There is a concept in psychology called “object permanence”—knowing that something exists even when you can’t see it.
In the digital world, business owners suffer from the opposite problem. If they can’t see it, they assume it doesn’t exist.
If the homepage loads and the logo is straight, you assume your website is healthy. You assume it’s secure. You assume it’s doing its job.
But at Spade Design, we are not just designers. We are Digital Archaeologists. And when we start digging into the backend of a website that hasn’t been rebuilt in three or four years, we rarely find a clean house. We find a graveyard.
We find “Zombie Code” eating up server resources. We find “Ghost” administrators who shouldn’t have access. We find leads—real money—vanishing into the digital ether.
Recently, we performed a Growth Audit for a successful mid-sized company. They were profitable, respected, and totally unaware that their digital foundation was rotting from the inside out.
Here is a look at the “artifacts” we excavated—and why you should be worried about what is buried in your own backyard.
Artifact #1: The Plugin Graveyard
The Discovery: When we logged into their WordPress dashboard, the “Active Plugins” count looked reasonable: 15 plugins. But when we opened the server folders via FTP (the file system behind the scenes), we found something else entirely.
We found the carcasses of 42 different plugins that had been “deactivated” but never deleted.
The Danger: Many business owners think “Deactivate” means “Gone.” It does not. The files are still on your server.
-
Security Risk: These old files are rarely updated because the system thinks they are off. But hackers can often execute scripts located in deactivated plugin folders. We found a vulnerability in a calendar plugin from 2019 that was a known “backdoor” for malware.
-
Bloat: The database was still querying tables related to these ghosts, adding milliseconds of lag to every page load.
The Spade Fix: During the Relaunch, we didn’t just delete them; we wiped the database clean. We rebuilt the site functionality using custom code, reducing their dependency on plugins from 57 (total) down to just 6 essential tools. The site speed increased by 300% instantly.
Artifact #2: The “Lost Revenue” Routing Error
The Discovery: This was the one that made the CEO turn pale.
We traced the path of their “Request a Quote” form. On the surface, it worked perfectly. You filled it out, hit submit, and got a “Thank You” message.
But when we looked at the mail server logs (SMTP), we found that the form was programmed to send notifications to an email address: jason@clientcompany.com.
We asked the CEO, “Who is Jason?”
There was a long silence. “Jason was our Sales Director. We fired him three years ago.”
The Danger: For three years, every single high-value lead from their website was being emailed to a dead inbox. Since the IT team simply deleted Jason’s email account but never updated the website form, the emails bounced into oblivion. They had likely lost hundreds of thousands of dollars in potential business because nobody checked the plumbing.
The Spade Fix: We don’t rely on simple email notifications. In our Relaunch Package, we integrate forms directly into your CRM (HubSpot, Salesforce, etc.). We set up “fail-safe” logging so that every submission is saved in a database backup. We ensure that leads can never vanish, even if an employee leaves.
Recommended Reading: The Way of Tea: Why “Efficient” Sales Processes Are Killing Your Relationships
Artifact #3: The 50-Megabyte Homepage
The Discovery: The client had a beautiful “Meet the Team” section. It looked crisp.
When we audited the media library, we found that the marketing assistant had been uploading raw, high-resolution photos directly from the photographer’s camera.
-
Image size: 12MB per photo.
-
Format: Uncompressed PNG.
-
Total Page Weight: The homepage was a staggering 55MB.
The Danger: To a user on office Wi-Fi, the site loaded in 4 seconds. Acceptable (barely). But to a potential client checking the site on their phone in a parking lot (4G LTE)? The site took 22 seconds to load. Nobody waits 22 seconds. They hit “Back” and go to a competitor. The client was effectively blocking 50% of their mobile traffic without knowing it.
The Spade Fix: We implemented an automated image optimization pipeline. Now, when they upload a 12MB photo, our system auto-resizes it to WebP format, compressing it to 150kb with zero loss in visual quality. The homepage now loads in 0.9 seconds.
Artifact #4: The SEO “Parasite”
The Discovery: We ran a backlink audit (checking who links to the website). We found thousands of links coming from suspicious domains in Russia and China, pointing to a hidden directory on the client’s server: /wp-content/uploads/2021/sneakers/.
The Danger: Years ago, a bot had guessed a weak password, created a hidden folder, and created thousands of fake pages selling knock-off shoes. They were using the client’s domain authority to scam Google. Even though the pages weren’t visible in the menu, Google saw them. Google flagged the client’s domain as “Spammy,” capping their ability to rank for legitimate keywords.
The Spade Fix: We “burned the fields.” We identified the intrusion, patched the security hole, deleted the directory, and submitted a “Disavow File” to Google, formally telling them, “These links are not us.” Within three months, their legitimate traffic began to recover as the penalty was lifted.
Recommended Reading: The Wrong Side of the Fabric: Why Your Website’s “Inside” Matters More Than the Outside
Why You Need a Digital Excavation
Most business owners treat their website like a billboard—set it and forget it.
But a website is more like a house. If you don’t open the windows, clean the vents, and check the foundation for termites, it degrades. Entropy is real, even in code.
You cannot find these problems by looking at your homepage. You can only find them by digging.
This is why we refuse to simply “skin” a website. If we just put a new design on top of this client’s existing backend:
-
The Zombie plugins would still be there.
-
The leads would still be going to Jason.
-
The Russian bot farm would still be using their domain.
The Relaunch Package is your opportunity to stop the rot. It is a chance to clear the debt, secure the perimeter, and build a clean, efficient engine for the next phase of your growth.
Conclusion: What’s Buried in Your Site?
The story above is not unique. We find a version of this in almost every audit we perform for companies that have been around for more than five years.
You have built a successful business. You have insurance for your building. You have audits for your taxes.
Why are you leaving your primary sales channel unchecked?
Don’t wait for the site to crash, or for the hack to happen. Let’s put on the gloves and see what’s really going on underneath.
Let’s start the dig. Book Your Digital Audit
Recommended Reading
-
Don’t Let Your Website Get Stuck in Digital Gridlock – Preventative maintenance tips to stop your new site from becoming a graveyard.
-
Target Fixation: What 160mph Taught Me About Strategic Focus – Learn how to focus on the structural health of your business rather than just the surface metrics.
External Sources
-
Wordfence: The State of WordPress Security 2025
-
Google Webmasters: Hacked Sites and Security
-
HubSpot: The Cost of Bad Data
