You are about to spend somewhere between $1,500 and $15,000 on a website. Maybe ongoing too. The people pitching you all sound competent on the phone, that is the easy part of the job for a salesperson. The hard part for you is figuring out which of them will deliver something that actually brings in calls a year from now, and which will hand you a pretty file and disappear.
This is the due-diligence checklist nobody hands service-business owners before they sign. Run any vendor through it, including me, and the answers will tell you most of what you need to know.
1. Who, specifically, is doing the work?
Ask: "Will the person I am talking to today write the code? If not, who will, and can I talk to them before I sign?"
You are looking for one of three honest answers:
- "Me." The person on the call is the developer. Best answer for a small build.
- "A specific named teammate." They will introduce that teammate before you sign. Acceptable.
- "Our team." Vague. Means a junior or an offshore subcontractor will write the code while the salesperson moves on. Probe further.
Red flag: they avoid the question, or they say "we use a proven team-based approach" without naming a single human. The person who closes you should be available to answer for the work after launch, that is what "accountability" actually means.
2. What stack are they using and why?
Ask: "What technology will my site be built on, and why that one specifically?"
Listen for whether they have an opinion. The answers fall into rough categories:
- "WordPress." Default answer. WordPress is fine for high-volume publishers; it is overkill, slow, and security-burdensome for a 5–15 page service business. If they cannot articulate why WordPress is right for YOUR situation specifically, they just default to WordPress because it is what they know how to sell.
- "Wix / Squarespace." They are not a developer; they are a Wix-template configurator. That is fine for a very small business or a side project, but understand what you are buying.
- "Webflow / Framer." No-code modern builder. Faster than WordPress, more design control than Squarespace. Reasonable middle ground if performance and SEO are not top priority.
- "Custom code on a static-site generator (Eleventy / Astro / Next)." Hand-written. Best performance ceiling, lowest security surface, highest level of skill required. What I do.
Red flag: they have never had to defend their stack choice. Anyone who has built a few sites has thought about this; the answer should come quickly and with reasons.
3. What is the real total cost over three years?
Ask: "Walk me through every dollar I will spend with you over the next three years."
Most agencies will quote a build price ($3K–$8K) and forget to mention:
- Hosting ($20–$80/month).
- Maintenance retainer ($100–$300/month, often required to keep WordPress secure).
- Plugin licenses (varies; can run $40–$200/month at scale).
- SEO retainer (often pitched separately as $500–$3,000/month).
- Per-change billing (some shops bill $100–$200 per content update).
Get all of these in writing, in advance. The "I forgot to mention" line items are how a $4,000 quote becomes $15,000 over three years.
Green flag: the vendor sends you a written breakdown of everything before you ask for it.
4. Who owns the site if I leave?
Ask: "If I cancel after 12 months, what do I get to take with me?"
The answer matters more than people realize. Three patterns:
- "You own the source code, on your GitHub." Best answer. You can take the site to any host, any developer.
- "You get a static export / final files." Acceptable. The site can run anywhere, even if the source-code isn't transferred.
- "Nothing, the site is on our platform." Wix / Squarespace / proprietary builder. You are renting forever.
- "You own everything but you have to pay an offboarding fee." Hostage situation. Run.
Red flag: this question makes them uncomfortable. Plenty of agencies have built genuine vendor lock-in into the relationship and they know they cannot answer cleanly.
5. What does maintenance actually mean?
Ask: "Walk me through what 'maintenance' means in your monthly fee. What do you actually do?"
Listen for specifics, not platitudes:
- Specific: "Plugin updates checked weekly, a security scan monthly, content updates within 24 hours, performance regression testing on every deploy, uptime monitoring with SMS alerts." That is real maintenance.
- Vague: "We keep your site running smoothly." That is not maintenance; that is a marketing line. They probably do not log in to your site between launch day and the day it breaks.
Red flag: they do not have a written maintenance scope. The default is for the maintenance retainer to be free money for the agency until you complain.
6. How fast does the site they will build for you actually load?
Ask: "Show me a site you have built recently. What is its mobile PageSpeed score?"
Run their reference site through pagespeed.web.dev live on the call:
- 95+: They actually care about performance. Rare; impressive.
- 80–94: Acceptable. They know about it but have not optimized hard.
- 60–79: Below the real threshold. They have not internalized that page speed is a Google ranking factor and a conversion factor.
- Below 60: They will deliver the same to you. Get a different vendor.
Page speed is non-negotiable in 2026. A site at 60 PageSpeed loses approximately a third of its mobile visitors before they engage. If their reference work is at 60, your future site will be too.
7. Will the site be accessible (WCAG 2.2 AA)?
Ask: "Is the site you are building me WCAG 2.2 AA compliant by default?"
The honest answers:
- "Yes, that is our default; here is the test methodology we use." Best answer. Specifics matter (WAVE, Lighthouse, manual screen-reader testing).
- "We can do that as an add-on." Means it is not their default and you will pay extra. Acceptable but you should know upfront.
- "What is WCAG?" They have not done this work. ADA-compliance lawsuits against small business sites are real and rising. Get a different vendor.
8. How do they handle local SEO?
Ask: "What specifically will my site do that helps me rank locally on Google?"
Listen for:
- Hand-written schema markup (LocalBusiness, Service, FAQPage). Bonus for "matched to your Google Business Profile so the entities reconcile."
- Real city pages, not doorway pages. Each service-area page should have unique local content, not the same paragraph with city name swapped.
- NAP consistency check, name/address/phone identical between site and GBP, in the same format, on every page.
Red flag: "We use a plugin for SEO" and that is the whole answer. Plugins generate template-grade schema; Google's local algorithm increasingly weights uniqueness.
9. What is the actual launch timeline, with milestones?
Ask: "What does the project plan look like, week by week, from today to launch?"
Good vendors have a written process. Mine looks like: discovery call → proposal → onboarding (asset collection) → design preview → revisions → build → pre-launch QA → launch → post-launch check-in. Each of those is a week or so.
Red flag: "Six weeks roughly" with no specifics. Means nobody owns the milestones; the project will slip.
10. Can you talk to a previous client?
Ask: "Who is a client you built a similar site for, and can I email them?"
This is the highest-signal reference check available. Vendors with happy clients introduce them readily; vendors without struggle to come up with a name. The conversation with the previous client is worth more than any pitch deck.
Note: a sole-prop or new agency might not have a long client list yet (transparently mine doesn't). In that case, the substitute is the agency's OWN site, the changelog, the open Owner's Guide, the public service agreement. If the agency's own site is fast, accessible, well-maintained, and transparent, that is a self-evident reference.
The two questions that matter most
Of the ten above, two predict outcomes more than the rest combined:
- What is the mobile PageSpeed score on a site they built recently? Tells you the technical ceiling.
- Who, specifically, is doing the work? Tells you whether the relationship will survive launch.
If those two answers are unsatisfying, no amount of "we have a great team" or "we have been doing this for ten years" will make up for it. If those two answers are strong, the rest of the checklist will usually fall in line.
One more thing the checklist does not cover
Read the agency's own website carefully. If it loads slow, has obvious accessibility failures, has a vague pricing page, or has a copy that reads like every other agency's copy, that is what you are about to buy. The agency's own site is the most reliable preview of the work you will get.
Mine is open by design: posted pricing, public service agreement, open Owner's Guide, live changelog, technical approach documented in detail, and six demo sites at full quality. Run any of them through PageSpeed, then run an agency you are evaluating through the same. The comparison will say more than any sales call.
If you want to test the answers above against me directly, the discovery call is the next step. I will answer all ten in writing before you sign anything.
For a shorter list focused on the seven questions that matter most, see The Seven Questions to Ask Any Web Designer Before Hiring Them. And if the goal is to compare every realistic price tier head-to-head, How Much Does a Small Business Website Actually Cost runs the lifetime-cost math.
If a vendor cannot answer the questions in this post, find another one.
I will answer all of them on the discovery call before you sign anything. $0 down, no design deposit. The whole agency operates in public.