Three free tools, and one of them matters more than the other two. Google Search Console tells you how Google sees your site, which nothing else can. An analytics counter, Google's GA4 being the default, tells you who came and from where. A session-recording tool like Microsoft Clarity shows what visitors actually did once they arrived. All three cost nothing, take an afternoon together, and answer different questions — which is the part that gets missed when someone installs one of them and calls it done.
The judgment worth having is which question each tool answers, and the discipline of asking one question at a time.
The one that isn't optional
Search Console is the only tool on this list where skipping it means flying blind on something you cannot see any other way. Analytics counts people after they reach you. Search Console reports the step before that: whether Google has even filed your pages, what searches surfaced you, and whether anything is broken from Google's side of the glass.
Here is what that looks like in practice, from our own account. Our site's map of pages, the sitemap, lists 24 pages. On the day we checked this month, 6 were indexed, meaning filed and eligible to appear in results, and 8 were sitting in "discovered, not indexed" — Google knows they exist and has not judged them worth filing yet. That is a normal report card for a domain that is months old, and it is also a work list no other tool would ever have shown us. A page that isn't indexed cannot rank, cannot be quoted, and cannot be found, no matter how good it is, and without this report you would simply never know which of your pages are in that state.
Setup has one decision worth getting right the first time: Verify at the domain level, through your DNS records, rather than page-by-page with a pasted tag. Domain verification covers every version of your address at once, www and bare, which quietly enforces the address discipline that has its own entry on this checklist. Then submit your sitemap, once, and Search Console re-reads it on its own from then on. Ours reports Success and a re-read this week without anyone touching it.
The counter and the camera
GA4 is the census: how many people, from where, landing on what. For a small business the useful questions are blunt. Is anybody coming? From search, from the Google profile, from that Facebook post? Did the thing you did last month change the line? Resist the deeper reports until a blunt question actually needs them. GA4 can answer questions most small businesses are not yet asking, and its menu of options is where owners go to feel busy.
Clarity is the camera: anonymized recordings and heat maps of real sessions. Ten minutes of watching replays teaches you things no chart can, in the currency of specific embarrassments. The button nobody notices. A form field people retype three times. The paragraph where every phone visitor stops scrolling. We run it on our own site precisely because the chart says "visited the contact page, left" and the replay says why.
Both go in with two disciplines. Tag production only, so your test and preview environments never pollute the numbers. And exclude yourself, because on a small site the most frequent visitor is you, checking your own work, and the data will flatter you into thinking traffic doubled the week you edited daily. We learned the exclusion lesson on our weather property the strange way. The owner's own ad-blocking DNS was silently eating the tracking scripts, which first looked like the tool was broken and then, once fixed, revealed how much of the "traffic" had been him all along. Filter yourself out on day one and neither confusion ever happens.
The judgment calls
Add tools when a question demands one, not before. We added a third traffic tool to our own stack for one narrow reason, cross-checking search-referral counts, and it earns its slot by answering that one question. A tool with no question attached is a subscription with a dashboard.
Free is the correct price at this stage. Everything above is free at every scale a small business will reach. Paid analytics earns its cost when you have traffic volumes and team sizes that make sampling and permissions real problems, which is a good problem to defer.
Check monthly, not daily. A small site's daily numbers are noise with a user interface. The honest cadence is a monthly look with three questions written down in advance: did anything break, what did search send, what did people struggle with. Twenty minutes. More frequent checking does not produce more insight; it produces mood swings.
What none of this can see
Every tool above watches your website. None of them can see the conversation where someone asked an AI assistant for a recommendation and acted on the answer without ever clicking through — a surface that has to be measured a different way entirely. And none of them counts the phone call from the person who found your number on your Google profile and never touched the site. The instruments are real, and they are pointed at a shrinking fraction of how customers actually decide.
Which is the right frame for the whole item. An afternoon of free setup buys you the report card, the census, and the camera, and those three will answer most questions a small business actually has about its website. The questions they can't answer are the interesting ones, and knowing exactly where your instruments go blind is worth almost as much as the instruments.