Most SEO audits being run in 2026 are auditing the wrong website. They are thorough, they are well-intentioned, and they are checking a version of search engine optimisation that stopped being the whole picture about two years ago. They measure keyword rankings, crawl for broken links, check meta tags, review backlinks — all still useful — and then stop, having completely missed the layer of search that is now driving a growing share of discovery: AI Overviews, voice answers, and the citations that ChatGPT, Perplexity and Gemini hand out instead of blue links.

This guide is a complete, current SEO audit checklist — the one we actually run for clients in 2026, covering the traditional technical and on-page work that still matters alongside the AI-search layer that most audit templates have not caught up with yet. It is written to be genuinely usable: you can work through it yourself with free tools, or hand it to whoever runs your search programme. If you want the deeper reference on the underlying principles, our complete on-page and technical SEO guide is the companion piece. This article is the practical audit you run against it.

What an SEO audit actually is, and when to run one

An SEO audit is a structured health check of every factor that determines whether your website can be found in search. It is not a single tool report and it is not a rankings screenshot. It is a deliberate, sectioned review that produces two things — a clear picture of what is currently wrong or underperforming, and a prioritised list of what to fix first. An audit that does not end in a prioritised action list is not an audit. It is a data dump.

The right cadence for most businesses is a full audit once or twice a year, with a lighter monthly check on the metrics that move fastest. You should also run a full audit after any major event — a website redesign, a migration to a new domain or platform, a sudden traffic drop, a Google algorithm update that visibly affected your category, or the launch of a significant new section of the site. The audit after a redesign is the one businesses skip most often and regret most reliably, because a redesign quietly breaks SEO foundations more often than not.

The audit below is organised into seven sections, run in order. The order matters — technical foundations first, because there is no point optimising content on pages that search engines cannot crawl or that take eight seconds to load. Each section ends with the specific things to check and the free tools that check them.

Before you start: the tools you actually need

You can run a genuinely thorough SEO audit in 2026 without paying for anything. The free tool set has matured to the point where the paid tools are a convenience and a time-saver rather than a requirement. The essential free stack is Google Search Console for how Google actually sees your site, Google Analytics for what visitors do once they arrive, Google’s PageSpeed Insights for Core Web Vitals, the Lighthouse audit built into Chrome’s developer tools, Bing Webmaster Tools for the half of the audit Google does not cover, and a free-tier crawler such as Screaming Frog, which audits up to 500 URLs at no cost.

The paid tools — Ahrefs, Semrush, Sitebliss, Sistrix and the rest — are worth their cost for agencies running audits constantly, because they consolidate the work and track change over time. For a business auditing its own site once or twice a year, the free stack is enough. The one genuinely new category worth adding in 2026 is an AI-visibility checker, several of which now exist in free or freemium form, to see how your brand appears across ChatGPT, Perplexity and Google AI Overviews. That part of the audit did not exist two years ago and most templates still ignore it.

The 7-step SEO audit checklist for 2026

The seven steps below run in sequence. Each one builds on the one before it, and skipping ahead — auditing content before you have confirmed the pages are crawlable, for instance — wastes effort on findings you cannot act on yet. Work through them in order.

1. Crawlability and indexing audit
   Start by confirming that search engines can actually find and index your pages. Check your robots.txt file for anything blocking important sections. Review your XML sitemap for completeness and submit it in Search Console. Use the Search Console index coverage report to see which pages are indexed and which are excluded, and why. Look for the common failures — important pages marked noindex by accident, canonical tags pointing to the wrong URL, orphan pages with no internal links pointing to them. If a page is not crawlable, nothing else in this audit matters for that page.
2. Technical health and Core Web Vitals audit
   Run your key pages through PageSpeed Insights and record the Core Web Vitals scores — Largest Contentful Paint, Interaction to Next Paint, Cumulative Layout Shift. Flag anything failing the thresholds. Check that the site is fully served over HTTPS with no mixed-content warnings. Confirm mobile-friendliness on real devices, not just in a resized browser. Look for broken links, server errors, redirect chains and slow-loading assets. Technical health is the foundation, and a site that fails here has a low ceiling no matter how good its content is.
3. On-page optimisation audit
   Review the on-page elements page by page for your most important URLs. Title tags — unique, descriptive, within length limits, with the primary keyword naturally placed. Meta descriptions — present, compelling, within length. Heading hierarchy — one H1 per page, logical H2 and H3 structure. Image alt text — descriptive on every meaningful image. URL structure — clean, readable, consistent. Internal linking — every important page reachable and supported by links from related content. This is the layer where small consistent fixes compound into meaningful gains.
4. Content quality and relevance audit
   Inventory your content and assess it honestly against what searchers actually need. Identify thin pages that say very little, outdated pages with stale information, duplicate or near-duplicate pages competing with each other, and gaps where searchers want content you have not written. Decide for each weak page whether to improve it, consolidate it into a stronger page, or remove it. Content pruning — cutting genuinely weak pages — often lifts the performance of what remains, because it concentrates your topical authority rather than diluting it.
5. Backlink profile audit
   Review the websites linking to yours. Look at the overall quantity and, more importantly, the quality and relevance of linking domains. Identify genuinely toxic links from spam networks or link farms. Spot link-building opportunities — sites linking to competitors but not to you, unlinked brand mentions you could convert into links. The backlink audit has shifted in emphasis: raw link count matters less than it did, and topical relevance and genuine authority matter more. The full modern approach is covered in our guide to off-page SEO and backlink strategy.
6. Keyword and rankings audit
   Pull your current ranking positions from Search Console and assess them against intent. Which keywords are you ranking for, and do those keywords actually match what you sell? Where are you on page two — the positions just outside the click zone, where small improvements pay back fastest? Where have rankings dropped, and does the drop line up with an algorithm update or a content change? The keyword audit is also where you check whether you are ranking for question-format and conversational queries, which matter more every year as search shifts toward natural language.
7. AI search and citation audit
   This is the step most audits still skip. Check how your brand appears across the AI-mediated search layer. Run your most important queries through Google’s AI Overviews, ChatGPT with web search, Perplexity and Gemini, and note whether your site is cited, whether competitors are cited instead, and what sources the answers are drawn from. Confirm your structured data and schema markup are valid and complete. Review your robots.txt for AI crawler access — GPTBot, ClaudeBot, Google-Extended, PerplexityBot — because blocking them removes you from this layer entirely. This section is new, and it is the fastest-growing part of the audit.

Step 1 in depth: crawlability and indexing

The crawlability audit answers one question — can search engines find, access and index your pages? If the answer is no for any important page, that page is invisible regardless of how good it is. This is why the audit starts here.

Begin with robots.txt, the file at the root of your domain that tells crawlers what they may and may not access. Open it and read it. The classic failure is a disallow rule that was added during development to keep a staging site out of the index, and then never removed when the site went live — quietly blocking the entire site or a critical section. Confirm nothing important is disallowed.

Next, the XML sitemap. It should list every page you want indexed, exclude the pages you do not, and be submitted in Google Search Console and Bing Webmaster Tools. The Search Console index coverage report then tells you the truth — which pages Google has actually indexed, which it has excluded, and the reason for each exclusion. Work through the excluded list. Some exclusions are correct. Others are pages you wanted indexed, blocked by an accidental noindex tag, a wrong canonical, or a crawl error.

Finally, look for orphan pages — pages with no internal links pointing to them. A page no other page links to is hard for crawlers to discover and signals low importance. Your crawler tool will list orphan pages. Each one either needs internal links from relevant content or, if it is genuinely not needed, removal. A clean, crawlable, properly linked site structure is the platform everything else in the audit depends on.

Step 2 in depth: technical health and performance

With crawlability confirmed, the technical health audit checks whether the pages search engines can reach are actually fast, secure and stable. The headline metric set is Core Web Vitals, Google’s measurement of real-world page experience.

Largest Contentful Paint measures how quickly the main content of a page loads, and the target is under 2.5 seconds. Interaction to Next Paint measures how quickly the page responds when a user interacts with it, and the target is under 200 milliseconds. Cumulative Layout Shift measures how much the page visually jumps around as it loads, and the target is under 0.1. Run your key pages through PageSpeed Insights, record all three, and flag every page that fails any of them.

Beyond Core Web Vitals, confirm the whole site is served over HTTPS with a valid certificate and no mixed-content warnings where a secure page loads an insecure asset. Test mobile-friendliness on a real phone — tap the buttons, fill a form, read the text. Crawl the site for broken internal and external links, server errors, and redirect chains where one redirect points to another and slows everything down. Check that large images are properly compressed and that render-blocking scripts are not delaying the first paint.

Technical issues are usually the highest-return fixes in an audit because they affect every page at once. Fixing a site-wide performance problem or a render-blocking script lifts the whole site, not a single page. This is also why technical maintenance should be continuous rather than annual — our work on ongoing website maintenance exists largely to keep this layer healthy between full audits, because technical health decays quietly if nobody is watching it.

Steps 3 and 4 in depth: on-page and content

The on-page audit and the content audit are closely related but distinct. The on-page audit checks the optimisation signals on each page — the technical-content layer. The content audit checks whether the content itself is actually good and actually needed.

For the on-page audit, work through your most important pages and check each one against a consistent list. Title tag present, unique, descriptive and within length. Meta description present and compelling. Exactly one H1, with a logical hierarchy of H2 and H3 headings beneath it. Descriptive alt text on every meaningful image. A clean, readable URL. Internal links into the page from related content, and internal links out to other relevant pages. None of these is complicated individually. The value is in checking them consistently across every important page, because the small inconsistencies are what quietly cap performance.

For the content audit, the work is more editorial. Inventory every page and assess it honestly. Thin pages with very little substance either need to be expanded into something genuinely useful or removed. Outdated pages need refreshing with current information. Duplicate or near-duplicate pages competing for the same query need to be consolidated into a single stronger page. And the gaps — the questions and topics your audience searches for that you have simply never covered — become your content plan. Strong, well-organised content built around clear topical clusters is what earns both traditional rankings and AI citations, and the structural discipline behind that is worth getting right.

Step 7 in depth: the AI search audit most people skip

The AI search audit is the section that did not exist in a 2022 audit template and now matters more every quarter. Search has split into two layers — the traditional results page, and the AI-mediated layer where an assistant constructs an answer and cites a handful of sources. A 2026 audit has to check both. Auditing only the first layer is auditing half your search visibility.

Start with direct testing. Take your fifteen or twenty most important queries — your product categories, your key questions, your brand name, your main competitors — and run each one through Google’s AI Overviews, ChatGPT with web search enabled, Perplexity and Gemini. For each query, record whether your site is cited, whether a competitor is cited instead, and which sources the assistant drew from. This qualitative test gives you a clear, honest picture of your AI-layer visibility that no dashboard currently provides.

Next, check the technical foundations that make your site eligible to be cited. Validate your structured data and schema markup — Article, FAQPage, LocalBusiness, HowTo and the rest — because schema is how AI models reliably understand what a page contains. Confirm your content is structured around clear questions with direct answers, the format assistants can actually quote. And critically, review your robots.txt for AI crawler access. GPTBot, ClaudeBot, Google-Extended and PerplexityBot all need to be allowed. Some sites blocked these in 2024 as a reflex and never reversed it, and those sites are now invisible to the entire AI-search layer.

The AI search audit connects to a broader discipline of optimising for AI-mediated discovery, which our guide to AEO, GEO, AIO and LLMO covers in full. For businesses that want this layer handled properly rather than just audited, our AI search optimisation services are built specifically around it. The key point for the audit itself is simple — if you are not checking this layer, your audit is incomplete, and the gap will only grow.

Turning audit findings into a prioritised action plan

An audit is only as valuable as what you do with it. The most common failure is a thorough audit that produces a 200-item findings list and then sits in a folder because nobody knows where to start. The fix is disciplined prioritisation.

Sort every finding into three buckets. Critical issues are actively costing you visibility right now — a blocked robots.txt, pages incorrectly noindexed, a site-wide performance failure, an accidental AI-crawler block. These get fixed immediately. Important issues are limiting your ceiling but not actively breaking anything — thin content, weak internal linking, missing schema, page-two rankings that could be pushed up. These get scheduled across the current quarter. Minor issues are genuine improvements with no urgency — a handful of missing alt texts, minor meta description tweaks. These get done when there is time.

Within each bucket, sort by effort versus impact. The fixes that are high-impact and low-effort go first — they are the quick wins that build momentum and demonstrate value early. High-impact, high-effort fixes get planned properly with time allocated. Low-impact, high-effort fixes are usually quietly dropped, because the return does not justify the work. The output of this exercise is a sequenced action plan with owners and timelines, and that plan — not the findings list — is the actual deliverable of an SEO audit.

How AI search has changed what an SEO audit must cover

It is worth being explicit about how much the audit itself has changed, because the difference between a 2022 audit and a 2026 audit is larger than most checklists reflect. Three shifts have rewritten what a complete audit covers.

The first is the rise of the AI-mediated answer. A meaningful and growing share of searches now end with the user reading an AI-generated answer rather than clicking a result. An audit that measures only blue-link rankings is measuring a shrinking surface. The audit now has to measure citation presence in AI answers as a first-class metric, not an afterthought.

The second is the elevation of structured data. Schema markup used to be a nice-to-have that earned the occasional rich result. It is now the primary mechanism by which AI models understand and trust your content. An audit in 2026 treats schema validation as a core technical check, on the same level as crawlability and Core Web Vitals.

The third is the shift toward conversational, question-format content. As search moves toward natural-language and voice queries, content structured around clear questions with direct answers outperforms content optimised purely for short-tail keywords. The content section of the audit now explicitly checks whether your pages answer real questions in a format both humans and AI assistants can use. The broader context of all three shifts is covered in our piece on recent algorithm updates and zero-click search trends, and a 2026 audit that ignores them is auditing the search landscape of two years ago.

Common SEO audit mistakes to avoid

Audits fail in predictable ways. The mistakes below are the ones that turn a potentially valuable audit into wasted effort, and all of them are avoidable.

How often should you run an SEO audit?

The right rhythm is a layered one. A full, comprehensive audit covering all seven steps belongs on the calendar once or twice a year — twice for sites in competitive categories or sites that change frequently, once for smaller, more stable sites. This is the deep review that catches the slow drift.

Between full audits, a lighter monthly check keeps an eye on the metrics that move fastest — Core Web Vitals, index coverage, ranking shifts on your priority keywords, any new crawl errors, and your visibility in AI answers for your most important queries. The monthly check takes an hour or two and catches problems early, while they are still small and cheap to fix.

On top of the calendar cadence, certain events trigger an immediate audit regardless of when the last one happened. A website redesign or migration. A sudden, unexplained traffic or rankings drop. A confirmed Google algorithm update that visibly moved your category. The launch of a major new section of the site. In each of these cases, something has changed materially and you need a current picture rather than waiting for the next scheduled review. The businesses that treat SEO auditing as a continuous discipline rather than an annual event are the ones whose search visibility stays stable, because they catch the small problems before they compound into large ones.

Should you run the audit yourself or hire a professional?

This checklist is genuinely designed to be run by a capable in-house person with the free tool set, and for many businesses that is the right call — particularly for a first audit, or for smaller sites where the scope is manageable. Running it yourself also builds real understanding of your own site, which is valuable regardless of who runs future audits.

There are situations where a professional audit is worth the cost. If your traffic has dropped sharply and you cannot identify why, experience matters — diagnosing a sudden drop is pattern-recognition work that comes from having seen many of them. If your site is large or technically complex, the audit scope quickly exceeds what is practical to do thoroughly by hand. If the audit keeps producing findings you are not confident interpreting, the judgement layer is where a professional adds the most value. And if you simply do not have the time to do it properly, a half-finished audit is worse than a professional one because it produces false confidence.

The honest framing is that the checklist itself is not secret knowledge — it is laid out in full above. What an experienced team adds is the interpretation, the prioritisation and the diagnostic pattern-recognition that turns findings into the right sequence of fixes. For businesses that want that, our SEO services include full audits with a prioritised action plan as a standard deliverable. Whether you run it yourself or bring in help, the important thing is that the audit actually happens, actually covers the full 2026 picture including the AI layer, and actually ends in implemented fixes.

Frequently asked questions