Technical SEO audit: a 25-point checklist

Technical SEO audit: a 25-point checklist

A technical SEO audit checks whether Google can find, read and correctly evaluate a site's pages at all, and it takes from one to five working days depending on the size of the project. Below is a 25-point checklist in eight blocks: indexing, structure and URLs, speed, mobile, duplicates and canonical, meta tags, links and redirects, security. For each block we name the tools to check with, and at the end we give a rule for sorting the findings by priority so that the developer does not spend a week on "nice to have" instead of "critical".

SEO specialist running a technical website audit against a checklist on a laptop in an office

How a technical audit differs from a content audit

A content audit answers the question "does the site have what people search for, and is it written better than the competitors' pages". A technical audit answers a different one: "does that reach Google without losses". A site can have the best copy in its niche and get no traffic because half the pages are blocked in robots.txt and the other half serve parameter duplicates. That is why in a full website SEO audit the technical part comes first: until the foundation is fixed, there is no point evaluating content and links, because the numbers in Search Console are lying.

Another difference is who does the work. Content fixes are made by a copywriter and a marketer, technical ones almost always by a developer. So the output of a technical audit should be a technical brief with specific URLs and examples, not a list of recommendations like "improve speed".

Technical audit checklist: the first 10 points

Indexing

#What we checkWarning sign
1robots.txt/catalog/, CSS or JS blocked; no Sitemap:
2Meta robots and X-Robots-Tagnoindex on important pages
3Sitemap.xmlRedirects, 404s, noindex in the map
4Indexing in Search ConsoleMany "discovered, not indexed"

Structure and URLs

#What we checkWarning sign
5Click depthProducts 5-6 levels deep, no menu path
6URL formatParameters, Cyrillic, mixed case
7Breadcrumbs and sectionsOne page in two categories, two URLs

Speed

#What we checkWarning sign
8Core Web Vitals (field data)LCP over 2.5 s on mobile
9Server response time (TTFB)Over 600-800 ms, no caching
10Page weight2-3 MB photos, five trackers in head

We covered the speed metrics and where to find them in detail in the article on Core Web Vitals; here we will only note that Google evaluates field data from real users, so a lab score of 100 in PageSpeed guarantees nothing on its own.

Leave an application

Enter your name and email, our managers will contact you as soon as possible.
By submitting the form you agree to our privacy policy.

Technical audit checklist: points 11-25

Mobile

#What we checkWarning sign
11Mobile and desktop parityText or menu hidden on mobile
12Mobile usabilityHorizontal scroll, full-screen popups

Duplicates and canonical

#What we checkWarning sign
13Mirrors: http/https, www, slashTwo versions return 200
14rel="canonical" on every pageCanonical to homepage or missing
15Sort, filter, utm parametersThousands of ?sort= URLs indexed

Meta tags

#What we checkWarning sign
16Title: unique, up to 60-70 charactersSame title on hundreds of pages
17Description: unique, up to 160Empty or copied from the first paragraph
18One H1, logical H2-H3Several H1s, headings used as button styles

Links and redirects

#What we checkWarning sign
19Broken links and links to redirectsMoved URLs still in the menu
20Redirect chains and loopsThree hops to the final URL
21Orphan pagesIn the sitemap, no internal links
22Hreflang: reciprocity, codes, x-defaultCode ua instead of uk, no return links

Security

#What we checkWarning sign
23HTTPS and certificateMixed content, certificate expiring
24Security and manual actions in Search ConsoleAny entry in those reports
25CMS updates, third-party scriptsTwo-year-old CMS, unknown domains
Developer and SEO specialist discussing technical website audit results at a monitor in an office

Which tools to use for each block

Four tools cover almost the entire checklist. The rest (markup validators, certificate checks, server logs) come in for specific points.

ToolWhat it coversBlocks
Google Search ConsoleIndexing, CWV, security, penalties1-4, 8, 11, 23-24
PageSpeed InsightsSpeed and its causes8-10
Screaming FrogFull crawl: codes, canonical, duplicates5-7, 13-22
Serpstat AuditCloud crawl with prioritiesAll, focus on 13-22

At Query we run a site through both Screaming Frog and Serpstat: the first gives the complete raw picture, the second one already sorted by category and convenient for the client report. For small sites one of them is enough.

How to prioritise the findings

Nobody implements a 40-page audit where everything is "important". We split the findings into three levels using a single question: what happens if this is not fixed.

LevelCriterionDeadline
CriticalPages not indexed, traffic dropping nowThis week
ImportantIndexed, but rated worse than it could beWithin a month
Nice to haveBetter crawling, cumulative effectOn schedule
  • Critical: noindex on categories, blocked robots.txt, penalties, mirrors without redirects, broken certificate.
  • Important: duplicate titles, redirect chains, slow mobile LCP, thousands of parameters indexed.
  • Nice to have: breadcrumbs, font optimisation, short URLs on old pages, plugin updates.

A practical rule: prioritise errors that affect a template, not a single page. One broken canonical in the category template is worse than a hundred broken links in old news posts.

How long it takes and what the owner gets

For a service website of 50-200 pages a technical audit takes one or two days: crawl, analysis, write-up. For an online store with tens of thousands of pages it takes three to five days, because filters, pagination, faceted navigation and language versions come into play. Fixing usually takes two to three times longer than the audit itself and depends on the developer and the CMS.

What the owner should receive is not a 60-page PDF full of screenshots but three things: a list of findings with a priority level, a technical brief for the developer with example URLs, and a list of what to verify after implementation. A quick snapshot of the most visible problems is available as a free SEO audit, while a full pass over all 25 points with a brief and implementation control is a detailed website audit, which we deliver end to end.

Where to start

  1. Open Search Console and look at the Page indexing, Security issues and Core Web Vitals reports: that covers the critical level in an hour.
  2. Crawl the site with Screaming Frog or Serpstat and export response codes, canonicals and duplicate titles.
  3. Check the mirrors by hand: four variants of the home page address must lead to one.
  4. Sort the findings into three levels and hand the developer only the critical ones first.
  5. Two or three weeks after the fixes, repeat the crawl and compare the Search Console reports.

A technical audit is not a one-off event. After every release, redesign or migration some of the points break again, so a short pass through this checklist once a quarter is cheaper than hunting for the reasons traffic dropped by a third.

Other articles

Other services

Get in touch
Messengers