SEO audit checklist: what a useful audit should deliver

What a useful SEO audit hands over

An audit is a decision document. When you finish reading it, you should know what's wrong, what to fix first, who fixes it and how you'll know it worked. Google's own guide to hiring an SEO says an audit should give you realistic estimates of improvement and an estimate of the work involved. That's the bar.

Plenty of audits miss it. Some are a crawler export: hundreds of rows, every warning weighted the same, no view on which ones cost you work. Others are a sales pitch with a few screenshots attached. Either way, the sorting is left to you.

A finished audit has four parts. A one-page summary of the few problems that matter most and why. A scope note saying what was checked, what wasn't, and which access the auditor had. The findings, ranked. And a plan with owners and re-check dates. The scope note is the part most often missing, and without it you can't tell a clean result from an area nobody looked at.

Inside the findings, every item should carry the same seven parts:

• The problem, stated in one plain sentence
• The pages or profile it affects, listed by URL or name
• The evidence: which report or test, what it showed, and the date it was taken
• The business impact: which service, suburb or type of enquiry it touches
• The fix, written so a developer or writer could start on it tomorrow
• Who owns the fix, and roughly how big the job is
• How you'll check it's fixed, and when to look

How an SEO audit is done, step by step

Knowing the steps lets you spot the ones that were skipped. An audit that never opened Search Console can only guess at indexing, and one that never placed a test call can't tell you whether enquiries arrive. A careful audit of a local service business runs in roughly this order:

1. Scope and access. Agree which website, Business Profile and locations are in scope, and which services and suburbs matter most to the business. Grant read access to Search Console, GA4 and the profile. Google's guide to hiring an SEO suggests granting only read access to Search Console while an audit is under way.
2. Baseline. Before anything changes, save the Performance report comparison, the Page indexing totals and the GA4 key event counts, each with the date it was taken.
3. Crawl. Run a crawler over the whole site to list every URL with its status code, title, canonical tag, robots directives and internal links, then compare that list with the XML sitemap.
4. Search Console and GA4 review. Read the Page indexing reasons, Manual actions, Security issues, Core Web Vitals and Performance by page and query, then key events by landing page.
5. Manual checks. Open the main service and area pages on a phone, inspect them in URL Inspection, set the Business Profile beside the website, place a test call and send a test form.
6. Off-site checks. Review who links to the site, whether the main directory listings agree with each other, and which pages outrank yours for the searches that bring in work.
7. Verify, rank and write up. Check each tool flag on the live page, drop the false alarms, rank what's left by business impact and effort, then write the findings and the plan.

The SEO audit checklist for a local service business

Use this checklist to see whether an audit covered the ground. It should say something about every row, even when the answer is "no issue found". If an area was skipped, the audit should say why (no access to Search Console, for example) instead of leaving a silent gap.

Google's Business Profile Help says local results are mainly based on relevance, distance and how well-known a business is, and that there's no way to request or pay for a better local ranking. For a trade or clinic, the profile and listing rows matter as much as the website rows. The Google Business Profile checklist goes through the profile side line by line, and the guide to business listing accuracy covers the directories.

For page experience, Google's Core Web Vitals documentation sets good as Largest Contentful Paint within 2.5 seconds, Interaction to Next Paint under 200 milliseconds and Cumulative Layout Shift under 0.1. An audit should report your key page groups against those thresholds from field data, not one lab run.

Here's what each area should cover, and the evidence that shows the work was done:

What counts as evidence in an audit

Evidence is anything a second person could re-check and get the same answer: a named report, a URL, a date and what it showed. Opinions and tool scores are where the checking starts.

Google's guide to hiring an SEO suggests asking whether an SEO cites official Google documentation to support their recommendations. It also notes that Google doesn't evaluate or endorse third-party SEO tools, and that those tools don't have access to Google's internal ranking data. So a tool flag tells you where to look. The finding is what you confirm once you've looked.

Each tool sees part of the picture. Search Console is the only one that shows Google's own view of your indexing, search queries and manual actions. GA4 shows what visitors did once they arrived. A crawler sees the site the way a bot would, but knows nothing about what Google has indexed. The Rich Results Test checks the markup on one URL at a time. A good audit names which tool produced each finding, so you know what it could and couldn't see.

Speed findings need the most care. The PageSpeed Insights documentation says lab data is useful for debugging but may not capture real-world bottlenecks, while Search Console's Core Web Vitals report is built from real-user field data. Google's page experience documentation adds that Google Search always seeks to show the most relevant content, even if the page experience is sub-par. A poor lab score on a page nobody visits belongs near the bottom of the list.

Swap weak evidence for stronger evidence like this:

How to rank issues by business impact

Order the fixes by what each problem costs you in enquiries, then by effort. The number of URLs a tool flagged is a poor guide. One stray tag on your main service page can matter more than hundreds of warnings on old blog posts.

Ask two questions of every finding. Does it touch a page or profile that brings in enquiries? And does it stop that page being found, trusted or contacted? Yes to both puts it at the top. Yes to the first and no to the second usually means it's an improvement, not a repair. No to the first means it can wait, however many rows the tool produced.

Anything that breaches Google's spam policies goes near the top, even if it seems to be working today. Google's spam policies say sites that break them may rank lower in results or not appear at all. Those policies name doorway abuse, including pages targeted at specific cities that funnel users to one page, and link spam, including buying or selling links for ranking purposes. When two fixes carry similar impact, do the smaller job first so something ships this month.

Sort every finding into one of four levels:

1. Fix now: anything stopping a page that earns work from being found or trusted. A service page set to noindex, a robots.txt block, a manual action, a security warning, a wrong phone number on the Business Profile, a quote form that doesn't arrive.
2. Fix next: pages that already show in search but underperform, such as a service page with plenty of impressions and few clicks, or one that appears for the service but not for the suburbs you want.
3. Plan: structural work that takes weeks, like merging overlapping pages, repairing internal links or building area pages with genuine local detail.
4. Park: warnings on pages that bring no enquiries, cosmetic issues, and anything a tool flags that Google's documentation doesn't treat as a problem.

Worked example: one finding written up in full

Say a plumbing business in Caloundra receives an audit with hundreds of flagged items. The business is hypothetical, and so are the page addresses below. Sorted by impact, two matter this week: the blocked drains page still carries a noindex tag left over from a redesign, and the Business Profile lists an old mobile number. Missing image descriptions on old blog posts can wait.

Here is the first finding written the way a useful audit should present it:

Turning findings into a plan, and red flags to watch

An audit that stops at the findings leaves the hard part to you. The last section should be a short plan: each fix in order, its owner, what it depends on and the check that closes it off. In the Caloundra example, the plan would put the noindex fix and the profile phone number first, the merging of two overlapping drain pages third, and park the image descriptions. If you're unsure how noindex and canonical tags interact, the guide to noindex, canonical tags and redirects explains it.

Build the check in from day one. Google's SEO Starter Guide says some changes might take effect in a few hours while others could take several months, and that you'll likely want to wait a few weeks before judging whether a change helped. It also says not every change will have a noticeable impact. Search Console Help says a positive URL Inspection live test doesn't mean the page will appear in Search results. For lead problems, the check is your GA4 key events and call records, and the guide to call tracking and conversion reconciliation shows how to make those two agree.

Record a baseline before anyone touches the site. Google's guide to debugging traffic drops suggests comparing the last three months with the previous period, or with the same months a year earlier, in the Performance report. Later reports get measured against that saved comparison, and the guide to reviewing a monthly SEO report picks up from there.

Some audits arrive as the opening move in a sales process. That's normal, and the free ones can still be useful. Judge them on the same checklist as a paid audit, and if you're weighing up more than one provider, the guide on how to compare marketing proposals sets out what to line up side by side. The local SEO page explains how profile, page and link work fit together once the audit is done. Take extra care if an audit shows any of these:

• A promised ranking or position. Google's guide to hiring an SEO says no one can guarantee a #1 ranking on Google.
• A request for owner or full access at the audit stage, when read access is enough.
• A tool export with no order, no named pages and no dates.
• No scope note, so you can't tell which areas were checked and which were skipped.
• Fixes that breach Google's spam policies, such as buying links or publishing near-identical suburb pages. Google describes scaled content abuse as many pages generated mainly to manipulate search rankings instead of helping users.
• Nothing about calls, forms or the Business Profile, for a business that runs on local enquiries.