How to audit an inherited site photograph.

Taking Over a Site Somebody Else Built

I remember sitting in my workshop back in ’97, staring at a flickering monitor and wondering why every “expert” insisted I needed a dedicated server farm and a monthly retainer just to get a basic page live. Fast forward decades later, and the industry hasn’t changed its tune; they’ve just gotten better at using fancy terminology to mask the same old upselling. If you’ve just been handed the keys to a messy digital estate, you don’t need a $5,000 “comprehensive technical assessment” from some agency. You need to know how to audit an inherited site without letting them talk you into buying a shiny new engine when all you really need is a bit of oil and a new spark plug.

I’m not here to sell you on a suite of expensive, automated software tools that spit out reports no one actually reads. My approach is much more methodical and a lot cheaper. I’m going to show you how to roll up your sleeves, dig through the guts of the existing setup, and separate the actual working components from the dead weight. We’ll focus on the essentials—the domain, the hosting, and the actual content—so you can get a clear picture of what you’re dealing with in a single afternoon of honest work.

The Website Handover Checklist for the Sane

The Website Handover Checklist for the Sane.

I’ve seen too many people take over a site only to realize they don’t actually own the keys to the front door. Before you start tinkering with the design or chasing new traffic, you need a proper website handover checklist that covers the actual plumbing. Start with the credentials. I don’t just mean the CMS login; I mean the domain registrar, the hosting panel, and the email DNS settings. If you don’t have those, you’re just a tenant, not an owner, and that’s a recipe for a headache when the previous developer decides to stop answering emails.

Once you’ve secured the perimeter, you need to look under the hood. I always recommend a quick SEO technical debt assessment to see what kind of mess you’ve actually inherited. You aren’t looking for perfection; you’re looking for the rot. Check for broken redirects, bloated plugins that haven’t been updated since the Obama administration, and identifying legacy code issues that might be dragging your load speeds into the dirt. You want to establish a site performance baseline now, so when you eventually make improvements, you actually know if they worked or if you’re just moving the goalposts.

Discovering Hidden Site Architecture Before It Breaks

Discovering Hidden Site Architecture Before It Breaks

Before you start moving things around, you need to figure out how the plumbing is actually laid out. It’s easy to assume a site is just a collection of pages, but there’s usually a skeleton underneath that you didn’t build. I’ve spent many an afternoon discovering hidden site architecture only to find that a single “simple” page is actually tethered to three different plugins and a custom database query that looks like it was written in a fever dream. If you don’t map out how the pages link to one another and where the data actually lives, you’re going to trip over a broken redirect the moment you try to change a URL.

This is where you really start your SEO technical debt assessment. You aren’t just looking at pretty pictures; you’re looking for the rot. I like to poke around the directory structure to see if there are old staging sites or abandoned folders just sitting there eating up resources. You want to find those “ghost” paths—the ones that lead to 404 errors or, worse, old versions of content that contradict what’s currently live. If you don’t find these architectural quirks now, you’ll be spending your weekends fixing them later.

Five things to check before you start changing things

  • Find the login credentials and actually test them. Don’t trust a spreadsheet handed over by a developer who’s already checked out; make sure you can actually get into the CMS, the hosting panel, and the domain registrar yourself. If you can’t get in, you don’t own the site.
  • Hunt down the recurring billing. I still have invoices from hosts that went bust in 2005, so I know how important this is. Find out exactly what is being paid for, when the next bill is due, and—more importantly—if you’re paying for “premium” add-ons that you’ve never actually used.
  • Trace the plugin and extension trail. Every site I’ve inherited has a graveyard of plugins that haven’t been updated since the last decade. Look for the ones that are bloated or serving no purpose; they’re just security holes waiting to happen and they’ll only slow you down.
  • Check the backups and the “undo” button. Before you touch a single line of code or change a single setting, verify that there is a recent, working backup sitting somewhere safe. If the site crashes during your first afternoon of tinkering, you’ll want a way to roll back the clock.
  • Map out the external connections. A website isn’t an island; it’s usually hooked up to email services, payment gateways, or analytics tools. Figure out which third-party accounts are tied to it so you don’t accidentally sever a connection and stop the site from actually doing its job.

The bottom line for the sane

Don’t let them rush you into a “maintenance package” before you’ve even seen the login credentials; if they can’t give you the keys to the front door, you don’t own the house.

Map out where the files actually live and how the database talks to the site before you change a single line of code, or you’ll be spending your weekend fixing a broken mess.

Treat the handover like an old piece of hardware—check for the rot, find the dead links, and ignore every single “essential” add-on they try to upsell you in the first hour.

Getting Your Hands Dirty

Getting Your Hands Dirty with manual auditing.

At the end of the day, auditing an inherited site isn’t about running some fancy, automated diagnostic tool that promises the moon; it’s about manual verification. You’ve checked the handovers, you’ve mapped out the architecture, and you’ve hopefully identified which parts of the engine are actually running and which are just held together by digital duct tape. Don’t let the sheer volume of data intimidate you. Focus on the fundamentals: the logins work, the hosting is stable, and the core structure isn’t a house of cards. Once you’ve stripped away the mystery, you’ll find that most of the “complexity” is just noise designed to make you feel like you need a specialist for every minor tweak.

Now that you’ve cleared the fog, take a breath and step back. You don’t need to rebuild the entire thing by Monday morning just because you found a few broken links or an outdated plugin. The goal isn’t perfection; it’s stability and control. You’ve moved from being a passenger to being the engineer in the room, and that’s where the real work begins. Treat the site like a piece of vintage hardware—respect what works, prune what doesn’t, and don’t let anyone upsell you on a complete overhaul until you’ve truly earned the right to change it.

About Halvard Boateng

A first website needs a domain, a host and an afternoon. The rest is upselling.