Key takeaways
- A backlink audit is an inventory and a set of decisions, not just a hunt for bad links. It answers what links you have, which matter, what to do, and how to monitor.
- Google Search Console gives you a free, authoritative sample of links Google knows about. Third-party tools add discovery but use their own estimates.
- Most sites need little or no disavowing. Google calls the disavow tool an advanced feature to use with caution, and says most sites do not need it.
- Score links on both risk and value so you protect your best links as carefully as you remove your worst.
- Keep a record of every decision so the next audit starts from facts, not memory.
What a Backlink Audit Covers
A backlink audit is a structured review of the links pointing to your site. It answers four questions: what links do we have, which of them help, hurt, or do nothing, what should we do about each group, and how will we keep the profile healthy? Finding suspicious links is only one part of that. Most of the value comes from the inventory, the decisions, and the follow-through.
Google’s spam policies describe link spam as links created mainly to manipulate rankings, such as buying or selling links for ranking purposes, excessive link exchanges, automated link creation, and widely distributed optimized links in footers or widgets. An audit helps you check whether your profile contains any of that, and whether the links you want are intact. If you want to evaluate individual links first, read our guide to how to check backlink quality.
When to Run an Audit
- After a sudden, unexplained drop in search traffic.
- Before a migration or redesign, to create a baseline of links to protect.
- After you take over a site or buy a domain.
- Before a link building campaign, to know your starting point.
- After a notice about a manual action in Search Console, or a suspicious spike of new links.
- On a regular schedule, such as quarterly.
Step 1: Collect Link Data From More Than One Source
Start with Search Console. Its Links report shows top linked pages, top linking sites, and top linking text, and lets you drill down to see which pages on a site link to yours. Google is clear about its limits: the report is a sample, not a comprehensive list of every link. Tables show up to 1,000 rows, and exports can include up to 100,000 rows. Data is grouped by root domain and canonical URL. The report also includes links Google has found over time, so some may have been removed, and it does not show whether a link is marked nofollow.
Because of those limits, add at least one third-party backlink tool. Each tool crawls the web differently and reports its own authority metric, so use their numbers as comparisons within one tool, not as facts about how Google sees a site. Our overview of free backlink checker tools lists options and their limits.
Step 2: Merge and Clean the Data
Export from each source and combine the files into one master sheet. Keep the raw files unchanged and work on a copy. Remove duplicate rows, and add a column showing which sources found each link. A link found by several sources is more likely to be current. A link seen by only one tool may be old or removed, so recheck it before acting.
Step 3: Build the Audit Spreadsheet
Use these columns as a starting point:
| Column | What to record |
|---|---|
| Linking page and domain | The URL and the root domain it belongs to |
| Target page | The page on your site that receives the link |
| Anchor text | The visible link text |
| Link attributes | Normal, nofollow, sponsored, or ugc, checked on the page itself |
| Link type | Editorial, directory, comment, footer, sponsored, unknown |
| Relevance | High, medium, low, or none, from your own reading |
| First and last seen | Dates from your tools |
| Risk score | Your 0 to 10 rating from Step 4 |
| Value score | Your 0 to 10 rating from Step 4 |
| Action and notes | Keep, monitor, request removal, disavow, or replicate, with the evidence |
Check the link attributes by viewing the source of the linking page, since the Search Console Links report does not show them. Google’s guidance on qualifying outbound links says that sponsored marks paid placements, ugc marks user-generated content such as comments and forum posts, and nofollow is a general signal that you do not want to be associated with the linked page. Links marked this way are generally not followed.
Step 4: Score Risk and Value
Work at the domain level first, because patterns are more telling than single links. Then review borderline cases by hand. The scoring below is a method you can adapt. It is not a Google formula, and third-party “toxicity” scores are proprietary estimates that you should not treat as verdicts.
Risk signals (add points): the page exists mainly to sell or exchange links, many links with identical commercial anchor text, a sudden unnatural spike of links, content that is unrelated, scraped, or auto-generated, and links in widely distributed footer or widget placements.
Value signals (add points): an editorial mention within the content, a relevant site that real people visit, a link that is easy to find, natural anchor text such as your brand or the page topic, and a link that has remained live over time.
Our guide on toxic backlinks and disavowing goes deeper on triage. For context on link attributes in general, see nofollow vs dofollow links.
Step 5: Triage Into Four Groups
- High risk, clear evidence. First try to get the link removed. Log each attempt with the date.
- Borderline. Review the page manually and recheck in a month.
- High value. Confirm the link is live, make sure the target page returns a working page, and note the publisher as a relationship worth keeping.
- Low value, low risk. Do nothing. Document that you reviewed them and move on.
Step 6: Decide Whether to Disavow
Google’s help page says to use the disavow tool only if you have many spammy, artificial, or low-quality links and those links have caused, or will likely cause, a manual action. It describes the tool as an advanced feature to use with caution, warns that misuse can hurt performance, and recommends first removing as many bad links as you can. For most sites, the answer to “should I disavow?” is no.
If you do need a file, Google specifies the format:
- A plain text file in UTF-8 or 7-bit ASCII, with one URL or domain per line.
- Use the prefix
domain:to disavow a whole domain and its subdomains. You cannot disavow a subpath. - Comment lines begin with
#. The file can have up to 100,000 lines and 2 MB, and each URL must be under 2,048 characters. - Each property has one list, and a new upload replaces the old one, so keep your latest complete file.
- The tool does not support Domain properties, so upload against a URL-prefix property. Disavowed links still appear in the Links report, and changes can take weeks to take effect.
Worked Example
Example scenario: The figures are hypothetical. A small online store audits its profile and exports 600 linking pages from Search Console and one third-party tool. After merging, the sheet contains 420 unique linking domains.
| Group | Domains (hypothetical) | Decision |
|---|---|---|
| Editorial mentions from relevant sites | 60 | Keep and note the publishers |
| Directories and scrapers with no evidence of manipulation | 280 | No action, documented |
| Borderline blog networks | 50 | Review manually, recheck in 30 days |
| Paid or automated link patterns | 30 | Request removal first, and disavow only what remains if the evidence is clear |
During the review, the store also finds that one high-value editorial link points to a product page that now returns a 404. It fixes this with a 301 redirect to the closest live product page. Google describes permanent redirects as a strong signal and states that they do not cause a loss of PageRank, so recovering a good link this way is often worth more than removing a weak one.
Step 7: Document and Schedule
Write a one-page summary with the date, the number of domains reviewed, the counts in each group, whether a disavow file was uploaded, your most valuable links, and the date of the next audit. Save the sheet and the file together.
| Frequency | Task |
|---|---|
| Monthly | Check the Links report for new linking sites and review any Manual actions notice |
| Quarterly | Export, score new domains, update decisions |
| Yearly | Re-score the whole profile and compare with two or three competitors using our backlink gap analysis |
| After events | Audit after a traffic drop, migration, or suspected link attack |
Common Mistakes
- Disavowing based on a tool’s toxicity score alone. Review the evidence yourself.
- Treating every low-authority link as harmful. Many are simply unimportant.
- Ignoring link loss. Broken target pages and removed links cost you value as well.
- Uploading a partial disavow file. A new upload replaces the old one, so include all entries.
- Forgetting to record decisions. Without notes, the next audit repeats the same work.
Quick Answers
How long does an audit take?
A small site can be reviewed in a few hours once a template exists. A neglected profile with years of unknown link building takes longer because of manual review.
Can I audit backlinks for free?
Yes, to a useful degree. Search Console is free, and many third-party tools offer limited free access. Paid plans mainly add depth and history.
Do I need to audit nofollow links?
List them for completeness, but they rarely need action, since such links are generally not followed.
If you want help interpreting your link profile, you can reach us at https://ssaagency.us/contact/.