Sellers can dress up a P&L. They can inflate Google Analytics with paid traffic. What they can't fake is a live Google Search Console property. It's the closest thing to a lie detector in online business acquisitions — and most buyers still accept screenshots instead of access.
Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.
This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.
I have walked away from more deals because of Google Search Console than because of financials. The financials usually look fine — that's the whole point of a listing. The seller has had months to organize the P&L, clean up the expense categories, and present twelve months of revenue in the friendliest possible light. What they can't reorganize is the last 24 months of search performance data sitting inside Google's own servers.
Search Console is free, it belongs to Google, and it records what actually happened: how many times each page appeared in search results, how many people clicked, what position the site held, and whether Google has taken manual action against the property. If you're buying anything that depends on organic search — a content site, an affiliate portfolio, an ecommerce store with category-page rankings, even a SaaS product with a big blog funnel — GSC access should be a non-negotiable condition before you sign an LOI.
This post walks through exactly what to look for, in what order, and which patterns should make you either renegotiate or walk. At Deal Alert AI we run traffic-pattern analysis on marketplace listings before they ever hit a user's inbox, and the majority of what we flag comes from search-visibility signals — not from the spreadsheets.
Most buyers start with Google Analytics. That's a mistake — not because Analytics is useless, but because it's the easiest data source to manipulate. Analytics tracks whatever the site owner installs it to track. A seller can run a small paid campaign in month nine and ten to lift the trailing-twelve-month average. They can filter out internal traffic, or fail to. They can send bot traffic through a proxy. They can even hand you a fresh property that only has six months of history and claim the older one was lost in a migration.
Search Console is different because Google populates it, not the site owner. The seller can't add impressions. They can't invent an average position. If the site ranked #3 for "best budget espresso machine" in March 2023 and #41 today, that decline is permanently recorded, and no amount of storytelling in the listing copy changes it. That asymmetry — seller-controlled data versus platform-controlled data — is the core reason GSC sits at the top of my diligence stack.
There's a second reason: GSC tells you about the future, not just the past. Revenue tells you what the site earned. Search Console tells you whether the rankings producing that revenue are stable, rising, or quietly eroding. I have reviewed sites where revenue was flat year over year and the owner presented that as stability — while impressions had fallen 38% and the site was only holding revenue because affiliate commission rates had increased. That business was a melting ice cube dressed as a steady earner.
We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.
Search Console has grown into a sprawling tool with a dozen reports, most of which you can ignore during a two-week diligence window. Four of them carry almost all the signal.
Performance → Queries. This is the heart of it. Set the date range to the full 16 months GSC retains (or pull the export if the seller has been archiving longer), then sort by clicks. You get every search term the site ranks for, with impressions, clicks, click-through rate, and average position. This single table tells you what the business actually is. I've seen listings marketed as "personal finance authority site" where 70% of clicks came from three queries about one specific tax form. That's not an authority site. That's a single-page business with a blog attached.
Performance → Pages. Same data, sliced by URL. You want to know how many pages carry meaningful traffic. A 400-page site where 12 pages produce 85% of clicks has a very different risk profile than one where the top 12 pages produce 30%. The concentrated site is cheaper to maintain but catastrophically exposed to a single ranking loss. The distributed site is more resilient but usually costs more to keep updated.
Indexing → Pages (Coverage). This report shows which URLs Google has indexed and which it has excluded, with reasons. Occasional exclusions are normal — paginated archives, tag pages, redirected URLs. What isn't normal is hundreds of pages sitting in "Crawled – currently not indexed" or "Discovered – currently not indexed." That pattern usually means Google has evaluated the content and decided it isn't worth including, which is a quality signal you should take seriously.
Security & Manual Actions. Two tabs, thirty seconds to check, and they can end a deal instantly. A manual action means a human at Google reviewed the site and applied a penalty — unnatural links, thin content, cloaking, user-generated spam. Some are recoverable. All of them require disclosure, and a seller who didn't mention one has told you everything you need to know about the rest of their representations.
Nearly every listing presents twelve months of data. Twelve months is the industry convention because it's what valuation multiples are built on. It's also, conveniently, long enough to look substantial and short enough to hide a decline that started thirteen months ago.
Ask for 24 months. GSC's interface caps at roughly 16 months, but sellers who take their business seriously export data monthly, and many marketplace brokers keep longer histories on file. If a site peaked in early 2023, dropped 40% after a core update, and has since stabilized at the lower level, the trailing twelve months will look beautifully flat. You'd be buying a post-penalty asset at a pre-penalty-looking multiple.
When you plot the trend, look at three things: the direction of the impression line, the direction of the click line, and the gap between them. Impressions rising while clicks stay flat means the site is gaining visibility on low-intent terms — often a sign of content bloat, not growth. Clicks rising while impressions fall means the site is losing breadth but improving CTR, which can happen after a title-tag optimization push and is usually not repeatable. What you want is both lines moving up together, or both holding steady with normal seasonal variation.
Seasonality deserves its own pass. A site about tax software should crater every June and spike every March. A site about patio furniture should peak in spring. If you're looking at a single twelve-month window, you cannot separate seasonality from decline — you need at least two full cycles to see whether this year's peak was higher or lower than last year's.
Once you have the query table, calculate two numbers. First: what percentage of total clicks come from the top five queries? Second: what percentage come from branded queries — searches containing the site's name or a variation of it?
On concentration, my rough working thresholds are these. Under 20% from the top five queries is well-diversified. Between 20% and 40% is normal for most niche sites and acceptable if the top queries are stable and defensible. Above 50% is a concentration risk you must price in — a single algorithm shift or a competitor outranking you on one term can cut the business in half. I don't refuse those deals, but I underwrite them at a materially lower multiple and I want to see the ranking held for at least eighteen months.
Branded traffic is the subtler trap. If someone searches your site's name directly and clicks through, that's brand equity — genuinely valuable, but only if the brand transfers cleanly and you intend to keep operating it identically. When more than 40–50% of clicks are branded, you're not buying search rankings, you're buying a name recognition asset. That's a completely different business and it's usually worth less to a buyer than the seller thinks, because branded search often follows the founder's personal presence, their email list, their YouTube channel, or their social following — none of which may be included in the sale.
Some patterns are worth a price negotiation. Others are worth walking away. Here's how I sort them.
A sudden 30–60% drop in a single month with no recovery. Cross-reference the date against known Google core update rollouts. If the drop aligns with a core update and traffic never came back, the site has been algorithmically re-evaluated and found wanting. Recovery from that state is possible but typically takes 6–18 months of substantial content work with no guarantee. If the drop aligns with a site migration, a hosting change, or a redesign, it may be technically fixable — but the seller should be able to explain it in detail, and you should verify the explanation independently.
Coverage errors across hundreds of pages. Server errors (5xx) at scale suggest infrastructure problems. Soft 404s at scale suggest thin or duplicate content. "Crawled – currently not indexed" at scale suggests Google has quality concerns. Any of these means additional work post-acquisition, and the cost of that work should come out of the purchase price.
Any entry in the Manual Actions tab. Even a resolved one. Ask for the full history, the reconsideration request, and Google's response. A site with a past manual action carries elevated risk of future scrutiny.
High impressions with a collapsed CTR. A page with 80,000 monthly impressions and a 0.4% CTR at average position 8 isn't a broken title tag — it usually means the page ranks below an AI Overview, a featured snippet, or a stack of ads that absorb the clicks. That's structural, not fixable with a better headline, and it's an increasingly common pattern as Google's SERP layout changes.
Work through this in order. It takes about 90 minutes for a mid-sized content site and it will catch the majority of traffic-related deal problems before you've spent money on legal or accounting review.
Finding a problem isn't the same as walking away. Most sites have something in the data that isn't perfect, and a buyer who demands perfection will never buy anything. The skill is converting findings into either a price adjustment or a deal structure that shifts risk back to the seller.
If you find high query concentration, ask for an earnout or a holdback tied to trailing traffic. A structure I've used: 80% at close, 20% held for six months and released only if organic clicks stay within 15% of the pre-close trailing average. That costs the seller nothing if they've represented the business honestly, and it costs you nothing if they haven't. Sellers who genuinely believe in their traffic stability tend to accept it. Sellers who don't will fight it hard, which is itself useful information.
If you find a post-core-update plateau — traffic dropped, stabilized, and has held for 12+ months — that's often a buying opportunity rather than a reason to run. The multiple should reflect the current, lower earnings, not the historical peak, and you should confirm the seller isn't anchoring their asking price to the pre-drop numbers. I've bought two sites in exactly this condition at 28x and 31x monthly, both of which would have listed at 40x+ before their drops.
If you find coverage errors or Core Web Vitals problems, get a quote from a technical SEO contractor and deduct it from the offer. Concrete, documented remediation costs are the easiest thing in the world to negotiate because the seller can verify the number themselves. Vague concerns about "quality issues" get dismissed. A $4,200 quote to fix 340 soft-404 pages gets taken seriously.
Search Console diligence sits at a specific point in the process, and doing it too early or too late both waste time. Too early and you're asking a seller for sensitive access before you've demonstrated you're a serious buyer — most will decline. Too late and you've already spent money on legal review for a deal that was never going to close.
The right sequence looks like this. First, screen listings and shortlist based on public information — niche, revenue, multiple, monetization mix. Second, sign the NDA and review the prospectus, financials, and any traffic summaries the broker provides. Third, if the numbers still work, request live GSC and Analytics access as a condition of moving toward an LOI. Fourth, run the checklist above. Fifth, if it's clean, submit the LOI and move to financial and legal diligence with confidence that the traffic underneath the revenue is real.
Marketplace choice matters here too. On Empire Flippers, traffic verification is part of their vetting process, and their listings typically include GSC-derived data in the prospectus — which raises the baseline but doesn't remove your obligation to check the raw property yourself. On Flippa, the range is much wider: you'll find excellent verified listings alongside sellers who've never opened Search Console. That variance is where the bargains live, but only if you're disciplined about verification.
This is exactly the gap Deal Alert AI was built to close. We monitor listings across the major marketplaces and run pattern analysis on the traffic signals that are publicly observable, flagging properties with stable, diversified, non-branded search profiles and deprioritizing the ones showing the decline signatures described above. It doesn't replace your own GSC review — nothing does — but it means the deals reaching your inbox have already survived a first filter.
Search Console access is the cheapest insurance in this entire asset class. It costs you nothing, takes ninety minutes to review, and it catches the failure mode that destroys more acquisitions than any other: buying a business whose traffic was already in decline at the moment of purchase.
Make it a hard requirement. Put it in your standard diligence request list alongside bank statements and merchant processor reports. Frame it neutrally — "I'll need delegated GSC access as part of standard diligence, same as I'd ask of any seller" — so it doesn't read as an accusation. Serious sellers grant it within a day. The ones who stall, offer screenshots instead, or claim they "lost access after the migration" have narrowed your decision considerably.
And once you own the property, keep the discipline. Set up your own Search Console monitoring on day one, export monthly, and track impressions as your primary health metric rather than revenue. The buyers who compound successfully in this space aren't the ones who find the cleverest deals — they're the ones who notice a problem four months before it shows up in the bank account. If you want a steady flow of pre-screened opportunities to practice on, that's what we do at Deal Alert AI every day.
By Sophal Lanh, Founder of Deal Alert AI
We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.