The Complete SEO Audit Checklist: 42 Checks We Run on Every Site

An SEO audit is a systematic check of every factor that decides whether a site ranks — crawlability, indexation, speed, on-page signals, structured data, backlinks, and now AI-search readiness. We run the same 42-point checklist on every client site before we touch a ranking. Here it is in full, plus a free template you can copy.

Most of what ranks for this query is a free tool that scans your site and hands you a score. Useful, but a score is not a plan. A real audit tells you what to fix first and why. This is the workflow we use at Neogen Media, written down so you can run it yourself or sanity-check the agency you've hired.

What is an SEO audit?

An SEO audit is a structured diagnostic of a website's search performance. It maps technical health, content quality, and off-site authority against what Google and AI engines reward, then ranks the gaps by impact. Done right, it ends with a prioritised fix list — not a 200-item dump with no order of operations.

The difference between an audit that moves rankings and one that gathers dust is sequencing. Fixing meta descriptions while Google can't crawl half your pages is wasted effort. We always work outward in the same order: can search engines reach the page, index it, render it fast, understand it, trust it — and can AI engines quote it.

How do you perform an SEO audit?

We perform an SEO audit in seven layers: crawl, indexation, technical health, Core Web Vitals, on-page and content, structured data, and authority — plus a newer eighth layer for AI-search readiness. Each layer has a fixed set of checks so nothing gets skipped between sites or analysts.

Run them in order. A page that isn't crawlable can't be indexed; a page that isn't indexed can't rank; a page that ranks but loads in six seconds on a mid-range Android won't convert. Below is the full 42-point checklist, grouped by layer.

Crawl & indexation (checks 1–6)

• 1. robots.txt allows crawling of every key template, not just the homepage.
• 2. An XML sitemap exists, validates, and is submitted in Google Search Console.
• 3. No orphan pages — every important URL is linked internally from somewhere.
• 4. The GSC Pages report has been read end to end, with every "not indexed" reason explained.
• 5. No accidental noindex tag sitting on a money page (it happens more than you'd think after a migration).
• 6. Canonical tags resolve to a single, self-referencing version of each URL.

Technical SEO (checks 7–13)

• 7. HTTPS site-wide, with no mixed-content warnings.
• 8. One resolvable domain version — www vs non-www and http vs https all 301 to the canonical.
• 9. No redirect chains or loops; each redirect should be a single hop.
• 10. Broken internal links and 404s are mapped, then fixed or 301'd.
• 11. Crawl depth is shallow — priority pages sit within three clicks of the homepage.
• 12. Hreflang is correct and reciprocal, if the site serves multiple languages or regions.
• 13. The site is genuinely responsive across breakpoints, not just "mobile-friendly" in name.

We go deeper on render-blocking resources, JavaScript indexing, and log-file analysis in our guide to technical SEO in 2026 — worth a read once the basics above are clean.

Core Web Vitals & performance (checks 14–18)

• 14. Largest Contentful Paint (LCP) under 2.5s on mobile field data, not lab scores.
• 15. Interaction to Next Paint (INP) under 200ms.
• 16. Cumulative Layout Shift (CLS) under 0.1.
• 17. Images compressed, served in next-gen formats, and lazy-loaded below the fold.
• 18. Render-blocking JavaScript and CSS minimised or deferred.

Google's Core Web Vitals thresholds are pass/fail at the 75th percentile of real visits, so test against field data in Search Console, not a one-off Lighthouse run. For why this matters disproportionately on Indian networks, see our breakdown of Core Web Vitals on Indian mobile.

On-page & content (checks 19–26)

• 19. Every page has exactly one H1 containing its target keyword.
• 20. Title tags are unique, under ~60 characters, and keyword-led.
• 21. Meta descriptions are unique and written to earn the click, not just to exist.
• 22. No keyword cannibalisation — two pages aren't competing for the same query.
• 23. Thin or duplicate pages are identified, then consolidated or pruned.
• 24. Internal links use descriptive anchor text, not "click here".
• 25. Each page's content actually matches the search intent it targets.
• 26. Every image has descriptive, keyword-aware alt text.

Schema & structured data (checks 27–31)

• 27. Organization or LocalBusiness schema is present site-wide.
• 28. Breadcrumb schema is on deep pages.
• 29. Article or BlogPosting schema is on every post, with a real dateModified.
• 30. FAQ schema is applied wherever a page answers genuine questions.
• 31. All markup passes Google's Rich Results Test with zero errors.

Authority & backlinks (checks 32–36)

• 32. The referring-domains trend is reviewed — growing, flat, or declining.
• 33. Toxic or spammy links are identified for disavow review.
• 34. The anchor-text profile looks natural, not over-optimised.
• 35. The competitor backlink gap is mapped — who links to them but not you.
• 36. Internal links deliberately flow authority to priority pages.

AI-search readiness — AEO & GEO (checks 37–42)

• 37. Key answers are written in 40–60 word blocks directly under question-style H2s.
• 38. An llms.txt file is present and lists your priority URLs.
• 39. GPTBot, PerplexityBot, and Google-Extended aren't accidentally blocked in robots.txt.
• 40. Pages contain standalone, citable factual statements that read correctly out of context.
• 41. E-E-A-T signals are in place — named author, real bio, and Person schema.
• 42. A baseline is recorded for whether your brand appears in AI Overviews and LLM answers for target queries.

That last layer is where the field is weakest right now. When we audit Indian sites, almost none have an llms.txt file or have checked whether they're accidentally blocking AI crawlers — which is exactly why getting it right is a cheap edge.

Want us to run the full 42-point audit on your site?

If you'd rather have a senior analyst run every check above, prioritise the fixes by revenue impact, and hand you a roadmap, that's our SEO Audit & Growth Plan. You get the same checklist applied to your site, with the crawl data, the GSC review, and a sequenced 90-day fix list — not just a tool score.

Which SEO audit tools do you actually need?

You need three things: a crawler, Google's own data, and a performance tester. Screaming Frog or Ahrefs Site Audit handles the crawl, Google Search Console and PageSpeed Insights cover indexation and Core Web Vitals for free, and the Rich Results Test validates schema. Everything else is optional.

The free scanners that dominate this search — SEOptimer, Rank Math's analyzer, Neil Patel's tool — are fine for a first pass, but they grade symptoms, not causes. They'll tell you a title tag is missing; they won't tell you it's missing because a template change stripped it across 400 pages. The checklist above is what turns a scan into a diagnosis.

How long does an SEO audit take?

A thorough SEO audit takes one to two weeks for a typical small-business site, and three to four for a large e-commerce or multi-language site. The crawl and tool data take hours; the analysis, prioritisation, and writing the fix list are where the real time goes. Anything promising a "full audit" in minutes is a scan, not an audit.

Frequently Asked Questions

What is an SEO audit?

An SEO audit is a structured review of everything affecting a website's search performance — crawlability, indexation, technical health, Core Web Vitals, on-page content, structured data, backlinks, and AI-search readiness. The output is a prioritised list of fixes ordered by impact, so you know what to do first rather than facing an undifferentiated wall of issues.

How do you perform an SEO audit?

Work outward in layers. Confirm search engines can crawl and index the site, then check technical health and page speed, then on-page content and structured data, then off-site authority, and finally AI-search readiness. Use a crawler, Google Search Console, and PageSpeed Insights to gather data, then rank every issue you find by its likely effect on rankings and revenue.

What are the main types of SEO an audit covers?

A complete audit covers four areas of SEO: technical (crawl, indexation, speed), on-page (content, titles, internal links), off-page (backlinks and authority), and the emerging AI-search layer (AEO and GEO) that determines whether engines like ChatGPT, Perplexity, and Google AI Overviews cite your pages. Skipping any one leaves a blind spot competitors can exploit.

Can I do an SEO audit for free?

Yes. Google Search Console, PageSpeed Insights, the Rich Results Test, and the free tier of a crawler like Screaming Frog cover most of the 42 checks at no cost. The free part is gathering the data. The skill — and what an agency charges for — is interpreting it correctly and sequencing the fixes so your effort goes where it moves rankings.

How often should I run an SEO audit?

Run a full audit once or twice a year, and a lighter technical check every quarter. Always audit after a site migration, redesign, or CMS change, since those are when crawl, indexation, and canonical issues silently appear. Between audits, monitor Search Console weekly so new "not indexed" pages or Core Web Vitals failures get caught early.

Get a prioritised audit, not another score

A checklist is only useful if someone acts on it in the right order. If you want the 42 checks run on your site by a team that fixes the gaps as well as finds them, talk to us. We'll tell you which three things to fix first — usually before you've signed anything.