What to do after buying a website: 90-day action plan

The deal is closed. Now what? The first 90 days set the trajectory for your ownership. This guide walks through each step: securing access, verifying the transfer, auditing your tech stack, mapping revenue sources, meeting your team, and establishing a growth baseline. Ready to find your next acquisition? Browse websites for sale on Buy Sites Direct.

1. 1

   Secure all credentials and access on day one

   The moment the deal closes, change every password the seller shared with you. This means: the domain registrar account, the hosting control panel, the CMS admin login (WordPress, Ghost, Webflow), all ad network accounts (Google AdSense, Mediavine, Amazon Associates), payment processor accounts (Stripe, PayPal), email marketing platform (Beehiw, ConvertKit, Mailchimp), social media accounts, and any third-party tool logins. Enable two-factor authentication on every account. Remove the seller's email as an admin or co-owner on every platform — verify this step explicitly, as it is commonly skipped. For SaaS acquisitions, rotate all API keys, database credentials, and server SSH keys on the same day. Do not delay this step — shared credentials are an ongoing security and liability risk.

2. 2

   Verify the transfer is complete before releasing any holdback

   Run through every asset on your transfer checklist and confirm possession before releasing any payment holdback or signing off on a clean close. Transfer checklist: domain registered in your name (verify WHOIS), hosting account under your billing details, all content and code repositories transferred, email list successfully imported to your ESP account, analytics access (GA4, Search Console) granted and verified with live data, all social accounts updated to your recovery email and phone, and any recurring revenue subscriptions (Stripe, PayPal) showing active billing to the correct party. If anything from the agreed asset list is missing, contact the seller immediately — transition periods are time-limited and resolving gaps becomes harder after the seller moves on.

3. 3

   Complete a technical audit in the first week

   Before changing anything, understand the technical setup completely. Document: what CMS and version is running, what plugins or dependencies are installed and whether any are outdated or paid with active licenses, where the site is hosted and what the server specs are, how deployments are made (FTP, Git, CI/CD pipeline), what integrations exist and what API keys they use, and whether the site has SSL, a CDN, and automated backups configured. Run a crawl using Screaming Frog, Ahrefs, or Semrush to identify any existing broken links, redirect chains, or indexation errors — establish your baseline before making any changes. Many new owners inadvertently break SEO signals in the first month by migrating hosting, changing URLs, or updating plugins without testing. Do not rush. Document first.

4. 4

   Map every revenue source and verify the numbers

   In the first two weeks, independently verify every revenue stream the seller disclosed. Log into each payment processor, ad network, and affiliate dashboard yourself and pull the last 12 months of earnings. Cross-reference this against what was presented during due diligence. Check the Google Search Console for any recent manual actions or algorithm penalties that were not disclosed. Verify that ad network accounts are in good standing and that affiliate program terms allow account transfers. For SaaS or membership businesses, log into your billing system and count the active paying customers yourself. If the numbers match, you can proceed with confidence. If they do not, you have a potential warranty claim under your Asset Purchase Agreement.

5. 5

   Meet the team, contractors, and key relationships

   If the business has writers, virtual assistants, developers, or other contractors, introduce yourself within the first week. Send a brief email explaining who you are, that you have acquired the business, and that you look forward to continuing the work. Confirm rates, payment methods, and current project status. Do not make major changes to the team structure in the first 30 days — the risk of losing key contractors in a transition is high, and your operations will suffer if knowledge walks out with them. For service businesses, schedule introductory calls with every active client in the first two weeks. Sellers who remain available for a 30–90 day transition period are invaluable — use that time deliberately.

6. 6

   Make your first targeted improvement in month two

   Resist the temptation to change everything immediately. In the first 30 days, your goal is to understand the business without breaking it. By month two, you should have enough context to make your first deliberate improvement. Good first moves: refresh the top 3–5 highest-traffic articles with updated information and improved internal links, fix any SEO issues identified in your technical audit, reach out to existing affiliate or sponsorship partners to confirm relationships and explore upsells, or resolve a known customer pain point with a simple product or content update. Small, targeted improvements that build on existing strengths are lower-risk than sweeping changes and allow you to learn the business while adding value.

7. 7

   Set your KPIs and establish a 90-day growth baseline

   By the end of month three, you should have a clear picture of your baseline performance and a documented growth plan. Set up a simple monthly tracking dashboard covering: monthly SDE (net profit after all costs), monthly sessions or pageviews and YoY comparison, primary revenue sources and their month-over-month trends, email list size and growth rate (if applicable), and churn rate (for SaaS or membership businesses). Compare your month-two and month-three performance to the seller's TTM average to understand whether the business is performing to expectations. Use this baseline to set realistic 6-month and 12-month targets. Review the post-acquisition growth guide for prioritised tactics that apply to your specific business type.