Generic website checklists miss the South African specifics: POPIA, load shedding resilience, local payment quirks. This one doesn’t. Work through it in an afternoon; most checks take two minutes.
Security and continuity
- SSL certificate valid — padlock shows, no browser warnings.
- WordPress core, plugins and theme all current (check the Updates count in wp-admin).
- Daily backups running, stored off your hosting server, and you know how to restore.
- Two-factor authentication on every admin account.
- No unused plugins or themes installed (delete, don’t deactivate).
- Uptime monitoring active, alerting your phone.
- Search
site:yourdomain.co.zaon Google — no pages you don’t recognise.
Speed and mobile
- Homepage loads in under 3 seconds on mobile data (test on your actual phone, not office wifi).
- PageSpeed Insights mobile score above 60 — below that, start with image sizes.
- Site is usable one-handed on a phone: readable text, tappable buttons, working menu.
- A CDN (like Cloudflare free) if your host is overseas.
Legal — the POPIA basics
- A privacy policy that reflects what you actually collect — forms, analytics, cookies.
- Consent language on forms that add people to marketing lists (pre-ticked boxes don’t count).
- Contact details for whoever handles information requests (your information officer — for most small businesses, that’s the owner by default).
Leads and money
- Contact form tested this month — sent, received, replied to. Silently broken forms are the most expensive fault on this list.
- Phone number tappable on mobile (a
tel:link, not just text). - If you sell online: full test purchase completed recently, including the payment redirect and confirmation email.
- Google Business Profile claimed and pointing at the right URL.
Housekeeping
- Copyright year current, staff and pricing pages accurate.
- You — not your designer — hold the hosting, domain and admin logins, stored somewhere safe.
Scored under 15?
You’re in the majority, for what it’s worth. Every WP Hero subscription starts with us running exactly this audit on your site and fixing what’s fixable within the plan — the checklist is the onboarding.