9 Signs Your Small Business Website Is Costing You Customers

Ulises Paiz

Ulises Paiz, Founder of Ghosxt, has 10+ years in IT infrastructure and cybersecurity, an Active Top Secret Clearance, and 9 certifications including CySA+, Security+, and AZ-104. Before founding Ghosxt, he served as a Senior Solutions Consultant for the DoD and built security programs for 40+ Central Coast businesses. More about Ulises →

Nobody calls to tell you your website turned them away. They just leave — and book with the competitor whose site loaded instantly and had a working button to tap. That silence is why bad websites survive for years: the owner sees no complaints, checks the site occasionally on a fast desktop where it looks fine, and assumes it's doing its job. Here are the nine signs we look for when a business asks us whether their site is helping or hurting, roughly in order of how urgently each one costs you money.

1. It's slow on a phone

The single most expensive problem, and the least visible from your office. Most of your visitors arrive on phones over cell connections, and bounce rates climb sharply once a page takes more than about three seconds to become readable. Google measures this too — its Core Web Vitals scoring wants your main content visible within 2.5 seconds, and sites that miss it rank worse. Test at pagespeed.web.dev; the mobile score is the one that matters.

2. It breaks or squints on mobile

Pinch-to-zoom text, buttons too small to tap, menus that don't open, forms that can't be filled in on a phone. Since most local searches happen on mobile, a site that only works on desktop only works for the minority of your customers. If your site predates roughly 2017, assume this until proven otherwise.

3. You can't find yourself on Google

Search your main service plus your city. If competitors show up and you don't, the usual culprit isn't bad luck — it's site structure: one generic page trying to rank for every service, missing page titles, no local signals. This is the gap between a site that exists and a site that produces customers.

4. The software underneath is abandoned

This is the one that's a security problem, not a cosmetic one. Outdated WordPress plugins and themes are among the most exploited software on the internet, and compromised small business sites get quietly repurposed to serve phishing pages or malware under your domain — which gets your domain blacklisted and can tank your email deliverability with it. If nobody has updated your site's software in over a year, or it was built on a page builder or theme that no longer receives updates, treat it as urgent. (This is the same hygiene logic as our cyberattack essentials post, applied to the most public-facing software you own.)

5. No padlock in the address bar

A site still on http:// gets an explicit "Not Secure" warning from every modern browser — displayed right next to your business name. It's also a ranking penalty. SSL certificates are effectively free now; there is no legitimate reason for a business site to lack one in 2026.

6. You can't update it yourself — or don't know who can

Changed prices, new hours, a service you no longer offer: if fixing a sentence requires hunting down a developer who built the site years ago and may not answer, your site will always be out of date, because every small change has a big activation cost. A properly built site gives you an admin panel for routine edits and documentation for the rest.

7. There's nothing you'd want a customer to do

Look at your homepage and ask: what's the one action we want a visitor to take — call, book, request a quote? If the answer isn't obvious within a few seconds, visitors default to leaving. Every page needs a visible next step, and "Contact Us" buried in a menu doesn't count.

8. It describes a business you no longer run

Old services, former staff, prices from two owners ago, a photo of a location you left. Customers assume the website is the source of truth; when reality doesn't match, the mismatch reads as unreliability — and it usually means sign #6 is also true.

9. It looks like everyone else's template

Deliberately last on the list. Dated or generic design does cost trust, but owners consistently over-weight how the site looks and under-weight how it performs. If the budget forces a choice, fix speed, mobile, and search visibility before aesthetics — an average-looking site that loads instantly beats a beautiful one nobody finds.

Refresh or rebuild?

The signs split into two groups. If you're failing on content and conversion (#7, #8, #9) but the foundation is sound, a refresh — new copy, clear calls to action, updated info — fixes it at a fraction of rebuild cost. If you're failing on fundamentals (#1, #2, #4, and usually #3), patching rarely pays: every fix fights the foundation, and the money is better spent on a clean rebuild. In 2026 that runs roughly $1,800–$3,500 for most small business sites — the website cost post breaks the numbers down tier by tier, and any provider you talk to should be able to tell you which category you're in before quoting anything.

Where this fits

FAQs about website redesigns

Do I need a full redesign, or can my current website be fixed?

It depends on the foundation. If the site is structurally sound — reasonably fast, mobile-friendly, on maintained software — problems like dated visuals, weak calls to action, or thin content can be fixed with a refresh at a fraction of redesign cost. If the site fails on fundamentals (slow on mobile, built on an abandoned theme or page builder, impossible to update), fixing it usually costs more than rebuilding, because every fix fights the foundation. A provider who quotes a rebuild without first telling you which category you're in is skipping a step.

How slow is too slow for a small business website?

If the main content of a page takes more than about 2.5 seconds to appear on a phone, you're losing people — bounce rates climb sharply past that point, and Google's Core Web Vitals thresholds use the same 2.5-second line for its speed scoring. Test your own site free at PageSpeed Insights (pagespeed.web.dev) using the mobile score, not desktop, since that's both how most visitors arrive and how Google evaluates you.

Is an old website actually a security risk, or just an ugly one?

It can be a real security risk. Outdated WordPress plugins and themes are among the most commonly exploited software on the internet, and a compromised small business site typically gets quietly repurposed to host phishing pages or malware under your domain — which then gets your domain blacklisted and your email flagged as spam. If your site hasn't had software updates in over a year, treat that as a security problem first and a design problem second.

Want a straight answer on your site?

Send us your URL and book 30 minutes. We'll run the speed, mobile, and software checks live, tell you whether you need a refresh or a rebuild, and put a real number on it — no obligation either way.

Book your free website review
Call (831) 204-0501 Book free assessment