Most small business website checklists are written by people who have never had to explain to a client why their contact form stopped working three days after launch. This one comes from seven years of building small business websites across the US, UK, and Switzerland — which means it includes the things that only show up after you have done this enough times to know where the gaps are.
We have structured it in build order, not alphabetical order. That distinction matters: if you tick the SEO boxes before the content boxes, you are optimising a page that is not finished yet.
Foundation: what every small business website must have before launch
The foundation layer is not glamorous. It is also the layer that most affordable web design conversations skip entirely in favour of talking about colour palettes and fonts. A site can look exceptional and still fail every check below — and when it does, no amount of good design rescues it.
- SSL certificate active and forcing HTTPSEvery browser flags an HTTP site as “Not Secure.” Google confirmed HTTPS as a ranking signal in 2014 and has strengthened that weighting since. There is no legitimate reason to launch without it.
- Domain email configured (yourname@yourdomain.com)A contact form that sends from a Gmail address loses 23% of enquiries to spam filters, in our experience. It also signals that the business is not established.
- 404 error page customised and helpfulA default server 404 page tells the visitor nothing. A custom one keeps them on-site and sends them somewhere useful. It takes 20 minutes to set up and is almost never done.
- All forms tested across devices (contact, quote, booking)Test on iOS Safari and Android Chrome specifically, not just desktop Chrome. Mobile form submissions break in ways that desktop testing will not reveal.
- Privacy policy and cookie consent compliant with your jurisdictionFor UK sites: PECR and UK GDPR. For Swiss sites: nDSG. For US sites serving EU or UK visitors: still GDPR-scoped. Non-compliance is a fine risk, not a technicality.
- Backup system active before go-liveNot a plugin installed. A backup that has been tested and verified to restore. Most hosting backups exist but have never been tested — which means you do not actually know if they work.
Performance: the technical checklist that separates functional from forgettable
Google’s Core Web Vitals became a confirmed ranking factor in 2021. Since March 2024, Interaction to Next Paint (INP) replaced First Input Delay as the responsiveness signal. If your site was built and optimised before that date and has not been revisited, it may be failing a metric it was never tested against. Run PageSpeed Insights on your live URL — not on localhost, and not after disabling your plugins — before you tick any of these.
- Largest Contentful Paint (LCP) under 2.5 secondsLCP measures how quickly the main content of a page loads. The most common culprit for slow LCP on WordPress sites is an unoptimised hero image. Compress and convert to WebP, serve from CDN.
- Cumulative Layout Shift (CLS) below 0.1CLS measures visual stability — elements jumping around as the page loads. Font loading without size declarations and ads loading dynamically are the two most common causes.
- Interaction to Next Paint (INP) under 200msINP measures responsiveness to user interactions. Heavy JavaScript loading synchronously — including many form plugins, chat widgets, and sliders — is the primary cause of poor INP on small business sites.
- Images served in next-gen format (WebP or AVIF)JPEG is about 60% larger than WebP for equivalent quality. On a site with 15 images, that is often 1–2MB of unnecessary payload on every page load.
- Mobile layout tested on real devices, not browser emulationChrome DevTools’ device emulation is useful but not complete. Touch target sizes, font rendering, and fixed-position elements all behave differently on actual hardware.
- Caching configured at server and browser levelLiteSpeed Cache, WP Rocket, or equivalent. Without caching, every page load triggers a fresh PHP and database query — which, on shared hosting, can add 800ms to TTFB before a single asset is delivered.
Content: what you actually need on each page
Content is the checklist item most clients want to skip and revisit later. The problem with later is that Google indexes thin pages quickly and does not always re-index substantially improved ones promptly. Starting with complete pages takes more time at launch; it avoids months of trying to recover from a thin-content penalty that was entirely preventable.
- Homepage: clear above-the-fold statement of who you serve and what you doNot a tagline. A sentence that a first-time visitor can read in under five seconds and know whether they are in the right place. “Award-winning creative solutions” fails this test. “WordPress websites for independent law firms in the UK” passes it.
- Services or products pages: one URL per offering, not a catch-all pageA single services page with five services listed is invisible to Google for four of them. Individual pages allow individual keyword targeting, individual internal linking, and individual performance tracking.
- About page: real people, real story, real evidence of expertiseAbout pages are the second most visited page on most small business sites. A page that says “we are passionate about delivering results” converts at a fraction of the rate of one with a founder photo, a real origin story, and specific credentials.
- Contact page: physical address (if applicable), phone, email, and a formThree contact methods minimum. Many visitors will not use the form — they want the option of calling. Hiding the phone number behind “contact us” creates unnecessary friction.
- At least one social proof element per service page (review, case study, testimonial)A service page without evidence is a claims page. Trust comes from proof, not description.
SEO: what gets configured at build time, not after
There are two schools of thought on when to do SEO: before launch and after launch. After-launch SEO treats search visibility as a retrofit. Before-launch SEO treats it as structural. We are firmly in the second camp — not because it is theoretically cleaner, but because retrofitting SEO onto a site that was built without it typically requires rewriting URLs, restructuring page hierarchies, and rewriting meta across dozens of pages. That work takes longer and costs more than doing it right the first time.
- XML sitemap submitted to Google Search Console and Bing Webmaster ToolsAn XML sitemap tells search engines which pages to index and at what priority. Without one, Google discovers your site by crawling links — which may mean some pages are never indexed.
- Robots.txt checked — staging environment not blocking live siteThe most common SEO mistake we see on newly launched sites: a development site with robots.txt set to block all crawlers, copied to production without being updated. The site looks live but is invisible to Google.
- Title tags unique and under 60 characters on every pageDuplicate title tags are a signal that the site was built without SEO consideration. Every page should have a unique, descriptive title that includes its primary keyword.
- Meta descriptions written on all key pagesMeta descriptions do not directly affect ranking, but they affect click-through rate from the SERP. A well-written meta description on a position-four result can out-click a position-two result with a default or missing description.
- Google Business Profile claimed and linked to the websiteFor any business with a physical location or a defined service area, a verified GBP is non-negotiable for local search visibility. The link between GBP and the website is a trust signal for both.
- Schema markup added for business type, location, and reviewsLocalBusiness schema, with address, phone, and opening hours, helps Google surface your business in knowledge panels and local pack results with accurate structured data.
What to do after you tick every box
A complete checklist at launch is a starting point, not a destination. The sites that compound over time are the ones that treat launch as month one of an ongoing programme rather than the finish line. Month one should include connecting Google Analytics 4 (not Universal Analytics — that is dead), verifying GSC data is flowing, and making your first round of content decisions based on what the site is actually being found for.
If you are building a new site and want a partner who treats this checklist as a minimum standard rather than a stretch goal, see our affordable web design for small businesses — every project we deliver is checked against this list before handover. And if visibility is the gap, our affordable SEO services for small businesses pick up exactly where the launch checklist ends.
Once your checklist is complete, the next question is how the build actually unfolds. See our web design process for small businesses for a stage-by-stage breakdown. For getting traffic after launch, our affordable SEO services for small businesses pick up where this checklist ends.
What pages does a small business website actually need?
Most small business owners build too many pages, not too few. They create an About, Services, FAQ, Blog, Team, Testimonials, and Resources page — and most of them are thin enough to work against SEO rather than for it. Our working rule after seven years: start with five pages maximum. Every page added after that should answer a specific customer question no existing page addresses.
How much does a small business website cost?
In 2026 the honest range is zero (a DIY Wix build) to $50,000+ (custom e-commerce with integrations). That spread is useless for planning. The range that applies to a professionally built five-to-eight page small business site: DIY builders cost $17-45 per month as an ongoing subscription. Freelancers from Fiverr or Upwork: $300-1,500, with significant quality variance. Specialist small business agencies: $1,500-6,000 — this is where the economics work for most small businesses. The number almost every quote misses: the cost of doing it twice. A cheap first site that fails to convert or rank, followed by a proper rebuild 18 months later, costs more in total than a well-specified build from the start.
Already have a website? Use this checklist differently
Everything above is written for a new build. Auditing an existing site changes the priority order. Start with performance: run PageSpeed Insights and pull Core Web Vitals from Google Search Console — real-user data, not Lighthouse. A high-traffic page with INP above 500ms is hurting you today; a missing meta description on a low-traffic page can wait. Second pass: robots.txt and GSC coverage. The number of existing sites we have audited that were partially de-indexed due to a staging robots.txt carried over to production is consistently alarming — roughly one in eight. Fix that before anything else. Third: check your Google Business Profile is claimed, verified, and pointing to your current live URL. Profile ownership lapses quietly when domains change and nobody remembers to update the link.
