How to Do an SEO Audit: A Step-by-Step Guide for Small Businesses

Most small business owners who are frustrated with their SEO aren't failing because they're doing the wrong things. They're failing because they're doing things in the wrong order, optimizing pages that have crawl errors, writing content for keywords they'll never rank for, and chasing backlinks when their internal linking structure is a mess. Learning how to do an SEO audit properly is the step that fixes the order. It's not glamorous, but it's the reason some sites climb and others stall.

This guide gives you a repeatable, DIY-friendly process for diagnosing your site's SEO health, prioritizing your fixes, and stopping the guesswork. It's built for small business owners who don't have time to wade through 47-point checklists or pay for a suite of tools they'll use once. Google's free tools do most of the heavy lifting here.

We've structured this as six steps. The first five are data collection: pulling baseline metrics, checking technical health, reviewing on-page elements, evaluating content performance, and assessing backlinks. Step 6 is where it all comes together. We'll introduce the SEO Audit Action Stack, a simple three-tier prioritization framework that turns your findings into a ranked action plan, not just a list of things to feel bad about. Sproutbox is a Portland-based full-service digital marketing agency specializing in SEO, generative engine optimization, and search authority building for small and mid-sized businesses. This process is the same one we run at the start of every client engagement.

Step 1: Pull Your Baseline Data

You can't audit what you haven't measured. Before touching anything else, verify that you have access to Google Search Console and Google Analytics 4 for your site. These two free tools give you roughly 80% of what you need for a solid SEO audit for small business. If either isn't set up yet, that's your first fix. Stop everything and do that now. This step is the core of any DIY SEO audit: Google's own data, pulled for free.

Google Search Console Baseline

In Google Search Console, you're looking for four things specifically:

• Top queries by impressions versus clicks: a wide gap signals a ranking that isn't converting to traffic
• Pages with high impressions and low click-through rate (CTR): these have a title or meta description problem, not a ranking problem
• Index coverage report: how many pages are indexed, excluded, or erroring
• Core Web Vitals report: a high-level view of your site's speed and stability scores

Google Analytics 4 Baseline

In Google Analytics 4, pull these reports:

• Landing pages filtered to organic traffic: which pages are actually bringing people in from search
• Engagement rate by landing page: a low engagement rate on an organic landing page usually means the page didn't match what the user expected
• Conversion events by channel: are organic visitors actually completing contact forms, calls, or purchases

Google Business Profile Baseline

For local businesses, add a third baseline source: your Google Business Profile. Impressions, direction requests, and call clicks from GBP tell you how you're performing in the local pack, a ranking environment that operates separately from your organic site rankings. Our Google Business Profile optimization guide covers what to look at there in detail.

Step 2: Run a Technical SEO Check

Technical issues are often the silent killers in any technical SEO audit. A site can have genuinely good content and still underperform because Google can't crawl it properly. This is the unglamorous part of the work, and it's the part most DIY SEO audits skip. Our technical SEO checklist goes deeper if you want the full version, but here are the four areas every small business should cover.

Indexing and Crawlability

Open GSC and go to the Index Coverage report under Pages. You'll see four categories: Valid, Warning, Excluded, and Error. The one most people miss is the distinction between 'Crawled, currently not indexed' and 'Not crawled.' The first means Google found the page but decided not to index it. Common causes are thin content, old category pages, or near-duplicate URLs. The second means Google didn't even visit the page, often because of a noindex tag or a robots.txt block that's broader than intended.

Note the count and category of your excluded pages. A site with 80 excluded pages and 40 indexed pages has a crawl budget problem worth investigating before doing anything else. Every excluded page that Google is crawling and rejecting is wasted budget that could go to your actual service pages.

Page Speed and Core Web Vitals

Run your most important pages through PageSpeed Insights (free, no login required) and cross-reference with the Core Web Vitals report in GSC. The three metrics translate to real user experience pretty directly: LCP is how fast your main content loads (under 2.5 seconds is the target), CLS is whether the page shifts around visually as it loads (buttons jumping right before you click them, that's CLS failing), and INP measures how quickly the page responds when someone taps or clicks something. Google confirmed Core Web Vitals as a ranking signal, so a failing score isn't cosmetic.

In this step, don't try to fix anything. Just record your scores as a baseline. If you discover structural issues driving your speed problems, the relationship between web design and site architecture decisions and rankings is worth understanding before you start patching symptoms.

Mobile Usability

Go to GSC's Mobile Usability report. Mobile-first indexing means Google uses the mobile version of your site to evaluate and rank it. The desktop version is secondary. Any mobile usability errors here, text too small, clickable elements too close together, content wider than the screen, are ranking problems, not just design preferences. Flag any pages with errors for your action plan.

HTTPS and Security

This one takes thirty seconds. Visit your site and confirm that the URL shows https:// and that there's no browser security warning. If your site is still on HTTP, that's a Tier 1 fix. Google has treated HTTPS as a ranking signal for years, and modern browsers actively warn users away from unsecured sites. Most hosting platforms make SSL activation straightforward.

Step 3: Audit Your On-Page SEO

On-page SEO is where most DIY audits stop, and where most of the quick wins live. If you do nothing else in this guide, spend time here. The process for how to do an on-page SEO audit comes down to three areas: title tags and meta descriptions, header structure, and internal linking. Work through them in order.

Title Tags and Meta Descriptions

Pull your top 20 pages by impressions in GSC. For each, check that there's a unique title tag under 60 characters that includes the target keyword for that page, and a meta description under 160 characters that gives the user a clear reason to click. Any page with high impressions and a CTR below 2% is flagging a title and meta problem. Google is showing it; users are choosing not to click it. That's a fixable problem.

Header Structure

Each page should have exactly one H1 that contains the primary keyword. H2s should organize the content into logical sections and include secondary keywords where they fit naturally. A page with no H1, or three H1s, sends a confusing signal about what the page is actually about. Correct header structure is one of the fastest on-page SEO wins because it costs nothing to fix and often moves rankings within weeks.

Internal Linking

Map which pages are receiving internal links from other parts of your site. Your most important service pages should have links pointing to them from blog posts, related service pages, and anywhere else relevant. Internal links pass authority and signal to Google which pages matter most. A service page with zero internal links is effectively invisible to Google's crawlers until something else leads them there.

If you surface enough on-page problems that the scope feels bigger than a weekend project, our Portland SEO marketing agency team can run this audit for you and execute the fixes.

Step 4: Review Your Content Performance

A website SEO audit isn't complete without a content audit. This step answers one question: which pages are earning organic traffic, and which are dead weight? The most common thing we see is a business with eight blog posts that all kind of cover the same topic, none of them ranking, because none of them are strong enough to stand on their own. Combining three weak posts into one well-structured piece often produces a ranking within weeks. Understanding content marketing ROI helps you evaluate which content investments are actually worth your time.

Finding Your Winners

In GSC, export your top pages by clicks (organic, last 90 days). These pages are working. They need internal links pointing to them, and they deserve regular updates to stay relevant. Google tends to favor pages that show signs of maintenance. A top-performing page with no updates in 18 months is a page at risk of slipping.

Identifying Dead Pages

Pages with zero clicks and fewer than 50 impressions over 90 days are candidates for updating, consolidating into a stronger page, or removing entirely. Thin pages dilute your overall site authority. This is not a small issue. A site with 30 quality pages almost always outranks a site with 120 pages of mixed quality.

Running a Keyword Gap Analysis

What are your competitors ranking for that you aren't? Google's 'People Also Ask' boxes are free and surprisingly useful for this. Tools like Ahrefs and SEMrush offer free trials that give you enough data for a first-pass keyword gap review. Look for high-intent queries where competitors have content and you have nothing. Those are the gaps that cost you the most.

Checking for Keyword Cannibalization

If two pages on your site target the same primary keyword, they compete against each other, splitting authority and confusing Google about which one to rank. This is keyword cannibalization, and it's more common than most people expect. The fix is consolidation: combine the two weaker pages into one stronger, more comprehensive piece and redirect the old URL to the new one.

Step 5: Check Your Backlinks and Domain Authority

Backlinks are external votes of confidence. The more credible sites that link to you, the more authority you carry in search results, and domain authority is one of the harder signals to fake. For a DIY audit, you don't need a paid tool to get useful information.

Reading Your GSC Links Report

In Google Search Console, go to the Links report. You'll see your top linked pages and the external sites linking to you. Here's what to look for:

• Are your most important service pages receiving backlinks, or are most links pointing to old blog posts and your homepage? Homepage links are common but don't help individual service pages rank.
• Scan for obviously low-quality or irrelevant sources: links from unrelated directories, foreign-language spam sites, or link farms. These can drag your overall authority down and may warrant a disavow request.
• Identify your top-linked pages. These carry the most link equity. An internal link from one of these pages to an underperforming service page is one of the fastest, lowest-cost ways to move rankings.

Going Deeper With a Backlink Analysis Tool

A backlink analysis in Ahrefs or Moz gives you significantly more detail: historical data, link quality scores, anchor text distribution. But GSC is sufficient for a baseline audit. If you want to go deeper, those tools offer free trials that are worth running once. When reviewing competitive search data here, it's also worth noting how your competitors are showing up across paid and organic channels. Our digital advertising team often surfaces targeting angles during this phase that the SEO audit alone wouldn't catch.

The Counterintuitive Truth About Backlinks

Most small businesses don't need hundreds of new links. They need better use of the links they already have. Audit your internal linking structure before worrying about external acquisition. The internal link equity you're already sitting on is almost always underutilized, and redistributing it costs nothing.

Step 6: Build Your Prioritized Action Plan With the SEO Audit Action Stack

After completing Steps 1 through 5, sort every finding into three tiers: Tier 1 (high impact, low effort, fix this week), Tier 2 (high impact, higher effort, schedule it), and Tier 3 (ongoing habits, build them into your quarter). Tackle Tier 1 before touching anything else. This is the SEO Audit Action Stack, and it's the piece most SEO audit checklists skip entirely. They tell you what to check. They don't tell you what to do first.

Prioritization is the whole game. A fixed 404 error matters more than a new blog post in most situations, and most small business owners get that backwards. The SEO Audit Action Stack is how you sort your findings into something you can actually act on, a three-tier model designed to prevent audit paralysis.

Tier 1: Fix Fast

High impact, low effort. These are the fixes you should complete before touching anything else:

• Index errors and crawl failures in GSC
• Broken redirects and redirect chains
• Missing or duplicate title tags
• Missing meta descriptions on key pages
• Core Web Vitals failures on your highest-traffic pages

These can often be resolved in a single day. The ranking impact is disproportionate to the effort, which is why they go first.

Tier 2: Build Strategically

High impact, higher effort. These take weeks and require a plan:

• Content gaps: new posts targeting keyword opportunities you identified
• Consolidating cannibalized pages into stronger single pieces
• Internal linking restructure: routing authority from your top-linked pages to underperforming service pages
• Title tag optimization across your top 20 pages by impressions

Put these items into a content calendar with actual dates. Without that, Tier 2 becomes a parking lot.

Tier 3: Monitor Over Time

Lower urgency, ongoing habits rather than one-time fixes:

• Backlink acquisition and relationship-building with relevant publishers
• Schema markup implementation
• Domain authority building over time
• Competitive gap tracking: revisiting your keyword gap analysis quarterly

As you build Tier 3 habits, it's worth adding AI search visibility to the mix. Generative engines like ChatGPT and Perplexity are increasingly where your customers are finding answers, and schema markup is one of the signals those systems use to evaluate credibility. Our GEO guide covers how to think about that layer alongside traditional SEO.

Assign every finding from your audit to one of these three tiers. Tackle Tier 1 this week. Plan Tier 2 into your calendar this month. Build Tier 3 into a recurring quarterly habit. That's the SEO audit checklist approach that actually produces results instead of a folder full of notes you never act on.

If your Tier 1 list is longer than you expected, our Portland SEO marketing agency team can run this audit for you and execute the fixes. And if you're evaluating whether SEO is the right investment compared to other channels, Sproutbox is a full-service marketing agency in Portland. We can look at the whole picture.

Frequently Asked Questions

How long does an SEO audit take?

A DIY SEO audit using Google Search Console and Google Analytics 4 takes 2 to 4 hours for a small business website with under 50 pages. If you're using third-party tools like Screaming Frog or Ahrefs to crawl a larger site, add another hour or two. A professional agency audit goes significantly deeper, reviewing technical health, competitive gaps, and AI search visibility, and typically requires 1 to 2 weeks to do it properly.

How often should I do an SEO audit?

For most small businesses, a light audit, checking GSC for crawl errors and reviewing top pages for CTR drops, every quarter is enough to catch problems before they compound. A full audit covering technical SEO, content performance, and backlinks should happen at least once a year, and always after a website redesign, platform migration, or major algorithm update. Skipping audits after site changes is one of the most common reasons rankings drop unexpectedly and stay down for months.

What's the difference between a technical SEO audit and a content audit?

A technical SEO audit examines the infrastructure of your site: how Google crawls it, how fast it loads, whether pages are indexed correctly, and whether redirects and canonical tags are configured properly. A content audit evaluates the performance of your actual pages: which ones rank, which ones don't, where keyword gaps exist, and whether any pages are competing against each other through cannibalization. Most small business sites need both. A technical issue can hold a great page back from ranking at all, while a content gap means you're invisible for searches you should own. On-page SEO lives at the intersection of both.

Do I need to hire someone to do an SEO audit?

Not necessarily. The six-step process in this guide is designed to be completed with free tools, and most small business owners can get through it in an afternoon. Where a professional audit earns its cost is in two areas: catching the technical issues that free tools don't surface clearly (crawl budget inefficiencies, JavaScript rendering problems, redirect chain depth), and turning findings into a prioritized plan you'll actually execute. If your Tier 1 list after a DIY audit is longer than a single day of work, bringing in a team usually saves time and produces faster ranking results than working through it alone.

Your SEO Has Problems You Don't Know About Yet

An SEO audit isn't a one-time project. It's the habit that separates businesses that get found from the ones that keep wondering why their rankings stall. The six steps here, pulling baseline data, checking technical health, reviewing on-page elements, auditing content performance, assessing backlinks, and building a prioritized action plan, give you a repeatable process for diagnosing your site honestly.

The SEO Audit Action Stack is what makes the difference between an audit that produces a binder of notes and one that produces actual ranking movement. Tier 1 fixes go first, always. Tier 2 goes on a calendar. Tier 3 becomes a background habit. That's the whole framework.

We tell our clients the same thing at the start of every engagement: the audit isn't the scary part. The scary part is realizing how much quiet damage has been accumulating while you were focused on other things. The problems are usually in the crawl data, not the design. If the audit surfaces more than you want to tackle alone, schedule a call and we'll take a look together. Good humans. No jargon. Just an honest look at what's holding your site back.