Why it comes firstA pitch that opens with "your profile is toxic" and a fix for sale has to be checked against your own data. Your audit is the second opinion.
The runbook
- 1
Export from Search Console
Open Links, then Top linking sites, and export. This is Google's own report, though it shows samples rather than every link.
- 2
Cross-check in a link index
Run the same domain through Ahrefs, Semrush, Majestic or Moz. Differences between tools are normal, because each crawls differently.
- 3
Group by pattern
Mark each linking site as editorial, directory, forum, network or unknown. A spreadsheet with five columns is enough.
- 4
Flag the odd ones
Look for dozens of links from one unrelated site, sudden spikes, or anchors that repeat your keyword word for word.
- 5
Decide, then act
Most sites need no disavow. Google says its systems mostly ignore links they do not trust, so a disavow is for clear cases only.
What each source gives you
| Source | Cost | Good for | Blind spot |
|---|
| Search Console | Free | Google's view of your own site | Samples, not a full list |
|---|
| Ahrefs | Paid | Wide link index and competitor views | Own estimates, not Google's |
|---|
| Semrush | Paid | Backlink audit and toxicity flags | Flags are heuristics |
|---|
| Majestic | Paid | Link history and trust metrics | Metrics are its own |
|---|
| Moz | Free and paid | Domain Authority checks | DA is not a Google metric |
|---|
A word on link intersect tools
A link intersect tool lists sites that link to your rivals but not to you. It is the one report where a paid index earns its fee.
Run it against three competitors you respect. If a site links to all three, that is a place worth a closer look, and you can see the row on the marketplace list if it is there.
Do not treat the output as a shopping list. It shows where links exist, not whether they helped.
What a worrying result looks like
Most audits find nothing alarming. A few odd links from forgotten directories are normal for any site older than a couple of years.
What should worry you is a pattern: hundreds of links from unrelated domains in the same week, or a single anchor repeated across dozens of sites. After the December 2022 link spam update, Google's automated systems discount a lot of this, so the bigger risk is wasted money on a fix rather than a penalty.
If someone sells you a rescue package, ask for the list of links they want removed. A real problem comes with real URLs.
Compare that list with your own export. No match? Then you have just saved the cost of the package. See the pyramid teardown for the sales side.
Audit questions, quickly
- How much does a link audit cost?
- Doing it yourself costs only time, since Search Console is free. Paid tools such as Ahrefs or Semrush charge subscriptions, and agencies quote their own fees. Be wary of an expensive audit that ends with a bigger purchase from the same seller.
- How often should I audit?
- A light check every quarter is plenty for most sites. After any bulk purchase, recheck a few weeks later to confirm the links went live and look as you expected. See the scorecard for the seller side.
- Do I need to disavow?
- Rarely. Google has said it handles most poor links automatically, so use disavow only when you have a manual action or clear evidence of a link scheme against your site. Otherwise the hours are better spent elsewhere.