Here is something most site owners do not think about until something goes wrong: your backlinks can quietly work against you. Not just the obviously spammy ones — sometimes a batch of links that looked fine a year ago have since turned into a liability.
Google’s Penguin algorithm runs in real time. That means your link profile is being evaluated constantly, not just during major updates. There is no warning email. Rankings just start dropping, and without an audit, you have no idea why.
A backlink audit is how you get ahead of that. It is the process of reviewing every inbound link to your site — figuring out which ones are helping, which ones are hurting, and what to do about both. This guide walks you through the full process, step by step, with real criteria, actual templates, and enough context to make the decisions confidently.
What Is a Backlink Audit — And Why Does It Matter in 2026?
Think of a backlink audit as a full health check for your site’s off-page SEO. You are looking at every external link that points to you and asking: Is this helping me or hurting me?
In 2026, a good audit does three things at once:
- Defense: Catch and remove toxic links before Google penalises you for them
- Diagnosis: Understand why your rankings sit where they are by comparing your profile against competitors
- Strategy: Find out which content earns links, which pages need more, and where the best outreach opportunities are
The numbers make the case clearly. 94% of all online content never earns a single external link — so sites with strong, clean profiles have a real edge. Pages ranking first on Google have 3.8 times more backlinks than the pages right below them. But that advantage only holds if the links are good ones. A profile padded with low-quality or manipulative links does not lift your rankings. In many cases, it pushes them down.
For a broader view of what healthy looks like: Backlink Profile: What It Is, How to Audit It & What Healthy Looks Like
When Should You Run a Backlink Audit?
Quarterly is the baseline. Monthly is better if you are running active link building campaigns. But there are certain situations that call for an audit right now, regardless of when you last ran one:
| Situation | What It Usually Means | How Fast to Act |
|---|---|---|
| Unexplained rankings drop | Possible algorithmic suppression from toxic links | Full audit within 7 days |
| Manual action in Search Console | Direct penalty — you need to resolve the cited issue and request reconsideration | Immediately |
| Sudden spike in new backlinks | Could be a negative SEO attack, or a link farm just discovered your site | Review new links within 48 hours |
| Coming out of a penalty | Residual harmful links may still be in your profile | Full audit before expecting recovery |
| Before a new link building campaign | You need a clean baseline to build from | Before any outreach begins |
| Routine maintenance | Ongoing monitoring — much easier to catch problems early | Quarterly minimum; monthly ideally |
Best Tools for a Backlink Audit in 2026
One tool is not enough. Different backlink indexes have different coverage, so cross-referencing two sources will always surface links that a single tool misses. Here is what each tool is actually best for:
| Tool | Best For | Backlink Index | Starting Price |
|---|---|---|---|
| Google Search Console | Official Google data; manual action alerts; the free starting point for every audit | Google’s own index | Free |
| Ahrefs | Largest third-party index; best for competitor gap analysis and link velocity tracking | 35+ trillion links | $129/mo |
| SEMrush | AI-powered toxicity scoring that auto-flags up to 90% of harmful links; built-in disavow workflow | 43+ trillion links | $139/mo |
| Moz | Spam Score metric — fast domain-level quality assessment | 40+ trillion links | $99/mo |
| Majestic | Citation Flow and Trust Flow — useful for deep authority analysis | Proprietary | $49/mo |
| Google Sheets | Pipeline management — track every link from discovery to disavow | N/A | Free |
How to Do a Backlink Audit: 9-Step Process
Work through these steps in order. Each one builds on the last.
Step 1: Check Google Search Console for Manual Actions First
Do this before anything else. Open Google Search Console and go to Security & Manual Actions > Manual Actions. If there is a penalty already in place, the cleanup process is different — you will need to address the specific issue Google cited and file a reconsideration request after fixing it.
Also pull your Links report (left navigation > Links). It shows your most-linked pages, top linking sites, and anchor text distribution — all directly from Google. Export that data and save it as your baseline. This is official, and it is free.
Step 2: Pull Your Full Backlink Data From Multiple Sources
Export your complete backlink data from at least two tools. In Ahrefs: Site Explorer > your domain > Backlinks > Export CSV. In SEMrush: Backlink Analytics > your domain > Export. In Moz: Link Explorer > Export.
Merge everything into one Google Sheet. These are the columns you need:
- Linking domain URL
- Linking page URL
- Target page on your site (the page being linked to)
- Anchor text
- Dofollow / Nofollow
- Domain Rating or Domain Authority
- Organic traffic of the referring domain
- Moz Spam Score
- SEMrush Toxicity Score
- Action column: Keep / Investigate / Remove / Disavow
Colour-code as you go: green for solid links, red for ones to act on, yellow for anything that needs a closer look. Sort by spam score first — it puts the worst offenders at the top of the queue.
Step 3: Identify Toxic Links — Use This Checklist
This step is where most guides go vague. ‘Look for spammy links’ is not useful guidance. Here are the specific signals that actually indicate a toxic link:
| Red Flag | What to Look For | What to Do |
|---|---|---|
| Zero organic traffic | Site has under 10 monthly visitors — Google does not value it, so neither should you | Disavow at domain level |
| Off-topic niche | Casino, pharma, adult, or payday loan site linking to unrelated content | Disavow |
| Moz Spam Score 50%+ | Anything above 50% indicates spammy linking practices | Disavow or request removal |
| Penalised / deindexed domain | Site does not appear in Google search — likely penalised | Disavow |
| Footer or sidebar placement | Links placed in site-wide navigation, footers, or sidebars (non-editorial) | Investigate; usually disavow |
| Irrelevant foreign language | Site in unrelated language with no geographic relevance | Disavow |
| Exact-match anchor overuse | 5+ links from same domain using your exact keyword | Investigate for manipulation |
| Link network footprints | Domains sharing IP ranges, WHOIS data, or identical templates | Disavow the whole network |
| No HTTPS | HTTP-only site without a security certificate | Lower priority; monitor |
| Ultra-low DR with mass links | DR under 5 linking out to thousands of sites (link farm pattern) | Disavow at domain level |
Step 4: Review Your Anchor Text Distribution
This is something a lot of site owners skip, and it can be the reason rankings are stuck even when other signals look fine. If too many of your links use the exact keyword you want to rank for as anchor text, Google reads that as manipulation — even if each individual link looks legitimate.
Pull your anchor text report in Ahrefs (Anchors report) or SEMrush (Backlink Analytics > Anchors). Here is what a healthy distribution looks like:
| Anchor Type | Examples | Healthy Range |
|---|---|---|
| Branded | “Outreach Monks”, your company name | 40–50% |
| Naked URL | “outreachmonks.com”, full URL | 15–20% |
| Generic | “click here”, “read more”, “this guide” | 10–15% |
| Partial match | “link building service”, “SEO agency London” | 15–25% |
| Exact match | Exact keyword: “backlink audit tool” | 5–10% max |
Act immediately if: exact-match anchors are above 20% of your total profile, one phrase accounts for 30%+ of all links, or you see groups of different domains all using the identical anchor.
Full guide: Anchor Text Optimisation — Complete Guide
Step 5: Look for Link Velocity Anomalies
Link velocity is simply how fast you are picking up new referring domains over time. A normal, healthy site grows gradually. When you see a sudden spike — hundreds of new domains appearing in a 24-hour window — something unusual is happening, and you need to find out what.
Open Ahrefs and check your Referring Domains graph over a 12-month window. Three patterns to watch for:
- Steady growth (healthy): Gradual upward trend — top-ranking pages typically gain 5–14% more followed links per month
- Sudden spike (investigate): Dozens of new domains in 24–72 hours that you do not recognise — could be a negative SEO attack
- Consistent decline (act): A downward trend means you are losing referring domains — high-value lost links are worth trying to recover
Step 6: Find Your Best-Linked Pages and Spot the Gaps
Go to Ahrefs > Site Explorer > Pages > Best by Links. This report tells you which pages on your site actually attract backlinks — and understanding why is useful strategic information.
- Replicate what works: If your data-driven guides pull the most links, make more of them. Same topic, similar format.
- Move equity to commercial pages: Your most-linked pages can pass authority to service or product pages by linking to them internally with relevant anchors
- Spot intent mismatches: A page with many links but low traffic usually means the content does not match what people are actually searching for — time to update it
See: Internal Link Building — How to Do It Right
Step 7: Run a Competitor Backlink Gap Analysis
Once you know your own profile, compare it against your competitors. The gap — domains linking to them but not to you — is your most valuable outreach list. These sites have already shown they will link to content in your space. That makes them far easier to approach than cold prospects.
In Ahrefs, use the Link Intersect tool. Enter 3–5 competitors and filter for domains linking to two or more of them but not your site. Prioritise results by DR 40+ and organic traffic above 1,000 monthly visits.
One insight worth holding onto: focusing on shared referring domains (sites already linking to multiple competitors) surfaces 20–30% more viable link building opportunities than generic prospecting. Do not skip this step.
Full process: Competitor Backlink Analysis Guide
Step 8: Recover Broken Backlinks
A broken backlink is a link pointing to a 404 page on your site. That link still exists somewhere on the web. Someone earned it. The equity is just… sitting there, going nowhere. Recovering it is usually one of the quickest wins in any backlink audit.
In Ahrefs: Site Explorer > Pages > Best by Links, then filter for 404 status. For each one, choose the right fix:
- Redirect (easiest): Set up a 301 redirect from the dead URL to the most relevant live page. No need to contact anyone.
- Recreate: If the page is gone but had strong linking domains (DR 40+), it may be worth rebuilding the content and notifying those sites.
- Reclaim: If a redirect is not practical, contact the linking site and ask them to update the link to a relevant live page.
Step 9: Remove or Disavow Toxic Links
This is the step most guides rush through. Here is the correct, complete workflow.
Phase A — Try Manual Removal First
Before you touch the disavow tool, contact the webmaster of each toxic domain and ask them to remove the link. Find their contact through Hunter.io or the site’s About/Contact page. Keep your message short and neutral:
Track every attempt in your Google Sheet: date sent, contact method, URL involved, response (if any). If you ever need to file a reconsideration request, this documentation shows Google you made genuine efforts to clean up manually.
Phase B — Build and Submit Your Disavow File
If there is no response within 2–3 weeks, or the webmaster refuses, move the link to your disavow file. Google recommends trying manual removal first, but most spammy site owners will never respond — disavow is the practical fallback.
How to create the file:
- Plain .txt file, UTF-8 encoding, one entry per line
- For an entire spam domain: domain:spammy-site.com (disavows all links from that domain)
- For a single toxic page on an otherwise clean site: paste the exact URL
- Use # for comments — Google ignores these, but they help you keep track
Upload through Google Search Console > Disavow Links tool at search.google.com/search-console/disavow-links. Then check Search Console weekly for the next 4–8 weeks — improvements are not immediate.
What a Healthy Backlink Profile Looks Like in 2026
After the audit, you need a benchmark to measure against. These are the signals that separate healthy profiles from problematic ones:
| Metric | Healthy Range | Warning Sign |
|---|---|---|
| Dofollow ratio | 60–70% dofollow, 30–40% nofollow | 90%+ dofollow — unnatural, likely manipulated |
| Referring domain diversity | Spread across many different domains | 80%+ from the same 5 domains |
| Anchor text | Branded 40–50%, partial match 15–25%, generic 10–15% | Exact-match anchors over 20% |
| Link velocity | Steady 5–14% new referring domains per month | Sudden spike of 50+ new domains in 24 hours |
| Linker quality | Most links from real-traffic, relevant sites | Mostly zero-traffic or off-topic sites |
| Niche relevance | 60%+ of referring domains in your topic area | Under 30% relevance |
| Link placement | Majority are in-content, contextual links | Most are footer, sidebar, or author bio links |
Backlink Monitoring: How to Keep Your Profile Clean Going Forward
The audit is not a one-and-done job. Link profiles change constantly. Links get added, removed, and sometimes someone runs a negative SEO attack against your site. The earlier you catch something, the less damage it does.
- Weekly: Check new referring domains in Ahrefs or SEMrush — flag anything that looks odd within 48 hours
- Monthly: Look for lost referring domains — identify any high-value links worth trying to recover
- Quarterly: Full anchor text review, competitor gap refresh, link velocity check
- Always-on alerts: Set up Ahrefs Alerts for new and lost backlinks so you find out in real time instead of discovering problems weeks later
More on this: Backlink Monitoring — How to Track Your Link Profile
What to Do After the Audit: Turn Data Into Action
The disavow submission is not the end — it is closer to the halfway point. Here is how to use what you found.
1. Build Your Content Strategy Around What Already Earns Links
Your most-linked pages tell you what your audience genuinely finds useful enough to reference. That is not just interesting — it is a content roadmap. Replicate those formats and topics in your next link building push.
See: How to Build a Link Building Plan
2. Set Up 301 Redirects for Every Broken Backlink
This takes 10 minutes and recovers link equity that is already sitting there waiting. For every 404 page with inbound links, create a redirect to the closest live equivalent. It is arguably the fastest SEO win in the whole audit process.
3. Treat the Competitor Gap List as Your Outreach List
Those domains linking to your competitors but not to you are already pre-qualified. They have shown they link to content in your space. That makes them dramatically easier to approach than cold prospects.
Check: Link Building Outreach Guide
4. Use Your Most-Linked Pages to Push Authority to Commercial Pages
If your top blog post has 40 referring domains and your pricing page has 3, link from the blog post to the pricing page with relevant anchor text. Internal linking is how you move authority around your site — and it is completely free.
How Backlink Audits Affect AI Search Visibility — A 2026 Note
Most backlink audit guides are written as if Google’s 10 blue links are still the whole picture. They are not anymore.
AI systems like Google AI Overviews, ChatGPT, and Perplexity use many of the same authority signals as traditional Google when deciding which brands to mention in generated answers. A profile padded with toxic, low-quality links does not just suppress your standard rankings — it tells AI systems that your brand lacks the editorial credibility needed for citation.
The opposite is also true. A clean profile with consistent editorial links from authoritative, relevant sites builds brand entity recognition. Over time, AI models learn to associate your brand with specific topics when credible sources keep referencing it.
That is why the post-audit build phase matters just as much as the cleanup. High-quality editorial links through guest posting, digital PR, and brand mentions now serve two purposes at once.
Conclusion: Make Your Backlink Audit Count
A backlink audit is not glamorous work. There are no shortcuts, and the payoff is not always immediate. But it is one of the few SEO activities where the data you collect directly tells you what to do next — no guessing.
Clean up what is hurting you. Recover what you have lost. Build on what is already working. And then keep watching, because link profiles are not static.
If you want professional help running this process — from the initial audit through toxic link removal and into a clean, targeted link building campaign — Outreach Monks has been doing this since 2017 across 50+ niches.
Frequently Asked Questions
How Often Should I Run A Backlink Audit?
At minimum, quarterly. Monthly is better if you are actively building links. You should also run an immediate audit if your rankings drop without explanation, if Google Search Console shows a manual action, or if you notice a sudden unexplained spike in new referring domains.
What Makes A Backlink Toxic?
Toxic backlinks usually share one or more of these traits: zero organic traffic on the linking site, a Moz Spam Score above 50%, completely irrelevant niche (casino or pharma links on a tech site), the linking domain appears deindexed or penalised by Google, links placed in footers or site-wide sidebars, or patterns suggesting a link network.
Should I Disavow Every Low-Dr Backlink?
No. Domain Rating is just one signal, and it is an imperfect one. A DR 12 local blog with 8,000 monthly visitors and genuinely relevant content is worth keeping. A DR 50 directory with 100 visitors and no topical relevance is more concerning. Always check organic traffic alongside DR. If you are not sure, leave the link alone — disavowing something that was actually helping you does real damage.
How Do I Actually Create A Disavow File?
Create a plain text file (.txt) with UTF-8 encoding. Use 'domain:example.com' to disavow all links from a spammy domain, or paste the exact page URL for individual link-level disavows. Add comments with # for your own records — Google ignores these lines. Upload through Google Search Console's Disavow Links tool. Always try manual removal first, and document every outreach attempt you make.
How Long Does A Backlink Audit Take?
A small site with under 500 referring domains usually takes 3–5 hours including data export, review, and disavow prep. Large enterprise sites with tens of thousands of referring domains can take 20–40 hours or more. SEMrush's AI-powered toxicity scoring can help — it auto-flags up to 90% of clearly harmful links, which cuts manual review time significantly.
Can I Do A Backlink Audit For Free?
You can do a basic audit using Google Search Console (free) and Google's Disavow Tool (also free). The limitation is that GSC only shows a sample of your links. For a full picture, you need Ahrefs, SEMrush, or Moz. If you only need a one-time audit, most tools offer trial access or short-term subscriptions that make the cost manageable.
What Happens After I Submit My Disavow File?
Google processes it the next time it recrawls and reassesses your link profile — which is not instant. It can take several weeks to a few months before you see any ranking movement. For sites with manual penalties, you also need to file a reconsideration request after the cleanup. Keep checking Search Console weekly so you can track what is changing.
