Law Firm SEO Audit: The Free 2026 Checklist

How to run a law firm SEO audit (and what 200+ checks actually means)

A real audit is not a "grade" — it is a long list of binary questions, each answerable with pass or fail. "Is every practice-area page indexed?" Pass or fail. "Does your Google Business Profile category match your highest-value practice area?" Pass or fail. When a vendor says their audit runs 200+ checks, that's what they mean: two hundred specific yes/no questions, grouped into themes, each tied to something you can actually fix. Be suspicious of any audit that returns a single letter grade with no underlying list — a grade tells you that something is wrong, not what, and you can't bill a paralegal to fix "C+."

Generic website audit tools run maybe 30 of those checks, and almost none of them are legal-specific. They will catch a missing title tag; they will not notice that your firm has zero presence on the state bar directory, that your review responses accidentally confirm attorney-client relationships, or that ChatGPT recommends three of your competitors by name and not you. A law firm SEO audit has to cover the surfaces where legal clients actually decide — the local pack, the review profile, the AI answer — not just the classic blue links.

You have two ways to run it. The manual route is the rest of this page: six checklists, free tools, and roughly four to six honest hours with a spreadsheet, recording pass/fail and a severity note for each item. The automated route is running the free CaseGap audit, which executes the same six engines against your URL in about 60 seconds and attaches a dollar figure to what's failing. My honest recommendation: do the manual version at least once, because it teaches you what each lever does — then automate the re-checks, because nobody re-runs a six-hour audit every month, and an audit you run once is a snapshot, not a system.

Engine 1 — Search visibility: rankings, keywords, and indexing

Most managing partners I've audited could not tell me what their firm ranked for. They knew they "did SEO" — there was an invoice every month — but nobody had looked at actual positions for actual money keywords in over a year. Search visibility is the first engine because it's the one everyone assumes is fine. It usually isn't. The two most common failures I found, across dozens of firms: practice-area pages that Google never indexed (often because a site builder quietly set them to noindex), and a blog with forty posts and zero impressions because every post targeted keywords nobody searches.

The tools here are free. Google Search Console shows you exactly which queries your site appears for, at what position, and which pages Google has refused to index — and the number of firms paying for SEO without a verified Search Console property is genuinely shocking. For rankings, search your money terms ("[practice area] lawyer [city]") in that incognito window and record where you actually appear: ads, local pack, and organic are three separate answers. Track positions monthly in the same spreadsheet; a single check tells you where you are, the trend tells you whether anything you're paying for is working. For deeper strategy on what to do with these findings, see the full law firm SEO guide for 2026.

• Google Search Console verified, with at least 90 days of data flowing
• Every practice-area page indexed — confirm each with the URL Inspection tool
• No accidental noindex tags or robots.txt blocks on money pages
• XML sitemap submitted to Search Console with zero errors
• You rank #1 for your own firm name (if not, something is badly wrong)
• Position recorded for "[practice area] lawyer [city]" for every practice area you want cases in
• Title tags unique on every page, each including practice area + city
• Meta descriptions present, 120–160 characters, written for clicks not keywords
• Exactly one H1 per page, matching what a searcher actually typed
• No two pages targeting the same keyword (cannibalization — common with old blogs)
• A dedicated page exists for every practice area you advertise
• Location pages exist for each suburb or neighboring city you serve
• Blog posts target real client questions, not firm news nobody searches
• Click and impression trend over the past 6 months is flat or up, not down
• No redirect chains or 404s on pages that used to rank (check Search Console's page report)

Engine 2 — Local presence: Google Business Profile, citations, and NAP

For most consumer practice areas — personal injury, family, criminal defense, estate planning — the local pack is where cases actually come from. Three map listings sit above every organic result, and mobile users overwhelmingly tap one of them. Yet the typical pattern I found auditing firms was a Google Business Profile claimed in 2019 and untouched since: no posts, half-empty services list, a primary category of "Lawyer" instead of the specific practice area, and photos consisting of one logo upload. Your GBP is the single highest-leverage marketing asset your firm owns, and it's free. Treat the checklist below as non-negotiable.

The second half of this engine is citation hygiene. Google cross-references your firm's name, address, and phone number (NAP) across the web, and inconsistencies — an old suite number on Yelp, a tracking phone number on FindLaw, "& Associates" present on some listings and absent on others — quietly erode local rankings. Start with Google's own business profile guidelines so you know what's allowed (keyword-stuffing your business name, for instance, is not, however many competitors get away with it). Then verify the legal-specific citations: Avvo, Justia, FindLaw, and your state bar directory matter more for law firms than the generic aggregators. The full playbook lives in my law firm local SEO guide; the audit checks are below.

• GBP claimed, verified, and accessible (you'd be surprised who's lost the login)
• Primary category matches your highest-value practice area exactly — "Personal Injury Attorney," not "Lawyer"
• Secondary categories added for every other practice area you want cases in
• Business name on GBP matches your website and letterhead — no added keywords
• NAP on GBP exactly matches your website footer, character for character
• Hours accurate, including holiday hours and whether "open 24 hours" reflects a real answering service
• Services section filled out with descriptions for every practice area
• At least 10 real photos — office, team, building exterior — with something uploaded in the last 90 days
• A Google Post published within the last 30 days
• The Q&A section seeded with real client questions, answered by you (anyone can answer otherwise)
• Website link points to a relevant landing page, not a generic homepage for multi-office firms
• No duplicate GBP listings for the same office (a former associate's leftover listing counts)
• Each physical office has its own complete profile
• NAP consistent across Avvo, Justia, FindLaw, Yelp, BBB, and your state bar directory
• Old addresses from any office move corrected everywhere, not just on Google

Engine 3 — Reviews and reputation

Reviews are simultaneously a local ranking factor and the single biggest conversion factor in legal. Prospects don't read your beautifully written practice-area page and then call; they read your reviews and then call. In every metro I've checked, the firms holding the local pack have meaningfully more reviews than the firms below them — and the gap is rarely about service quality. It's about process. The winning firms ask every satisfied client for a review at the moment the matter closes, with a direct link, as a standard step in their closing checklist. The losing firms feel awkward asking and hope reviews happen. Hope is not a velocity strategy.

There's also a trap here that only exists for lawyers. Responding to reviews is good practice — but a response like "We were glad to help with your custody case, Sarah" just publicly confirmed an attorney-client relationship and disclosed the matter type, implicating your duty of confidentiality under ABA Model Rule 1.6. The safe pattern is to respond warmly without confirming representation: thank the reviewer, speak about the firm's standards generally, and take any dispute offline. Negative reviews deserve the same calm treatment — a defensive lawyer arguing with a one-star review converts worse than the one-star review itself. My law firm reviews guide covers response templates; the audit items are below.

• Review count within striking distance of the top 3 firms in your local pack (check theirs first)
• Average rating 4.6 or higher — below 4.5, volume stops helping and starts advertising a problem
• At least 2 new reviews per month for the last 3 months (velocity matters more than total)
• Most recent review is under 30 days old
• Every review — positive and negative — has an owner response
• No response confirms an attorney-client relationship or mentions matter details
• Negative reviews answered within 48 hours, calmly, with an offer to take it offline
• No review gating (filtering who gets asked based on predicted sentiment violates Google policy)
• No incentivized or purchased reviews anywhere in the profile's history
• A review-request step exists in your matter-closing workflow, with a direct review link
• Reviews exist on Avvo and Yelp too, not exclusively Google
• Staff and family reviews removed or never solicited — they're detectable and they erode trust

Engine 4 — AI visibility: ChatGPT, Perplexity, and AI Overviews

This is the engine almost no audit checklist covers, and it's the one that will matter most by the time you re-run this audit next year. A growing share of potential clients now ask ChatGPT or Perplexity "who is the best family lawyer in Denver" or "do I need a lawyer for a first DUI in Ohio" — and the AI answers with specific firm names. When I started testing this systematically, the results were stark: in most metros, the same three or four firms get recommended over and over, and the firms being recommended usually have no idea it's happening. Neither do the firms being skipped. Nobody is looking at this surface, which is exactly why it's worth auditing now.

Testing it manually is tedious but simple: write down the ten questions a prospective client in your practice area would actually ask, then put each one to ChatGPT, Perplexity, and Google's AI Overviews from a clean session, and record whether your firm is named or cited. Then check the supply side — whether AI systems can even read you. If your robots.txt blocks GPTBot or PerplexityBot (some security plugins do this silently), you've opted out of the answer. AI engines favor pages that answer one question completely and state firm facts plainly: founding year, attorney names, bar admissions, practice areas, in crawlable text rather than images. I go deep on the mechanics in the law firm AI visibility guide; the checks are below.

• Ask ChatGPT "best [practice area] lawyer in [city]" — is your firm named?
• Repeat the same query on Perplexity and in Google's AI Overviews
• Run 5–10 client-style questions ("how much does a DUI lawyer cost in [city]") and record every firm cited
• robots.txt does not block GPTBot, ClaudeBot, or PerplexityBot unless that's a deliberate choice
• Firm facts — founding year, attorney count, practice areas — are stated consistently across your site and directories
• Each practice-area page answers its core question completely within the first 150 words
• FAQ sections exist on money pages, with real questions phrased the way clients ask them
• Attorney credentials appear as crawlable text, not embedded in images or PDFs
• Your firm appears in the legal directories AI systems lean on heavily: Avvo, Justia, FindLaw
• A repeatable monthly test exists: same 10 queries, same engines, citation rate recorded

Engine 5 — Technical UX: speed, mobile, schema, and security

Law firm websites are, as a category, heavy. Autoplay hero video, three tracking pixels, a chat widget, a pop-up offering a free consultation before the page has even painted — I've measured firm sites taking nine seconds to become usable on a phone. Your prospective client is often searching from a hallway outside a courtroom or the day after an arrest; a slow site doesn't get a second chance. Run every important page through PageSpeed Insights on the mobile setting, not desktop, and pay attention to the Core Web Vitals assessment: Largest Contentful Paint under 2.5 seconds is the line that matters.

The second half of this engine is structured data and basic trust signals. Schema markup is machine-readable labeling that tells Google and AI engines exactly what your pages are — and law firms have a purpose-built type in LegalService, plus FAQPage for question content and Person for attorney bios. Validate everything you add with Google's structured data documentation and Rich Results Test; one missing required field silently disqualifies the page from the rich result you were targeting. And on mobile, the only conversion element that truly matters is the phone number: it must be a one-tap tel: link, visible without scrolling. If your site fails much of this list, design is the real problem — my law firm website design guide covers the rebuild decision.

• Mobile LCP under 2.5 seconds on every money page (test in PageSpeed Insights, mobile tab)
• Cumulative Layout Shift under 0.1 — nothing jumps while the page loads
• Core Web Vitals passing on mobile, not just desktop
• HTTPS on every page, with no mixed-content warnings
• Phone number in the header is a tap-to-call tel: link on mobile
• Contact form has 4 fields or fewer — and you've test-submitted it this month
• Form submissions actually arrive (send a test; broken notification email is a silent killer)
• Chat widget loads after the page, not before it
• No full-screen popups on mobile entry
• LegalService or Attorney schema on the homepage and practice-area pages
• FAQPage schema on pages with question-and-answer content
• All schema validates with zero errors in the Rich Results Test
• Images compressed and served in modern formats (WebP/AVIF)
• Site is usable one-handed on a phone: readable text, tappable buttons, no horizontal scroll
• Browser console shows no JavaScript errors on key pages

Engine 6 — Authority: backlinks, directories, and attorney profiles

Authority is Google's answer to "why should I trust this site over the other forty law firm sites in this city?" — and for law firms it's built differently than for e-commerce or SaaS. Forget guest-post marketplaces. The links that move legal rankings come from bar associations, legal directories, law schools, local news, and community organizations: sources that are hard to fake and therefore heavily weighted. The audit question is simple and relative — how many quality referring domains do you have versus the firm outranking you? Any free backlink checker will give you both numbers in five minutes, and the gap is usually smaller and more closable than firms assume.

The overlooked half of this engine is what I call partner authority: your attorneys' individual profiles are off-site ranking assets, and at most firms they're abandoned. A claimed, completed Avvo profile; a current Justia listing; an accurate state bar directory entry; consistent bios and headshots everywhere — these citations feed both the local pack and AI engines, which lean on directory data when deciding which lawyers to recommend. They also build the expertise signals Google's quality guidelines explicitly reward in legal, a "your money or your life" category. An hour per attorney closes most of the gap; the checklist tells you where to spend it.

• Referring domain count compared against the top-ranking competitor (use any free backlink checker)
• No spam-link history — sudden spikes of foreign-language or casino links warrant a cleanup
• Avvo profile claimed and 100% complete for every attorney: photo, bio, practice areas, experience
• Justia profile current for the firm and each attorney
• FindLaw and Martindale listings accurate, or consciously skipped
• State bar directory entry current — correct firm name, address, and status for every attorney
• Local bar association membership listed in their online directory, linking to your site
• Each attorney's bio, headshot, and credentials consistent across every directory
• Law school alumni profiles or .edu mentions claimed where available
• At least one local press mention or expert quote in the past year (local reporters need legal sources — offer)
• Speaking engagements, CLE presentations, and published articles linked back to attorney bio pages
• Attorney bio pages on your own site link internally to relevant practice-area pages

Scoring your audit and choosing what to fix first

When the spreadsheet is full, resist the universal instinct to start with the easiest items. Score each engine as a simple pass rate — checks passed over checks run — and you'll typically see a shape, not uniform failure: search visibility at 70%, technical at 60%, reviews at 30%, AI visibility near zero. The order to fix things is not the order of difficulty and not the order of pass rates. It's the order of revenue impact, and that requires converting each failure into dollars, at least roughly.

Here's the model I built into CaseGap, in plain English: Missed Demand × Inquiry Rate × Consult Rate × Client Rate × Average Matter Value. Missed demand is the number of monthly searches and AI queries in your market that you currently don't capture — they happen, and a competitor absorbs them. Some fraction of captured demand contacts a firm (the inquiry rate — around 6% of website visitors is a defensible benchmark). Some fraction of inquiries book a consult, some fraction of consults sign, and each signed client is worth your average matter value. Run an example: 300 missed visits a month, a 6% inquiry rate, half of inquiries consulting, half of consults signing, at $5,000 a matter — that's roughly $22,000 a month walking past your door. The formula's power is comparative: a reviews-engine failure in a consumer practice area usually leaks more revenue than ten missing meta descriptions, and now you can prove it instead of guessing.

Two honest closing notes. First, the typical priority order this produces for consumer-facing firms is local presence and reviews first, technical conversion blockers second, content and authority third, AI visibility as the compounding long-term play — but your audit may disagree with the typical, which is the point of running it. Second, an audit is a snapshot; rankings drift, reviews age, competitors move, and the firms that win re-check monthly. If you'd rather not spend another afternoon in this spreadsheet every month, run the free automated audit — it executes all six engines against your firm's URL, benchmarks you against your actual local competitors, and hands you the dollar figure and the fix list in about a minute.