearly belongs to a previous era, or it simply can’t do something you now need, like online booking or payments.

If two or three of those ring true, it’s a rebuild conversation, not an update one. Signs your website needs a rebuild goes through the full checklist.

The honest gut check

Be honest about whether you’ll actually do this. Most owners mean to, then the day job swallows the time, and the site drifts. If yours is already a year or two out of date, that’s your answer: either block out a recurring hour for it, or hand the upkeep to someone who’ll do it without being asked. Our plans bundle security, backups and ongoing updates so it’s simply handled, you can see what’s covered on the pricing page. Either way, the rule holds: little and often beats big and rarely, every time.