How to Audit Your Backlink Profile (7 Steps)

Export every link pointing at your site from Search Console plus one third-party tool, deduplicate to referring domains, then check four things: how many links are still live, what the anchor text distribution looks like, whether the linking domains are relevant, and whether anything was paid for or manufactured. Most audits end with no action — and that is a valid result.

A backlink audit is a diagnostic, not a hunt for links to remove. You are finding out what your profile looks like from the outside, which links are doing work, and whether there is a specific, identifiable problem worth fixing. Going in determined to disavow something is how people damage their own rankings.

Step 1 — Pull the data from more than one source

No single tool sees your whole link graph. Three sources, in order of trustworthiness:

Google Search Console → Links → External links. Google's own view of your profile, which is the only view that matters for ranking. Export top linking sites, top linking pages and top linking text. The report is capped, so it is a sample rather than a census — but it is a sample from the right index.
One third-party crawler — Ahrefs, Semrush, Moz or a free alternative. These find links Search Console omits and add metrics Google does not publish.
Your own records of any deliberate link building: outreach spreadsheets, guest posts, exchanges, anything you paid for. The single most useful input, and almost nobody keeps it.

How to find backlinks to your website covers the free routes if you do not have a paid tool.

Step 2 — Collapse to referring domains

Raw backlink counts are noise. A site-wide footer link from one blog can generate 40,000 "backlinks" and is worth roughly what one link from that blog is worth.

Deduplicate your export by domain. That number — referring domains — is the one to track over time, and the distinction is explained in referring domains vs backlinks. If your backlink count is enormous but your referring-domain count is small, you have a handful of loud sources, not a broad profile.

Then sort the domain list by how many links each one contributes. Anything supplying hundreds of links is a template, a widget or a signature — check what it is before you assume it is good news.

Step 3 — Check what's actually still live

This is the step almost every audit skips, and it is the one that finds real problems. Links disappear constantly: pages get redesigned, posts get pruned, sites go offline, and exchange partners quietly remove a link after you have delivered yours. Do backlinks expire covers the failure modes.

For your top 50–100 referring domains, verify three things:

The page still loads — not a 404, not a redirect chain into a homepage. A redirect chain leaks value at every hop.
The link is still on it — search the page source for your domain, not the rendered text.
The page is indexed — an unindexed page passes nothing. See how to check if a backlink is indexed.

Recovering a link that already exists is far cheaper than earning a new one. A polite email pointing out that a link broke in a redesign succeeds surprisingly often.

Step 4 — Read the anchor text distribution

Export the anchor text column and count the patterns. You are looking at the shape of the distribution, not chasing a target ratio.

A profile that grew naturally is dominated by brand names, bare URLs, page titles and unhelpful phrases like "here" and "this article". Exact-match commercial anchors appear rarely, because real editors do not write that way.

So the warning sign is not "too many of X". It is a distribution that could not have happened by accident: dozens of links carrying the same commercial phrase, or a profile where "best crm software" outnumbers your own brand name. What is anchor text explains why that reads as manufactured. If you built that pattern, act on it. If you did not, it is usually one scraper site copying itself a thousand times rather than an attack.

Step 5 — Judge relevance before authority

Every tool gives you a number — Domain Rating, Domain Authority, Trust Flow. They are third-party estimates, not Google metrics, and they are the least important thing on the screen. Domain authority vs domain rating covers what each one actually measures.

Sort by relevance instead, and ask of each significant referring domain:

Would a real reader of that site plausibly click through to mine?
Does the site have its own audience, or does it exist to host links?
Is the page my link sits on about something, or is it a list of outbound links?

A DR 25 link from a genuine site in your niche beats a DR 70 link from a general-purpose content farm. What is a bad backlink covers the traits that actually correlate with trouble, and what is spam score in SEO explains why a tool's spam metric is a prompt to look, not a verdict.

Step 6 — Flag only what you know is manufactured

Now the short list. A link belongs on it if, and only if, one of these is true:

You paid for it and it is followed.
You built it at scale — a directory blast, a PBN, a bulk package, an automated tool.
It is on a site that exists purely to host links — no audience, no editorial, nothing but outbound links.
It is unambiguously toxic — hacked pages, adult or gambling injections into unrelated sites, scraped mirrors of your own content.

Everything else — low-authority sites, foreign-language sites, a scraper that copied your blog, an odd directory you never heard of — is normal internet debris. Every site has it, and Google has been ignoring it for years without being asked.

Step 7 — Decide what to do (usually nothing)

What you found	What to do
Links that went missing or broke	Email the site, ask for a fix. Highest return of anything here.
Thin, irrelevant links you did not build	Nothing. Ignore them.
Anchor distribution that looks manufactured	Stop building that anchor. Dilute with brand and natural anchors over time.
Links you paid for and can remove	Remove them at source.
A manual action in Search Console	Then, and largely only then, disavow.

The disavow file is the tool people reach for first and need least. Google's own guidance is that most sites should never use it, and a badly written disavow — an over-broad domain: entry across sites that were helping you — causes real, self-inflicted ranking loss. Read how to disavow bad backlinks and what is a manual action in Search Console before touching it.

How often to run one

Quarterly: a 20-minute check — referring domain count, new and lost links, Search Console for manual actions.
Annually: the full seven steps.
Immediately: after a ranking drop you cannot explain, after buying a domain or a site, or after inheriting a site whose link history you do not know.

Post-acquisition is when audits genuinely pay. Buying a domain means buying its link history, including whatever the previous owner did in 2014.

What the audit usually tells you

For most sites the honest finding is: the profile is fine, it is just small. Not enough relevant sites link to you, and no amount of auditing changes that.

That is a supply problem, and the routes to fix it are earning links with something worth citing, asking for them through outreach, or trading them directly. Backlinkster is the third — site owners in related niches swap one-for-one in-content links, and every placement is verified live by code, so the "is it still there" problem from Step 3 is checked continuously instead of once a year. Five swaps a month on the free plan; see the plans.

Frequently asked questions

How do I audit my backlink profile? Export your links from Google Search Console and at least one third-party tool, deduplicate to referring domains, verify which links are still live and indexed, review the anchor text distribution and the relevance of linking sites, then flag only links you know were paid for or built at scale. Act on broken links first; disavow almost never.

What tools do I need for a backlink audit? Search Console is free, mandatory, and the only source showing Google's own view. Add one crawler — Ahrefs, Semrush or Moz — for coverage and metrics. A spreadsheet does the rest. Paid audit services mostly re-package these same exports.

How often should I audit my backlinks? A quick quarterly check of referring domains, new and lost links, and manual actions, plus one full audit a year. Run an immediate audit after an unexplained ranking drop or when you acquire a domain whose link history you do not know.

Should I disavow links I find in an audit? Usually no. Google's guidance is that most sites never need the disavow tool, and an over-broad disavow can remove links that were helping. Reserve it for a manual action or for links you know you paid for and cannot get removed at source.

What does a healthy backlink profile look like? Mostly branded and natural anchor text, a referring-domain count that grew steadily rather than in spikes, links concentrated in sites topically related to yours, and a mixture of followed and nofollowed links from pages that have their own readers.

Can competitors hurt me with bad links? Rarely. Google's systems ignore most low-quality links without being asked, which is why negative SEO usually fails. If you see a sudden flood of spam links appearing alongside an actual ranking drop, document it — but check for a manual action before assuming the links are the cause.

The bottom line

A backlink audit answers one question: is there a specific, identifiable problem in my link profile? Pull the data, collapse it to domains, find out what is still live, read the patterns, and act only on things you know are manufactured. The most valuable output of most audits is a list of broken links worth recovering — not a disavow file.