An SEO audit is a systematic review of everything affecting your website’s ability to rank in search engines and get cited by AI platforms. It’s the diagnostic step every strategy depends on, and it’s the step most businesses skip, which is exactly why they end up spending months optimizing the wrong things.

On June 25, 2026, autimark.com returned Cloudflare Error 520 and 525 on every page. Google received server errors on every crawl attempt. We caught it within hours, traced it to an origin SSL certificate expiration that broke the connection between Cloudflare and our origin server, and restored the site the same day. No rankings were lost because we caught it before the next scheduled crawl cycle completed. That’s what an audit catches before it costs you rankings, and that’s the kind of real-world incident a checklist alone can’t prepare you for.

Every other post on the AutiMark blog, from our keyword research guide to our E-E-A-T guide to our content marketing strategy, assumes the audit is already done. This post is the missing first step. And unlike every other audit guide online, this one includes Step 8: the AI readiness audit, the checks that determine whether ChatGPT, Perplexity, and Google AI Overviews can read, trust, and cite your content.

Key Takeaways

• Every SEO audit starts with a baseline crawl, not with fixing things. You need to understand what Google sees, what it’s indexing, what it’s ignoring, and where the technical foundation is leaking before touching anything.
• Core Web Vitals thresholds in 2026: LCP under 2.5 seconds, INP under 200 milliseconds, CLS under 0.1. INP replaced FID in March 2024, so any audit guide still referencing FID is out of date.
• Not every audit finding is worth fixing. A 200-item crawl report with no prioritization is noise, not signal. The audit’s value is in identifying which issues are actually bleeding traffic, rankings, or citations, and which are cosmetic.
• The AI readiness audit is the step every competing guide skips. Checking whether AI platforms can crawl, parse, and cite your content is now as important as checking whether Google can crawl it.
• Audit cadence matters: monthly for large or fast-changing sites, quarterly for SMBs, and immediately after any traffic drop, site redesign, or migration.

What an SEO Audit Actually Checks in 2026

An SEO audit in 2026 has two surfaces to check: how search engines see your site (the traditional audit) and how AI platforms see your site (the new layer most guides skip entirely).

Traditional surface: Can Google find, crawl, and index every important page? Is the technical foundation (speed, security, structure) solid? Is the on-page optimization (titles, metas, headings, content quality) competitive? Is the backlink profile healthy? Is the local presence (if applicable) consistent and complete?

AI surface: Can AI crawlers (GPTBot, ClaudeBot, PerplexityBot) access your content? Is your structured data complete enough for AI systems to extract and cite confidently? Does your content answer questions directly enough for AI extraction? Are you actually being cited, or are competitors capturing your queries in AI responses?

Both surfaces require checking. A site that passes every traditional audit criterion but blocks AI crawlers or lacks structured data is invisible to half the search landscape in 2026.

The 8-Step SEO Audit Process

Step 1: Run a Baseline Crawl and Check Indexation

Every SEO audit starts with a baseline crawl. Before you fix anything, you need to know what Google currently sees.

Google Search Console → Coverage/Pages report. This shows which pages are indexed, which are excluded, and why. Common findings: pages blocked by robots.txt that shouldn’t be, pages returning 404 or 5xx errors, pages excluded by “noindex” tags you may not have intended, and duplicate content issues where Google chose a canonical you didn’t expect.

Run a site:yourdomain.com search in Google. Compare the number of results to the number of pages you expect to be indexed. A large gap in either direction signals a problem: too few indexed means crawl or indexation issues, too many means Google is indexing pages you don’t want (thin tag pages, parameter URLs, staging environments).

Check your XML sitemap. Is it submitted in Search Console? Does it include only pages you actually want indexed? Is it returning a 200 status code? A broken or missing sitemap means Google is discovering your pages through links alone, which is slower and less reliable.

Check robots.txt. Are you accidentally blocking important sections of your site? Is your robots.txt accessible (returns 200, not 404 or 500)?

Start your baseline with AutiMark’s free SEO audit tool, which runs a comprehensive scan on any URL and prioritizes issues by impact, so you know immediately whether you’re dealing with a critical indexing problem or a minor meta description warning. For a deeper crawl across your full site, Screaming Frog’s free version covers up to 500 URLs. Our free SEO tools guide covers the full free tool stack for each audit step.

Step 2: Audit Server Health and Security

This is the step that catches the silent killers: the issues that don’t show up as ranking drops until it’s too late.

HTTPS and SSL configuration. Every page should load over HTTPS with a valid, non-expired SSL certificate. If you use Cloudflare, check your SSL/TLS mode: “Full (Strict)” is the correct setting for production sites. “Flexible” mode means Cloudflare connects to your origin server over HTTP, which creates a security gap and can cause redirect loops that break crawlability. Our June 25 incident was caused by an expired origin SSL certificate, exactly the kind of issue that a quarterly audit catches before it becomes an emergency.

Server response codes. Run your crawl and check for 5xx errors (server errors that block crawling), 4xx errors (broken pages), and redirect chains (multiple redirects in sequence that waste crawl budget and dilute link equity). Any page returning a 5xx error is invisible to Google for as long as the error persists.

Response time (TTFB). Time to First Byte should be under 200 milliseconds for most pages. A consistently high TTFB indicates server-side performance issues that affect everything else in the audit.

Our technical SEO guide covers the full scope of technical issues beyond what this step captures, including crawl budget optimization, JavaScript rendering, and site architecture.

Step 3: Audit Core Web Vitals and Page Speed

Core Web Vitals are confirmed ranking signals measured from real user data. The 2026 thresholds:

• LCP (Largest Contentful Paint): Under 2.5 seconds. Measures how fast the main content loads.
• INP (Interaction to Next Paint): Under 200 milliseconds. Measures responsiveness to all interactions, not just the first one. INP replaced FID (First Input Delay) in March 2024.
• CLS (Cumulative Layout Shift): Under 0.1. Measures visual stability during loading.

All three must pass at the 75th percentile of real user data (Chrome User Experience Report) for a page to achieve a “Good” Core Web Vitals assessment. A perfect Lighthouse score in your dev tools means nothing if real visitors on real devices get different results.

Where to check: Google Search Console → Core Web Vitals report shows which URL groups are failing and on which metric. PageSpeed Insights shows both field data (real users) and lab data (simulated) for individual URLs. Field data matters more for rankings; lab data is more useful for debugging.

Prioritization order: Fix whichever metric is in the “Poor” band first. Then tackle INP (hardest to fix, requires JavaScript expertise), then LCP (highest commercial impact), then CLS (typically easiest to fix with explicit image dimensions and reserved layout space).

Step 4: Audit On-Page Optimization

The on-page audit checks whether every important page is properly optimized for its target keyword and user intent.

Title tags: Each page should have a unique, descriptive title under 60 characters that includes the target keyword naturally. Duplicate titles across multiple pages signal cannibalization or thin content issues.

Meta descriptions: Unique, compelling descriptions under 160 characters. While not a direct ranking factor, they directly affect click-through rate from search results.

Heading hierarchy: One H1 per page that matches the page topic. Logical H2/H3 structure that creates a clear content hierarchy both humans and AI systems can parse.

Thin and duplicate content: Pages with fewer than 300 words of unique content, pages that substantially duplicate other pages on the same site, and pages that add no value beyond what another page already covers. These dilute topical authority and waste crawl budget.

Keyword cannibalization: Multiple pages targeting the same keyword or intent. Check Search Console for queries where two or more of your pages compete for the same term, neither ranking as well as a single consolidated page would.

Our on-page SEO service handles the full on-page audit and fix cycle, including schema corrections, heading restructuring, and cannibalization resolution.

Step 5: Audit Content Quality and Performance

Not every page on your site deserves to exist. The content audit determines what to keep, what to update, what to consolidate, and what to cut.

Sort your pages into four buckets:

• Keep and strengthen: Pages with good rankings, good traffic, and content that’s still accurate and comprehensive.
• Update: Pages that used to perform but have stale data, outdated recommendations, or declining rankings. Adding current data, expanding thin sections, and updating the “last reviewed” date often recovers lost positions.
• Consolidate: Multiple thin pages covering the same topic that would be stronger as a single comprehensive page. Redirect the weaker URLs to the consolidated page.
• Remove or noindex: Pages with no traffic, no rankings, no backlinks, and no strategic purpose. Thin, zero-value pages waste crawl budget and dilute site quality signals.

Check AI citation performance for your top pages. Search your top 10 target queries in ChatGPT and Google AI Mode. Is your content being cited? Are competitors? This is the content audit step that identifies your biggest AI visibility gaps.

Our content writing service handles content refreshes, consolidations, and new production for gaps the audit identifies.

Step 6: Audit Your Backlink Profile

Backlinks remain one of the strongest ranking and citation signals. The backlink audit checks three things:

Profile strength. How many referring domains point to your site? What’s the quality distribution? Use Ahrefs Webmaster Tools (free for your own site) or Moz Link Explorer to see your top linking domains and pages.

Anchor text diversity. A natural backlink profile has diverse anchor text: branded terms, naked URLs, generic phrases (“click here”), and some keyword-rich anchors. A profile dominated by exact-match keyword anchors signals manipulation.

Toxic or low-quality links. Links from spam sites, link farms, or irrelevant directories can drag down your profile. While Google’s algorithms generally ignore low-quality links rather than penalizing them, a heavily spammed profile can still trigger manual review.

Our link building service focuses on earning real editorial placements that strengthen your profile, and our guide to link building costs covers the economics of building authority safely.

Step 7: Audit Local Visibility (If Applicable)

If your business serves a physical location or service area, the local audit checks everything that powers your Map Pack presence.

Google Business Profile completeness. Is every field filled? Are hours accurate, including holidays? Are photos recent? Are you posting weekly? Is the Q&A section populated? GBP signals account for 32% of local pack ranking weight (Whitespark, 2026).

NAP consistency. Is your Name, Address, and Phone Number identical across your website, GBP, Bing Places, Apple Maps, Yelp, and every directory where you appear? Even small differences (“St.” vs “Street”) count as mismatches.

Review velocity and recency. How many reviews have you received in the past 30 days? Review recency is now ranking factor #11, up from #93 in 2023.

Our small business SEO guide covers the full local SEO strategy that builds on this audit step.

Step 8: The AI Readiness Audit (The Step Everyone Skips)

This is the audit step that separates a 2026 audit from a 2023 one. An SEO audit in 2026 has a second surface to check: whether AI platforms can read, parse, and cite your content.

Check AI crawler access in robots.txt. Are you blocking GPTBot (OpenAI/ChatGPT), ClaudeBot (Anthropic), or PerplexityBot? Some sites block these crawlers without realizing it, which means those AI platforms can never recommend your content. Check your robots.txt for lines like User-agent: GPTBot followed by Disallow: /.

Check structured data coverage. Run your top 20 pages through Google’s Rich Results Test and the Schema.org Validator. Are Organization, Person, Article, and relevant vertical schemas (LocalBusiness, MedicalBusiness, Restaurant, Service) properly implemented? Schema is a trust signal AI systems use when deciding whether to cite. Our schema markup guide covers all eight schema types with working code.

Check direct-answer formatting. Open your top content pages. Does each section start with a direct answer to the question the heading poses, followed by elaboration? AI systems extract disproportionately from the opening portion of content. Content that buries the answer deep in a paragraph is less likely to be cited.

Check FAQ schema coverage. FAQ sections with genuine Q&A content are among the most frequently extracted content types for AI responses. Note: FAQ rich results were retired by Google on May 7, 2026, but the schema still supports AI extraction.

Run manual AI citation checks. Search your top 5 target queries in ChatGPT, Perplexity, and Google AI Mode. Is your brand cited? Are competitors? Which pages appear, and which are invisible? This is the most actionable step in the AI audit because it shows you exactly where you stand versus competitors in the AI layer.

Our AI SEO service handles the full AI readiness implementation, and our guide on how to get cited in AI Overviews covers the technical requirements in detail.

Prioritizing What to Fix First

Not every audit finding is worth fixing. A 200-item crawl report with no prioritization is noise, not signal. Here’s the framework we use:

Fix what’s bleeding first. Server errors (5xx), broken pages (404) on high-traffic URLs, SSL/security issues, and indexation blocks. These are actively costing you rankings and citations right now.

Fix what’s throttling growth second. Core Web Vitals failures, thin or cannibalized content on target keywords, missing schema markup, and incomplete GBP profiles. These aren’t emergencies, but they’re capping your potential.

Fix what’s optimizing last. Meta description length, minor heading structure improvements, low-traffic page consolidation, and cosmetic issues. These are worth doing but shouldn’t block higher-priority work.

Know what to ignore. Not every warning in a crawl report is a problem. A page intentionally noindexed, a redirect you set up deliberately, or a thin page that exists for navigational purposes are all “findings” a crawler will flag that require no action.

How Often Should You Run an SEO Audit?

Monthly: Large sites (1,000+ pages), eCommerce sites with frequent inventory changes, sites running active campaigns, and any site that recently experienced a traffic drop.

Quarterly: Small to mid-size business websites with relatively stable content. Most SMBs should run a full technical audit at least every quarter and check Search Console weekly for new errors.

Immediately after: Any significant traffic drop, a site redesign or migration, a CMS or hosting change, a Google core update, or any server incident (like our June 25 Cloudflare event).

What an SEO Audit Costs

Free (DIY): Google Search Console, PageSpeed Insights, AutiMark’s free audit tool, and Screaming Frog’s free version cover the essentials. Budget 4 to 8 hours for a small site.

Professional audit: $500 to $3,000 depending on site size, complexity, and depth of the AI readiness analysis. A professional audit includes prioritized findings, specific fix recommendations, and a roadmap.

Ongoing managed audit + implementation: Our Smart SEO managed plans include recurring audits alongside the implementation of fixes, content production, and link building, so the audit findings actually get resolved rather than sitting in a spreadsheet. Our pricing page shows what each plan includes.

If you’re evaluating whether investing in fixing audit findings delivers meaningful ROI, our is SEO worth it guide covers the full investment case.

Frequently Asked Questions

What is an SEO audit? An SEO audit is a systematic review of a website’s technical health, on-page optimization, content quality, backlink profile, local presence, and AI readiness. It identifies issues that are preventing the site from ranking in search engines and being cited by AI platforms, and prioritizes them by impact so you know what to fix first.

How much does an SEO audit cost? A DIY audit using free tools costs nothing but requires 4 to 8 hours for a small site. Professional audits with prioritized recommendations and an implementation roadmap range from $500 to $3,000 depending on site size and complexity. Ongoing managed programs that include both auditing and implementation start at $799 per month.

How long does an SEO audit take? A basic technical audit of a small site (under 100 pages) takes 4 to 8 hours using free tools. A comprehensive professional audit including content analysis, backlink review, local presence check, and AI readiness assessment takes 1 to 3 business days. Enterprise sites with thousands of pages can take a full week.

How often should I run an SEO audit? Monthly for large or fast-changing sites. Quarterly for small to mid-size businesses. Immediately after any traffic drop, site redesign, CMS migration, Google core update, or server incident. Check Google Search Console weekly between full audits for new errors and ranking changes.

Can I do an SEO audit myself? Yes, for the basics. Google Search Console, PageSpeed Insights, AutiMark’s free audit tool, and Screaming Frog’s free version cover crawlability, indexation, speed, and technical errors. The harder parts are interpreting findings in context, prioritizing what actually matters, and executing the AI readiness checks that require manual testing across multiple platforms.

What is an AI readiness audit? An AI readiness audit checks whether AI platforms like ChatGPT, Perplexity, and Google AI Overviews can access, parse, and cite your content. It covers AI crawler access in robots.txt, structured data completeness, direct-answer content formatting, FAQ schema coverage, and manual citation checks across AI platforms. This is the audit step most guides published before 2026 don’t include.

The Bottom Line

An SEO audit isn’t a one-time project. It’s the recurring diagnostic that keeps your entire search strategy honest. Without it, you’re optimizing blind, spending time and budget on what you think is wrong instead of what the data shows is actually costing you rankings, traffic, and citations.

Start with the baseline. Run the crawl. Check the vitals. Audit the content. Review the links. Check your local presence. And run the AI readiness checks that every other guide skips. Then prioritize by impact and fix what’s bleeding first.

If you want a professional audit that covers all eight steps with prioritized recommendations and a clear implementation plan, book a free strategy call and we’ll walk through your site together.