How to do an SEO audit step by step

An SEO audit is a structured review of your website that finds what stops it from ranking and tells you what to fix first. You check crawling and indexing, technical health, on-page content, backlinks and search performance, then turn the findings into a prioritized list of tasks.

This guide walks through the same order I use with clients. It works for a 50-page SaaS site and for an online store with 100,000 URLs; only the tools and the time needed change.

What an SEO audit should answer and what you need

A good audit answers three questions: can Google find and index the pages that matter, do those pages deserve to rank, and what is the most valuable thing to fix next. Everything you check should connect back to one of those questions.

Before you open any tool, write down the business context. Which pages make money? Which markets and languages do you target? Has traffic dropped recently, and if so, when? An audit for a site that lost half its traffic after a migration looks very different from a routine yearly check.

Also agree on the scope. A full audit covers the whole site. A focused audit might cover only a new blog section, a product category or a recent redesign. Being clear about scope stops the project from growing into something nobody has time to act on.

The tools you need

You need four kinds of data: what Google sees, what a crawler sees, what your analytics show and what your backlink profile looks like. Free tools cover most of it.

• Google Search Console – indexing status, search queries, clicks, manual actions, Core Web Vitals and sitemap reports. This is the closest you get to Google's own view of your site.
• A site crawler such as Screaming Frog SEO Spider or Sitebulb. It finds broken links, redirect chains, missing titles, canonical problems and orphan pages.
• Analytics (GA4 or similar) to see which landing pages bring organic traffic and conversions.
• A backlink tool such as Ahrefs, Semrush or Majestic for the link profile. Search Console's Links report gives a free, partial view.
• PageSpeed Insights for field and lab performance data on key templates.

For large sites, server log files are worth adding. They show which URLs Googlebot actually requests and how often, which a crawler cannot tell you.

Step 1: Check crawling and indexing

Start with crawling and indexing because nothing else matters if Google cannot reach or store your pages. A brilliant page that is blocked or set to noindex will never rank.

Robots.txt and meta robots

Open yoursite.com/robots.txt and read every Disallow rule. I regularly find staging rules that were copied to production, or whole folders blocked by accident. Then use your crawler to list every page with a noindex tag and confirm each one is intentional.

XML sitemaps

Your sitemap should list only canonical, indexable URLs that return a 200 status. Compare the sitemap with your crawl: URLs that redirect, return 404 or carry noindex should not be there. Check that the sitemap is submitted in Search Console and read without errors.

The Page indexing report

In Search Console, open the Page indexing report and go through the reasons pages are not indexed. "Crawled – currently not indexed" and "Discovered – currently not indexed" often point to thin or duplicate content, or to weak internal linking. "Duplicate without user-selected canonical" points to canonical problems.

A quick sanity check: search site:yourdomain.com and compare the rough number with how many pages you expect. A huge gap in either direction is a sign something is wrong.

Step 2: Review technical health

The technical review checks that your site sends clear, consistent signals about which URLs exist and which version of each page should rank. Most problems here come from redirects, canonicals, duplicates and rendering.

• Status codes: fix internal links that point to 404s or to redirects. Replace them with direct links to the final URL.
• Redirect chains: a redirect that goes through three or four hops wastes crawl activity and can lose signals. Point the first URL straight to the destination.
• Canonical tags: each indexable page should have a self-referencing canonical, and canonicals should never point to redirected, noindexed or broken URLs.
• Duplicate content: look for HTTP and HTTPS versions, www and non-www, trailing slash variants and URL parameters that create copies of the same page.
• JavaScript rendering: if your content or links only appear after JavaScript runs, compare the raw HTML with the rendered page using the URL Inspection tool.
• Mobile: Google uses mobile-first indexing, so the mobile version must contain the same content, links and structured data as desktop.

Our technical SEO checklist goes deeper into each of these items if you want a full list to work through.

Step 3: Audit on-page content

The on-page review checks whether each important page targets a clear search intent and gives a better answer than the pages already ranking. This is usually where the biggest wins hide on established sites.

Export your crawl and look at titles, meta descriptions and H1s in bulk. Missing, duplicated or truncated titles are easy to spot in a spreadsheet. Then move on to the questions a crawler cannot answer:

• Does each page target one main topic, or do several pages compete for the same query (keyword cannibalization)?
• Does the content match what searchers want? If the results for a query are all guides, a product page will struggle.
• Is the content thin, outdated or written mainly for search engines?
• Do important pages receive enough internal links from relevant pages, with descriptive anchor text?
• Is structured data valid and does it match the visible content?

Use Search Console's Performance report to find pages with many impressions but a low click-through rate, and pages ranking in positions 5 to 15. Those are often the fastest pages to improve. For the details of each element, see our on-page SEO checklist.

Step 4: Analyze backlinks and performance

The off-page part of the audit checks whether your site has earned enough trusted links to compete, and whether anything in your link profile could cause problems. Then you look at speed and user experience.

Backlinks

Compare your referring domains with the sites ranking above you for your main queries. Look at which of your pages attract links and which important pages have none. Check for a manual action in Search Console under Security and Manual actions.

In my experience, most sites do not need a disavow file. Google ignores most random low-quality links on its own. A disavow makes sense mainly when you have a manual action or know that someone bought large numbers of manipulative links in the past.

Performance and Core Web Vitals

Open the Core Web Vitals report in Search Console and note which URL groups fail on mobile and desktop. Test one representative URL per template in PageSpeed Insights. Our guide to Core Web Vitals explains the thresholds and the usual fixes.

Step 5: Prioritize the fixes

Prioritizing is the most important step, because an audit that lists 200 issues with equal weight usually leads to nothing being fixed. Score each issue on impact, effort and reach, then tackle high-impact, low-effort items first.

Template-level issues deserve extra weight. Fixing one product page template can correct thousands of URLs at once, while fixing individual blog posts one by one rarely moves the needle.

For each task, name an owner (developer, content writer, marketer), estimate the effort and set a date. Then add a simple way to measure the result, such as the number of indexed pages, clicks to a section or the Core Web Vitals status of a URL group.

How often to run an audit

Run a full audit once a year, and a focused one after any major change such as a redesign, a CMS migration, a new market launch or a sudden traffic drop. Between audits, monthly checks in Search Console catch most problems early.

A light monthly routine works well: check the Page indexing report, look at the Performance report for sharp drops, scan for new crawl errors and review any manual action or security messages. It takes under an hour and prevents small issues from growing.

Where to start

Start with Search Console and a single crawl of your site. Those two sources alone will show you most of the critical and high-priority issues, and they cost nothing.

Go through the steps in order, keep your findings in one spreadsheet and finish with a short list of tasks that each have an owner. If you would rather have an experienced second pair of eyes, our SEO audit service follows the same process and ends with a prioritized action plan your team can start on the same week.

Frequently asked questions