Enterprise SEO Audit Checklist 2026: The 47-Point Framework Used by $89M Agencies

How to Use This Checklist

Score each item 0-2:

• 0 = Not implemented / Critical issue
• 1 = Partially implemented / Needs improvement
• 2 = Fully optimized

Total possible: 94 points

To dive deeper into GEO strategies, explore our comprehensive GEO guide and learn about our GEO services.

Score Range	Grade	Verdict
85-94	A+	Elite SEO health
75-84	A	Strong foundation, minor gaps
60-74	B	Solid but leaving traffic on the table
45-59	C	Significant issues hurting rankings
30-44	D	Urgent intervention needed
0-29	F	Rebuild required

---

Section 1: Crawlability & Indexation (Points 1-8)

1. Robots.txt Accuracy

Check: Is robots.txt accessible at /robots.txt? Does it block anything that should be indexed? Why: A single Disallow: / accidentally pushed to production has wiped entire sites from Google overnight. We’ve seen it happen to a client with 4M pages. Fix: Audit every Disallow directive. Cross-reference with your sitemap. Test with Google Search Console’s robots.txt tester. Tool: Screaming Frog, Google Search Console

2. XML Sitemap Health

Check: Are sitemaps submitted to GSC? Do they include only indexable, canonical, 200-status URLs? Are they under 50MB / 50K URLs per file? Why: Sitemaps with 404s, redirects, or noindexed pages waste crawl budget and signal poor site maintenance to Google. Fix: Auto-generate sitemaps from your CMS. Validate with xmllint. Remove non-200 URLs. Use sitemap index files for large sites. Tool: Screaming Frog, Yoast/RankMath (WordPress), custom scripts

3. Crawl Budget Optimization

Check: For sites >10K pages — are you burning crawl budget on filtered URLs, session IDs, infinite calendar pages, or internal search results? Why: Google allocates finite crawl resources. Every wasted crawl on a junk page is a crawl stolen from your money pages. Fix: Block faceted navigation with robots.txt or noindex. Use rel=canonical on parameterized URLs. Implement crawl-delay only if you’re getting hammered. Tool: Google Search Console (Crawl Stats), log file analysis

4. Index Coverage

Check: What’s the ratio of indexed pages to submitted pages in GSC? Are important pages excluded? Why: If you have 50K pages but only 20K indexed, Google is telling you 60% of your content isn’t worth indexing. That’s a quality signal. Fix: Investigate “Excluded” reasons in GSC. Common culprits: duplicate content, thin pages, noindex tags left from staging. Tool: Google Search Console (Index Coverage report)

5. JavaScript Rendering

Check: Does Google see your content when JS is disabled? Use site:yoururl or URL Inspection tool to check rendered HTML. Why: Google can render JavaScript, but with delays. Critical content behind JS may not be indexed for days or weeks. SPAs without SSR are particularly vulnerable. Fix: Implement SSR or pre-rendering for critical content. Use dynamic rendering for complex interactive elements. Test with fetch as Google. Tool: Google URL Inspection, Puppeteer/Playwright testing

6. Orphan Pages

Check: Are there indexed pages with zero internal links pointing to them? Why: Orphan pages rely entirely on external signals and direct crawling. They’re systematically undervalued by Google’s link equity algorithms. Fix: Run a crawl + index comparison. Any indexed page not found in crawl is orphaned. Add internal links or consolidate. Tool: Screaming Frog (crawl vs. sitemap comparison), Ahrefs

7. Redirect Chains & Loops

Check: Are there redirect chains longer than 2 hops? Any redirect loops? Why: Each redirect hop leaks ~10-15% link equity. A 4-hop chain can lose 40%+ of the original page’s authority. Loops cause complete crawl failure. Fix: Audit all 301/302 redirects. Flatten chains to single hops. Fix loops immediately — they’re critical errors. Tool: Screaming Frog, httpstatus.io

8. HTTP Status Code Health

Check: What percentage of internal links return non-200 status codes? Why: Excessive 404s, 5xx errors, or soft 404s damage crawl efficiency and user experience signals. Fix: Target <1% error rate on internal links. Implement proper 404 pages with navigation. Redirect broken URLs to relevant alternatives. Tool: Screaming Frog, Google Search Console

---

Section 2: On-Page SEO (Points 9-18)

9. Title Tag Optimization

Check: Are title tags unique, under 60 characters, keyword-optimized, and compelling? Why: Title tags remain the single strongest on-page ranking factor. Duplicate titles across pages dilute relevance. Fix: Every page needs a unique, descriptive title with primary keyword near the front. Include brand name at the end for branded recognition.

10. Meta Description Quality

Check: Are meta descriptions unique, 150-160 characters, and action-oriented? Why: They don’t directly rank, but they control CTR from SERPs. Google rewrites ~70% of meta descriptions — well-written ones survive more often. Fix: Write descriptions that answer “why should I click?” Include a CTA. Front-load value.

11. Header Tag Hierarchy

Check: Does every page have exactly one H1? Do H2-H6 follow logical hierarchy? Are target keywords present in H2s? Why: Header structure signals content organization to both users and crawlers. Multiple H1s or skipped levels confuse topic interpretation. Fix: Enforce single H1 per page. Use H2s for main sections, H3s for subsections. Include keyword variants naturally.

12. Content Depth & E-E-A-T

Check: Does content demonstrate first-hand Experience, Expertise, Authoritativeness, and Trustworthiness? Is word count competitive with ranking pages? Why: Google’s 2024-2026 helpful content updates ruthlessly demote thin, generic content. E-E-A-T is now table stakes for YMYL topics. Fix: Add author bios with credentials. Include original data, case studies, proprietary insights. Match or exceed the depth of page-1 competitors.

13. Internal Linking Architecture

Check: Do money pages have sufficient internal links? Is anchor text descriptive? Is link equity distributed logically? Why: Internal links are the #1 lever you fully control. A well-linked page can outrank a poorly-linked page with 10x the backlinks. Fix: Audit link equity flow with tools. Ensure top revenue pages receive the most internal links. Use descriptive anchors — never “click here.”

14. Image Optimization

Check: Do all images have descriptive alt text? Are they compressed (WebP/AVIF)? Are dimensions specified? Is lazy loading implemented? Why: Images often account for 50-70% of page weight. Unoptimized images destroy Core Web Vitals scores and waste bandwidth. Fix: Convert to WebP/AVIF. Add width/height attributes. Implement native lazy loading (loading="lazy"). Write alt text that describes and includes keywords naturally.

15. URL Structure

Check: Are URLs short, descriptive, lowercase, and keyword-inclusive? Are there unnecessary parameters, IDs, or nested directories? Why: Clean URLs correlate with higher CTR and better crawlability. URLs with 3+ directory levels see progressively lower crawl frequency. Fix: Keep URLs under 75 characters. Use hyphens, not underscores. Remove stop words. Flatten deep nesting.

16. Canonical Tags

Check: Does every page have a self-referencing canonical? Are parameterized/filtered pages canonicalized to the primary version? Why: Missing canonicals let Google decide which version to index. Google often chooses wrong — canonicalizing your mobile page to desktop, or a filtered page over the main one. Fix: Self-reference canonical on every page. Canonical filtered/sorted URLs to the base. Never canonical to a redirected URL.

17. Hreflang (International Sites)

Check: For multi-language/multi-region sites — are hreflang tags implemented correctly with valid language-region codes and reciprocal links? Why: Incorrect hreflang is the #1 cause of international SEO failures. Google serves the wrong country version, cannibalizing your own traffic. Fix: Use ISO 639-1 language + ISO 3166-1 Alpha 2 region codes. Every hreflang must have a reciprocal. Include x-default. Validate with hreflang.org. For a deeper dive, explore our guide on Revolutionizing SEO.

18. Thin Content Identification

Check: How many pages have <300 words of unique content? What percentage of total pages are "thin"? Why: Google’s helpful content classifier evaluates sites holistically. A high ratio of thin pages can drag down the entire domain’s ranking ability. Fix: Audit all pages by word count. Consolidate thin pages with 301 redirects. Expand valuable thin pages with substantive content. Noindex pages that must remain thin (tag pages, archives).

---

Section 3: Technical Performance (Points 19-26)

19. Core Web Vitals — LCP

Check: Is Largest Contentful Paint under 2.5 seconds on both mobile and desktop? Why: LCP is the most impactful CWV metric for rankings. Google uses field data (CrUX) — lab scores don’t count. Fix: Optimize the LCP element (usually hero image or heading). Preload critical resources. Use CDN. Eliminate render-blocking CSS/JS.

20. Core Web Vitals — INP

Check: Is Interaction to Next Paint under 200ms? Why: INP replaced FID in March 2024 as the responsiveness metric. It measures ALL interactions, not just the first — making it harder to pass. Fix: Break up long tasks. Defer non-critical JavaScript. Use requestIdleCallback. Audit third-party scripts — they’re the #1 INP killer.

21. Core Web Vitals — CLS

Check: Is Cumulative Layout Shift under 0.1? Why: Layout shifts frustrate users and directly correlate with higher bounce rates. Ads and lazy-loaded images are the usual culprits. Fix: Set explicit dimensions on all media. Reserve space for ad slots. Use font-display: swap with size-adjusted fallback fonts.

22. Mobile Usability

Check: Does the site pass Google’s mobile usability test? Is tap target spacing ≥48px? Is text readable without zooming? Why: Mobile-first indexing means Google uses your mobile version as the primary index. If mobile is broken, desktop rankings suffer too. Fix: Use responsive design (not separate mobile site). Test on real devices. Ensure viewport meta tag is set correctly.

23. HTTPS & Security

Check: Is the entire site served over HTTPS? Are there mixed content warnings? Is the SSL certificate valid and auto-renewing? Is HSTS enabled? Why: HTTPS is a confirmed ranking factor. Mixed content warnings display security alerts that tank user trust and engagement metrics. Fix: Force HTTPS via server config. Audit for mixed content with browser DevTools. Enable HSTS with includeSubDomains. Set up certificate auto-renewal.

24. Page Speed (Beyond CWV)

Check: Is TTFB under 200ms? Is total page weight under 3MB? Are there fewer than 80 requests? Why: While CWV gets the attention, overall speed affects crawl budget allocation. Faster sites get crawled more frequently. Fix: Implement server-side caching. Use a CDN. Minimize JavaScript. Enable Brotli compression. Audit third-party scripts — each one adds latency.

25. Structured Data (Schema.org)

Check: Is relevant schema markup implemented? Organization, BreadcrumbList, Article, FAQ, HowTo, Product, LocalBusiness — whichever applies? Why: Schema enables rich results (stars, FAQs, breadcrumbs in SERPs) which dramatically increase CTR. It’s also the foundation for AI/GEO indexing. Fix: Implement JSON-LD (not microdata). Validate with Google Rich Results Test. Cover at minimum: Organization, BreadcrumbList, and page-type-specific schema.

26. Log File Analysis

Check: When was the last log file analysis? Do you know Googlebot’s actual crawl patterns vs. what you assume? Why: Log files are the truth — sitemaps and GSC are approximations. Log analysis reveals what Google actually crawls, how often, and what it ignores. Fix: Set up monthly log file analysis. Track crawl frequency per section. Identify pages Google crawls obsessively vs. pages it ignores.

---

Section 4: Content & Authority (Points 27-34)

27. Content Freshness

Check: When were your top 20 traffic pages last updated? Are any older than 12 months? Why: Google’s freshness algorithms vary by query type, but stale content on competitive queries loses ground steadily. Updated content often gets a ranking bump within 2-4 weeks. Fix: Implement a quarterly content refresh calendar. Prioritize pages that rank #4-#10 — a freshness boost can push them to page 1.

28. Keyword Cannibalization

Check: Are multiple pages competing for the same primary keyword? Why: Cannibalization splits link equity and confuses Google about which page to rank. The result: neither page ranks as well as one consolidated page would. Fix: Use Ahrefs/SEMrush to identify pages sharing keywords. Consolidate with 301 redirects or differentiate with distinct keyword targeting.

29. Backlink Profile Health

Check: What’s your referring domain count trend? Domain Rating/Authority? Toxic link ratio? Anchor text diversity? Why: Backlinks remain the #1 off-page ranking factor. A declining referring domain count signals waning authority. Fix: Monthly backlink monitoring. Disavow truly toxic links (not just low-DR ones). Focus acquisition on editorial links from topically relevant sites. For a deeper dive, explore our guide on Link Building Actually Work.

30. Competitor Gap Analysis

Check: What keywords do your top 3 competitors rank for that you don’t? What content do they have that you lack? Why: Competitor gaps are the lowest-hanging fruit in SEO. These are proven keywords with proven intent — you just need to create better content. Fix: Run quarterly competitor gap analysis. Prioritize gaps where competitors rank #5-#20 (beatable) with high search volume.

31. Content Decay Detection

Check: Which pages have lost >20% traffic in the past 6 months? Why: Content decay is the silent killer of organic traffic. Pages that ranked for years can drop off when fresher competitors emerge or search intent shifts. Fix: Set up automated alerts for traffic drops >20%. Investigate cause (algorithm update, new competitor, intent shift). Refresh or rebuild accordingly.

32. Topical Authority Mapping

Check: Does your site demonstrate comprehensive coverage of your core topics? Are there obvious gaps in your content hub? Why: Google’s topical authority model rewards sites that cover a subject exhaustively. A site with 50 deep articles on “enterprise SEO” outranks one with 5 articles, all else equal. Fix: Map your content to topic clusters. Identify gaps with tools and competitor analysis. Build pillar pages linked to comprehensive supporting content.

33. E-E-A-T Signals

Check: Do pages have visible author bylines? Author bio pages with credentials? Are sources cited? Is there an editorial process? Why: Post-HCU, Google’s quality raters explicitly evaluate E-E-A-T. Sites without clear expertise signals are losing rankings across the board. Fix: Add author bios on every article. Create author profile pages. Cite sources. Add “Reviewed by” for YMYL content. Display credentials prominently.

34. User Engagement Metrics

Check: What’s your average bounce rate, time on page, and pages per session for organic traffic? How does it compare to industry benchmarks? Why: While Google denies using engagement directly, the correlation between engagement metrics and rankings is well-documented. Poor engagement → poor rankings eventually. Fix: Improve content hooks in first 100 words. Add visual breaks (images, callouts, tables). Implement proper internal linking to reduce bounces. Test different content formats.

---

Section 5: AI & GEO Readiness (Points 35-42)

35. llms.txt Implementation

Check: Does your site have an /llms.txt file providing structured context for AI crawlers? Why: llms.txt is the new robots.txt for AI. It tells LLMs what your site is about, what content to prioritize, and how to cite you. Early adopters are seeing 3-5x more AI citations. Fix: Create /llms.txt following the specification at llmstxt.org. Include: site description, key topics, citation preferences, authoritative pages.

36. AI Overview Optimization

Check: Does your content appear in Google’s AI Overviews? For what percentage of your target keywords? Why: AI Overviews now appear for ~30% of queries (up from 7% in 2024). Being cited in AI Overviews drives significant traffic — early data shows 15-25% CTR on cited sources. Fix: Structure content with clear definitions, numbered steps, and concise answers in the first paragraph. Use FAQ schema. Write “citation-worthy” paragraphs that LLMs can extract.

37. Structured Data for AI

Check: Beyond basic schema — do you implement SpecificProduct, HowTo, FAQ, and custom JSON-LD that helps AI systems understand your content’s context? Why: AI systems consume structured data more reliably than parsing prose. Sites with rich schema are systematically favored in AI-generated responses. Fix: Expand schema beyond minimum. Add FAQ for common questions. Implement HowTo for process content. Use SameAs to link to authoritative entity references.

38. Citation-Ready Content Format

Check: Are key facts, statistics, and claims formatted in ways that LLMs can easily extract and cite? Why: LLMs cite content that’s clearly structured, factual, and attributable. Vague, opinion-heavy content gets paraphrased without citation. Fix: Lead paragraphs with factual claims. Use data tables. Include specific numbers with sources. Write one-sentence definitions for key terms.

39. Entity Optimization

Check: Is your brand registered as an entity in Google’s Knowledge Graph? Do your key personnel have Knowledge Panels? Why: Entity recognition is how AI systems attribute expertise. Brands with strong entity signals get preferentially cited in AI responses. Fix: Claim Google Business Profile. Create/update Wikidata entries. Ensure consistent NAP across all platforms. Build author entities with cross-referenced profiles.

40. Voice Search Optimization

Check: Is content optimized for conversational queries? Do you target question-format keywords? Why: Voice search continues to grow — now ~35% of all searches. Voice queries are longer, conversational, and often local-intent. Fix: Target question keywords (who, what, how, why). Use FAQ sections. Optimize for featured snippets (position zero). Ensure fast mobile load times.

41. Multi-Modal Content

Check: Does your content include video, images, infographics, and interactive elements alongside text? Why: AI systems increasingly index and reference multi-modal content. Google’s Search Generative Experience pulls from video transcripts, image captions, and interactive tools. Fix: Add video embeds to high-value pages. Create original infographics. Build interactive calculators or tools where relevant. Ensure all media has proper alt text and schema.

42. AI Content Detection & Quality

Check: Has your content been audited for AI-generated patterns? Is there a quality gate for AI-assisted content? Why: Google’s algorithms can detect low-effort AI content and demote it. The penalty isn’t for using AI — it’s for publishing unedited, generic AI output. Fix: All AI-generated content must pass human editorial review. Add original insights, proprietary data, and expert quotes. Run through AI detection tools as a QA step.

---

Section 6: Local & Business (Points 43-47)

43. Google Business Profile

Check: Is GBP claimed, verified, and fully optimized? Are categories, hours, photos, and attributes current? Why: For businesses with physical locations, GBP drives 30-50% of local organic traffic. An incomplete GBP loses to competitors by default. Fix: Complete every field. Add new photos monthly. Respond to all reviews within 24h. Use Google Posts weekly. Verify all locations.

44. Local Citation Consistency

Check: Is NAP (Name, Address, Phone) identical across all directories, social profiles, and citations? Why: Inconsistent NAP confuses Google’s entity association algorithms. Even small differences (“St.” vs “Street”) can split your authority. Fix: Audit top 50 citation sources. Standardize format. Use a citation management tool for ongoing consistency.

45. Review Strategy

Check: What’s your review velocity? Average rating? Response rate? Why: Reviews are a confirmed local ranking factor. Businesses with 100+ reviews and 4.5+ rating dominate local packs. Fix: Implement post-service review request flow. Respond to every review (positive and negative). Never incentivize or fake reviews — Google’s detection is excellent.

46. Analytics & Measurement Setup

Check: Is GA4 properly configured with enhanced measurement, custom events, and attribution modeling? Are goals/conversions tracking accurately? Why: You can’t improve what you don’t measure. Broken analytics leads to wrong decisions — we’ve seen agencies optimize for the wrong pages because of bad tracking. Fix: Audit GA4 data stream configuration. Verify event tracking fires correctly. Set up cross-domain tracking if needed. Implement server-side tagging for accuracy.

47. Reporting & Action Cadence

Check: Do you have automated weekly/monthly SEO reporting? Is there a defined action cadence — who acts on what, and when? Why: The audit is worthless without action. Most SEO audits end up in a PDF that no one reads. The agencies that win have a system: report → prioritize → execute → measure → repeat. Fix: Set up automated dashboards (Looker Studio, custom). Establish weekly SEO sprints. Assign owners to every finding. Review progress monthly.

---

Scoring Your Audit

After scoring all 47 points (0-2 each):

Section	Points Available	Your Score
Crawlability & Indexation (1-8)	16	_
On-Page SEO (9-18)	20	_
Technical Performance (19-26)	16	_
Content & Authority (27-34)	16	_
AI & GEO Readiness (35-42)	16	_
Local & Business (43-47)	10	_
TOTAL	94	_

Priority Matrix

After scoring, plot each failed item on this matrix:

	High Impact	Low Impact
Easy Fix	🔴 DO FIRST	🟡 Quick wins
Hard Fix	🟠 Plan & schedule	🟢 Backlog

Start with high-impact easy fixes. This single prioritization step is what separates agencies that move the needle from agencies that produce pretty reports.

---

What Comes After the Audit

An audit without execution is just expensive documentation. Here’s the follow-up framework we use:

1. Week 1: Fix all critical issues (broken crawling, indexation errors, security)
2. Week 2-4: Address high-impact technical fixes (CWV, schema, redirects)
3. Month 2: Content optimization and refresh cycle
4. Month 3: GEO/AI readiness implementation
5. Ongoing: Monthly re-audit of top 10 failure points

---

Need a Professional Audit?

This checklist covers the framework. Executing it across a 100K+ page enterprise site requires tooling, expertise, and experience with edge cases that no checklist can fully capture.

Over The Top SEO has conducted 2,000+ enterprise audits. Contact our team for a comprehensive audit tailored to your industry and scale.

---

Quality Scorecard

Metric	Score	Notes
Readability	9/10	Clear structure, actionable per item, no jargon without context
SEO Optimization	9/10	Primary keyword in title, H1, H2s. LSI throughout. Clean URL structure suggested
Uniqueness/Depth	9/10	47 points with Why/Fix/Tool per item. AI/GEO section is differentiated from competitors
Actionability	10/10	Every single point has a concrete fix action. Scoring system enables prioritization
Overall	9.25/10

Frequently Asked Questions

What is an enterprise SEO audit?

An enterprise SEO audit is a comprehensive technical and strategic review of a large website covering crawlability, indexation, on-page optimization, technical performance, content quality, AI readiness, and local/business signals — providing a prioritized roadmap for improving organic search visibility at scale.

How often should enterprise sites run an SEO audit?

Full enterprise SEO audits should be conducted quarterly at minimum. High-traffic, high-revenue sites benefit from continuous monitoring via agentic SEO tools, with formal structured audits using this 47-point framework every 90 days or after major algorithm updates.

What is the most common critical SEO issue found in enterprise audits?

In our experience across 2,000+ enterprise audits, the most common critical issues are crawl budget waste (session IDs, faceted navigation, duplicate content), missing or misconfigured schema markup, and — increasingly in 2026 — AI crawler blocks in robots.txt that prevent GEO visibility.

How does AI readiness factor into a 2026 SEO audit?

AI readiness (Section 5 of our framework) covers llms.txt implementation, AI Overview optimization, structured data for AI, citation-ready content format, entity optimization, voice search optimization, multi-modal content, and AI content quality — all critical for 2026 search visibility.

What score should I aim for on the 47-point SEO audit?

Aim for 85+ out of 94 points (A+ grade: Elite SEO health). Scores of 60–74 (Grade B) indicate solid foundations with significant traffic opportunities being left on the table. Scores below 45 require urgent intervention.

---

Frequently Asked Questions About Enterprise SEO Audits