Your web person is probably not the problem.

When we hand a business their audit, the reaction is often the same. They get quiet, then a little angry, and then they say some version of: “I paid someone for this.”

Usually the person they paid did fine work. The site launched, it looked right, it worked.

Then eighteen months went by.

Websites are not finished objects

It is a reasonable thing to assume. You pay for a website, you get a website, and the transaction closes. That is how it works with a sign, a truck wrap, or a logo.

Software does not sit still. The platform updates. The plugins update, or stop being updated, which is worse. Certificates expire on a schedule nobody wrote down. A hosting company changes something. A payment processor deprecates an old integration. A phone number changes and gets updated in four places out of seven.

None of that is anybody’s fault. It is just what happens to software that exists in the world for a while.

What we actually find

Almost everything on a bad audit falls into one of two groups.

Things that were never set up. A missing piece from the original build, often small, often invisible if you are not looking for it.

Things that broke later. This is the bigger group by a wide margin. Something worked on launch day and does not work now.

The second group is the interesting one, because there is no moment where anyone did anything wrong. No single decision to point at. The site just drifted out of working order while everyone assumed it was fine.

The reason it lasts so long

Nothing tells you.

A broken contact form does not send you an alert. An expired certificate does not call. A page that dropped out of Google does not appear on a report. A dead booking link works perfectly from your own phone because you are already logged in.

Every failure mode here is silent from the inside. That is not a coincidence. If these things were loud, they would get fixed in a week and we would have nothing to write about.

So who was supposed to be watching

Usually nobody, and usually nobody agreed to do it.

Read the arrangement most local businesses have. Someone was hired to build a site. They built it. They may have been excellent at it. Ongoing monitoring was not in the scope, was not quoted, and was not paid for, so it did not happen.

That is not a betrayal. It is a gap between what people assume they bought and what was actually sold.

The gap is where the damage happens.

What watching actually means

It is unglamorous. Checking that the site is up. Checking that forms still reach a human. Tracking certificates before they expire, not after. Checking links. Applying updates. Noticing when a page falls out of search results.

It is not a redesign and it is not a rebrand. Most months it turns up nothing worth mentioning, which is the point. The months where it turns up something are the ones that pay for all the rest.

If you take one thing from this

Do not go find your web person and start an argument. They probably did the job they were hired to do.

Ask a different question instead: since the day it launched, who has been looking at it?

If the answer is nobody, that is not a scandal. It is just the most common arrangement there is, and it is the reason almost every audit we run finds something that has been sitting there quietly for a year.