Website health8 min read
The 2026 SEO Audit Checklist: The Checks We Run on Every Site
The seven categories and weights behind our SEO + GEO audit score, the checks inside each one, and the pass marks we use. Run it yourself.
By Amit Malul LevUpdated
In plain words
A website check looks at seven things: whether Google can reach your pages, whether the words answer what customers ask, how each page is titled, the hidden labels that explain your business to Google, speed, whether AI assistants can read you, and your photos. Each gets a score and the total is out of 100. You can run most of it yourself with free tools, or have the whole thing done for you.
This article goes into the technical details. You don't need them to act on the summary above; they are here for you or whoever builds your site.
Try the Website health checkOn this page
TL;DR: Our audit scores a site in seven categories and weights them: technical SEO 22%, content quality 23%, on-page SEO 20%, structured data 10%, performance 10%, AI search readiness 10% and images 5%. The overall score is the weighted average, from 0 to 100. Below is every check we run in each category and what counts as a pass. Anything that stops a page being indexed is critical regardless of category. Test a single page right now with the free Website health check, or get the whole site checked with the full report.
Most SEO audit checklists online are either 12 items long and useless, or 250 items long and also useless, because nobody can tell which of the 250 matter. This one is the list we actually run, in the order we run it, with the weights we use to turn it into a score.
What an audit checks in 2026
An SEO audit checks whether search engines and AI assistants can find a site's pages, understand them and trust them enough to show them. We split that into seven areas. Technical health covers crawling, indexing, HTTPS and redirects. Content quality asks whether a page is deep, accurate and written by someone you can name. On-page covers titles, descriptions, headings and internal links. Then come structured data, performance measured as Core Web Vitals, readiness for AI search (crawler access, text the server sends, answers that can be quoted) and images. The AI category is the one that changed most in two years and it replaced nothing, because Google states its AI features run on the same systems as regular Search, so a site with weak foundations fails in both places. A good audit ends with a prioritised list. A flat list of 80 findings with no order is how audits end up in a drawer.
How the weights work
| Category | Weight | What it answers |
|---|---|---|
| Technical SEO | 22% | Can search engines crawl and index the pages? |
| Content quality | 23% | Is the content worth showing, and who stands behind it? |
| On-page SEO | 20% | Does each page say clearly what it is about? |
| Structured data | 10% | Can machines read the facts without guessing? |
| Performance (Core Web Vitals) | 10% | Is the page fast and stable for real visitors? |
| AI search readiness | 10% | Can AI assistants reach the page and quote it? |
| Images | 5% | Are images described and compressed? |
The overall score is the weighted average. Take the made-up dental clinic from our worked example, with illustrative scores of technical 84, content 80, on-page 86, structured data 74, performance 88, AI readiness 78 and images 80. Multiply each by its weight and add them up. You get 82.08, reported as 82. Structured data at 74 is the weakest category, and it costs the total about one point because it carries only 10% of the weight. Drop the content score by ten points instead and you lose more than twice that.
Technical SEO (22%)
These decide whether the rest of the audit matters at all. A beautiful page that is not indexed scores zero in practice, however good the rest of it is.
- robots.txt returns 200, lives at the root, and does not disallow pages you want in search. Google's robots.txt introduction is the reference.
- No accidental noindex. Check the
<meta name="robots">tag and theX-Robots-Tagheader on key pages. Staging settings shipped to production are the classic case. - XML sitemap lists every indexable page and nothing else (no redirects, no 404s, no noindexed URLs), and is submitted in Search Console.
- Canonical tags point each page at itself, or at the real original when there are duplicates, following Google's canonicalization guidance.
- HTTPS everywhere, with HTTP and
www/non-wwwvariants redirecting in a single 301 hop. - No redirect chains longer than one hop on internal links, and no internal links to 404s.
- Mobile parity. Google indexes the mobile version, so the mobile page must carry the same content, headings and structured data as desktop.
- Main content present in the raw HTML the server sends, so a crawler that skips JavaScript still reads it.
- hreflang for multilingual sites: every language version lists all versions including itself, plus
x-default. - Security headers: at least HSTS and
X-Content-Type-Options, ideally a Content Security Policy.
Content quality (23%)
Content carries the most weight because once a page can rank, content is what decides whether it deserves to. The frame we use is Google's helpful content guidance and its three questions: who wrote this, how, and why.
- Each important page answers its query fully. Word count is not a ranking factor, but a 150-word service page rarely answers anything.
- Visible authorship on advice content: a byline that links to a page explaining who the author is.
- First-hand evidence: photos of your own work, real numbers, case studies, prices. This is the part competitors and AI-written pages cannot copy.
- Accurate and dated. Claims are sourced; pages that give advice show when they were last reviewed.
- No thin or duplicate pages competing with each other for the same query.
- Trust pages exist: about, contact with a real address or phone, privacy policy.
On-page SEO (20%)
- Unique title per page, leading with the topic. Google shortens titles by pixel width, so roughly 50 to 60 characters is a safe target. Google explains how it picks title links.
- Unique meta description of about 120 to 160 characters that a person would want to click.
- Exactly one H1 that names the page's topic, and headings in order (no H2 jumping to H4).
- Descriptive internal links: every page is linked from at least one other page, with anchor text that says where it goes.
- Clean URLs: readable, lowercase, hyphenated, stable.
- Open Graph tags so shared links show the right title and image.
Structured data (10%)
- JSON-LD format, which Google recommends over microdata.
- Organization or LocalBusiness on the home page, Article with author on posts, Product or Service where relevant, BreadcrumbList on deeper pages.
- Validates in the Rich Results Test and the Schema.org validator.
- Matches the visible page. Marked-up reviews, prices and FAQs must appear on the page itself.
- No retired types. Google stopped showing HowTo rich results in 2023 and restricted FAQ rich results to a small set of sites, as announced in its 2023 update. FAQ markup can still describe a real FAQ; just do not expect stars or dropdowns in results.
Performance (10%)
We use Google's Core Web Vitals thresholds, measured at the 75th percentile of real visits, because that is what Google measures:
| Metric | Good | Needs improvement | Poor |
|---|---|---|---|
| Largest Contentful Paint (LCP) | ≤ 2.5 s | 2.5 to 4.0 s | > 4.0 s |
| Interaction to Next Paint (INP) | ≤ 200 ms | 200 to 500 ms | > 500 ms |
| Cumulative Layout Shift (CLS) | ≤ 0.1 | 0.1 to 0.25 | > 0.25 |
- Field data first. If the Chrome UX Report has data for your site, that is what counts. Lab scores are for diagnosis.
- Mobile passes, because mobile is where most sites fail.
- Page weight is reasonable: compressed images, no autoplaying video or embeds loading on first view.
The full walkthrough is in Core Web Vitals in 2026.
AI search readiness (10%)
- AI search crawlers allowed in robots.txt: OAI-SearchBot, ChatGPT-User, PerplexityBot, Claude-SearchBot and Bingbot, as well as Googlebot.
- No CDN or firewall rule silently blocking them.
- Answer-first passages under question-style headings.
- Facts in text, not in images or PDFs only.
- Entity signals: consistent business name, address and profiles across the site and its structured data.
- llms.txt present or not. We record it and give it no weight, for reasons explained in llms.txt and robots.txt for AI crawlers.
Images (5%)
- Alt text that describes the image on every meaningful image; empty
alt=""on decorative ones. - Width and height attributes on every
<img>so the page does not jump while loading. - Modern formats (WebP or AVIF) and sizes that match how large the image is displayed.
- Lazy loading below the fold, never on the main image at the top of the page.
The tools, nearly all free
Almost every check on this list runs on free tools. Most of them are Google's. Search Console shows which pages are indexed, which are excluded and why, and it is where the sitemap gets submitted. PageSpeed Insights gives you Core Web Vitals from real Chrome users when the site has enough traffic and a Lighthouse lab test when it does not. The Rich Results Test validates structured data against what Google supports, and your browser's "view source" answers the JavaScript question in seconds. Bing Webmaster Tools matters more than people think, since Bing's index feeds Copilot. Where free tools fall down is scale. Crawling a whole site and weighing hundreds of findings against each other is the gap a paid audit exists to fill. Our free Website health check scores one page against the on-page and technical basics.
Sorting what the audit finds
Every finding gets one of four severities, and severity beats category. A critical technical issue outranks every content issue, but a high-severity content gap outranks a low-severity technical one.
- Critical: blocks indexing or risks a penalty. Fix today.
- High: clearly holds back rankings or conversions. Fix this week.
- Medium: a real improvement. Fix this month.
- Low: polish. Backlog it.
A good audit also says how much effort each fix takes. "Add FAQ markup to a dozen existing answers" is a few hours for a developer and "write an informational content section" is weeks, and they should never sit in the same column without a word about that.
Most of this list you can run yourself with the tools above. If you would rather start from the outside in, the free guide is a 15-minute test you do on your phone. If you want the whole list run on your site, with the score and the fixes in order, a team of AI agents does exactly that in the full report.
Questions people ask
- How often should I run an SEO audit?
- A full audit once or twice a year is enough for most small sites, plus a quick check after any redesign, platform migration or big content change. Launches and migrations are where the expensive mistakes happen, such as a staging noindex that ships to production.
- How is the audit score calculated?
- Each of seven categories gets a score from 0 to 100. The overall score is their weighted average: technical SEO 22%, content quality 23%, on-page SEO 20%, structured data 10%, performance 10%, AI search readiness 10% and images 5%.
- What is a good SEO audit score?
- It is a relative measure, not a Google metric, so use it to compare a site with itself over time. On our scale, sites in the 30s usually have something structural wrong, such as a single thin page or missing basics, while sites in the 80s are mostly down to markup and content gaps.
- Can I run an SEO audit for free?
- Yes. Google Search Console, PageSpeed Insights, the Rich Results Test and a look at your robots.txt and page source cover most of the checklist. Our free tools cover single pages. What free tools do less well is crawl a whole site and weigh the findings against each other.
- Which category should I fix first?
- Anything that blocks indexing comes first, whatever its category, because nothing else matters for a page Google cannot index. After that, work through technical SEO, then content and on-page issues, which carry 65% of the weight between them.
Try it on your own site
Website health check
Checks one page for the basics that most often stop a business being found on Google, with a score out of 100.
Check my siteOther free checks
More to read
Website health9 min read
ChatGPT Ads for Small Business: What to Know Before You Spend the First Dollar
Since May 2026 any business in the United States can pay to show an ad under ChatGPT's answers, and since September businesses in Israel and most of Europe can too. Some kinds of business are not allowed in at all, and early reports on results are thin. A click costs about what a search click costs, so this article explains who can advertise and how to run a small test before a month and a budget disappear.
AI assistants8 min read
Your Competitor Can Now Pay to Sit Under ChatGPT's Answer About You
When someone asks ChatGPT which bakery nearby makes gluten-free birthday cakes, it can now show one paid card under its answer. The card and the answer are chosen by separate systems, and early data shows the businesses buying the card are rarely the ones named in the answer. This article explains how the two differ and how a small business gets named in the answer, which costs nothing per click.
Speed8 min read
Core Web Vitals in 2026: Fixing LCP, INP and CLS, with a PageSpeed Walkthrough
Google measures how fast your site loads, how quickly it reacts when someone taps, and whether things jump around while it loads. A slow or jumpy site loses visitors before they read a word, and Google notices. This article explains the three measurements, what a good result looks like and what usually fixes a bad one. The free speed test gives you your own numbers in a minute.