You searched "how to do an SEO audit" and the first eight results are the same article wearing eight different hats.
Step one, crawl your site with Screaming Frog. Step two, check your Core Web Vitals. Step three, here is a 47-point checklist arranged in no particular order that will take you four months to complete and leave you more confused than when you started. Step four, please hire us.
We get it. There's a reason every agency on the internet writes the same SEO audit post. The content ranks, the keyword has volume, and the people searching for it are usually about to spend money. So the SEO industry has produced approximately ten thousand of them, and they are all almost completely identical.
We are going to do something different. This is the audit a senior consultant would actually run on your site if you handed them the keys for a day and asked "what's broken." Not the audit that an enterprise sales team wrote to sell you a software subscription. Just the real one.
Settle in. Or scroll to the section that's already keeping you up at night. We are not the boss of you.
An SEO audit is a structured review of your website to figure out why it's not performing the way it should, and what to do about it. That's the whole definition. The rest is detail.
Here's what most "audit guides" get wrong. They treat an audit like a checklist. Go down the list, check the boxes, fix the red items, ship it. This is fine for catching small problems. It is useless for catching the big ones.
The reason is that SEO problems are almost always systemic, not individual. A page isn't ranking, sure. But why? Because the page is bad? Because the site architecture is broken? Because Google deindexed half your category pages in a quiet update last month? Because you're cannibalizing your own content with three articles targeting the same query? A checklist will tell you the page is missing an H2. A real audit will tell you that the missing H2 is the least of your problems.
So we're going to walk through the audit the way it actually unfolds in a real working session. Not in tier order. Not in checklist order. In the order it makes sense to ask the questions.
Before anything else, confirm that the basic plumbing works. You'd be amazed how many "we lost all our rankings" emergencies trace back to a single line of code that someone added to robots.txt during a redesign and forgot about.
Check Google Search Console first. Specifically the Pages report. This shows you which pages are indexed and which ones are not, and gives you the reason for the exclusion. If a chunk of your important pages are sitting in "Crawled but not indexed" or "Discovered but not indexed," that's the headline of your audit before you've even started. Spend a real hour with this report.
Check your robots.txt file. Visit yourdomain.com/robots.txt. Read it. If you see Disallow: / anywhere, your site is telling search engines to ignore the entire thing. We are not joking. This has happened to more sites than you would believe.
Check for noindex tags on pages that should be indexed. Sometimes these get left over from staging environments. Sometimes they get added by a plugin nobody remembers installing. View the source code of your homepage and your top five product or service pages. Search for "noindex." If you find it on a page that should be ranking, congratulations, you found your problem in 12 minutes.
Check your XML sitemap. Visit yourdomain.com/sitemap.xml. It should exist. It should be referenced in your robots.txt file. It should be submitted to Google Search Console. The pages listed in it should be the ones you actually want indexed, not a graveyard of old test pages and broken URLs.
If anything in this phase is broken, fix it before you go any further. Everything else on this list is irrelevant if Google can't see your pages.
This is the part nobody else's audit guide includes, and it is the most important phase of the whole exercise.
Pull up your homepage. Read it the way a stranger would. Ask yourself: in three seconds, can a person tell what this company does, who it's for, and why they should care?
Now imagine an AI engine reading your homepage. Can the AI extract a clean two-sentence answer to "what does this company do" from the content above the fold? If the answer is "kind of, with some context," that's a problem.
This is where most audits go off the rails. They get so deep into technical fixes that they never stop to ask whether the site is even communicating its own value clearly. You can have perfect Core Web Vitals and a sitemap from heaven and still not rank, because your content has no clear thesis. The robots cannot extract what was never put in.
Check your homepage H1. Does it say what you do? Or is it a brand slogan that means nothing to a stranger?
Check your title tags across your top 10 pages. Are they descriptive, specific, and entity-rich? Or are they all "Home," "About," "Services," and "Blog"?
Check your category and service page hierarchy. Does your site architecture reflect what your business actually does, or is it a fossil from a redesign three years ago?
This phase is not technical. It is strategic. And it is where the biggest ranking wins are usually hiding.
Pull up Google Search Console again. Go to the Performance report. Sort your queries by impressions, descending.
Now look at the top 20 queries that bring you the most impressions but where you're ranking on page 2 or 3. These are your goldmine. You're already showing up. You're just not showing up high enough. Often, the difference between page 2 and page 1 is not "create new content," it is "make the existing content better."
For each goldmine query, pull up the page that ranks. Read it like an actual user. Then read the top 3 results on Google for that query. What do they have that you don't? Is it depth? Is it structure? Is it real expertise? Is it that they answered the question and you didn't?
Check for content cannibalization. Search your own site (site:yourdomain.com "query") and see how many pages are competing for the same search term. If you have four blog posts all trying to rank for "best running shoes for flat feet," they are competing with each other and none of them is going to win. Pick the strongest one. Consolidate the others into it. Redirect the URLs.
Check for thin content. Pages under 300 words that exist purely to target a keyword are doing nothing for you in 2026. AI engines and Google's own ranking systems both penalize this kind of content. Either bulk it up with real expertise or delete it.
Check your most important pages for E-E-A-T signals. Is there a named author with a bio? Do you cite sources? Does the content demonstrate actual expertise, or could it have been written by anyone with a thesaurus?
If you do nothing else in your audit, do this phase well. Content is the single biggest factor in whether a page ranks. The rest is amplification.
Now we get to the part every other audit guide leads with. We saved it for fourth because if Phases 1 through 3 are broken, this stuff doesn't matter.
Run a crawl with Screaming Frog (free up to 500 URLs) or Sitebulb. Look for the obvious problems: 404 errors, broken internal links, redirect chains, missing meta descriptions, duplicate title tags. Fix the ones that affect important pages first. The 404 on a blog post from 2019 can wait.
Check Core Web Vitals. Google PageSpeed Insights will tell you. Focus on LCP (how fast your main content loads), CLS (whether your layout jumps around), and INP (how responsive your page feels). The bar in 2026 keeps rising. Slow sites get crawled less, and the pages that get crawled less get cited less.
Check mobile usability. Google has been mobile-first for years now. If your site is hard to use on a phone, you're losing rankings whether you realize it or not.
Check your structured data. Use Google's Rich Results Test on your top pages. If you have schema markup, verify it's valid. If you don't have schema markup on your most important pages, this is a quick high-leverage fix.
Check HTTPS, security headers, and crawl errors. Boring. Necessary. Don't skip it.
Backlinks still matter. They matter for traditional search, and they matter for AI search (we wrote about why the off-site web is one of the strongest signals for AI citations in our piece on the citation gap).
Pull your backlink profile. Free tools like Ahrefs Backlink Checker or Moz Link Explorer will give you the basics. Look at the domains linking to you. Are they actual publications, industry sites, and trusted sources? Or are they sketchy directories and forum spam from a decade ago?
Identify your highest-authority links. What did you do to earn them? Can you do more of that thing?
Check your competitors' backlink profiles. Where are they getting links that you aren't? This is your prospect list for outreach.
Check brand mentions across the open web. Search your brand name across Wikipedia, Reddit, Quora, trade publications, and review sites. Are you showing up? Is the information accurate? Is it up to date? This part is increasingly important for AI search visibility specifically.
This is the part of an audit nobody was running two years ago and everyone should be running now.
Test your top 10 commercial queries inside ChatGPT, Perplexity, and Google AI Mode. Phrase them the way a real human would. Note where you appear and where you don't. If you're ranking on Google but invisible in AI engines, you have a citation gap.
Check your AI crawler access. Look at your robots.txt for GPTBot, ClaudeBot, PerplexityBot, Google-Extended. If you're behind Cloudflare, double check that AI bots aren't being blocked at the network level. Cloudflare changed defaults to block AI bots in 2024 and a lot of sites got accidentally locked out.
Audit your pages for AI extraction. Pick your highest-traffic page. Can an AI engine pull a clean, complete two-sentence answer from it? If not, that's a structural problem, not a content problem.
For the longer version of this, we wrote a whole piece on the Citation Gap that covers why ranking on Google no longer guarantees you'll be cited by ChatGPT, and what to do about it.
Most audits fail at this step, not the previous six. You find 47 problems. You make a spreadsheet. The spreadsheet sits in a Google Drive folder. Six months pass. Nothing changes.
Don't do that.
Take everything you found and sort it into three buckets. Quick wins (fix this week). Medium projects (fix this quarter). Strategic overhauls (plan for the next two quarters). Then actually do the quick wins. This week. Not "soon." This week.
The brands that win at SEO are not the ones who run the most thorough audits. They are the ones who actually implement the findings. The audit is the easy part. The execution is where the real work lives.
Run this on your site. Tell us what you found. Or better yet, tell us which phase made you wince, because the part that makes you wince is almost always where the biggest ranking wins are hiding.