A few weeks ago, I audited a legacy retail website here in Louisville. The site had been running for years on an outdated CMS stitched together with a third-party integration. Two separate systems, layered on top of each other, held together with duct tape and good intentions. By the time I was done, I had documented 28 distinct issues and 42 specific action items to fix them.
The business owner had no idea most of those problems existed. The site looked fine on her laptop. Customers could still place orders. Nothing was visibly on fire. But under the hood, it was a different story. Broken links, missing security headers, pages that took 8 seconds to load on mobile, duplicate content confusing Google, and an SSL certificate that was about to expire.
That is what a website audit is for. It is the difference between thinking your site is fine and knowing for certain.
What Is a Website Audit, Exactly?
A website audit is a systematic review of your entire website. Not a quick glance. Not "it looks okay to me." It is a structured, methodical examination of every layer of your site: the code underneath, the content on the pages, how search engines see it, how fast it loads, and whether it is secure.
Think of it like a home inspection before you buy a house. The house might look great from the street. Nice paint, clean yard, decent curb appeal. But an inspector crawls through the attic, checks the foundation, tests the electrical, runs the plumbing. They find the stuff you cannot see from the driveway.
A site audit does the same thing for your website. And just like a home inspection, the findings usually surprise people.
In plain terms: A website audit answers one question: "Is my website actually working the way it should?" Not just "does it load," but is it fast enough, secure enough, visible enough to Google, and effective enough at turning visitors into customers?
The Five Areas a Website Audit Covers
Every audit I run covers five categories. Some auditors lump things together differently, but these are the areas that matter for small business websites in Louisville and across Kentucky.
1. Technical Health
This is the foundation. Technical health covers everything happening under the hood of your site:
- Broken links that send visitors to error pages
- Code errors in the HTML, CSS, or JavaScript
- Mobile responsiveness and whether the site works properly on phones and tablets
- Crawl errors that prevent Google from indexing your pages
- Redirect chains where one URL bounces through three others before landing somewhere
- Missing or misconfigured sitemaps and robots.txt files
On that retail site I mentioned, the technical audit alone turned up 11 issues. There were redirect loops, orphaned pages that no menu linked to, and a sitemap that referenced URLs that had not existed in two years. None of that was visible to someone just browsing the site. But Google saw all of it, and Google was not impressed.
2. SEO (Search Engine Optimization)
This is where I look at how your site appears to search engines. The SEO portion of a website audit checklist typically includes:
- Page titles and meta descriptions on every page
- Heading structure (H1, H2, H3 tags used correctly)
- Keyword usage and whether your pages target the right search terms
- Duplicate content across pages
- Image alt text for accessibility and SEO
- Internal linking between your own pages
- Schema markup that helps Google understand your business
Most small business websites I audit in Louisville have SEO problems they do not know about. The most common one: every page has the same generic title tag, usually just the business name. That tells Google nothing about what each page is actually about. It is like labeling every folder in your filing cabinet with the same word.
3. Performance
Performance is about speed. How fast does your site load? Not on your office Wi-Fi, but on a phone using cellular data while someone is sitting in traffic on I-64.
- Page load time on desktop and mobile
- Core Web Vitals (Google's specific performance metrics)
- Image optimization and whether images are properly compressed
- Server response time
- Render-blocking resources that slow down the initial page display
That legacy retail site? The homepage took 8.2 seconds to load on a mobile connection. The product pages were even slower because they loaded full-resolution images that were 4,000 pixels wide, being squeezed down to 300-pixel thumbnails. The browser was downloading massive files and then shrinking them. All that wasted bandwidth, all that wasted time.
Google has made it clear that site speed is a ranking factor. Slow sites get pushed down in search results. And visitors do not wait around. If your site takes more than 3 seconds to load, more than half of mobile users will leave before they see a single word.
4. Content
Content is not just about whether your pages have words on them. A content audit looks at:
- Accuracy of business information (hours, phone number, address, services)
- Clarity of messaging (can a visitor tell what you do in 5 seconds?)
- Calls to action on every page
- Thin pages with barely any content
- Outdated information (old promotions, former staff, discontinued services)
- Missing pages that should exist (About, Contact, individual service pages)
I find content problems on almost every site audit for small business clients. The most common: a services page that lists six things the business does but gives zero detail about any of them. Just a bullet list with no explanation, no pricing context, no reason for a visitor to pick up the phone. That is a missed opportunity on every single visit.
5. Security
Security is the area most business owners overlook completely until something goes wrong. A security audit checks:
- SSL certificate status and configuration
- Software versions (CMS, plugins, server software)
- Known vulnerabilities in the platform or its components
- Form security and spam protection
- Backup status and disaster recovery readiness
- Security headers that protect against common attacks
On the retail audit, I found that the server software was running a version that had been end-of-life for years. No more security patches. No more updates. It was the digital equivalent of leaving your store unlocked overnight and hoping for the best. The business owner had no idea because the site still worked, and nobody had told her the software underneath it was no longer supported.
Why it matters: A hacked website does not just go down. It can redirect your customers to spam sites, get your domain blacklisted by Google, leak customer data, and destroy the trust you have spent years building. Fixing a hack is always more expensive than preventing one.
Not Sure Where Your Website Stands?
I offer a Website Rescue diagnostic for $150. I will audit your site and give you a clear, prioritized action plan. That $150 gets applied to any work we do together.
Call/Text (502) 305-4043What a Website Audit Looks Like in Practice
I want to walk you through what actually happens during an audit, because I think a lot of people picture someone glancing at a website for 15 minutes and typing up a few notes. That is not what this is.
When I audit a site, I use a combination of professional tools and manual review. The tools catch the technical stuff: broken links, missing tags, speed measurements, security scans. But the manual review is where the real insights come from. I am clicking through every page, testing every form, reading every paragraph, checking every link. I am looking at the site the way a customer would, the way Google would, and the way a developer would.
For that retail client, here is roughly how the process went:
- Technical crawl: I ran automated tools to scan every URL on the site. This mapped out the full site structure and flagged broken links, redirect issues, missing metadata, and crawl errors.
- Performance testing: I tested page load speed on both desktop and mobile, identified the heaviest resources, and measured Core Web Vitals.
- SEO analysis: I reviewed every page title, meta description, heading structure, and internal link. I checked how the site appeared in Google search results and whether important pages were being indexed.
- Content review: I read through every page looking for outdated information, missing calls to action, thin content, and messaging gaps.
- Security scan: I checked software versions, SSL configuration, security headers, and known vulnerabilities.
- Documentation: I compiled everything into a prioritized report. Critical issues first, then high priority, then medium, then nice-to-haves.
The final deliverable was a document with 28 issues and 42 action items, organized by priority. The business owner could see exactly what was wrong, why it mattered, and what needed to happen to fix it. No vague recommendations. No "you should improve your SEO." Specific, actionable items with clear explanations.
Why Businesses With Existing Websites Need Audits
Here is the thing that catches people off guard: you do not need an audit because your website is bad. You need an audit because your website is old enough to have accumulated problems you cannot see.
Websites are not static objects. They exist in an environment that is constantly changing. Google updates its algorithm multiple times a year. Browser standards evolve. Security threats emerge. Mobile usage patterns shift. What was a perfectly good website three years ago might be falling behind today without anyone noticing.
I work with a lot of Louisville retail businesses and contractors who built their websites years ago and have not touched them since. The sites still "work" in the sense that they load and display information. But they are slowly losing ground to competitors who have newer, faster, better-optimized sites.
A website audit for small business owners is not about finding reasons to spend money. It is about making informed decisions. Maybe your site is actually in decent shape and just needs a few tweaks. Maybe it has three critical issues that are costing you customers every day. You cannot know until you look.
A real example: I audited a site for a Louisville service business last year that was getting 400 visitors a month but only 2-3 calls. The audit found that the phone number was not clickable on mobile, the contact form was broken (sending submissions to a defunct email), and the homepage took 7 seconds to load. We fixed those three things. Within six weeks, their calls doubled. The problems were invisible to the owner but obvious to the audit.
The Website Audit Checklist (Simplified)
If you want to do a quick self-check before calling someone like me, here is a simplified website audit checklist you can run through in about 15 minutes:
- Load your site on your phone. Does everything look right? Can you read the text without zooming? Can you tap buttons easily?
- Tap your phone number. Does it actually call you? Or is it just text that does nothing?
- Submit your own contact form. Do you actually receive the message?
- Check your page speed. Go to Google PageSpeed Insights and enter your URL. A score below 50 on mobile means you have a problem.
- Google your business name. Does your site show up first? Does the preview text look right?
- Google your main service + "Louisville." Are you on page 1?
- Look at every page. Is the information current? Are there any dead links?
- Check the URL bar. Do you see a padlock icon? If not, your SSL is missing or broken.
If you found problems with even two or three of those items, a professional audit will almost certainly find more. Those are just the surface-level checks. The deeper technical, SEO, and security issues require tools and experience to uncover.
When Should You Get a Website Audit?
There are a few situations where a site audit is especially valuable:
Your website is more than 2-3 years old. Technology moves fast. A site built in 2023 may already have performance and security gaps compared to current standards.
You are getting traffic but not leads. If people are finding your site but not calling or filling out forms, something in the user experience or content is broken. An audit will tell you what. I wrote more about this specific problem in my article on why your website is not getting you calls.
You are planning a redesign. Before you spend money rebuilding, an audit tells you exactly what needs to change. It prevents you from carrying old problems into a new design.
You just switched web providers. If someone else built or managed your site and you are taking over (or handing it to someone new), an audit establishes a baseline. You will know exactly what you are working with.
You noticed a drop in traffic or rankings. If your Google traffic has declined and you are not sure why, an audit can pinpoint technical or SEO issues that may be the cause.
For professional service businesses in Louisville and across Kentucky, I recommend an audit at least once a year. For businesses that depend heavily on their website for leads, twice a year is better.
What Happens After an Audit?
An audit is a diagnostic tool. It tells you what is wrong and what to do about it. What happens next depends on what it finds.
Sometimes the fixes are small. Update a few page titles, compress some images, fix a broken form, renew an SSL certificate. An afternoon of work and you are in much better shape.
Sometimes the findings point to bigger structural problems. The site is built on outdated technology. The platform is no longer supported. The code is so tangled that fixing one thing breaks two others. In those cases, it often makes more sense to rebuild than to repair. I have seen this happen with sites built on older platforms, and the audit made the decision clear and defensible.
Either way, you are making the decision with real information instead of guessing. That is the value. You stop wondering "is my website okay?" and you start knowing exactly where you stand and what to do about it.
For my clients, I typically present the audit results as a prioritized list. Critical issues that are actively hurting your business go at the top. Nice-to-have improvements go at the bottom. You can tackle everything at once, or work through the list over time. It is your roadmap.
Frequently Asked Questions
What does a website audit include?
A thorough website audit covers five areas: technical health (broken links, code errors, mobile responsiveness), SEO (page titles, meta descriptions, keyword targeting), performance (load speed, image optimization), content (accuracy, messaging, calls to action), and security (SSL, software updates, vulnerabilities). The end result is a prioritized list of issues with specific action items.
How much does a website audit cost for a small business?
Depending on the size and complexity of the site, a professional audit runs between $150 and $500. I offer a Website Rescue diagnostic for $150 that covers all five audit areas and includes a clear action plan. That $150 gets applied to any follow-up work, so you are not paying twice. For a full site build, I start at $950 one-time with $150/month for hosting and maintenance.
How often should I audit my website?
At minimum, once a year. If your website is a primary source of leads or revenue, every six months is better. You should also audit after any major change: a redesign, a platform migration, or a significant content overhaul. Regular audits catch small problems before they snowball. I see too many Louisville businesses wait until something breaks before they look under the hood.
Can I do a website audit myself?
You can check the basics. Use Google PageSpeed Insights for speed, Google Search Console for indexing issues, and just browse your own site on your phone to catch obvious problems. But a professional audit digs into code quality, server configuration, security vulnerabilities, and SEO structure that requires technical expertise and specialized tools. The signs that your site needs attention are often invisible without a trained eye.
