{ "title": "How to run a WordPress SEO audit: 6-step method and tools", "seo_title": "WordPress SEO Audit: 6-Step Method, Tools and Priorities", "h1": "How to run a WordPress SEO audit: 6-step method and tools", "description": "Run a WordPress SEO audit in 6 steps: indexing, crawl, Core Web Vitals, content, internal links and security. Free tools, common mistakes, priorities.", "lead": "The method to audit the SEO of a WordPress site in six steps, with the free tools, the WordPress-specific mistakes and a grid to prioritise fixes.", "language": "en", "locale": "en-US", "type": "article", "url": "https://www.wp-masquerade.com/wordpress-seo-audit/", "canonical": "https://www.wp-masquerade.com/wordpress-seo-audit/", "markdown": "https://www.wp-masquerade.com/wordpress-seo-audit/index.md", "json": "https://www.wp-masquerade.com/wordpress-seo-audit/index.json", "published": "2026-05-08T06:00:00+00:00", "modified": "2026-11-05T20:53:46+00:00", "site": { "name": "WP Masquerade", "url": "https://www.wp-masquerade.com/" }, "translations": [ { "language": "en", "hreflang": "en-US", "title": "How to run a WordPress SEO audit: 6-step method and tools", "url": "https://www.wp-masquerade.com/wordpress-seo-audit/", "markdown": "https://www.wp-masquerade.com/wordpress-seo-audit/index.md", "json": "https://www.wp-masquerade.com/wordpress-seo-audit/index.json" }, { "language": "fr", "hreflang": "fr-FR", "title": "Réaliser un audit SEO WordPress : méthode en 6 étapes et outils", "url": "https://www.wp-masquerade.com/fr/audit-seo-wordpress/", "markdown": "https://www.wp-masquerade.com/fr/audit-seo-wordpress/index.md", "json": "https://www.wp-masquerade.com/fr/audit-seo-wordpress/index.json" }, { "language": "es", "hreflang": "es-ES", "title": "Cómo hacer una auditoría SEO de WordPress: método en 6 pasos y herramientas", "url": "https://www.wp-masquerade.com/es/auditoria-seo-wordpress/", "markdown": "https://www.wp-masquerade.com/es/auditoria-seo-wordpress/index.md", "json": "https://www.wp-masquerade.com/es/auditoria-seo-wordpress/index.json" }, { "language": "de", "hreflang": "de-DE", "title": "WordPress-SEO-Audit durchführen: Methode in 6 Schritten und Tools", "url": "https://www.wp-masquerade.com/de/wordpress-seo-audit-anleitung/", "markdown": "https://www.wp-masquerade.com/de/wordpress-seo-audit-anleitung/index.md", "json": "https://www.wp-masquerade.com/de/wordpress-seo-audit-anleitung/index.json" }, { "language": "it", "hreflang": "it-IT", "title": "Come fare un audit SEO di WordPress: metodo in 6 passaggi e strumenti", "url": "https://www.wp-masquerade.com/it/audit-seo-wordpress-guida/", "markdown": "https://www.wp-masquerade.com/it/audit-seo-wordpress-guida/index.md", "json": "https://www.wp-masquerade.com/it/audit-seo-wordpress-guida/index.json" }, { "language": "pt", "hreflang": "pt-BR", "title": "Como fazer uma auditoria de SEO no WordPress: método em 6 etapas e ferramentas", "url": "https://www.wp-masquerade.com/pt/auditoria-seo-wordpress-guia/", "markdown": "https://www.wp-masquerade.com/pt/auditoria-seo-wordpress-guia/index.md", "json": "https://www.wp-masquerade.com/pt/auditoria-seo-wordpress-guia/index.json" }, { "language": "nl", "hreflang": "nl-NL", "title": "Een SEO-audit van WordPress uitvoeren: methode in 6 stappen en tools", "url": "https://www.wp-masquerade.com/nl/wordpress-seo-audit-stappenplan/", "markdown": "https://www.wp-masquerade.com/nl/wordpress-seo-audit-stappenplan/index.md", "json": "https://www.wp-masquerade.com/nl/wordpress-seo-audit-stappenplan/index.json" } ], "headings": [ { "level": 1, "text": "How to run a WordPress SEO audit: 6-step method and tools" }, { "level": 2, "text": "What an SEO audit should deliver" }, { "level": 2, "text": "The tools you need, mostly free" }, { "level": 2, "text": "The six steps of the audit" }, { "level": 3, "text": "Step 1: indexing" }, { "level": 3, "text": "Step 2: technical crawl" }, { "level": 3, "text": "Step 3: performance and Core Web Vitals" }, { "level": 3, "text": "Step 4: content and search intent" }, { "level": 3, "text": "Step 5: internal linking" }, { "level": 3, "text": "Step 6: security and trust" }, { "level": 2, "text": "Prioritise with an impact and effort grid" }, { "level": 2, "text": "WordPress mistakes found in almost every audit" }, { "level": 2, "text": "How often to repeat the audit" }, { "level": 2, "text": "What WP Masquerade adds to the security step" }, { "level": 2, "text": "Frequently asked questions" }, { "level": 3, "text": "Key takeaways" }, { "level": 2, "text": "Protect the traffic you have built" }, { "level": 2, "text": "Sources" }, { "level": 2, "text": "WordPress security, without the noise", "id": "wpm-nl-box-title" } ], "body": "A WordPress SEO audit answers one simple question: what is stopping your pages from being crawled, indexed and ranked well, and what should you fix first? This guide gives you the six-step method, the free tools that are enough for most sites, the WordPress-specific mistakes that turn up in almost every audit, and a grid that turns the list of issues into an action plan.\n\nThis article covers the diagnosis. For the optimisation work itself, see our [practical guide to optimising WordPress SEO](https://www.wp-masquerade.com/optimize-wordpress-seo-guide/). For a whole-site review (security, backups, performance, maintenance), see [how to audit a WordPress site in 12 points](https://www.wp-masquerade.com/wordpress-site-audit-checklist/).\n\n## What an SEO audit should deliver\n\nA score out of 100 from a tool is not an audit. The useful output is a list of confirmed issues, each with the URLs involved, its likely effect on traffic, the effort needed to fix it and the person in charge. A good audit also answers what the tool cannot know: which pages matter to your business, and which ones could drop out of the index without any loss.\n\n- **Before you start**: list the 10 to 20 pages that bring in money (sales, leads, sign-ups) and the queries you target. They are your common thread.\n- **Baseline**: export clicks and impressions for the last 3 and 12 months from Search Console, so you can measure the effect of your fixes.\n- **Access you need**: a WordPress administrator account, Search Console, ideally SFTP or SSH and the server logs.\n\n## The tools you need, mostly free\n\n| Tool | What it reveals | Price | Step |\n| --- | --- | --- | --- |\n| Google Search Console | Indexed or excluded pages and why, queries, Core Web Vitals, security issues | Free | 1, 3, 4, 6 |\n| Crawler (Screaming Frog SEO Spider) | 404 errors, redirects, title tags, canonicals, page depth | Free up to 500 URLs, licence £199 a year | 2, 5 |\n| PageSpeed Insights | Core Web Vitals measured on real visitors and page diagnostics | Free | 3 |\n| `site:` search in Google | Unexpected pages in the index, titles shown | Free | 1, 6 |\n| Your SEO plugin and WP-CLI | Title templates, indexed archives, content inventory | Free | 2, 4 |\n\n*A full audit can be done with these tools; paid suites mainly speed up rank and backlink tracking.*\n\n## The six steps of the audit\n\nOrder matters: there is no point polishing the content of a page Google cannot index. Each step builds on the previous one.\n\n*Each step builds on the previous one; the final deliverable is a prioritised action plan.*\n\n### Step 1: indexing\n\n- In Settings, Reading, the box “Discourage search engines from indexing this site” must be unticked. It is the most expensive mistake after going live from a staging site.\n- Open `/robots.txt`: no `Disallow: /` line, and the URL of your sitemap is listed.\n- Search Console, “Pages” report: read every exclusion reason. “Crawled, currently not indexed” on important pages often means content judged too thin or duplicated.\n- Compare the number of indexed pages with the number of pages you actually want in Google. A large gap either way is the first topic of the audit.\n\n### Step 2: technical crawl\n\nRun a crawler on the HTTPS version of the site. Note the 404 errors linked from your pages, redirect chains, `noindex` pages listed in the sitemap, canonical tags pointing elsewhere, and the URL variants that still respond (with and without www, with and without a trailing slash). On WordPress, look closely at tag, date and author archives and at attachment pages: they produce lots of nearly empty pages.\n\n### Step 3: performance and Core Web Vitals\n\nGoogle measures three [Core Web Vitals](https://www.wp-masquerade.com/glossary/core-web-vitals/) on real visits, at the 75th percentile: LCP (rendering of the largest element) should stay under 2.5 seconds, INP (responsiveness) under 200 milliseconds and CLS (layout stability) under 0.1. In Search Console, the report groups pages by template: a poor score on “post” almost always comes from the theme, a heavy header image or a third-party script, not from one particular post. Images are the most common cause of a slow LCP (see [the best plugins to optimise images](https://www.wp-masquerade.com/best-wordpress-image-optimization-plugins/)).\n\n### Step 4: content and search intent\n\n- **Cannibalisation**: in the Performance report, filter on an important query and open the Pages tab. If several pages take turns, merge them or give each a distinct [intent](https://www.wp-masquerade.com/glossary/search-intent/).\n- **Titles and descriptions**: duplicates, truncated titles, SEO plugin templates left on their defaults.\n- **Thin content**: pages of a few lines, categories without text, outdated posts. Update, merge or remove from the index.\n- **Structure**: one H1 per page and heading tags without skipped levels. Some themes put the site name in an H1 on every page.\n\n### Step 5: internal linking\n\nThe crawler shows the depth of each page (clicks from the home page) and the pages that receive no internal link at all. An important page more than three clicks deep, or orphaned, gets little attention. Check your anchor texts too: “click here” helps neither visitors nor search engines. Our definition of [internal linking](https://www.wp-masquerade.com/glossary/internal-linking/) covers good practice in detail.\n\n### Step 6: security and trust\n\nThis step is missing from most audits, yet a hacked site can lose its traffic within days. Check the Search Console “Security issues” report, make sure there are no spam pages in the index (`site:` searches with words such as casino or viagra), and check the HTTP to HTTPS redirect, mixed content and security headers. If in doubt, follow our guide to [detecting whether a WordPress site has been hacked](https://www.wp-masquerade.com/detect-hacked-wordpress-site/); the effects of a hack on rankings are covered in [SEO spam and deindexing](https://www.wp-masquerade.com/hacked-wordpress-site-seo-spam-deindexing/).\n\n## Prioritise with an impact and effort grid\n\nAn audit often produces more than a hundred findings. Rank them by their effect on the pages that make money and by the time needed to fix them.\n\n| Finding | Impact | Effort | Decision |\n| --- | --- | --- | --- |\n| Site or section set to noindex by mistake | Critical | Minutes | Fix today |\n| Injected spam pages in the index | Critical | Days | Clean up, then request a review |\n| Two pages competing for the same query | High | Hours | Merge with a 301 redirect |\n| Slow LCP on the post template | High | Hours to days | Fix the template, not each page |\n| Tag archives indexed | Medium | Minutes | Set to noindex |\n| Missing alt text | Low to medium | Variable | Handle as content gets updated |\n\n*Sample decisions: deal first with what is critical and quick.*\n\n## WordPress mistakes found in almost every audit\n\n- **Two SEO plugins active**: two title tags, two sitemaps, conflicting canonicals. Keep only one.\n- **Attachment pages indexed**: on sites installed before WordPress 6.4, every image may have its own empty page. Redirect them to the file or to the parent content.\n- **Author archives on a single-author site**: a duplicate of the blog page that also shows the login name in its URL.\n- **URLs changed without a redirect** after a permalink or title change.\n- **Multi-megabyte images** uploaded straight from the camera.\n- **Indexed staging site**: a test subdomain visible in Google as duplicate content.\n\n## How often to repeat the audit\n\nOne full audit a year is enough for most sites, plus a targeted audit after a migration, a theme change or a sudden traffic drop. In between, a fifteen-minute monthly check in Search Console (excluded pages, Core Web Vitals, security issues) catches regressions early. To track your rankings between audits, our [comparison of rank tracking tools](https://www.wp-masquerade.com/best-seo-rank-tracking-tools/) can help.\n\n## What WP Masquerade adds to the security step\n\nWP Masquerade is not an SEO tool. It works on step 6: the free version removes WordPress traces and closes the doors bots test, without touching your page URLs or content (hiding WordPress has no negative SEO effect). Pro warns you when an installed plugin has a known vulnerability, checks every day that core files have not been modified and adds [security headers](https://www.wp-masquerade.com/features/security-headers/): three points an SEO audit rarely covers, but which protect your traffic.\n\n*“How to Do a Website SEO Audit: 12 Point Checklist for WordPress Sites”, MonsterInsights channel: a hands-on walkthrough of the checks in Search Console and in WordPress.*\n\n## Frequently asked questions\n\n**How long does a WordPress SEO audit take?**\n\nFor a site under 500 pages, allow one to two days with free tools, including writing the action plan. A site with several thousand pages or an online store takes longer, especially for the content analysis.\n\n**Can you do an SEO audit without paid tools?**\n\nYes. Search Console, PageSpeed Insights, the free version of Screaming Frog (500 URLs) and the site: search cover all six steps for a small site.\n\n**Is my SEO plugin’s score enough?**\n\nNo. It rates one page at a time on simple criteria (keyword, length). It sees neither indexing, nor duplicates between pages, nor real-world performance, nor a hack.\n\n**Should tag archives be noindexed?**\n\nUsually yes, unless a tag has a real introduction text and gets traffic. Check in Search Console before deciding.\n\n### Key takeaways\n\n- Audit in order: indexing, crawl, performance, content, internal links, security.\n- Search Console, a crawler and PageSpeed Insights are enough for most sites.\n- The deliverable is an action plan ranked by impact and effort, not a score.\n- On WordPress, watch archives, attachment pages and duplicate SEO plugins.\n- Always add a security check: a hack wipes out months of SEO work.\n\n## Protect the traffic you have built\n\nWP Masquerade reduces for free what bots can see of your WordPress site. Pro warns you about known vulnerabilities in your plugins and about modified core files, from €59 a year excl. VAT.\n\n[Download the free version](https://www.wp-masquerade.com/download/)\n\n[See Pro pricing](https://www.wp-masquerade.com/pricing/)\n\n## Sources\n\n- Search Console Help: Page indexing report (https://support.google.com/webmasters/answer/7440203)\n- web.dev: Core Web Vitals (https://web.dev/articles/vitals)\n- Screaming Frog: SEO Spider pricing (https://www.screamingfrog.co.uk/seo-spider/pricing/)\n- Google Search Central: SEO Starter Guide (https://developers.google.com/search/docs/fundamentals/seo-starter-guide)\n\n## WordPress security, without the noise\n\nOne e-mail when something matters: new attacks seen in the wild, plugin updates and practical guides. No spam, unsubscribe in one click.", "categories": [ "SEO and GEO" ], "format": "application/json" }