Link Audit

A link audit is a full review of every backlink pointing at your website: where each link comes from, whether it helps or harms you, and what to do about the harmful ones. Our link audit classifies every referring domain, flags spam and link-farm patterns, checks your anchor text balance, and gives you a clear keep, monitor or disavow decision for anything risky. It is the audit we run on our own site, most recently when this site was hit by a negative SEO attack in October 2026.

If you suspect a problem, start with our free SEO audit. If you already know the backlink profile needs a proper review, this page explains exactly what a link audit checks, how we run one, and what it should cost.

What is a link audit?

A link audit (also called a backlink audit) examines the complete set of links pointing to your site and judges each one on quality, relevance and risk. The output is not a raw export of links. It is a set of decisions: which links are assets, which are harmless, and which are liabilities that should be removed or disavowed before they cost you rankings.

It is different from a backlink checker. Our free backlink checker verifies whether one specific link is live and what attributes it carries, which is the right tool for checking a placement. An audit looks at the whole profile at once, because risk rarely lives in a single link. It lives in patterns: hundreds of similar domains, a spike in one week, anchors that read like a keyword list. Those patterns only become visible when every link is laid out together.

Google’s own position is the reason audits exist. Its link spam policies target manipulative link patterns, and each spam update makes the detection stricter. A profile that was merely untidy three years ago can be a liability today.

What a link audit checks

Signs you need a link audit

• Rankings dropped after a Google update, especially a spam update, and nobody can explain why.
• Your referring domains jumped suddenly. Growth you did not create is not a gift; it is the most common shape of a negative SEO attack.
• A previous agency or freelancer “built links” and you never saw a full list of where they went.
• You received a manual action or a Search Console warning about unnatural links.
• You are about to scale link building. Adding good links on top of a dirty profile wastes money; clean first, then grow, in the order our link acquisition guide sets out.
• You bought or inherited a website and its history is unknown to you.

None of these require panic. They require a clear picture, which is all an audit is.

A real link audit: the attack on our own site

In October 2026, this website was targeted by a negative SEO attack. Between 5 and 18 October, around 1,500 spam referring domains appeared in our backlink profile, pointing at linkuild.com from sites we had never contacted, in a pattern designed to make our link building look manipulative. It is the exact situation a link audit exists for, so here is what the audit found and what we did, with the real numbers.

Classification came first. The spam domains clustered into a handful of cheap domain extensions, the classic signature of a bulk-generated blast:

Every domain was then checked individually against our genuine profile. Our real links, including placements on major publications, were verified and left completely untouched. Disavowing is a blunt instrument, and an audit that cannot tell a client’s hard-won editorial links from an attacker’s spam will do more damage than the attack.

On 19 October we uploaded a disavow file covering all 1,499 spam domains to Google Search Console, which Google confirmed. The genuine profile stayed intact, rankings were unaffected, and we now re-check this site’s referring domains every month so a repeat blast is caught in days, not weeks.

Two lessons from that audit are worth more than the story itself. First, the attack was invisible in traffic and rankings; only the velocity check caught it, because nobody was celebrating a sudden rise in referring domains. Second, the cleanup took hours, not weeks, because the classification work was methodical: group by pattern, verify the exceptions by hand, disavow once, completely.

The findings we see most often

Every profile is different, but the same five findings account for most of what our audits uncover:

• The forgotten campaign. Links bought years ago by a previous agency, still pointing at the site long after everyone involved moved on. Individually harmless-looking, collectively they set the profile’s tone, and they are usually the first thing to clean.
• Scraper and syndication spam. Sites that copy content at scale drag links with them, and a successful article can quietly collect dozens of junk copies. Low risk alone, but they inflate referring-domain counts and hide real changes in the noise.
• One relationship, thousands of links. A partner, directory or template credit generating sitewide links from every page of a large site. The connection is legitimate; the footprint is not, and it usually needs a conversation rather than a disavow.
• Anchor text written by an SEO, not a human. When a third of your anchors are the same commercial phrase, no reader did that. Rebalancing happens naturally once new links are built properly, but the old pattern has to be measured before it can be diluted safely.
• Good links, quietly lost. Editorial coverage that linked to a page which was later deleted, redirected badly or moved. These are found in almost every audit of an established site, and recovering them is frequently worth more than the cleanup itself.

Three free checks before you pay for an audit

An honest audit starts with evidence, and some of it you can gather yourself in ten minutes:

• Search Console’s links report. Look at your top linking sites. If names you have never heard of dominate the list, or one site accounts for an outsized share of your links, that alone justifies a closer look.
• The velocity question. In any backlink tool, graph your referring domains by month. A cliff or a spike you cannot match to something you actually did is the single most reliable early-warning sign there is.
• The anchor sample. Sort your anchors by frequency. If exact-match commercial phrases outnumber your brand name, the profile was manufactured, and it will read that way to a reviewer too.

If all three come back clean, your profile is probably healthy and a full audit can wait. If any one of them surprises you, that surprise is the audit’s starting point. Our free SEO audit runs these same checks as its first step.

What we need from you, and how long it takes

Very little is needed to start: your domain, and view-only Search Console access if you can give it. Search Console data shows the links Google itself has recorded, which is the most important single source in any audit; without it we work from commercial indexes alone and say so in the report. It also helps to tell us who has built links for you before, and to forward any manual action or unnatural-links message you have ever received. Old information that feels embarrassing is usually the most useful information in the room.

Timing follows profile size. A site with a few hundred referring domains is typically reported within two to three business days. A large or recently attacked profile, where thousands of domains need classifying and the grey zone needs manual review, can take up to two weeks, and we will give you a delivery date before work starts rather than after you ask. One rule applies at every size: nothing is disavowed on your behalf without you seeing the file first. The decisions are explained domain by domain, and the upload happens only with your sign-off.

Our link audit process

1. Data collection

We pull your backlink data from more than one source, because no single tool sees every link. Search Console data is combined with commercial backlink indexes and, where relevant, your own placement records.

2. Classification

Every referring domain is classified: genuine editorial, legitimate directory or profile, irrelevant, network, farm or spam. Patterns are grouped, so a 300-domain blast is handled as one decision, evidenced properly.

3. Manual review of the grey zone

Automation is good at finding patterns and bad at judgement. Domains that sit between clearly good and clearly bad are opened and assessed by a person, the same way we score targets in our blogger outreach vetting.

4. Decisions and disavow preparation

You receive a keep, monitor or disavow decision for every risky domain, with the reasoning. Where disavowal is justified, we prepare the file in Google’s format, ready for upload. Where a link is valuable but lost, we flag it for recovery instead.

5. Report and next steps

The final report explains what was found, what was done and what to watch. If the profile is clean, the report says so plainly, and the next step is growth: the audit feeds directly into a link building plan rather than ending in a drawer.

What you receive

• A complete classified list of your referring domains
• The eight checks from the table above, reported one by one
• Keep, monitor or disavow decisions with reasons for every risky domain
• A ready-to-upload disavow file, if one is needed
• Lost-link recovery opportunities: good links worth winning back
• A plain-English summary of your profile’s health and the three most important actions

What happens after the audit

An audit ends in one of three places. If the profile is clean, you have proof of health and a baseline: every future link can be judged against it, and we will tell you to spend your budget on growth instead of cleanup. If the profile carries legacy problems, the disavow file goes in, the worst patterns are documented, and link building resumes on a profile that no longer works against you. And if you have been attacked, as we were, the audit becomes a watch: the same checks repeated monthly, so a second blast is spotted while it is still small. In all three cases you keep the full classified data. It is your profile; the working behind every decision should be yours to inspect, question and reuse.

Link audit or backlink checker: which do you need?

If you placed a specific link and want to know whether it is live and correctly attributed, you need a checker, and ours is free: the backlink checker verifies a link in seconds. If you do not know what is in your profile as a whole, or you suspect some of it is hurting you, you need an audit. Checking links one at a time to judge a whole profile is like reading three pages of a book to review it.

What a link audit costs

Across the market, link audits range from free automated scans to several thousand dollars. Automated scans are worth roughly what they cost: they score links with the same single-metric shortcuts that misjudge them, and they cannot tell an attacker’s blast from a client’s genuine coverage. A professional manual audit typically runs from $500 to $2,500+, priced by the size of the profile being reviewed; a site with 300 referring domains is a day of work, a site with 30,000 is not.

Our route starts with the free SEO audit, which includes a first look at your backlink profile. If that look finds a pattern worth a full audit, we quote the full review as a fixed price before any work starts, based on your referring-domain count. No hourly billing, and no audit sold to a site whose profile turns out to be clean.

Frequently asked questions

How long does a link audit take?

Most audits are delivered within two to five business days. The variable is profile size and how much of it sits in the grey zone that needs manual review. A site recovering from an obvious spam blast is usually at the fast end, because the pattern classifies quickly.

Does an audit remove the bad links?

An audit identifies them and prepares the remedy. For most spam, the remedy is a disavow file, which tells Google to ignore those links; we prepare it ready for upload. Direct removal requests to webmasters are slow and rarely answered, so they are reserved for the small number of cases where a specific link is both harmful and reachable.

Can disavowing hurt my good links?

Only if the file is prepared carelessly, which is why our process verifies genuine links individually before anything is listed. In our own October cleanup, all 1,499 disavowed domains were attacker spam, and every legitimate placement, including national publications, was checked and excluded. A disavow file should never contain a domain you have not verified.

Will a link audit restore rankings I lost in an update?

An audit removes causes; it does not switch rankings back on, and any provider who promises a recovery date is guessing with your money. What it gives you is certainty about whether links were the problem at all. If they were, the cleanup and disavow put you in the position where recovery is possible as Google reprocesses the profile. If they were not, you have saved months of fixing the wrong thing, and the report points at where to look instead.

How often should I run a link audit?

Once a quarter is a sensible rhythm for an active site, and immediately whenever something changes: a rankings drop after an update, a spike in referring domains you cannot explain, or a change of agency. Attacks and bad legacy links do not announce themselves; the audit is how you find them on your schedule instead of Google’s.

Get your link audit

Start with the free SEO audit and we will tell you honestly whether your profile needs a full review or not. If it does, you will get a fixed quote and the process on this page, the same one we ran on our own site when it mattered. And when the profile is clean, our link building services pick up from exactly where the audit leaves off.