What to do after buying a website: 90-day action plan
The deal is closed. Now what? The first 90 days set the trajectory for your ownership. This guide walks through each step: securing access, verifying the transfer, auditing your tech stack, mapping revenue sources, meeting your team, and establishing a growth baseline. Ready to find your next acquisition? Browse websites for sale on Buy Sites Direct.
- 1
Secure all credentials and access on day one
The moment the deal closes, change every password the seller shared with you. This means: the domain registrar account, the hosting control panel, the CMS admin login (WordPress, Ghost, Webflow), all ad network accounts (Google AdSense, Mediavine, Amazon Associates), payment processor accounts (Stripe, PayPal), email marketing platform (Beehiw, ConvertKit, Mailchimp), social media accounts, and any third-party tool logins. Enable two-factor authentication on every account. Remove the seller's email as an admin or co-owner on every platform, verify this step explicitly, as it is commonly skipped. For SaaS acquisitions, rotate all API keys, database credentials, and server SSH keys on the same day. Do not delay this step, shared credentials are an ongoing security and liability risk.
- 2
Verify the transfer is complete before releasing any holdback
Run through every asset on your transfer checklist and confirm possession before releasing any payment holdback or signing off on a clean close. Transfer checklist: domain registered in your name (verify WHOIS), hosting account under your billing details, all content and code repositories transferred, email list successfully imported to your ESP account, analytics access (GA4, Search Console) granted and verified with live data, all social accounts updated to your recovery email and phone, and any recurring revenue subscriptions (Stripe, PayPal) showing active billing to the correct party. If anything from the agreed asset list is missing, contact the seller immediately, transition periods are time-limited and resolving gaps becomes harder after the seller moves on.
- 3
Complete a technical audit in the first week
Before changing anything, understand the technical setup completely. Document: what CMS and version is running, what plugins or dependencies are installed and whether any are outdated or paid with active licenses, where the site is hosted and what the server specs are, how deployments are made (FTP, Git, CI/CD pipeline), what integrations exist and what API keys they use, and whether the site has SSL, a CDN, and automated backups configured. Run a crawl using Screaming Frog, Ahrefs, or Semrush to identify any existing broken links, redirect chains, or indexation errors, establish your baseline before making any changes. Many new owners inadvertently break SEO signals in the first month by migrating hosting, changing URLs, or updating plugins without testing. Do not rush. Document first.
- 4
Map every revenue source and verify the numbers
In the first two weeks, independently verify every revenue stream the seller disclosed. Log into each payment processor, ad network, and affiliate dashboard yourself and pull the last 12 months of earnings. Cross-reference this against what was presented during due diligence. Check the Google Search Console for any recent manual actions or algorithm penalties that were not disclosed. Verify that ad network accounts are in good standing and that affiliate program terms allow account transfers. For SaaS or membership businesses, log into your billing system and count the active paying customers yourself. If the numbers match, you can proceed with confidence. If they do not, you have a potential warranty claim under your Asset Purchase Agreement.
- 5
Meet the team, contractors, and key relationships
If the business has writers, virtual assistants, developers, or other contractors, introduce yourself within the first week. Send a brief email explaining who you are, that you have acquired the business, and that you look forward to continuing the work. Confirm rates, payment methods, and current project status. Do not make major changes to the team structure in the first 30 days, the risk of losing key contractors in a transition is high, and your operations will suffer if knowledge walks out with them. For service businesses, schedule introductory calls with every active client in the first two weeks. Sellers who remain available for a 30-90 day transition period are invaluable, use that time deliberately.
- 6
Make your first targeted improvement in month two
Resist the temptation to change everything immediately. In the first 30 days, your goal is to understand the business without breaking it. By month two, you should have enough context to make your first deliberate improvement. Good first moves: refresh the top 3-5 highest-traffic articles with updated information and improved internal links, fix any SEO issues identified in your technical audit, reach out to existing affiliate or sponsorship partners to confirm relationships and explore upsells, or resolve a known customer pain point with a simple product or content update. Small, targeted improvements that build on existing strengths are lower-risk than sweeping changes and allow you to learn the business while adding value.
- 7
Set your KPIs and establish a 90-day growth baseline
By the end of month three, you should have a clear picture of your baseline performance and a documented growth plan. Set up a simple monthly tracking dashboard covering: monthly SDE (net profit after all costs), monthly sessions or pageviews and YoY comparison, primary revenue sources and their month-over-month trends, email list size and growth rate (if applicable), and churn rate (for SaaS or membership businesses). Compare your month-two and month-three performance to the seller's TTM average to understand whether the business is performing to expectations. Use this baseline to set realistic 6-month and 12-month targets. Review the post-acquisition growth guide for prioritised tactics that apply to your specific business type.
Related guides
- How to Grow an Acquired Website, prioritised tactics for growing revenue and traffic post-acquisition
- Website Acquisition Checklist, transfer checklist and due diligence items to verify at closing
- Website Due Diligence Guide, how to verify traffic, revenue, backlinks, and legal ownership
- First 30 Days After Closing FAQ, day-one security, transfer verification, and post-close risks
- Working Capital & Cash Flow After Acquisition, how much cash you need post-close, break-even timeline, and first-year cost planning
- How to Buy a Website, the full buying process from search to close
- What is SDE?, how to calculate and benchmark your monthly net profit
- YoY Growth, how to use year-over-year comparisons to track performance
- Tracking Post-Acquisition Performance, which KPIs to monitor for content sites, SaaS, and eCommerce in the first 90 days
Common questions after buying a website
- What is the very first thing to do after buying a website?
- Change every password and enable two-factor authentication on every transferred account, domain registrar, hosting, CMS, ad networks, payment processors, email platform, and social accounts. Remove the seller as an admin on every platform. For SaaS acquisitions, rotate all API keys and server credentials on the same day. See the first 30 days FAQ for a complete day-one checklist.
- Should I make changes to the website immediately?
- No. Spend your first 30 days understanding the business before changing it. Rushed changes, hosting migrations, URL restructures, theme updates, are the most common cause of early organic traffic drops post-acquisition. Document the current technical setup first, then make targeted improvements in month two once you have a baseline.
- How do I transfer Google Analytics and Search Console?
- For GA4: seller adds your Google account as Administrator in property settings, then removes themselves after you confirm access. For Search Console: seller adds you as an Owner (not just Full User) via Settings > Users and Permissions, then you verify ownership and the seller removes themselves. Maintain continuity in both accounts; historical data is critical for tracking performance against the seller's baseline and for future due diligence.
- What is the biggest mistake new website owners make in the first 90 days?
- Making too many changes too quickly. A single unplanned URL restructure can eliminate 30-50% of organic search traffic overnight. A second common mistake is letting content publishing frequency lapse, which triggers content decay and gradual ranking drops. Stabilise the business first, then optimise systematically. Read the post-acquisition growth guide for a prioritised improvement framework.
Looking for your next acquisition?
Browse active listings across content sites, SaaS, eCommerce, newsletters, and more. Contact sellers directly, no broker fees.