How to Run an SEO Audit (Step-by-Step)

An SEO audit is a comprehensive evaluation of your website's search engine optimization health. It is the single most valuable exercise you can run before investing in content, links, or paid promotion, because it tells you exactly where your site is leaking traffic and which fixes will move the needle fastest. Regular audits help you identify issues, track improvements, recover from algorithm updates, and stay ahead of competitors who are not paying attention.

This guide walks you through a complete, end-to-end SEO audit for 2026 in the order a professional would actually run it: crawl and indexation first, then technical health, on-page, content, links, Core Web Vitals, structured data, and finally AI readiness. At each step you will find what to check, why it matters, what tools to use, and how to turn findings into a prioritized action plan. Work through it once a quarter for a healthy site, or monthly if you publish frequently or operate in a competitive niche.

Before You Start: Set Up Your Baseline

A good audit is comparative. You need to know where you stand today so you can measure progress later. Before touching anything, capture a baseline of the metrics you care about.

• Verify ownership in Google Search Console and Bing Webmaster Tools so you have access to real crawl, index, and query data.
• Record current rankings for your top 20-30 target keywords, plus your total organic clicks and impressions over the last 90 days.
• Note your indexed page count with a site:yourdomain.com search and compare it to the number of pages you intend to have indexed.
• Export your current sitemap and a full crawl of the site so you have a frozen snapshot to diff against after fixes ship.

Decide on scope too. A small brochure site can be audited in full. A large e-commerce or publisher site with hundreds of thousands of URLs needs a sampling strategy: audit templates (one product page, one category, one article) rather than every individual URL. Run a full audit with DarnItSEO to generate this baseline automatically, then track changes over time on your dashboard.

Step 1: Crawl and Indexation

Everything in SEO depends on two things happening: search engines must be able to crawl your pages, and they must choose to index them. If a page is not indexed, nothing else you do to it matters. Start here.

Crawl the site like a bot

Run a full crawl to discover every URL a bot can reach by following links. A crawler reveals orphan pages (pages with no internal links pointing to them), redirect chains, broken links, and pages blocked by directives. Compare the crawled URL list against your sitemap and your analytics: URLs in your sitemap that the crawler cannot reach are orphaned and will struggle to rank.

Check indexation coverage

Open the Pages report in Google Search Console (formerly the Index Coverage report). It groups your URLs into indexed and not-indexed buckets with reasons. Pay close attention to these statuses:

• Crawled - currently not indexed — Google saw the page but judged it not worth indexing. Usually a sign of thin or duplicate content.
• Discovered - currently not indexed — Google knows the URL exists but has not crawled it, often a crawl-budget or internal-linking problem.
• Duplicate without user-selected canonical — Google picked a different canonical than you intended.
• Blocked by robots.txt — A directive is preventing crawl. Confirm it is intentional.
• Excluded by noindex tag — Confirm this is intentional and not an accidental leftover from staging.

Tools: Google Search Console Pages report, the URL Inspection tool for individual pages, and a crawler for the link-graph view. Read our technical SEO checklist for a deeper crawl walkthrough.

Step 2: Technical Foundation

With indexation understood, audit the technical signals that govern how cleanly your site can be crawled and served.

• Check robots.txt — Make sure important pages aren't blocked and that you are not accidentally blocking CSS or JavaScript. Validate it with our robots.txt tester and see the full meta tags guide for related directives.
• Verify XML sitemap — Ensure it's submitted, returns 200, lists only canonical, indexable, 200-status URLs, and is referenced in robots.txt. Check it with the sitemap validator or build a clean one with the sitemap generator.
• Test HTTPS — Every page should serve over HTTPS and every HTTP request should 301-redirect to its HTTPS equivalent. Mixed-content warnings undermine trust and can break rendering.
• Check redirect chains and loops — Fix any chain longer than one hop. Each extra redirect wastes crawl budget and dilutes link equity. Redirect loops trap crawlers entirely.
• Find broken links — Identify and fix internal 404s and 5xx errors. Broken internal links waste crawl budget and frustrate users; broken outbound links erode trust.
• Review canonical tags — Each page should self-canonicalize unless it is a deliberate duplicate. Conflicting canonicals confuse Google. Validate with the canonical checker.
• Confirm mobile parity — Google indexes the mobile version of your site. The mobile page must contain the same content, links, and structured data as the desktop version.
• Audit URL structure — Short, lowercase, hyphen-separated, descriptive URLs without session IDs or excessive parameters crawl and rank better.

Tools: a site crawler for redirects and broken links, Google Search Console for HTTPS and mobile usability, and our meta tag analyzer for canonical and directive checks.

Step 3: On-Page SEO

On-page SEO is about making each page's purpose unmistakable to both users and search engines. Evaluate the HTML elements of your key pages.

• Title tags — Unique per page, roughly 50-60 characters, front-load the primary keyword, and read like something a human would click.
• Meta descriptions — Unique, 150-160 characters, written as ad copy that earns the click. Google may rewrite them, but a strong description still lifts click-through rate.
• H1 tags — Exactly one per page, containing the primary keyword and matching search intent.
• Header hierarchy — A logical H1 > H2 > H3 outline. Headings should describe the content beneath them and help both readers and AI extractors skim.
• Image alt text — Descriptive alt attributes on every meaningful image. Decorative images get empty alt text so screen readers skip them.
• Internal links — Important pages should be linked from relevant body content using descriptive anchor text, not generic "click here".
• Open Graph and Twitter cards — Correct social meta tags ensure your pages look good when shared, which drives traffic and indirect ranking signals.

Tools: the meta tag analyzer for titles, descriptions, and social tags, plus a crawler to find duplicate or missing titles at scale.

Step 4: Content Quality

Search engines reward content that genuinely satisfies the query better than the alternatives. In 2026, with AI-generated content flooding the web, originality and demonstrable expertise matter more than ever.

• Thin content — Pages with little unique value (often under a few hundred words, but word count is a symptom, not the rule) may not deserve to rank. Improve, consolidate, or remove them.
• Duplicate and near-duplicate content — Check for identical pages, boilerplate-heavy templates, and content syndicated without canonicals.
• Content freshness — Update outdated statistics, screenshots, and advice. Freshness is a ranking factor for time-sensitive queries.
• Search intent match — Each page should satisfy the dominant intent behind its target query (informational, commercial, transactional, or navigational). Mismatched intent is the most common reason good content fails to rank.
• Keyword targeting — Each page should own a specific keyword cluster without cannibalizing other pages that target the same terms.
• E-E-A-T signals — Demonstrate Experience, Expertise, Authoritativeness, and Trust through author bios with credentials, first-hand experience, citations to primary sources, and clear contact and policy pages. Audit these with our E-E-A-T auditor.

For a deeper grounding in how content fits the bigger picture, read what is SEO.

Step 5: Internal Links and Backlinks

Links remain one of the strongest ranking signals, and they come in two flavors: internal links you control and external backlinks you earn.

Internal linking

Internal links distribute authority (often called link equity) across your site and tell Google which pages matter most. Audit for:

• Orphan pages — Valuable URLs with zero internal links pointing to them. They rarely get crawled or ranked.
• Click depth — Important pages should be reachable within three clicks of the homepage.
• Anchor text — Use descriptive, varied anchors that describe the destination.
• Hub-and-spoke structure — Group related content into topic clusters with a pillar page linking out to supporting articles and back.

Backlink profile

Audit the links pointing to your site for quality, relevance, and risk:

• Referring domains — The count of unique sites linking to you matters more than raw link count.
• Anchor text distribution — A natural profile is mostly branded and URL anchors with some exact-match. An over-optimized profile can trigger penalties.
• Toxic links — Identify spammy, paid, or link-farm domains. Most of the time you can ignore them, but a clearly manipulative pattern may warrant a disavow.
• Link gaps — Find domains linking to several competitors but not to you; these are your best outreach targets.

Tools: Google Search Console's Links report for a free backlink sample, and a dedicated backlink tool for referring-domain and anchor analysis.

Step 6: Core Web Vitals and Performance

Page experience is a confirmed ranking factor, and speed directly affects conversions. Measure both lab data (a synthetic test) and field data (real users via the Chrome User Experience Report).

• Largest Contentful Paint (LCP) — The main content should render within 2.5 seconds. Slow LCP usually traces to large images, slow servers, or render-blocking resources.
• Interaction to Next Paint (INP) — Keep below 200 milliseconds. INP replaced First Input Delay in 2024 and measures real responsiveness to clicks and taps. Heavy JavaScript is the usual culprit.
• Cumulative Layout Shift (CLS) — Stay at or below 0.1. Reserve space for images, ads, and embeds so the layout does not jump as it loads.
• Page weight — Aim to keep total transfer size lean; compress images to WebP or AVIF and lazy-load below-the-fold media.
• Render-blocking resources — Defer non-critical JavaScript and inline critical CSS to speed up first paint.

Tools: Google PageSpeed Insights and the CrUX report for field data, plus our Core Web Vitals checker for a quick read on any URL.

Step 7: Structured Data and Schema

Structured data (Schema.org markup in JSON-LD) helps search engines understand your content and unlocks rich results that boost click-through rate. In 2026 it also feeds AI systems that summarize and cite the web.

• Validate existing markup — Run pages through a schema validator to catch syntax errors and missing required properties.
• Match schema to page type — Use Article for blog posts, Product and Offer for e-commerce, FAQPage for Q&A, Organization and WebSite sitewide, and BreadcrumbList for navigation.
• Keep markup honest — Structured data must reflect content visible on the page. Misleading markup risks manual penalties.
• Check rich result eligibility — Confirm in Search Console's Enhancements reports which rich results you qualify for and fix any errors flagged there.

Tools: our schema tools to generate and validate JSON-LD, and Search Console's rich-result reports for live eligibility.

Step 8: Security

Security is both a trust and an SEO concern. A compromised or insecure site can be flagged, deindexed, or penalized.

• SSL certificate — Valid, not expired, and correctly configured across all subdomains.
• Security headers — Implement HSTS, Content-Security-Policy, X-Content-Type-Options, and Referrer-Policy.
• Mixed content — No HTTP resources loaded on HTTPS pages.
• Vulnerability and malware scan — Check for known CMS or plugin vulnerabilities and confirm the site is not flagged in Search Console's Security Issues report.

Step 9: AI Readiness and Answer Engine Optimization

Search is no longer just ten blue links. Google's AI Overviews, ChatGPT search, Perplexity, and other answer engines now intercept a large share of informational queries. Auditing for AI visibility, sometimes called Answer Engine Optimization (AEO) or Generative Engine Optimization (GEO), is now a core part of any modern SEO audit.

• AI crawler access — Decide deliberately which AI bots you allow. Blocking the wrong crawler can erase you from AI answers; allowing all may give away training data. Review the trade-offs in our AEO optimization guide.
• llms.txt — Publish an llms.txt file that describes your most important content for AI assistants.
• Citability — Format content so it is easy to extract and quote: clear headings, concise answer-first paragraphs, definition lists, and factual statements with sources.
• Structured data — The same schema that powers rich results helps AI systems parse and trust your content.
• Brand mentions — Track whether and how AI engines mention your brand. Check your standing with our AI visibility tools and learn the framework on the AEO hub.

Step 10: Build a Prioritized Action Plan

An audit is only useful if it ends in action. Prioritize every finding by impact versus effort so you fix the highest-leverage problems first.

1. Critical fixes — Deindexed pages, broken canonicals, robots.txt blocking the whole site, security flags, and 5xx errors. These cap everything else, so fix them immediately.
2. High-impact improvements — Title tags on money pages, Core Web Vitals failures, mobile parity issues, and intent mismatches on pages that are close to ranking.
3. Quick wins — Missing meta descriptions, absent alt text, internal links to orphan pages, and simple schema additions. Low effort, real gains.
4. Long-term projects — New content to fill topic gaps, link-building outreach, sitewide schema rollout, and performance re-architecture.

Assign each item an owner and a deadline, then re-crawl after changes ship to confirm the fix and watch for regressions.

The 2026 SEO Audit Checklist

Use this condensed checklist to run through an audit quickly. Each line maps to a step above.

• Baseline captured: rankings, clicks, impressions, indexed page count, full crawl saved.
• Crawl complete: orphans, redirect chains, and broken links identified.
• Indexation reviewed: Search Console Pages report triaged by status.
• robots.txt and sitemap validated and consistent with each other.
• HTTPS enforced sitewide with no mixed content.
• Canonicals correct and self-referencing where expected.
• Titles, meta descriptions, and H1s unique and intent-matched.
• Thin and duplicate content improved, consolidated, or removed.
• E-E-A-T signals present on every important page.
• Internal links audited; no orphans, click depth under three.
• Backlink profile reviewed for quality and toxic patterns.
• Core Web Vitals pass in field data (LCP, INP, CLS).
• Structured data validated and matched to page type.
• Security headers and SSL confirmed; no security flags.
• AI readiness checked: crawler access, llms.txt, citability.
• Findings prioritized into a dated action plan with owners.

Automate Your Audit

DarnItSEO runs all of these checks automatically. Enter any URL and get a complete SEO audit with scores, recommendations, and an AI-generated action plan in seconds, then track progress over time on your dashboard. Compare the cost of doing this manually against a subscription on the pricing page. For deeper dives, pair the report with our Core Web Vitals checker, meta tag analyzer, and E-E-A-T auditor as standalone spot checks.

SEO Audit Tools and What Each One Is For

No single tool covers an entire audit, so most professionals stitch together a small stack. Knowing what each tool is actually good at saves you from drowning in overlapping data. Here is how the common categories map to the steps above.

• Search Console and Bing Webmaster Tools — Your source of truth for how search engines actually see your site: index coverage, queries, click-through rate, manual actions, and security flags. Free and irreplaceable, because the data comes straight from the engines themselves rather than an estimate.
• A site crawler — Builds the link graph that reveals orphan pages, redirect chains, broken links, and duplicate titles at scale. This is the only practical way to see structural problems across thousands of URLs at once.
• Performance tools — PageSpeed Insights and the Core Web Vitals checker measure speed in both lab and field conditions so you can separate a one-off slow test from a pattern real users feel.
• Validators — The meta tag analyzer, schema markup tester, robots.txt tester, and sitemap generator each confirm a single signal is correct, which is invaluable when you need a definitive yes-or-no answer on one element.
• E-E-A-T and AI tools — The E-E-A-T auditor and AI visibility checks cover the newer signals that traditional crawlers ignore entirely.

The friction with a hand-assembled stack is that you must export, normalize, and reconcile data from each source yourself. An all-in-one platform like DarnItSEO runs these checks together and reconciles them into one prioritized report, which is the real time saver: not the crawling, but the synthesis.

Frequently Asked Questions

How often should I run an SEO audit?

Run a full audit at least quarterly for a stable site, and monthly if you publish frequently, run a large e-commerce catalog, or operate in a competitive niche. Beyond the scheduled audits, run a focused mini-audit whenever you migrate platforms, redesign, or notice a sudden traffic drop, since those events are the most common cause of new technical problems.

How long does an SEO audit take?

A manual audit of a small site takes a focused day or two; a large site can take a week or more. Automated tools collapse the data-gathering into seconds, leaving you to spend your time on interpretation and fixes rather than crawling and spreadsheets. The fixes themselves, of course, can take weeks depending on how many issues you uncover.

What is the most important part of an SEO audit?

Crawl and indexation, because nothing downstream matters if your pages cannot be found or are not in the index. After that, the highest-leverage areas are usually search-intent match on your money pages and Core Web Vitals, since both directly affect rankings and conversions.

Do I need paid tools to run an SEO audit?

No. Google Search Console, Bing Webmaster Tools, and PageSpeed Insights are free and cover crawl, indexation, and performance. Paid tools and platforms like DarnItSEO save time by consolidating these signals, crawling at scale, and turning findings into a prioritized action plan, but you can run a credible audit with free tools and patience.

How is an SEO audit different in 2026?

The fundamentals (crawlability, content quality, links, speed) are unchanged, but two areas now carry far more weight: AI readiness and demonstrable E-E-A-T. With AI Overviews and answer engines intercepting informational queries, you must audit how AI crawlers access your site, whether your content is citable, and whether your expertise is provable. Generic, unsourced content that ranked in 2020 increasingly does not.

What should I fix first after an audit?

Fix anything that blocks indexation or trust first: a stray sitewide robots.txt block, accidental noindex tags, broken canonicals, security flags, and server errors. These act as a ceiling on all your other efforts. Only once those are clear should you move on to high-impact on-page and performance improvements, then quick wins.

Can I undo damage from a previous bad audit or migration?

Usually, yes. Most ranking losses from a botched migration trace to lost redirects, changed URLs, or accidental noindex and robots.txt rules. Restore the missing 301 redirects, reinstate canonical URLs, remove the blocking directives, resubmit your sitemap, and request reindexing in Search Console. Recovery typically follows within a few crawl cycles once the underlying signals are corrected.

Should I audit my whole site or just a few pages?

It depends on size. A small site of a few dozen pages can and should be audited in full. For a large catalog or publisher with tens of thousands of URLs, auditing every page is wasteful, because most issues repeat across templates. Audit one representative URL from each template instead: one product page, one category page, one article, one landing page. Fixing the template fixes every page built from it. Reserve full-site crawls for structural checks like orphan detection and broken links, where you genuinely need to see every URL.

How do I know if my audit fixes actually worked?

Compare against the baseline you captured at the start. After changes ship, re-crawl the affected URLs to confirm the technical fix is live, then watch Search Console over the following two to four weeks for movement in impressions, average position, and index coverage. Give Google time to recrawl and reprocess before judging results; rankings rarely move the same day. If a metric gets worse instead of better, treat it as a regression and roll back to investigate rather than layering more changes on top.