A complete backlink audit answers three questions in one sitting: what links do I have, which of them help, and what should I do about the rest? Most site owners never run one and fly blind — they discover problems only when a penalty notice arrives or rankings slide without explanation. The five-step workflow below turns a chaotic link dump into a clean action list you can execute in a week.
Budget roughly half a day for a small site (under 5,000 referring domains) and spread larger audits across several sessions. You'll need spreadsheet software, access to Google Search Console and at least one commercial backlink tool.
Quick Answer: Export every known backlink from Google Search Console plus an SEO tool, deduplicate the list, classify each domain as keep/monitor/remove, then work through a prioritised action list — outreach first, disavow only as a documented last resort.
Step 1: Consolidate Every Source Into One Export
No single source shows your full profile. Pull all of these before analysing anything:
- Google Search Console — the only data Google itself confirms seeing. Latest Links report, both "top linked pages" and "top linking sites" downloads.
- Ahrefs or Semrush full backlink exports for depth and historical spikes.
- Majestic if available — its historic index catches links others have dropped.
- Past disavow files and old audit sheets so previously judged links aren't re-litigated.
Merge everything into one sheet with columns: source URL, root domain, target URL, anchor text, first-seen date, follow status and source tool.
Step 2: Deduplicate and Normalise
Raw exports double- and triple-count. Collapse rows to one per unique target URL per root domain, convert sitewide widgets into single domain-level entries, and strip tracking parameters. What looked like 40,000 links often becomes 6,000 real decisions. This step alone saves hours of pointless review.
Step 3: Classify Each Linking Domain
Work domain by domain, not link by link — one judgement covers everything that domain sends you. Sort into four buckets using relevance, traffic and placement quality:
| Bucket | Description | Action |
|---|---|---|
| Keep | Relevant sites, editorial placements, directories that actually send visitors | Nothing — possibly build a relationship |
| Monitor | Weird but isolated: low-quality blogs, foreign-language pages, nofollow noise | Note it; re-check next audit cycle |
| Remove-attempt | Clear purchased patterns, PBN clusters, coordinated anchor swarms you or an agency built | Contact webmasters; log dates and responses |
| Disavow-candidate | Removal attempts failed, hacked injections spreading, negative SEO volume rising | Add to draft disavow file after verification |
The classification pass is where tools' automated toxicity scores can speed things up — just treat them as sorting hints, never verdicts. Spot-check anything flagged.
Step 4: Turn Buckets Into an Action List
An audit that ends in a colour-coded spreadsheet changes nothing. Convert findings into sequenced tasks:
- Quick wins: Valuable pages earning links but under-optimised — add internal links from strong pages while you're in there.
- Replication targets: Sites linking to competitors but not you become your next outreach list.
- Removal queue: Draft polite removal requests for remove-attempt domains, batched 50–100 at a time.
- Disavow decision: Only submit a file if spam is voluminous, patterned and connected to your domain — see the cautions in any serious guide, because careless disavowing strips good equity too.
- Gap fixes: If the profile lacks editorial citations entirely, that's not a cleanup task but a content-and-PR project for the next quarter.
Step 5: Schedule the Next Audit
Profiles drift. Set a recurring cadence matched to your risk level: quarterly for competitive niches or sites with aggressive link-building history; twice yearly otherwise. Each cycle starts from the previous verdicts, so session two takes hours rather than days. Watch two trend lines between audits — new referring domains per month and anchor distribution — because sudden shifts are how problems announce themselves early.
Key Takeaways
- Combine Search Console with paid tools — neither alone shows the whole picture.
- Judge root domains, not individual URLs, to cut review time dramatically.
- Every audit must end in dated actions, not just classifications.
- Disavow is a scalpel reserved for verified, persistent manipulation patterns.