Last Update: 2/18/2019
We all have our bag of tricks in the industry. As time passes, I find that my bag is getting pretty big and cluttered. When I get stuck on an audit and need to kickstart myself, or when I think I’ve got everything, I like to use this list to make sure I’m not missing anything. This list is incomplete – and I’m constantly adding (and sometimes removing) items as I go. Hope it’s as helpful for you as it’s been for me over the years. 🙂
UX /CRO/User Journey Stuff:
- Does the site had a strong 404 page that includes a friendly message, a site search feature, contact information, and user pathways to key content?
- Have all e-mail addresses on the site been validated?
- Do all outbound/external links open in a new window?
- The site search feature is working properly, and a custom, helpful response is shown when no results are found.
- If it’s a WordPress site, ensure that the setting that makes images link to themselves by default is disabled.
- Does the blog have an RSS/E-mail subscription set up?
- Do all forms work properly? Do they have an engaging thank-you message?
- Are all required fields in forms indicated with a visual cue?
- Does the language-selection feature lead you into a dead end, where you can’t switch back?
- Does the content of key pages match likely visitor intent?
- Is the home page super confusing? Can visitors immediately understand what the business is and if they are relevant to the visiting audience (service area, target industry, etc)?
- Is it time to recommend that they get rid of a auto-scrolling carousel on the home page?
- Does the site use underlined text where no link is present? How misleading is the text for visitors?
- Does the logo in the footer link to the home page, or does clicking on it do nothing?
- Is the blog using Facebook/Disqus comments, or have them turned off, or is it making users fill out a clunky, high-maintenance form to leave a comment?
- Are the category/archives links on the sidebar of the blog likely to be useful for visitors?
- Are visitors being forced to prove they’re not a robot with clicks, rather than simply using a honeypot?
- Does the logo link directly to the current home page link, or is a redirect involved?
- Are the images optimized for file size, and/or are they larger than they appear on the page?
- Are images in the correct format, not stretched out or warped to fit their box, and free of pixelation?
- How has site speed changes impacted traffic and conversions?
- How is its score using Google’s Speed Test?
Technical SEO, IA, Indexation
- Does the site have a sitemap that’s referenced in robots.txt, as well as a html site map? Is the sitemap submitted in GWMT and Bing WMT?
- Does the logo link directly to the home page, or is a redirect involved?
- Is the site disallowing URLs in the robots.txt file when it could be “noindex, follow”ing them?
- All noindex/disallow tags present during development have been removed.
- Do all images have alt text?
- Make sure the site is not using the meta keywords tag.
- Do all pages use an H1? Are they using JUST one per page?
- Are H2’s being used properly?
- Do all deleted content pages have proper redirects in place?
- http:// redirects to http://www, or the appropriate location.
- Does any alternate version of the site exist – for example, if I add .html, .asp. /index.php, or other versions of the site at the end?
- Are there persistent URL tags that follow visitors through the site that are creating tons of duplicate content in the index?
- URL conventions are in place for trailing slashes and capitalization.
- If the site is HTTPS, is it using HSTS? Check chrome://net-internals/#hsts, and if static_upgrade_mode: and/or dynamic_upgrade_mode: is set to dynamic, then it’s set up d — OR just use this tool, following these instructions.
- Is HSTS Preload in place? Submit it to https://hstspreload.org/
- If HTTPS, is the meta referrer tag implemented?
- Does the site have an “abandoned” HTTPS or HTTP site that does not redirect or rewrite?
- Does the site have spammy outbound links?
- Has the site been hacked?
- Is .htaccess formatted properly?
- Does the site create “soft 404” pages?
- For WordPress sites, does every single image on the site have its own, indexed gallery page?
- Do images have SEO-optimized file names?
- Do images have seo-optimized title tags? If so, get rid of them.
- Do folders have short, concise names that are human-readable and readable from search?
- Does the site use bread crumbs, and if so, do they use bread crumb schema?
- Is the site using schema, including “sameas” schema to link to all social media account pages?
- Do pages have self-referencing canonical links? Do they work when you mess with the URL, or do they just reflect whatever URL you happen to be on?
- Do pages use duplicate metadata or content?
- If they’ve done a recent migration, do they have a top of top-traffic pages that 404 now? How many pages that used to earn traffic now 404?
- Does the 404 page actually deliver a 404 message?
- Does the site use 302 redirects where it should be using 301’s?
- Is the blog, or other sections of the site, on a separate website and/or subdomain?
- Is the site not linking to the blog from any significant navigation/footer location?
- Does the site have strong meta titles in place, with no duplicates?
- Does the site have 155-character or less meta descriptions, and 140 or less for blogs?
- All planned Twittercard/OpenGraph data is in place and working properly.
- Ensure that PDF’s have metadata.
- Are all social media sites linking to the most current (usually HTTPS-version) URL?
- Does the site (and the blog) have the GA tracking code set up?
- Is Universal Analytics & Tag Manager installed, or is it the old GA code?
- Are alerts set up in Google Analytics?
- Is GWMT and BWMT set up on all pages?
- Is Google Tag Manager set up?
- All forms and applications generate a thank you page or code that is trackable in Google Analytics, and include a noindex, follow tag.
- Does the site have multiple GA codes installed, or multiple instances of the same one? Use the Chrome Tag Assistant to check for hidden ones in external files or via Tag Manager as well.
- If I do a hostname-filtered search in Google Analytics, do any unexpected domains/subdomains come up in the results?
- Is Hreflang in place?
- Has Google Search Console, Bing Webmaster Tools, and Google Analytics been set to communicate the service area?
- Is there proper language alternatives for content, or opportunities to build those that are not being used?
- Has a Google My Business and Bing Business page been set up and look great?
- Are they set up with the BBB? (Most important for local)
- Do they have an off-site presence on all niche industry pages, especially the ones where competitors exist?
- Is the content duplicated or plagiarized on other sites?
- Does the site have a lot of spammy inbound links?
- Is horizontal scrolling necessary to see the content?
- Are tap targets super close to one another?
- Are icon sets and link lists translating well from desktop to mobile?
- Is there any awkward spacing?
- Does the site use justified text? How disruptive is it to the mobile UX experience?
- Is the hamburger menu persistent, or do you just leave it at the top when you scroll down?
- Do all forms convert well for mobile keypads (number keypad for phone numbers, email keypad for email)?
- Does the site have a favicon?
- Are bulleted and numbered lists formatted for both the website and the blog in the CSS?
- Is the copyright date in the footer the correct year?