How to run a backlink audit

A backlink audit is a systematic review of every domain linking to your site, scored for relevance, authority, anchor text, and risk, so you can find link-building wins to protect and spam worth flagging. Run it in five passes: export your data, deduplicate to referring domains, score quality, analyze anchor text, then decide what (if anything) to disavow. Most healthy sites need the audit for opportunity intel, not cleanup.

What a backlink audit actually tells you

People run backlink audits for three different reasons, and confusing them is the single biggest mistake I see. The first is diagnostic cleanup: you suspect spam links are hurting you. The second is opportunity mining: you want to find your best links and earn more like them. The third is competitive recon: you want to reverse-engineer what is ranking your rivals. The same export feeds all three, but the conclusions are wildly different.

Here is the uncomfortable truth that reframes everything below. Since Penguin 4.0 went real-time in 2016, Google stopped demoting sites for low-quality inbound links and instead just ignores them. As Google's documentation and Mueller's commentary make clear, blatant spam links are typically filtered out and have no effect on your rankings (Search Engine Journal). So for the vast majority of sites, the audit's value is opportunity and recon, not panic-driven removal.

Step 1: export every link source you have

No single tool sees your whole profile, so pull from several and merge. Each crawler has its own index size and freshness, which is why a domain shows up in one tool and not another. Start with the free, authoritative source and layer paid crawlers on top.

Combine the CSVs in a spreadsheet and dedupe on referring domain. This matters because the second, third, and tenth link from the same domain pass far less incremental equity than the first. A profile of 40,000 "backlinks" from 300 domains is a 300-domain profile. Always collapse to referring domains before you judge size.

Step 2: collapse links into referring domains

Once you have a clean referring-domains list, add columns for the metrics you will actually use to make decisions: authority score (DR, AS, or DA), topical relevance, link type (editorial / directory / forum / comment / sitewide), dofollow vs nofollow, anchor text, and the linking page's organic traffic. That last column is the most underrated. A link from a page that gets real traffic is worth more than a high-DR link buried on an orphaned page nobody visits.

1. Sort descending by authority to see your strongest domains. These are your assets. Note the patterns: what content earned them, what anchors they used.
2. Sort ascending to see the weakest domains. Flag obvious junk, but do not disavow yet.
3. Tag relevance manually for the top 100 domains. Tools cannot reliably judge topical fit; you can.
4. Mark sitewide links (footer / blogroll / template) separately. One sitewide link can inflate your raw count by thousands without adding proportional value.

Step 3: score quality (and ignore the "toxic score" hype)

This is where most audits go wrong. Tools like Semrush assign a "toxicity score" built from 45+ markers, but there is no official Google definition of a toxic backlink and toxicity score is a proprietary third-party metric, not a Google signal (The HOTH). These scores routinely throw false positives: a legitimate 404'd link, a low-DA but perfectly relevant niche blog, or a real editorial mention can all get flagged "toxic" while being completely harmless.

So judge quality the way Google does: by whether a human editor with standards would have placed the link. Use the framework in what makes a good backlink. In practice, score each domain on three axes:

• Relevance: is the linking site topically related to yours? This is the heaviest weight.
• Authority and traffic: does the domain rank for things and get visitors, or is it a deindexed husk?
• Editorial intent: was the link placed in context by a person, or auto-generated (comment, profile, scraper, footer farm)?

A link can be low-DA and still excellent if it is relevant and editorial. A link can be high-DR and still worthless if it is a paid sitewide on an irrelevant gambling site. Authority without relevance is noise.

Step 4: analyze your anchor text distribution

Anchor text is the one part of the audit that can genuinely signal manipulation. Natural profiles are dominated by branded and generic anchors because real people link using your brand name, a bare URL, or "this article," not perfectly optimized keyword phrases. A profile stuffed with exact-match commercial anchors is the classic Penguin tripwire.

Those ranges line up with what multiple practitioners report for pages ranking in the top three, where exact-match anchors sit below 5-10% and branded/generic dominate (FatJoe, Lucid Media). If your exact-match share is climbing past 10-15%, that is your real audit finding, and the fix is to build more branded and editorial links to dilute it, not to disavow. Learn the mechanics in our anchor text glossary entry.

Step 5: decide what to do with bad links

Now the decision tree. For most sites the honest answer is: do nothing to the spam, and pour your energy into earning more good links. But there are three genuine cases where action is warranted.

1. You have a manual action for unnatural links in Search Console. This is the textbook disavow scenario, and the only one where it is non-negotiable.
2. You are under a negative SEO attack: a sudden flood of spammy, often exact-match-anchored links built by a malicious third party.
3. You have a legacy of self-inflicted manipulation: old paid link schemes, link exchanges, or PBN buys you know violate the guidelines.

If none of those apply, the disavow tool is not your friend. Mueller's guidance is explicit: most sites do not need it, and used incorrectly it can harm your performance because you may disavow links that were actually helping you (Search Console Help). When you do need to act, the full process from manual outreach to a correctly formatted disavow file is laid out in how to remove bad backlinks. The short version: try manual removal first via outreach, and disavow only what you cannot get removed, at the domain level using domain: entries.

Step 6: run competitive link-gap analysis

Every metric you applied to yourself, apply to your top three ranking competitors. The goal is the link gap: domains linking to two or more competitors but not to you. Those are pre-qualified prospects. They link to your space already, so a relevant pitch has a real chance. Sort the gap list by relevance and traffic, and you have a prioritized outreach pipeline straight out of your audit.

Pair the gap list with the right software so you are not doing this in spreadsheets forever. We compare crawlers, gap tools, and monitoring on the best backlink tools for 2026, including which free tiers are good enough for a small-site audit.

How often should you audit

Run a full audit quarterly if you are actively building links, and a lighter monthly check on new referring domains and anchor drift. Spin up an immediate audit if you see an unexplained ranking drop, a Search Console message, or a suspicious spike in referring domains (the negative-SEO signature). Outside those triggers, monthly monitoring is plenty.

Common audit mistakes to avoid

• Trusting toxicity scores blindly. They are third-party estimates, not Google signals, and they over-flag good links.
• Disavowing without a reason. No manual action and no negative SEO means no disavow. You risk removing links that help you.
• Counting links instead of referring domains. Sitewide and template links inflate raw counts and distort your judgment.
• Ignoring relevance in favor of DR. A relevant DR20 beats an irrelevant DR70 for most queries.
• Auditing only your own profile. Skipping the competitor gap means you miss the most actionable output of the whole exercise.

Do those six passes well and a backlink audit stops being a chore about deleting links and becomes what it should be: a map of where your authority comes from, where the risk really sits, and exactly which doors to knock on next. Start from the link building pillar if you want the full strategy around it.