How to run an SEO health check on your own small business website

A proper SEO health check on a small business website takes about 30 minutes, costs nothing, and needs no technical background — just 3 free tools and a willingness to read 3 numbers honestly. The check answers the 3 questions that actually matter: is Google showing your site to anyone, is your ranking holding or decaying, and has Google indexed your pages at all. Run in that order, the checks tell you whether you have a problem and roughly which kind.

What the check cannot do is tell you why, fix anything, or show you the competitor outranking you. It is triage, not treatment — the treatment side lives in our small business SEO checklist. But triage is the step most owners skip, which is how a business ends up paying an agency to fix a "ranking problem" that was actually an indexing problem a free tool would have caught in 5 minutes.

The answer in detail

The sequence matters less than people think, but this order front-loads the highest-signal check and saves the quickest one for last.

Step 1 — read the Search Console Performance report (15 minutes)

Open Google Search Console, go to the Performance report, and set the date range to the last 3 months. Two numbers do almost all the work: total Impressions and Average Position.

Impressions count how often your site appeared in Google results, whether or not anyone clicked. If Impressions are flat over 12 weeks, you have a visibility problem — Google is not showing you to more people, and whatever you are publishing or changing is not expanding your reach. Flat is not neutral; for a business that wants to grow, flat is the finding.

Average Position is counterintuitive: lower is better, because position 1 is the top of the page. If the number is creeping up over the same 12 weeks — say from 8 to 14 — you have a ranking-decay problem. Pages that used to sit on page 1 are sliding to page 2, where, practically speaking, customers stop seeing them.

While you are there, click the Queries tab. It lists the actual searches your site appeared for. If your plumbing business is showing up for the name of your street and nothing else, that is a finding too — and a common one.

Step 2 — run PageSpeed Insights on your home page (10 minutes)

Go to PageSpeed Insights, enter your URL, and read the result in a specific order: mobile before desktop, field data before the lab score. Most of your customers are on phones, and Google ranks the mobile version of your site, so the desktop tab is mostly for morale.

Field data — the section headed "Discover what your real users are experiencing" — is built from measurements taken in real visitors' browsers over the previous 28 days. It only appears when a site has enough traffic, but when it is there, it outranks everything below it. A mediocre lab score with passing field data means real customers are fine. The reverse means they are not, however good the simulation looks.

If there is no field data, treat the mobile lab score as directional: under about 50 is worth acting on, 50 to 80 is normal small-business territory, and chasing the last 20 points is rarely worth your money.

Step 3 — check the indexed-page count (5 minutes)

Type site:yourdomain.com.au into Google. The result count is approximate, but it answers the most basic question in SEO: does Google know your pages exist?

3 readings:

• Zero results means Google has not indexed your site at all — this outranks every other finding on this page, because nothing else can work until it is fixed.
• A count far below your real page count (you have 40 pages, Google shows 6) means an indexing problem: pages exist but Google is not keeping them.
• A count far above (you have 40 pages, Google shows 400) usually means duplication — filtered views, tag pages, or printer-friendly versions multiplying behind your back.

Common variations

No Search Console set up yet

Search Console is free, but you do have to prove you own the site. The cleanest method is a Domain property: Google gives you a TXT record, and you (or whoever manages your domain) paste it into the DNS settings at your registrar. If DNS feels out of reach, the URL-prefix method accepts an HTML file upload or a meta tag instead, and every builder platform has a settings field for exactly this.

Either way it is a one-off, 10-minute job — and the good news is that Google has been collecting the data all along. Within a day or so of verifying, you will usually see months of Performance history, so you can run Step 1 properly on your first visit rather than waiting a quarter.

Your site is on Wix, Squarespace or a similar builder

The check is identical, but read the results with builder context. The platforms handle most of the technical plumbing — canonical tags, sitemaps, HTTPS — automatically, so a technical-basics failure is rare. PageSpeed lab scores on builder sites also tend to run low because of the platform's own scripts, which you cannot remove; weigh the field data more heavily, and accept that your real levers are the things you control: image sizes, fonts, embedded widgets, and how many apps or plugins you have switched on.

You have more than one location

Run Step 3 per location page, not just for the domain — each location page needs to be indexed individually to rank for its suburb. In Search Console, use the Performance report's page filter to compare locations; it is common for one to carry the others without anyone noticing. And for multi-location service businesses especially, the Google Business Profile often does more discovery work than the website itself — worth reading before you over-invest in location pages.

What the free tools would have said

Each of these 3 tools covers exactly 1 slice, which is the same pattern we describe for free security scanners. Search Console reports Google's view of your search presence and nothing about why it looks that way. PageSpeed Insights measures 1 page's speed and says nothing about whether that page is indexed. The site: operator counts indexed pages and says nothing about whether anyone searches for them. The official Google Search Console documentation is genuinely good on what each report means — and genuinely silent on how the reports relate to each other.

That correlation is the actual skill in this health check. Flat impressions could be a content problem, or it could be the indexing failure Step 3 catches, or the mobile speed problem Step 2 catches. No single tab can tell you which. Running all 3 in 1 sitting — rather than 1 tool whenever a worry strikes — is what turns 3 disconnected readings into a diagnosis.

The small-business-appropriate fix

First, some calibration from our own scanning data. The median Australian small business website scores 96/100 on Red Bridge Cyber's Visibility category — grade A+. Two in three sampled sites score A+. And 88% of Australian small business websites set a canonical tag — the biggest table-stakes Visibility signal.

Read that 2 ways. The table-stakes bar is high — most of your competitors pass the basics, so passing them yourself buys you parity, not advantage. But it also means a failing basic genuinely stands out: if your health check turns up an indexing failure or a missing fundamental, you are in the unusual minority, and fixing it is the rare SEO task with a fast, visible payoff. In priority order:

1. Fix indexing first. If site: returned zero or a fraction of your real pages, check your robots.txt is not blocking Google — genuinely rare (in the June 2026 edition, not a single sampled Australian small business website blocked crawl paths that should be open^*) but catastrophic when it happens. Then submit your sitemap in Search Console's Sitemaps section and use URL Inspection to request indexing for your most important pages. Nothing else on this list matters until this passes.

2. Treat flat impressions or decaying position as a content problem, not a technical one. The usual cause is pages that do not say, in plain customer language, what you do and where — which is what on-page SEO actually means once the jargon is removed. If the basics all pass and you still do not rank, the causes are usually plainer than agencies make them sound. Either way, set expectations honestly: content changes take weeks to months to show in the Performance report, so re-run Step 1 quarterly rather than daily.

3. Fix speed last, and only if the field data fails. Oversized images are the usual culprit on small business sites, followed by cheap shared hosting and heavy embedded widgets. Compress the images, question the widgets, and re-run PageSpeed Insights after each change so you know which one worked.

When this answer isn't enough

A 30-minute check has honest limits. It is a snapshot of your own site only — it sees no backlinks, no competitors, and nothing about whether your content deserves to rank. Some findings also warrant help rather than a longer evening:

Impressions falling off a cliff, not drifting flat — especially after a site rebuild, a domain change, or a new website going live. Sharp drops usually mean something structural broke in the migration, and the fix window matters.

A manual action or security message in Search Console. These are rare, always serious, and not a DIY situation. A hacked-site flag in particular will suppress rankings until it is cleaned and reviewed — and it is a security incident first, an SEO problem second. The Australian Cyber Security Centre's small business hub covers the surrounding hygiene — passwords, backups, updates — that determines whether you end up in this paragraph at all.

Hundreds of pages or an online store. Indexing and duplication problems scale with page count, and the site: operator's approximate count stops being useful. That tier needs proper crawl tooling.

Everything passes and you are still invisible. If all 3 checks come back clean, the problem is competition or content, and the next step is not more diagnostics — it is working through the full checklist, starting with your Google Business Profile.