HostingResearch date recorded Sep 29, 2026

Create a Site Recovery Checklist You Can Actually Test

Create and test a site recovery checklist covering assets, backups, restore order, DNS, email, security, ownership, evidence, and changing host terms.

Create a Site Recovery Checklist You Can Actually Test
Check current details: This guide does not yet have a recorded manual publisher-value review for its current text. A recorded research date is not a guarantee of present accuracy. Confirm product terms and availability with the provider before deciding.
A backup is not a recovery plan until someone can restore the right site, in the right order, within an acceptable interruption. Hosting pages describe current service features, but your own exports, configurations, and test restores provide the evidence that matters. InterServer's live hosting page should be rechecked for current service information, and CISA's security guidance supports strong account protection and resistance to phishing. This checklist does not assume that any hosting plan includes a particular backup or recovery feature.

## Inventory every part of the service

List the application code, uploaded files, database, environment configuration, scheduled tasks, certificates, DNS zones, mailboxes, third-party integrations, analytics, and payment or identity dependencies. Record where each component is controlled and who owns the account. A site may be restored from files and still fail because its database, DNS, mail routing, storage permissions, or secret values are missing. Mark data that must not be copied into an insecure test environment.

## Define recovery objectives in plain language

Choose how much recent data the business can afford to lose and how long essential functions can remain unavailable. Different components may need different priorities. A brochure site, order database, support mailbox, and analytics history do not carry equal operational impact. Write the first acceptable recovery state, such as a read-only status page or restored contact route, separately from full restoration. These objectives determine backup frequency and test depth; they should not be inferred from a provider slogan.

## Document backup sources and independence

For each asset, record who creates the backup, its frequency, retention, location, encryption, and restore procedure. Keep at least one recovery path independent of the live hosting account so a compromised or inaccessible account does not remove both production and recovery data. Do not store passwords or encryption keys inside the same archive they protect. Confirm that database exports are consistent and that file backups include hidden configuration and required user content without exposing unnecessary personal data.

## Write the restoration order

Start from a clean destination and document prerequisites: runtime versions, extensions, storage paths, permissions, database engine, web-server rules, workers, and cron. Restore code and dependencies from a trusted source, load data, reconnect storage, apply environment configuration, then validate internal application health before changing public DNS. Include maintenance mode, certificate issuance, cache rebuilding, and queue handling where relevant. Every command should state its target so an operator cannot accidentally overwrite the wrong environment.

## Test on an isolated destination

Schedule a restore rehearsal to a non-production hostname or isolated network. Use a recent backup copy and time each stage. Confirm key pages, login, form handling, uploads, database writes, scheduled jobs, outbound mail controls, redirects, certificates, and logs. Prevent a test restore from sending real customer messages or charging payments. Record missing files, undocumented secrets, slow transfers, version conflicts, and manual decisions. The result should update the checklist and the recovery objectives, not merely produce a pass label.

## Secure the control plane

Protect hosting, registrar, DNS, email, and backup accounts with unique passwords and available multifactor authentication. CISA guidance emphasises strong authentication and recognising phishing; recovery pressure makes impersonation especially dangerous. Store recovery contacts and escalation routes offline, but never publish credentials in the runbook. Review who can reset accounts, where recovery codes are kept, and how a departing administrator's access is removed. Test access before an incident, using the official provider route.

## Prepare DNS, email, and communication steps

Record current DNS values, time-to-live settings, domain ownership, certificate dependencies, and mail records. Decide who may approve a DNS cutover and how to roll it back. Prepare a customer status message that does not reveal exploitable details. Restore email carefully because incorrect records can disrupt communication or weaken authentication. Preserve logs and timelines if compromise is suspected; rapid rebuilding should not destroy evidence needed to understand the incident.

## Freshness and decision boundary

Reviewed on 24 July 2026, this checklist requires local adaptation. InterServer plans, control panels, limits, support procedures, and security guidance can change. Recheck the live hosting page and official support information, then verify every assumed feature in the actual account. DealVorio does not certify a backup or guarantee recovery time. Begin with one isolated restore rehearsal and use its measured failures to improve the plan. Related material is in [domains and hosting](/category/domains-hosting).

## Reader promise

Compare hosting and domain decisions through ownership, DNS, backup, security, support, and total operating cost. This article keeps the final decision with the reader and the live provider or merchant terms. It does not invent a price, coupon, rating, deadline, availability claim, or outcome.


## Decision framework

Before acting, write down the exact context and check these six points:

1. **Application workload and expected traffic.** Record the specific value that applies to this decision, not a general assumption.
2. **Resource limits and scaling path.** Record the specific value that applies to this decision, not a general assumption.
3. **Domain ownership and recovery contacts.** Record the specific value that applies to this decision, not a general assumption.
4. **DNS, TLS, and email dependencies.** Record the specific value that applies to this decision, not a general assumption.
5. **Backup and restore evidence.** Record the specific value that applies to this decision, not a general assumption.
6. **Support, renewal, migration, and exit cost.** Record the specific value that applies to this decision, not a general assumption.

This framework is intentionally practical: it gives the reader a record to compare, a question to verify, and a clear boundary when information is missing.


## Detailed workflow

1. Inventory the website, domains, mailboxes, databases, cron jobs, and third-party dependencies.
2. Write the minimum resource and availability requirements.
3. Compare the exact plan, renewal price, limits, and included support.
4. Confirm who controls the registrar, nameservers, certificates, and recovery channels.
5. Test a backup restore in a safe environment before calling the plan resilient.
6. Document DNS and deployment changes with timestamps and rollback steps.
7. Measure the live result against the initial requirements.
8. Recheck documentation after platform or policy changes.

The sequence matters because the first attractive headline is not the same as a verified decision. Repeating the check at the live destination is especially important when the record involves a price, code, model, seller, account, plan, policy, or availability.


## Comparison worksheet

| Check | Record | Why it matters |
|---|---|---|
| Ownership | Registrar, DNS, hosting, email, recovery | Prevents a vendor account from becoming a single point of failure |
| Capacity | CPU, memory, storage, bandwidth, limits | Maps a plan to actual workload |
| Recovery | Backups, restore test, export path | Separates a backup checkbox from recoverability |
| Security | TLS, DNSSEC, access control, updates | Reduces avoidable exposure |
| Exit | Migration steps, fees, data portability | Preserves future choice |

Use the worksheet to compare equivalent situations. If a row cannot be completed from an official source, mark it unresolved instead of awarding an optimistic score.


## Common mistakes to avoid

- Comparing introductory price without renewal cost.
- Treating a control panel as a backup.
- Changing DNS without recording the previous state.
- Assuming “unlimited” removes practical limits.
- Calling a service secure without checking current documentation.

A strong article does not remove uncertainty by using louder language. It makes the uncertainty visible and gives the reader a safe way to resolve it.


## Frequently asked questions

### What is the best hosting provider?

The best fit depends on the workload, maintenance capability, recovery needs, location, and budget. Compare the exact plan rather than a brand name.

### Should domain and hosting be with one company?

Convenience can help, but independent ownership and recovery paths are important. Record who controls each layer.

### How often should hosting documentation be checked?

Use the 90-day review class here and recheck immediately after a migration, pricing change, security event, or major platform update.

### Does SSL prove a site is safe?

TLS protects the connection; it does not validate every seller, page, or offer. Combine it with access control and source checks.

### What makes a backup useful?

A backup is useful when it is protected, recent enough, restorable, and accompanied by a tested recovery procedure.


## Source and freshness boundary

This record was originally reviewed on **2026-07-24**. The freshness class is **docs_90d** with a suggested recheck cadence of **90 days**. Values that can change—prices, access, model names, codes, terms, seller, inventory, dates, and remedies—must be rechecked at the official destination before publication or action.

- InterServer Web Hosting: https://www.interserver.net/webhosting/
- CISA secure online shopping guidance: https://www.cisa.gov/secure-our-world


## What to record next

Before closing the decision, record the exact item or service, source URL, date checked, market, selected variant or plan, key condition, unresolved question, and the final action you chose. Keep personal credentials, payment secrets, and private account identifiers out of notes and screenshots.

A useful result is not simply a click. It is a decision that another reader can understand, verify, and revisit when the provider changes.
Verification

Sources & references

Check the original sources for the latest terms and availability.