How to Do a Website SEO Audit in 2026 (Free + Paid Methods)
Step-by-step SEO audit process used on 100+ sites. Free and paid methods to find and fix technical issues, content gaps, and ranking problems.
Some links on this page are affiliate links. We may earn a commission if you make a purchase — at no extra cost to you.
TL;DR — The Quick Version
An SEO audit checks your site for technical issues, content problems, and backlink red flags that hurt your rankings. You can do a basic audit for free using Google Search Console + Screaming Frog, or use a paid tool like Semrush (140+ automated checks) for a faster, deeper analysis.
I walk through the exact 7-step process I use on every client site below. Takes about 3-4 hours for most sites.
Why You Actually Need an SEO Audit
Here's a number that should bother you: the average website has over 50 technical SEO issues. Not 5. Not 15. Over fifty.
I've audited well over a hundred sites at this point — everything from 20-page local business sites to ecommerce stores with 40,000+ product pages. And I can tell you that every single one had problems the owner didn't know about.
Broken links. Orphaned pages Google can't find. Duplicate title tags. Redirect chains that slow everything down. Content that's literally cannibalizing itself in search results. These aren't edge cases — they're the norm.
The frustrating part? Most of these issues are fixable in a weekend. But you can't fix what you can't see. That's what an audit does — it shows you exactly where the problems are and how bad they are.
Think of it like a health checkup for your website. You might feel fine, but your cholesterol could be through the roof. Same concept here.
And here's the kicker — your competitors are probably auditing their sites. If they're fixing issues and you're not, the gap between your rankings and theirs widens every month. I've watched sites jump 20-30 positions in SERPs within weeks of fixing critical technical issues that a simple audit would've caught months earlier.
So whether you use free tools or paid ones (I'll cover both), the process is the same seven steps. Let me walk you through exactly how I do it.
Step 1: Crawl Your Site
Every audit starts with a crawl. You need software to visit every URL on your site — just like Googlebot does — and catalog what it finds. Broken pages, missing tags, slow responses, redirect issues... the crawl surfaces all of it.
I always start here because the crawl data feeds into every other step. Without it, you're guessing.
Free Option: Screaming Frog
Screaming Frog SEO Spider is the industry standard desktop crawler. The free version handles up to 500 URLs, which covers most small-to-medium sites. If you need more, the paid version is £259/year — still cheaper than most monthly SaaS subscriptions.
Download it, enter your domain, hit "Start," and wait. For a 200-page site, the crawl finishes in under a minute. You'll get a spreadsheet-style view of every URL with status codes, title tags, meta descriptions, H1s, word count, response times, and dozens more data points.
One thing I love about Screaming Frog: you can export everything to a spreadsheet and build your own audit checklist from the raw data. It's more manual than cloud-based tools, but you learn a lot more about your site's architecture when you dig through the data yourself.
Paid Option: Semrush Site Audit
If you want something that does the analysis for you, Semrush's Site Audit tool ($139/mo for Pro plan) runs 140+ checks automatically and gives you a health score out of 100. It flags errors, warnings, and notices — and actually tells you how to fix each one.
I won't pretend the free tools can't do the job. They can. But Semrush saves me roughly 3 hours per audit because I'm not manually cross-referencing spreadsheets. For agencies or anyone auditing sites regularly, it pays for itself fast.
The other thing Semrush does well: it tracks your site health over time. Every time you run an audit, you get a score. You can watch it improve as you fix issues, and you'll spot regression immediately if a new deployment introduces problems. That feedback loop is addictive — in a good way.
Also Worth Considering: SE Ranking
SE Ranking ($103.20/mo on the annual plan) can audit up to 250,000 pages on its Core plan. The interface is cleaner than Semrush, honestly. If you're price-conscious but still want automated auditing, SE Ranking is the sweet spot.
Pro Tip
Before crawling, make sure your robots.txt isn't blocking important sections of your site. I've seen audits miss entire subdirectories because of an overly aggressive robots.txt rule. Check it first at yoursite.com/robots.txt.
Step 2: Check Google Search Console
Google Search Console (GSC) is free, and it's data straight from Google's mouth. No estimation, no third-party guessing. If you don't have it set up yet — stop reading, go set it up, come back tomorrow after it's collected some data.
Here's where I focus in GSC during an audit:
Pages Report (Indexing)
Go to Indexing → Pages. This shows you how many of your pages are actually indexed versus excluded. I once found a client site where 60% of their blog posts were "Discovered — currently not indexed." Sixty percent. They had no idea, and they'd been publishing content for two years.
Common issues you'll spot here: pages blocked by robots.txt, pages with "noindex" tags (sometimes added accidentally), crawled but not indexed pages (usually a quality signal problem), and duplicate pages without canonical tags.
Performance Report
Check your clicks and impressions over the last 6 months. Look for sudden drops — those usually correlate with a technical issue or algorithm update. Also look at your average position for important keywords. If a keyword is sitting at position 11-15, that's a page that could hit page one with some optimization work.
Core Web Vitals Report
GSC now shows you which URLs pass or fail Core Web Vitals based on real user data (the CrUX dataset). This is field data, not lab data — which makes it more reliable than any synthetic test. If Google says your pages are slow, they're slow.
Manual Actions and Security Issues
While you're in GSC, quickly check Security & Manual Actions. Manual actions mean Google has penalized your site for something (usually spammy links or thin content). Security issues mean your site may be hacked or serving malware. Both are rare, but if either shows up, it should be your number-one priority. Everything else on this audit list is secondary until those are resolved.
Pro Tip
Export your GSC Performance data (last 16 months) and look at year-over-year trends. A page that lost 40% of its clicks compared to last year is telling you something — either the content is outdated, a competitor published something better, or a technical issue crept in.
Step 3: Technical SEO Check
This is where a lot of people's eyes glaze over, but it's genuinely the most impactful part of an audit. Technical issues can completely block your site from ranking — no amount of great content will fix a broken foundation.
Here's my checklist:
- 1
robots.txt: Make sure it's not blocking CSS, JS, or important page directories. Check at yoursite.com/robots.txt. I've seen developers accidentally block /assets/ which prevented Google from rendering pages properly.
- 2
XML Sitemap: Submit it in GSC if you haven't already. Check that it only includes 200-status pages (no 404s, no redirects, no noindexed pages). Your sitemap should be a clean list of URLs you actually want indexed.
- 3
Canonical Tags: Every page should have a self-referencing canonical tag, or point to the correct canonical if it's a duplicate. Missing or conflicting canonicals confuse Google about which page to rank.
- 4
HTTPS: Your entire site should be on HTTPS. Check for mixed content (HTTP resources loaded on HTTPS pages). Screaming Frog flags these automatically.
- 5
Redirect Chains: A redirects to B, B redirects to C, C redirects to D... every hop bleeds page authority and slows things down. Find these and flatten them. A should go straight to D.
- 6
Structured Data: Test your pages with Google's Rich Results Test. Schema markup won't directly boost rankings, but it can get you rich snippets — which do boost click-through rates.
Pro Tip
If you're using Semrush Site Audit, it checks all six of these automatically and categorizes issues by severity. Saves a ton of manual work.
Step 4: On-Page SEO Audit
On-page issues are the ones that make me cringe the hardest because they're so easy to fix — yet so commonly neglected. When I audit a client site, I typically find 30-40% of their pages have at least one on-page problem.
Title Tags
Every page needs a unique title tag, ideally under 60 characters so it doesn't get truncated in SERPs. Your primary keyword should appear near the front. Two of the most common issues: duplicate title tags across multiple pages, and title tags that are just the site name with no page-specific keyword.
Meta Descriptions
Google doesn't use meta descriptions as a ranking factor, but they directly affect click-through rate. Keep them under 155 characters, include the target keyword naturally, and write something that makes people want to click. I treat meta descriptions like ad copy — because that's essentially what they are.
Quick reality check: Google rewrites meta descriptions about 70% of the time anyway. But having a well-written one gives Google a strong default to use, and for the 30% of the time they keep yours, it can meaningfully improve your CTR. A page ranking #4 with a compelling description can get more clicks than #3 with a boring one.
H1 Tags
One H1 per page. Just one. It should include your primary keyword. You'd be amazed how many sites either have zero H1 tags (styled divs instead) or multiple H1s on a single page. Both are problems — not catastrophic, but worth fixing.
Also check your heading hierarchy. H2s should be subheadings under H1, H3s under H2s, and so on. Skipping levels (going from H1 straight to H3) won't tank your rankings, but a clean hierarchy helps both Google and screen readers understand your content structure. Takes two minutes to fix when you find it.
Thin and Duplicate Content
Pages with under 300 words rarely rank for anything competitive. During an audit, I flag every page under 500 words and decide: does this need to be expanded, merged with another page, or noindexed? Duplicate content is similar — if two pages say basically the same thing, consolidate them and redirect the weaker URL to the stronger one.
Internal Linking
While you're doing the on-page audit, check your internal links too. Are your most important pages well-linked from other pages on your site? Or are some pages orphaned — existing on your site but not linked to from anywhere? Screaming Frog's crawl data will show you pages with zero internal links pointing to them. Those pages are basically invisible to search engines unless they happen to be in your sitemap.
A good rule of thumb: every page you want to rank should have at least 3-5 internal links pointing to it from relevant content. If your top blog post only has one link from your homepage and nothing else, you're leaving authority on the table.
Step 5: Content Quality Audit
This goes beyond on-page tags. You're evaluating whether your content actually deserves to rank. Google's gotten scary good at understanding content quality, and "good enough" doesn't cut it anymore.
I think of the content audit as the "soul-searching" part of the process. Technical issues are black and white — a canonical tag is either right or wrong. Content quality is subjective, and it forces you to be honest about whether your pages are actually the best result for the queries you're targeting.
Outdated Content
Anything with a year in the title that's passed? Update it or kill it. "Best SEO Tools for 2024" sitting on your site in 2026 tells Google (and users) that you've abandoned it. I export all pages sorted by last modified date and flag anything older than 12 months for review.
Here's a trick I use: sort your pages by organic traffic in GSC, then cross-reference with last modified date. If a page still gets decent traffic but hasn't been updated in over a year, that's your highest-ROI update target. Refreshing a page that already ranks is almost always easier than writing something new from scratch.
Keyword Cannibalization
This is one of the most underrated issues I find. Cannibalization happens when two or more pages on your site target the same keyword. Google doesn't know which to rank, so it often picks neither — or flip-flops between them. Check GSC for queries where multiple URLs show up. Then decide which page is the strongest and consolidate the others into it.
Content Gaps
Use Semrush's Keyword Gap tool or Ahrefs' Content Gap to find keywords your competitors rank for but you don't. This isn't strictly an "audit" task, but I always include it because it reveals opportunities you're leaving on the table.
Pro Tip
When I find cannibalization, my fix is usually: pick the best page, redirect the weaker pages to it, and combine the best content from all versions into one definitive piece. Traffic often doubles within a month.
Step 6: Backlink Profile Review
Backlinks are still a top 3 ranking factor — probably top 2, honestly. But bad backlinks can actively hurt you. This step is about understanding what your link profile looks like and whether there's anything toxic in there.
I'll be honest: this is the one step you really can't do well with free tools alone. Google Search Console shows you some of your links, but the data is incomplete and delayed. For a proper backlink audit, you need a dedicated tool.
Analyze Your Link Profile
You need a tool for this. Ahrefs ($129/mo) has the largest backlink index and is my go-to for link analysis. Semrush's Backlink Audit tool is also excellent and includes a built-in toxicity score.
What you're looking for: total number of referring domains (more diverse domains = better), the quality of those domains (DR/DA scores), anchor text distribution (is it natural or stuffed with exact-match keywords?), and whether you're gaining or losing links over time.
Pay special attention to anchor text. If 40% of your backlinks have the exact same anchor text and it's a money keyword like "best SEO tools," that's an unnatural pattern that could trigger a penalty. A healthy profile has mostly branded anchors, naked URLs, and natural variations. If yours looks off, that's a red flag worth investigating.
Toxic Links and Disavow
Look for links from spammy directories, foreign-language link farms, PBNs, or sites with zero traffic. If you find a pattern of clearly manipulative links — especially if you didn't build them — consider using Google's Disavow Tool. But be careful. I've seen people disavow legitimate links by mistake and tank their own rankings. Only disavow what's clearly toxic.
Broken Backlinks
These are links pointing to your site that land on a 404 page. Free authority, wasted. Find them (Ahrefs makes this easy — go to Site Explorer → Best by Links → filter by 404) and set up 301 redirects to the most relevant live page. This is one of the quickest wins in any audit.
Competitor Link Gap
While you're analyzing backlinks, do a quick competitor comparison. Both Semrush and Ahrefs have link gap tools that show domains linking to your competitors but not to you. These are your best outreach prospects because you know they're willing to link to sites in your space — they just haven't found yours yet. I usually find 50-100 potential link opportunities this way per audit.
Step 7: Mobile and Speed Audit
Google uses mobile-first indexing, meaning they crawl and rank based on the mobile version of your site. If your mobile experience is bad, your rankings will suffer — even for desktop searches. No exceptions.
Google PageSpeed Insights
Run your top 10 most important pages through Google PageSpeed Insights (free). It gives you both lab data (simulated) and field data (real users). Focus on three Core Web Vitals metrics:
- LCP (Largest Contentful Paint): Should be under 2.5 seconds. This measures how fast the main content loads.
- INP (Interaction to Next Paint): Should be under 200ms. This measures responsiveness when users interact with your page.
- CLS (Cumulative Layout Shift): Should be under 0.1. This measures visual stability — does stuff jump around while loading?
Common Speed Killers
In my experience, the same culprits show up over and over: unoptimized images (serve WebP, lazy load below the fold), too many third-party scripts (analytics, chat widgets, social embeds), render-blocking CSS/JS, and no browser caching. Fixing images alone typically improves LCP by 30-40%.
Mobile Usability
Beyond speed, check for: tap targets that are too small (buttons too close together), text that requires horizontal scrolling, and interstitials or popups that block content on mobile. Google Search Console has a Mobile Usability report that flags these specific issues.
One thing I always do: pull up my site on an actual phone, not just Chrome DevTools. Emulators miss things — weird overflow bugs, font sizes that look fine on a simulated screen but are tiny on a real device, slow-loading elements that aren't apparent on a fast office connection. Spend 5 minutes actually browsing your site on a phone over a 4G connection. You'll find problems no tool will catch.
Pro Tip
Don't just test your homepage. Your homepage is usually the fastest page on your site. Test blog posts, product pages, and category pages — those are typically where the real speed problems hide.
Free vs Paid SEO Audit Tools: Honest Comparison
I get this question constantly: "Do I really need to pay for an audit tool?" The honest answer: it depends on your site size and how often you audit.
| Tool | Price | Page Limit | Best For |
|---|---|---|---|
| Google Search Console | Free | Unlimited | Indexing issues, real performance data |
| Google PageSpeed Insights | Free | 1 URL at a time | Speed and Core Web Vitals |
| Screaming Frog (Free) | Free | 500 URLs | Technical crawl for small sites |
| Screaming Frog (Paid) | £259/year | Unlimited | Deep technical crawl, custom extraction |
| SE Ranking | $103.20/mo | 250K pages | Best value paid audit tool |
| Ahrefs | $129/mo | Varies by plan | Backlink audit + site audit combo |
| Semrush | $139/mo | 100K pages/mo | Most thorough automated audit (140+ checks) |
My recommendation: If your site has under 500 pages and you audit once a quarter, the free stack (GSC + Screaming Frog free + PageSpeed Insights) is genuinely sufficient. You'll spend more time on it, but you'll find the same core issues.
Where free tools fall short: they don't prioritize issues for you. Screaming Frog will hand you a data dump and say "good luck." Paid tools like Semrush rank issues by severity and tell you exactly what to fix first. That prioritization alone is worth the monthly cost for a lot of people, especially if you're managing SEO alongside other responsibilities and don't have unlimited time.
If you audit multiple sites, audit monthly, or your site has 500+ pages, a paid tool saves real time. I'd start with SE Ranking if budget is tight, or Semrush if you want the deepest analysis.
How Often Should You Run an SEO Audit?
There's no single right answer, but here's what I tell clients:
-
Full audit every 3 months — This is the baseline. Technical issues creep in constantly as you publish new content, update plugins, and change themes. Quarterly catches problems before they compound.
-
Monthly light check — Run a quick crawl and check GSC for new errors. This takes 30 minutes and catches urgent issues like pages falling out of the index or new 404 errors.
-
After major changes — always — Site migration, CMS update, redesign, new URL structure? Audit immediately. These are the events that break things. I've seen migrations wipe out 70% of organic traffic because nobody checked redirects.
-
After a Google algorithm update — If you see a traffic drop after a confirmed update, an audit helps you identify what got hit and why. Don't panic-audit after every minor fluctuation, though. Wait for confirmed core updates.
If you're using Semrush, you can schedule automated audits that run weekly and alert you when new issues appear. That's what I do for all my active clients — set it and forget it, but you'll get pinged when something breaks.
One more thing: keep a spreadsheet or doc that tracks every audit you run — date, tool used, total issues found, issues fixed, and a health score. Over time, you'll see trends. Your site health should be going up over time. If it's flat or declining, something in your workflow is introducing new problems as fast as you're fixing old ones.
Your SEO Audit Checklist (Quick Reference)
Here's a condensed version of everything above. Bookmark this or print it out for your next audit:
- 1. Crawl site with Screaming Frog or Semrush — fix 4xx/5xx errors
- 2. Check GSC indexing — ensure important pages are indexed
- 3. Verify robots.txt, sitemap, canonicals, HTTPS, structured data
- 4. Audit title tags, meta descriptions, H1s — fix duplicates and missing tags
- 5. Flag thin content (under 500 words), outdated posts, keyword cannibalization
- 6. Review backlink profile — disavow toxic links, reclaim broken backlinks
- 7. Run PageSpeed Insights on top pages — fix LCP, INP, CLS issues
- 8. Test on real mobile device — check usability, tap targets, font sizes
- 9. Document everything — track issues found vs. issues fixed over time
Ready to Audit Your Site?
The best time to audit your site was 6 months ago. The second best time is right now. Pick a tool, block out 3 hours, and work through the 7 steps above. You'll be surprised what you find.
Both Semrush and SE Ranking offer free trials, so you can run your first full audit without spending a cent.
SEO Audit FAQ
How long does a full SEO audit take?
Can I do an SEO audit for free?
What is the best SEO audit tool?
How often should I audit my website?
What should I fix first after an audit?
Do SEO audits actually improve rankings?
Written by the TopBuyReview Team
We're a small team of SEO practitioners and marketing nerds who got tired of reading watered-down tool reviews. Every article on this site is based on hands-on testing — we pay for our own subscriptions, run real campaigns, and report what we actually find. No sponsored posts, no pay-to-play rankings.