Monthly System Check: included in every plan

The report opens with two things: the new issues found this month, prioritized as high, medium, or low, and the issues resolved since last month. In one minute you know what changed, what got fixed, and what deserves attention next.

For systems built on a CMS (WordPress, WooCommerce, Magento, and Umbraco, among others), the public face of your business is part of the system, so this website monitoring service covers both the technical foundation and what your visitors and search engines see. Among others:

• System versions: CMS, plugin, theme, and library versions against available updates, plus the underlying PHP or .NET framework and database versions
• Security: selected security checks on the site, and on the server where we have access
• Environment: server and configuration checks
• Speed: ongoing website performance monitoring through Google PageSpeed results and response times for key pages
• SEO, AEO, and GEO: errors that hold back your visibility in search results and AI answers
• UI/UX: visible interface errors, a button with too much text, a misaligned box
• Conversion pages: the pages where conversions happen (product pages, forms, checkout), audited against the action they exist for
• Schema markup: whether structured data is used correctly

For .NET-based CMS systems such as Umbraco, the framework-level checks from the web application section below are included as well.

Web applications (PHP or .NET) typically have no public interface, so search visibility and marketing checks don't apply. Instead, the check goes deep on the technical foundation. Among others:

• Framework version: whether the application targets a supported framework version, for .NET preferably the latest LTS
• Packages and libraries: vulnerable, outdated, or deprecated dependencies (NuGet, Composer, and similar)
• Third-party APIs and SDKs: deprecated endpoints, obsolete SDKs, and upcoming breaking changes
• Security: authentication and authorization review, and common vulnerabilities such as SQL injection and XSS
• Configuration: settings files and secret management
• Environment and performance: server configuration and application response times

When we review CMS websites, webshops, and web applications, some tests require full access to the server. If that isn't possible, for security reasons or internal policies, some of these tests can't be executed. You therefore won't receive a report on those items.

At the beginning of our relationship, you'll be provided with a set of IP addresses to whitelist, so that we're not prevented from conducting the necessary tests.

For iOS and Android apps, once the integrations are configured, the monthly check covers, among others: crash logs, error logs, Android "App Not Responding" reports, API error logs, App Store and Play Store warnings, push notification errors, and basic production testing of critical user journeys.

Every quarter, the check goes deeper: iOS and Android compatibility with current and upcoming OS versions, framework version, library and SDK updates, deprecated APIs, security vulnerabilities, app performance, app size and memory usage, and privacy and store compliance.

For CMS websites and webshops, we check a representative sample of pages rather than every page. A webshop with 2,000 products doesn't need all 2,000 product pages tested: they're built on the same template, so we test representative pages of each type, a category page, a product page, and so on. Pages with findings are retested the following month until they're resolved, or until it's determined that the reported issue shouldn't be resolved. When a sampled page is fixed, pages of the same kind generally follow and won't be tested. Testing every page every month would make this website audit report slower and far more expensive to produce, without finding meaningfully more.

The report is included in your plan at no extra cost. The fixes it recommends run as normal tasks: within your plan's capacity on Care and Care Plus, and at a fixed price you approve for each task or group on Care Ultimate. Some clients treat the report as their development to-do list for the following month, while others prioritize other tasks before those identified by us. In the event that we believe a security issue, for instance, should take precedence over your tasks, we'll tell you, but the ultimate decision is yours.

Care: You receive the report, and we discuss the findings in writing through the project management system.

Care Plus: You receive the report, and we discuss the findings in writing or in an online meeting, within your plan's monthly meeting hours.

Care Ultimate: You receive the report every month, even in months where you send no tasks, for as long as our commercial relationship is ongoing. Findings are discussed in writing, or in a meeting billed at the going project management rate for the actual time spent.

Three things, kept apart: the Monthly System Check is the report included in your plan. 24/7 AI-assisted automated QA is an optional add-on that continuously tests your site's functions; token usage is billed separately, based on actual usage, but not all automated tests use tokens. The technical audit is a paid, one-time deep examination of your system.