A website rarely fails all at once. If it did, somebody would notice.
What happens instead is slower and much more expensive. A plugin update breaks the contact form, and the form still looks fine, so nobody knows. An image gets uploaded straight off a phone at four megabytes. A page loses its title tag in a redesign. The SSL certificate lapses. None of these announce themselves. The site keeps loading, the logo is still there, and the only visible symptom is that enquiries are down this quarter and nobody can say why.
An audit is how you find those things on purpose instead of by accident.
What an Audit Actually Is
A website audit is a structured check of a live site against what it is supposed to do: load quickly, stay secure, be found in search, work properly on a phone, and turn visitors into enquiries.
The word "structured" is doing the work in that sentence. Anyone can look at a website and have opinions about it. An audit produces something different: a list of specific problems, each with a specific fix, ranked by what it is costing you. "The homepage feels cluttered" is an opinion. "The contact form has not delivered a message since 14 June because the SMTP credentials expired" is an audit finding.
The Five Areas Worth Checking
| Area | The question it answers | Typical finding |
|---|---|---|
| Security | Could someone take this site down or take its data? | Outdated plugins, no backups, expired certificate |
| Speed | Does it load before a visitor gives up? | Uncompressed images, render-blocking scripts |
| Search | Can Google find, read and rank these pages? | Missing titles, no sitemap, pages blocked by accident |
| Mobile and accessibility | Does it work for everyone who arrives? | Tap targets too small, text too low-contrast to read |
| Conversion | Does it turn visitors into enquiries? | A form that fails silently, no clear next step |
Security and speed have their own hands-on guide, our website security and speed audit checklist, which walks through those two in detail. The rest of this post is about the wider picture, because a site can be fast and secure and still be invisible in search and hopeless at converting.
What Audits Usually Find
After enough audits, the findings stop being surprising. The same handful of problems appear on site after site, across completely different businesses.
- A contact form that stopped sending. Consistently the most expensive single finding, and one of the most common. The form submits, the visitor sees a thank-you message, and the email goes nowhere. Businesses have lost months of enquiries to this.
- Images nobody compressed. A gallery of photographs straight from a phone, several megabytes each, on a page a customer is trying to open on mobile data.
- Plugins a year out of date. Each one a published, documented way into the site, left open.
- Pages with no title tag, or the same title on every page. Search engines have nothing to work with, so the page does not rank and the result looks broken when it does appear.
- Nobody has opened it on a phone since launch. Which is where most Kenyan visitors will see it.
None of these are exotic. That is precisely the point. The problems that quietly cost businesses money are almost never sophisticated, they are simply unwatched.
The Business Case
The honest framing of an audit is not "your site could be better". It is that a site is a piece of infrastructure you already paid for, and an audit tells you whether it is still doing the job.
Three concrete returns:
Recovered enquiries
A broken form or a failing checkout is a direct, ongoing loss. Finding one pays for the audit several times over, immediately.
Avoided incidents
Restoring a hacked site costs far more than keeping it patched, and that is before the lost trust of customers who saw it defaced.
Better decisions
Most redesign requests start with "the site is not working". An audit tells you whether that means a broken form or a genuine rebuild.
That last one is the underrated benefit. A redesign is a large spend, and a good number of the sites that get redesigned did not need it. They needed four problems fixed. An audit is the cheapest way to find out which situation you are in before committing to the expensive one.
How Often to Run One
A full audit once a year is right for most business sites. Beyond that, run one after any significant change: a redesign, a move to new hosting, a change of domain, a new payment integration. Those are the moments when things break quietly.
Between full audits, a short monthly check catches most of what matters:
- Is the site up, and did anything go down this month?
- Did the backups actually run, and has anyone tried restoring one?
- Are the plugins and the core software current?
- Does the contact form still deliver to an inbox somebody reads?
That is the routine our maintenance checklist sets out in full, and it is the reason maintenance plans exist: not because websites are fragile, but because unwatched things drift.
Four Checks You Can Do Today
You do not need to wait for anyone to do these. Ten minutes, no tools, no cost.
The ten-minute self-audit
- Submit your own contact form with a real message, then go and check the inbox. Not the spam folder afterwards. The inbox, first.
- Open the site on your phone, on mobile data, not office WiFi. Count how long the homepage takes and try to tap the main button with a thumb.
- Search your business name on Google. Look at what the result says. If the description is a fragment of navigation text, your pages have no meta descriptions.
- Check for the padlock in the address bar, and try the site with and without www. Both should work and both should be secure.
If you want the technical layer checked automatically, our free website audit covers the common problems with no signup, and the page speed test and meta tag checker handle two of the areas above on their own.
The Part Everyone Skips
An audit you do not act on is a document. It changes nothing, and after six months it is out of date and mildly embarrassing.
So the last step of any audit is the ordering, and the order is not "hardest first" or "cheapest first". It is:
- Anything losing you money right now. A broken form, a failing checkout, a page that will not load. Fix these this week.
- Anything that is a security risk. Outdated software, missing backups, an expired certificate. Fix these this month.
- Speed and search. Real value, but it compounds over months rather than costing you today.
- Everything else. Schedule it, or accept honestly that you are not going to do it.
That last option is allowed. A short list of things you will genuinely fix beats a long list you will not.
Frequently Asked Questions
What is a website audit?
A structured check of a live website against what it is supposed to do: load quickly, stay secure, be found in search, work on a phone, and turn visitors into enquiries. It produces a list of specific problems with specific fixes, ranked by what they are costing you, rather than a general opinion that the site could be better.
How often should a website be audited?
A full audit once a year for most business sites, and after any big change: a redesign, a move to new hosting, a change of domain, or a new payment system. Between those, a short monthly check of uptime, backups, plugin updates and the contact form catches most problems before they cost you anything.
What do website audits usually find?
The same handful of things, over and over. A contact form that stopped sending months ago. Images that were never compressed. Plugins that have not been updated in a year. Pages with no title tag. A site that has not been tested on a phone since it launched. None of these are exotic, and all of them are quietly costing enquiries.
Can I audit my own website?
Parts of it, yes, and you should. Submit your own contact form and check the message arrives. Open the site on your phone on mobile data. Search your business name on Google. Check the padlock in the address bar. Those four checks take ten minutes and catch a surprising share of real problems.
How much does a website audit cost in Kenya?
It depends on the size of the site and whether the fixes are included. WPfoss runs a free automated check at wpfoss.ke/free-website-audit/ that covers the common technical problems. Deeper audits are usually bundled into a maintenance plan, which starts at KES 5,000 a month for a standard business site.
Is a website audit the same as an SEO audit?
No. An SEO audit looks at whether search engines can find, read and rank your pages. A website audit covers that plus security, speed, mobile behaviour, accessibility and whether the site actually converts. SEO is one of the five areas, not the whole thing.
What should I do first after an audit?
Fix anything that is losing you enquiries right now, starting with a broken form or a checkout that fails. Then fix anything that is a security risk. Speed and search improvements come third, because they compound over months rather than costing you money this week.
Want to know what your site is hiding?
Start with the free audit, which needs no signup and takes about a minute. If you would rather somebody watched the site permanently, maintenance plans start at KES 5,000 a month for a standard business site and KES 10,000 for an online shop, with updates, backups, monitoring and fixes included. Talk to us on WhatsApp at +254 722 334 188, email hello@wpfoss.ke, or call +254 709 384 200.
Run the Free AuditRelated: Website Maintenance Kenya · Website Checkup · Page Speed Test · Meta Tag Checker