Your backlink profile is one of the few parts of SEO you do not fully control. Other sites decide whether to link to you, which page they choose and what anchor text they use. Over the years that adds up to a mix of genuine editorial links, forgotten directory listings, scraper copies and, sometimes, links that a previous agency bought on your behalf.
A backlink audit is how you take stock of that mix. It tells you which links are actually helping, which ones you have lost, which patterns could look manipulative and where your next link opportunities are. It is also the step that stops people from making the most common link mistake of all: disavowing good links out of fear.
In this guide you will learn when a backlink audit is worth doing, which data sources to combine, a step-by-step review process, how to read the results and what Google actually says about the disavow tool in 2026.
Key Takeaways
- A backlink audit reviews every site linking to you to judge quality, risk, lost value and opportunity.
- Combine Google Search Console’s Links report with at least one third-party index, because no single source shows every link.
- Judge links by pattern and intent, not by a single “toxicity” score from a tool.
- Google says most sites do not need the disavow tool; use it mainly when you have, or expect, a manual action for unnatural links.
- The most valuable output of most audits is reclaiming lost links and finding new opportunities, not removing links.
What is a backlink audit?
A backlink audit is a structured review of the external links pointing to your website. If you need a refresher on why links matter at all, start with our guide on what backlinks are and how they work. The audit answers four questions:
- Quality: Which links come from relevant, trustworthy sites that real people read?
- Risk: Are there patterns that could fall under Google’s link spam policy, such as paid links that pass ranking credit?
- Loss: Which valuable links have disappeared or now point to broken pages?
- Opportunity: What do competitors earn that you do not, and which of your assets attract links naturally?
Google defines the problem area clearly in its spam policies: “Link spam is the practice of creating links to or from a site primarily for the purpose of manipulating search rankings.” The examples it lists include buying or selling links that pass ranking credit, excessive link exchanges, automated link creation, low-quality directory or bookmark links and widely distributed footer or template links (see Google’s spam policies).
When should you run a backlink audit?
For most businesses, a light review every quarter and a deeper audit once a year is enough. Run one sooner if:
- You receive a manual action for unnatural links in Search Console (see our guide to Google manual actions).
- Rankings drop sharply and you have a history of paid or exchanged links.
- You are about to buy a domain, merge sites or plan a website migration.
- You are taking over SEO from another provider and do not know what link building was done.
- You want to plan a new link building campaign and need a baseline.
Where to get your backlink data
No single tool sees every link on the web. Google’s own report is explicit about this:
“This report isn't a comprehensive list of every link on your site.”
— Search Console Help, Links report
That is why a good audit merges several sources and de-duplicates them by linking domain.
| Source | What it gives you | Limitations |
|---|---|---|
| Google Search Console – Links report | Top linked pages, top linking sites, top linking text; exports of “latest links” and “more sample links” | A sample, not a full list; exports are capped (up to 100,000 rows for latest/sample links) |
| Third-party link indexes (Semrush, Ahrefs, Majestic, Moz) | Large historical link databases, first-seen and lost dates, authority metrics, anchor distribution | Each index differs; authority and “toxicity” scores are vendor estimates, not Google signals |
| Bing Webmaster Tools | A second search-engine view of inbound links | Coverage differs from Google |
| Your own records | Past outreach, PR coverage, partnerships, sponsorships, old agency reports | Often incomplete, but crucial for spotting paid placements |
In Search Console, the Links report sits under the Links section of the left-hand menu, and the export button gives you the latest and sample link lists.
How to do a backlink audit: step by step
- Define the goal. Are you responding to a manual action, preparing a migration, or looking for growth? The goal decides how deep you go and what you do with the findings.
- Export and merge link data. Pull Search Console exports plus one or two third-party tools. Combine them in a spreadsheet and group by linking root domain, so you review hundreds of domains instead of tens of thousands of URLs.
- Get the big picture first. Look at referring domains over time, the share of links pointing to the home page versus deeper pages, country and language mix, and sudden spikes in new links.
- Analyse anchor text. Natural profiles are dominated by brand names, URLs and generic phrases. A large share of exact-match commercial anchors (“best personal injury lawyer houston”) is a classic sign of manipulation. Our guide to anchor text in SEO covers healthy patterns.
- Review linking domains in tiers. Manually check the domains that send the most links, the newest ones and any flagged by your tools. Open the page: is it a real site with real content and an audience, or a network of thin posts that link to anyone?
- Check link attributes. Note whether links use
rel="sponsored",rel="ugc"orrel="nofollow". Paid placements should carrysponsoredornofollow; see our explainer on dofollow vs nofollow links. - Find lost and broken links. Filter for links that point to URLs returning 404 or that disappeared recently. These are your fastest wins.
- Benchmark competitors. Compare referring domains and link sources with two or three competitors. Our step-by-step competitor backlink analysis explains how.
- Decide an action for each domain. Keep, reclaim, request removal, disavow (rarely) or target as an opportunity.
- Document and monitor. Record decisions with dates, so the next audit starts from a known baseline, and add link metrics to your regular SEO reporting.
How to judge link quality
Third-party “toxic score” metrics can help you sort a long list, but they are not Google signals. Use them to prioritise what you look at, then apply human judgement. This table summarises the patterns we look for.
| Signal | Usually fine | Worth investigating |
|---|---|---|
| Relevance | Site covers your industry, location or audience | Unrelated topics, many languages, “write for us on anything” |
| Placement | In-content, editorially given, with context | Sitewide footers, sidebars, widgets, author bios on mass guest posts |
| Anchor text | Brand, URL, natural phrases | Repeated exact-match money keywords across many domains |
| Site quality | Real traffic, original content, clear ownership | Thin or spun posts, every article contains outbound commercial links |
| Acquisition | Earned through PR, content, partnerships | Paid without sponsored/nofollow, link exchanges, automated tools |
| Velocity | Gradual growth or spikes tied to real news | Sudden bursts of links from unrelated domains with no cause |
Random spam links from scraper sites are normal for any site with some visibility. They are not the same as a link scheme you took part in, and on their own they are rarely a reason to act.
What to do with your findings
Reclaim lost value
Links to pages that now return 404 waste authority you already earned. Either restore the page, 301-redirect the old URL to the closest relevant page, or ask the linking site to update the link. Our guide to link reclamation walks through both routes.
Clean up links you control
If you or a previous agency paid for links, sponsored posts or exchanged links at scale, ask for those links to be removed or qualified with rel="sponsored". Google’s link attribute guidance says paid placements should be marked with the sponsored value (see qualify your outbound links).
Use the disavow tool sparingly
Google’s help page is cautious about disavowing:
“This is an advanced feature and should only be used with caution.”
— Search Console Help, Disavow links to your site
The same page explains that, in most cases, Google can assess which links to trust without extra guidance, so most sites will not need the tool. It is intended for sites with many spammy, artificial or low-quality links that have caused, or are likely to cause, a manual action. If you do need it, the file must be plain text (.txt, UTF-8 or 7-bit ASCII), list one URL or domain: entry per line, and stay within 100,000 lines and 2 MB. For a deeper look, read our guide to toxic backlinks and the disavow tool, and if you already have a penalty, our Google penalty recovery service can help.
Turn insights into new links
Look at which of your pages attract links naturally, usually original data, tools and genuinely useful guides, and create more like them. Then work through the gaps you found against competitors using the tactics in our link building strategies guide.
Common mistakes in backlink audits
- Trusting one tool’s toxicity score. Vendor scores are estimates. Disavowing everything above a threshold can throw away genuine links.
- Disavowing “just in case”. Without a manual action or a real history of link schemes, disavowing usually adds risk and no benefit.
- Reviewing URLs instead of domains. Grouping by root domain makes the job manageable and decisions consistent.
- Ignoring lost links. Recovering links you already earned is often faster than building new ones.
- Not recording decisions. Without notes, the next audit repeats the same work.
- Treating nofollow links as worthless. They can still bring referral traffic and brand exposure, and they are a normal part of a natural profile.
Related Guides
- Dofollow vs Nofollow Links (and Sponsored and UGC)
- Guest Blogging for SEO: How to Do It Right
- Link Reclamation: How to Recover Lost Backlinks
- How to Write a Blog Post: A Step-by-Step Guide
Frequently Asked Questions
How often should I do a backlink audit?
A light review every quarter and a full audit once a year suits most sites. Audit immediately if you receive a manual action, see an unexplained ranking drop, or take over a site with an unknown link history.
Do I need to disavow spammy links?
Usually not. Google says it can generally assess which links to trust, so most sites do not need the disavow tool. It is meant mainly for sites that have, or are likely to get, a manual action because of unnatural links.
Is a backlink audit tool’s toxic score a Google metric?
No. Toxicity and authority scores are calculated by tool vendors. They are useful for sorting, but every decision should be based on a manual check of the linking site and how the link was acquired.
Why does Search Console show fewer links than my SEO tool?
Search Console’s Links report shows a sample rather than every link, and third-party tools use their own crawlers and databases. Combining sources gives you the most complete picture.
What should I do about lost backlinks?
Check why they were lost. If the target page now returns a 404, restore it or 301-redirect it to the most relevant page. If the link was removed or changed, contact the site owner and ask for it to be updated.
Conclusion
A good backlink audit is less about hunting “toxic” links and more about understanding your link profile: what helps, what you have lost and where to grow. Combine data sources, judge links by pattern and intent, reclaim lost value first and keep the disavow tool for genuine link-scheme problems. If you would like experienced eyes on your profile, our SEO services team can run the audit and build a clean link plan, or you can get a free quote today.
