From hundreds of website audits over the past months, we've distilled the five mistakes we see most frequently. None of them require a relaunch – but each has measurable consequences.
1. Loading Google Fonts from Google Servers
Still the classic. Every integration of Google Fonts via fonts.googleapis.com transmits the visitor's IP address to Google – without their consent. This is a GDPR violation for which fines have already been imposed. The fix takes 15 minutes: download the fonts, host them locally, done.
2. No Responsive Design – or a Poor One
Over 70% of traffic comes from mobile devices. Yet we regularly see pages with tiny buttons, horizontal scrolling and unreadable text on smartphones. Google indexes mobile first – a poor mobile experience directly means lower rankings.
3. No Conversion Strategy
The website looks good, but: what should the visitor do? Many SME sites have no clear call-to-action, no visible phone number, no contact form above the fold. Every page should have exactly one primary goal. Make it as easy as possible for the visitor to achieve that goal.
4. Outdated Plugins and CMS Versions
A WordPress installation with 20 plugins, 8 of which haven't been updated in two years, is an open door for attackers. And no, "nothing has ever happened to us" is not a security strategy. Check for updates monthly, deactivate unused plugins and set up a web application firewall.
5. No SSL Certificate or Mixed Content
Surprising but true: in 2026, there are still business websites without HTTPS. And more commonly: sites with HTTPS that load images or scripts over HTTP (mixed content). This triggers a browser warning, destroys trust and costs rankings. Let's Encrypt is free. There's no excuse.
All of these mistakes can be fixed within a week. None require a large budget. But each has direct impact on visibility, security and revenue. Often, the biggest ROI isn't the next big campaign but fixing these basics.
How many of these mistakes affect your website? Find out with a website check from Sidora AG – free, specific and with no sales pressure.