Menu
Get Started
Back to Blog
Strategy2026-05-0410 min read

What a Real Website Audit Actually Covers (and Why Free Ones Aren't Enough)

Free site audit tools tell you maybe 10% of what's actually wrong. Here's what a thorough audit looks like, and why the difference matters.

By Jeremy Marcott, Owner at The Viable Source

Why Free Audits Disappoint

Free "website audit" tools are everywhere. Most output a long PDF with red and yellow flags that look serious but rarely connect to actual business outcomes. "Your site has 47 missing alt tags" is not a useful insight if you can't tell which ones matter or what they're costing you.

A real website audit is different. It looks at the whole picture, performance, SEO, accessibility, conversion, security, and AI visibility, and prioritizes findings by business impact, not severity score. The output is a focused action plan, not a 60-page diagnostic dump.

Here's what a thorough audit actually covers, and why each piece matters.

1. Technical SEO and Crawlability

Search engines and AI systems can only rank or cite content they can find and understand. Technical SEO is the foundation everything else sits on.

A real audit checks:

Sitemap completeness and accuracy. robots.txt configuration. Indexing status of every important page in Google Search Console. Canonical URL handling. Redirect chains and broken redirects. 404 pages with traffic or backlinks. Pagination handling. International/hreflang setup if applicable. JavaScript SEO (does the rendered HTML match what's in the source).

Why it matters: A page that isn't indexed cannot rank. A page with the wrong canonical sends ranking authority to the wrong URL. A redirect chain bleeds link equity at every hop. These are unglamorous problems that quietly cost real traffic.

2. On-Page SEO

On-page SEO is where most automated audits stop, but the depth matters.

A real audit checks:

Title tag and meta description quality (not just presence). Heading hierarchy and structure across all major pages. Keyword targeting and search intent alignment. Internal linking patterns and orphan pages. URL structure and depth. Content depth and originality. Image optimization (file size, naming, alt text).

Why it matters: A page can be technically indexed and still rank poorly because the title doesn't match search intent, or the H1 contradicts the title, or the page is buried six clicks deep with no internal links pointing to it. Automated tools rarely catch these layered issues.

3. Structured Data and AEO Foundations

This is where most audits fall completely short, and where the highest leverage often lives in 2026.

A real audit checks:

Presence and accuracy of Organization, LocalBusiness, Service, FAQ, and Article schema. JSON-LD validation against the schema.org vocabulary. Entity consistency between schema, on-page content, and external listings. Cross-page schema relationships (does Person schema link to Organization correctly?). llms.txt presence and quality. AI platform visibility, does your business actually appear in ChatGPT, Perplexity, or Google AI Overviews for relevant queries?

Why it matters: AI systems are increasingly the way people find businesses. Sites with weak structured data are invisible to a growing share of relevant searches. This is also one of the easiest categories to dramatically improve quickly.

4. Performance and Core Web Vitals

Page speed affects rankings, conversion rate, and user satisfaction simultaneously. It's not optional.

A real audit checks:

Core Web Vitals: LCP, INP, CLS. Performance on mobile (often much worse than desktop). Image weight and format (WebP/AVIF vs older formats). Lazy loading implementation. Render-blocking resources. Server response time (TTFB). Use of a CDN.

Why it matters: A page that loads in 6 seconds loses roughly 30% of mobile visitors before they see any content. Core Web Vitals are also a confirmed Google ranking factor. The cost of slow pages is doubled, fewer rankings *and* fewer conversions on the visitors who do arrive.

5. Accessibility (WCAG)

Accessibility is both an ethical baseline and a measurable conversion lift. It's also a growing legal compliance area.

A real audit checks:

Color contrast against WCAG AA standards. Keyboard navigability. Screen reader compatibility. Form label associations. Focus indicators. Heading structure (also helps SEO). Alt text quality and presence.

Why it matters: Roughly 15% of the population has some form of disability that affects web use. Beyond the ethics, accessibility lawsuits against small businesses have grown sharply. And, counterintuitively, sites that pass WCAG AA tend to convert better across all users because the same design clarity that helps screen reader users helps everyone.

6. Conversion Path and CRO

Most audits don't address conversion at all. We think that's a mistake, a perfectly optimized page that doesn't convert is still a failure.

A real audit checks:

Conversion tracking accuracy (GA4, GTM, call tracking, form analytics). Form length and friction. CTA prominence and clarity. Social proof placement and authenticity. Mobile conversion path (often much worse than desktop). Page-level conversion rates for high-traffic pages. Drop-off points in the conversion funnel.

Why it matters: This is usually the highest-leverage category. Doubling conversion rate has the same effect as doubling traffic, except it's faster, cheaper, and benefits every channel.

7. Security and Maintenance

Security issues can tank rankings overnight, leak customer data, and destroy trust.

A real audit checks:

SSL/HTTPS status. CMS and plugin update status (especially WordPress). Known vulnerabilities. Backup and restore process. Security headers (CSP, HSTS, X-Frame-Options). Spam protection on forms. Account access hygiene.

Why it matters: A compromised site can lose Google indexing, get blacklisted by browsers, leak customer data, and require painful rebuilds. The work to prevent this is small. The work to recover is large.

8. Local SEO Signals (For Local Businesses)

If you serve a defined geographic area, local SEO signals are a critical audit category.

A real audit checks:

Google Business Profile completeness and activity level. NAP consistency across major directories. Review velocity and response patterns. Location-specific landing pages and their depth. Local citations on industry-specific and Oregon/Portland directories.

Why it matters: For local businesses, local SEO signals often outweigh on-site SEO in driving qualified traffic. Audits that skip this category miss most of the actual opportunity.

What Comes Out of a Real Audit

Not a 60-page PDF. A focused, prioritized action plan organized by impact:

Critical (do this month): Issues that are actively costing you traffic, conversions, or trust. Usually 5-10 items.

High (do this quarter): Significant opportunities that won't break anything if delayed but are clear wins. Usually 10-20 items.

Medium (do when convenient): Improvements that compound over time but aren't urgent.

Skip: Findings that look bad on automated tools but don't actually matter for your specific business.

Each item should include the business impact (in plain language, not severity scores), the estimated effort, and a clear next step.

What to Watch Out For

Red flags in audits being sold to you:

Generic findings. "Your site needs more backlinks" is not actionable. A real audit specifies *which* backlinks, from *which* sites, *how* to earn them.

Severity-based prioritization with no business context. A red "critical" issue on a page nobody visits matters less than a yellow issue on your top traffic page.

No mention of AEO/GEO or structured data. In 2026, an audit that doesn't address how your site appears in AI search is incomplete.

Tool-generated reports with no human interpretation. Tools find symptoms. Humans connect symptoms to causes and prioritize by business impact. Software audits without expert review are mostly noise.

Pricing that depends on the number of "issues found." This incentivizes the auditor to find as many trivial issues as possible. Real audits charge for expertise, not issue count.

When an Audit Pays For Itself

A good audit pays for itself in three ways:

Quick wins. Most audits surface 3-5 changes that produce measurable improvement within weeks. Often the audit cost is recovered just in those.

Avoided mistakes. A clear roadmap means you stop spending on the wrong things, wrong PPC structure, wrong content topics, wrong redesign priorities.

Compounding improvements. Foundation fixes (technical SEO, structured data, conversion tracking) make every future marketing dollar work harder. The ROI is multi-year.

Getting Started

If you want to know what's actually holding your site back, book a free audit consultation. We'll show you a sample of what a full audit covers, speed, SEO, accessibility, AEO/GEO, conversion, and give you a sense of the issues we typically find on sites in your industry.

Related reading: Conversion Rate Optimization for Service Businesses · Local SEO for Portland: Ranking in the Rose City · See also Website Audits, Website Upgrades, and Website Maintenance.

Written by

Jeremy Marcott

Owner · The Viable Source

Want to talk about how these ideas apply to your business?

Get in Touch