How to Do a Backlink Audit: A Step-by-Step Guide

A backlink audit is a structured review of every website that links to yours, so you can see which links help your rankings, which do nothing, and which could be holding you back. If you have never examined your link profile — the full collection of inbound links pointing at your domain — an audit is the fastest way to understand your site’s authority, catch problems early, and plan smarter link building. This guide walks through the whole process step by step, from exporting your data to deciding what to keep, remove, or disavow.

What is a backlink audit?

A backlink audit is the process of collecting, reviewing, and grading all the inbound links pointing to your website. It answers three questions: are these links helping you, are any of them a risk, and how does your profile compare with competitors who outrank you?

A link audit is not the same as counting backlinks. Counting tells you how many links you have; an audit tells you how good they are. One editorial link from a respected industry publication can carry more weight than a thousand links from auto-generated directories.

A few terms come up throughout this guide:

• Referring domain — a unique website linking to you. Ten links from one site count as one referring domain.
• Anchor text — the clickable words used for a link. A natural profile mixes your brand name, plain URLs, and descriptive phrases.
• Dofollow vs nofollow — a dofollow link can pass ranking signals; a nofollow link tells search engines not to (it can still send traffic).
• Authority metric — a third-party score such as Domain Rating (Ahrefs) or Domain Authority (Moz) that estimates how strong a site is. These are not Google metrics.

Why run a backlink audit?

A backlink audit protects and improves the single most important off-page ranking factor you have. Regular audits let you:

• Spot risky links before they become a problem, such as spammy, paid, or irrelevant links that violate Google’s link spam policy.
• Understand your real authority by seeing how many quality, relevant domains actually vouch for you.
• Find lost or broken links you could reclaim with a quick email.
• Benchmark competitors so you know how big the gap is and where their best links come from.
• Guide future outreach by showing which link types and topics already work for you.
• Prepare for or recover from a manual action if Google ever flags unnatural links to your site.

What you need before you start

You need at least one source of link data, and ideally two: Google’s own view plus an independent crawler. Google Search Console shows what Google has actually found, while tools like Ahrefs and Semrush crawl the web separately and often surface links Search Console misses. Combining them gives the most complete picture.

Free data sources

• Google Search Console (Links report) — free for verified site owners. It breaks down your top linked pages, top linking sites, top linking text, latest links, and more sample links. You can export up to 100,000 rows for the Latest and Sample links, and up to 1,000 rows per individual table. Remember that Google states this report is a sample, not a complete list of every link, so treat it as your most trustworthy starting point rather than the whole story.
• Ahrefs Webmaster Tools — free backlink and site-audit data for websites you verify as the owner. It pulls from the full Ahrefs index and reports Domain Rating (DR), a 0–100 strength score, but is limited to your own properties rather than competitors.
• Moz Link Explorer — offers a small number of free queries per month (about ten) that return Domain Authority (DA) and a Spam Score, and it can be pointed at competitor domains too.

Paid audit tools

Paid tools earn their place on larger or high-stakes audits. They offer bigger link indexes, full competitor research, automated toxicity flagging, disavow-file building, and historical data so you can see how your profile changed over time. The main options are Ahrefs, Semrush, Moz Pro, and Majestic. Pricing changes often and varies by plan, currency, and region, so check the official pages for current rates; entry plans generally start in the low tens of dollars per month, most offer free trials or limited free tiers, and the deeper audit features sit on higher tiers.

How to do a backlink audit, step by step

The process below works with any tool combination. Follow it in order — clean data first, judgement last.

Step 1 — Export your complete link profile

Start by exporting every link you can find. In Google Search Console, open Links > External links and export both the Latest links and the More sample links. Then export the backlink list from at least one crawler tool (Ahrefs, Semrush, Moz, or Majestic). Using two sources matters because no single index catches every link, and Google’s data is only a sample.

Step 2 — Consolidate and clean the data

Merge every export into one spreadsheet. Remove duplicate URLs, then group by referring domain so you are judging websites, not individual links. Create columns for the source URL, referring domain, anchor text, link type (dofollow or nofollow), first-seen date, and an authority metric such as DR or DA. Clean data now saves hours of confusion later.

Step 3 — Analyse the profile

Backlink profile analysis is about patterns, not single links. Look at the shape of your profile across several dimensions:

• Referring domains vs total links — many links from few domains is weaker than fewer links from many quality domains.
• Authority spread — how your DR/DA distribution compares with sites that outrank you.
• Anchor text mix — a natural profile leans on branded and generic anchors; a high share of exact-match commercial anchors can look manipulative.
• Dofollow-to-nofollow ratio — an all-dofollow profile is itself a red flag, because real links come in both kinds.
• Link velocity — sudden, unexplained spikes in new links can signal spam or a negative-SEO attempt.
• Relevance — links from sites in or near your topic (and, for local businesses, your country or region) carry more value than unrelated ones.

Step 4 — Flag potentially toxic links

Go through the low-authority and off-topic links and mark anything that looks unnatural. Many tools attach a “toxicity” or “spam” score to help you sort quickly, but always eyeball the flagged links yourself — these scores are third-party estimates, not Google’s own verdict, and they produce false positives.

Step 5 — Benchmark against competitors

Run the same export-and-analyse process on two or three competitors who rank above you. Compare referring-domain counts, authority levels, and the types of sites linking to them. This shows you the size of the gap and, more usefully, reveals realistic link opportunities you can pursue next.

Step 6 — Decide: keep, remove, or disavow

Finish by turning your flags into a decision for each link or domain: keep the healthy ones, request removal of genuinely harmful ones, and reserve disavowal for the rare cases that need it. The next two sections explain how to judge a toxic link and how to make that keep/remove/disavow call safely.

How to spot a toxic or low-quality backlink

A toxic backlink is one that exists to manipulate rankings rather than to help a real reader, and Google’s link spam policy treats these as violations. Common warning signs include:

• Links from sites with thin, auto-generated, or scraped content.
• Link networks or private blog networks (PBNs) that exist mainly to sell links.
• Paid links that pass ranking credit without a nofollow or sponsored tag.
• Site-wide footer, sidebar, or widget links repeated across every page.
• Links from pages in an unrelated language or an irrelevant niche.
• Exact-match commercial anchor text pointing at your money pages from low-quality sites.
• Links from sites with obvious malware, spam, or adult content unrelated to yours.

One low-quality link is normal and nothing to worry about — every real site collects a few. The concern is a clear pattern of manipulative links, especially ones you or a past agency actively built.

Keep, remove, or disavow: making the call

For most sites, the honest answer is “keep and ignore.” Since the Penguin algorithm became part of Google’s core system in 2016, Google has generally chosen to ignore spammy links rather than penalise the sites they point at. That means the average low-quality link needs no action at all.

When a link is genuinely harmful and you have influence over it, try removal first: find the webmaster’s contact details and send a short, specific request to take the link down. Keep a record of who you contacted and when.

Disavowing — asking Google to ignore specific links through the disavow tool in Search Console — is a last resort. Google’s own guidance is that you should only use it if you have a manual action for unnatural links, or strong, evidence-based reason to believe one is coming. It is not a routine maintenance task, and disavowing good links by mistake can quietly hurt your rankings. If you do reach that point, a dedicated disavow walkthrough is the safest next step, because the file format and syntax must be exact.

Common backlink audit mistakes to avoid

• Disavowing too aggressively. The biggest mistake is dumping every flagged link into a disavow file. You can remove links that were actually helping you.
• Trusting toxicity scores blindly. They are estimates. A high score is a prompt to look, not a command to disavow.
• Using only one data source. Relying on a single tool (or only Search Console) leaves gaps, because each index finds different links.
• Judging links by numbers alone. Relevance and editorial intent matter as much as any authority score.
• Auditing once and forgetting. Link profiles change constantly; a one-off audit goes stale fast.
• Chasing a competitor’s total link count instead of the quality and relevance behind it.

How often should you run a backlink audit?

For an active site, a quarterly audit (roughly every 90 days) is a sensible rhythm. Run an extra audit after any major link-building campaign, if you notice an unexplained ranking drop, if you suspect a negative-SEO attack, or immediately if Google sends a manual action notice in Search Console. Between full audits, a quick monthly glance at your latest links and referring-domain count is enough to catch surprises early.

Disclaimer

This article is for general educational purposes and is not professional SEO or legal advice. Search rankings depend on many factors outside any single audit, and no technique guarantees results. The disavow tool can reduce your rankings if used carelessly, so apply it cautiously and only when Google’s own guidance calls for it. Always confirm tool features, limits, and pricing on the providers’ official pages before you rely on them.

Frequently Asked Questions (FAQ)

What is a backlink audit in simple terms?

It is a review of every website that links to yours, so you can grade each link as helpful, neutral, or harmful and then act on what you find. Think of it as a health check for your site’s off-page reputation.

How often should I audit my backlinks?

Roughly every three months for an active site, plus an extra check after big campaigns, sudden ranking drops, or any manual action from Google. A quick monthly look at new links helps you catch problems between full audits.

Do I need paid tools to audit backlinks?

No. You can run a solid audit with free tools — Google Search Console for Google’s own view, plus a free tier like Ahrefs Webmaster Tools or Moz Link Explorer. Paid tools mainly add bigger indexes, competitor data, and time-saving automation.

Should I disavow every toxic link I find?

No. Google ignores most low-quality links on its own, so disavowing is a last resort reserved for a manual action or strong evidence one is coming. Disavowing good links by mistake can hurt you, so be conservative.

How long does a backlink audit take?

A small site can be audited in an afternoon once your data is exported and cleaned. Large sites with tens of thousands of links, or a full competitor benchmark, can take several days of careful review.