Google rankings look like an asset until you realize they're a rental agreement with a landlord who changes the terms four times a year. Most buyers verify revenue and skip the traffic that produces it. This is the SEO due diligence process I run on every listing before I let a number leave my mouth.
Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.
This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.
I have watched buyers spend three weeks arguing over a $4,000 inventory adjustment on a $280,000 ecommerce deal and spend forty minutes total on the question of whether Google will still send that store traffic in nine months. That is backwards. The inventory number is knowable and small. The traffic question is unknowable, large, and determines whether the entire purchase price was rational.
If organic search is a meaningful traffic source for the business you are evaluating — and for most content sites, most niche ecommerce stores, and a surprising number of SaaS products, it is — then SEO due diligence is not optional. It is the single highest-leverage verification work you can do. Revenue verification tells you what happened. SEO due diligence tells you whether it keeps happening.
This post covers the four-part framework I use, the specific tools and exports you need, and how to translate every finding into a defensible price adjustment. It is not theoretical. Every step here comes from deals I have looked at, passed on, or bought.
A business sitting on page one for high-intent commercial keywords is genuinely more valuable than a business generating identical revenue from paid ads or social media. The traffic is free at the margin. It compounds. It does not require a media buyer, a content calendar, or a creator who might leave. When you buy a site ranking #2 for "best cordless leaf blower," you are buying a machine that prints qualified visitors every morning without anyone touching it.
That is exactly why these sites trade at premium multiples. On Empire Flippers, a content site with stable organic traffic and clean earnings will often list at 38x to 45x monthly net profit, while a comparable business dependent on paid traffic might struggle to clear 30x. The market is paying a real premium for organic search. The question is whether the specific rankings you are buying justify it.
Here is the uncomfortable part: those rankings are not owned. They are held. Google reassigns them constantly, and the reassignment is not gradual for individual sites. I have seen sites lose 60% of organic traffic inside a 72-hour window because a core update decided their content category needed different signals. Nothing about the business changed. The content was the same, the links were the same, the products were the same. The landlord just raised the rent to infinity.
The core goal of SEO due diligence is not "does this site rank?" — you can see that in five seconds. The goal is "why does this site rank, and is that reason defensible?" Those are completely different questions and only one of them protects your capital.
We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.
Start with direct access to Google Analytics. Not a screenshot, not a PDF export, not a "here's a summary I put together." Ask for view-only GA4 access or a live screen share where the seller navigates while you direct. If a broker mediates the process, that is normal — Empire Flippers and other quality brokers will typically arrange a verification call. What is not normal is a seller who will only provide static images.
Once you are in, pull organic traffic for the trailing 24 months, segmented by source/medium so you are looking at organic search specifically and not total sessions. This is the step most buyers skip. Listings are almost always built around trailing twelve month figures, because TTM is the standard for valuation. But TTM can hide a peak-then-decline pattern beautifully.
Here is a real shape I see constantly. A site does 40,000 organic sessions per month in month 1, climbs to 95,000 by month 10, holds at 90,000 through month 14, then slides to 62,000 by month 24. If you only look at the trailing twelve months — months 13 through 24 — you see a site that went from 88,000 to 62,000, which any buyer would flag. But sellers often present growth framed from an earlier baseline, or present a 12-month window that ends at the peak. Pull 24 months and the story is unmistakable: this site peaked and is now 31% off its high.
Also check Google Search Console, which the seller should provide alongside Analytics. GSC gives you total impressions and average position, and impressions are the leading indicator. Traffic can hold steady while impressions decline for months — that means Google is showing the site less often, and the click-through is temporarily masking it. When impressions fall and clicks follow six weeks later, the decline was visible the whole time to anyone who checked.
Open Ahrefs or Semrush and export the site's top 100 to 200 keywords by estimated traffic. You are not trying to become an SEO consultant. You are trying to answer one question: what kind of search demand is this business monetizing, and how concentrated is it?
Bucket every keyword into four categories. Branded queries are searches for the business by name — someone typing "wirecutter headphones" instead of "best headphones." Informational queries start with how, what, why, or when. Commercial queries contain best, review, vs, top, or comparison language. Transactional queries contain buy, price, coupon, discount, or "near me." Each bucket has a completely different value and a completely different risk profile.
For an affiliate content site, you want a heavy commercial footprint. If 65% of traffic comes from "best X" and "X vs Y" keywords, the traffic is monetizing at a decent rate and the audience has purchase intent. If 80% of traffic comes from informational keywords — how-to guides and definitional content — you are looking at a site with high sessions and terrible RPM, and any monetization improvement you plan requires converting cold informational traffic, which is hard. I have seen content sites doing 400,000 sessions a month earning less than sites doing 70,000, entirely because of this split.
Then check concentration. Sort your export by traffic and calculate what percentage of total organic traffic comes from the top 5 keywords, and from the top 20. If the top 5 keywords deliver more than 40% of traffic, you have concentration risk that behaves like customer concentration in a service business. One ranking loss and the P&L breaks. I passed on a supplement review site last year where a single keyword — one page, one term — delivered 38% of all organic sessions and roughly half of revenue. The asking price treated that as a normal content site. It was not. It was a single-keyword business with a blog attached.
Branded search is the most underrated signal in the entire export. A site with 20%+ branded query volume has a real audience that seeks it out by name. That traffic survives algorithm updates because it does not depend on ranking for competitive terms. A site with under 3% branded search is 100% dependent on Google's opinion of its content, with no brand equity cushion underneath.
Pull the referring domains report in Ahrefs or Semrush and look at three things: total count, quality distribution, and acquisition timeline. You are looking for evidence that the previous owner bought their way to page one in a manner Google has not yet punished but eventually will.
Red flag one: links from unrelated foreign-language domains. A US-focused home improvement site with 40 referring domains from Indonesian and Russian blogs about unrelated topics did not earn those links. Someone bought a package. Red flag two: repeated exact-match anchor text across multiple unrelated domains. If eleven different sites all link with the anchor "best standing desk 2023," that is not organic behavior — organic links use brand names, URLs, and natural phrases. Red flag three: a sudden vertical spike in referring domains. Real link acquisition looks like a gradual slope. A site that gained 180 referring domains in a single month and then flatlined bought a campaign.
The acquisition timeline matters more than people realize because it tells you where the risk sits. If the link spike happened four years ago and the site has ranked stably since, Google has likely already assessed and either ignored or absorbed those links. If the spike happened seven months ago and the site's rankings improved right after, you are buying a position that has not yet been stress-tested by a spam update. That is a materially different risk.
Also check whether the good links are actually good. Domain Rating is a directional metric, not a truth. A DR 70 domain that is a general-purpose "write for us" blog publishing 40 guest posts a week is worth less than a DR 35 niche site with genuine readership. Click through to five or six of the strongest referring domains and look at them as a human. If they look like link farms, they are link farms, regardless of what the metric says.
Never accept "I don't know, I bought it that way" as an answer about backlink history. If the current seller purchased the site from someone else, ask for the previous owner's link building disclosure and check the referring domain timeline against the transfer date. Inherited link risk is still your risk after closing. I have seen two deals where the site got hit by a spam update within eight months of the sale, for links built two owners back. The buyer's recourse was zero.
This is the step that separates buyers who understand SEO risk from buyers who have read about it. Take your 24-month organic traffic chart and overlay the dates of Google's confirmed core updates, product review updates, and helpful content updates. The Semrush Sensor is free and shows historical algorithm volatility by category. Google's own search status dashboard lists confirmed update windows with start and end dates.
What you are looking for is correlation. If the site's traffic dropped 22% during a two-week window that exactly matches a core update rollout, this site is algorithm-sensitive. If traffic dropped 22% over four months with no update correlation, the cause is something else — competitor entry, content decay, seasonal shift — and that is often more fixable. Both matter, but they price differently.
Pay special attention to sites that gained heavily during an update. Buyers get excited about this: "look, it went up 40% during the September core update, Google loves this site." Maybe. Or the site's competitors got demoted and this site inherited their positions temporarily. Update gains reverse in subsequent updates more often than people assume. I treat a large single-update gain in the last twelve months with almost as much caution as a loss, because it means the current traffic level has not been validated across multiple algorithm cycles.
The best pattern you can find is boring: a site that went through three or four confirmed core updates over 24 months with movement under 10% in either direction. That is a site Google has repeatedly evaluated and repeatedly kept. It is not a guarantee of anything, but it is the closest thing to durability that exists in organic search. That pattern deserves a premium, and I will pay one for it.
Run these in order. Steps 1 through 4 are pre-offer — do them before you spend real time on the deal. Steps 5 through 10 belong in the formal diligence period after your LOI is accepted. Any single failed step is a conversation, not necessarily a deal killer, but three failures in a row means walk.
Every verified SEO risk is a legitimate basis for a lower offer, and the word that matters there is verified. Sellers and brokers dismiss vague concerns instantly, and they should. "I'm worried about Google" gets you nothing. "Your top 5 keywords deliver 44% of organic traffic and 51% of affiliate revenue, and the primary money page dropped from position 2 to position 6 during the March core update" gets you a real conversation.
Frame every adjustment as a risk-adjusted multiple, not a discount request. If the asking price is 42x monthly net and you have documented algorithm sensitivity plus a manipulated link profile, your position is that this business belongs in the 32x to 35x band because it carries risks a clean 42x business does not. That is not haggling — that is pricing. Good brokers understand this language and will often relay it to the seller more effectively than a raw number would.
Structure is your other lever, and frequently the better one. If the seller will not move on price but the SEO risk is real, propose an earnout tied to organic traffic maintenance: 70% at close, 30% paid over twelve months contingent on organic sessions staying within 15% of the trailing average. A seller who genuinely believes the traffic is stable will take that deal. A seller who knows a decline is coming will fight it hard, and their reaction alone is diligence data. On Flippa, where listings skew smaller and more owner-negotiated, this kind of creative structuring is often easier to get done than on larger brokered deals.
And be willing to pay up when the diligence comes back clean. If a site survived four core updates with sub-10% movement, has 25% branded search, and has a link profile built from genuine editorial mentions, that business deserves a premium multiple and you should not talk yourself out of it hunting for a bargain. The whole point of doing this work is knowing the difference — most buyers pay the same price for both.
The framework above takes six to ten hours to run properly on a single listing. You cannot do that on every deal you see, which means the real constraint is not diligence skill — it is deal flow filtering. You need to reach the point of serious diligence on businesses that are likely to survive it.
This is exactly what we built Deal Alert AI to solve. The platform monitors new listings across the major marketplaces and flags traffic patterns that indicate SEO risk before you invest time: listings where the growth story is built on a suspiciously short window, listings in categories that have been repeatedly hit by helpful content updates, and listings whose traffic trajectory suggests a peak rather than a plateau. It does not replace the four-part framework. It tells you which listings deserve it.
Practically, my workflow looks like this. New listings surface through Deal Alert AI. I spend fifteen minutes on each one doing a fast version of parts one and two — Ahrefs traffic estimate, quick keyword bucket, glance at the referring domain chart. Roughly one in eight survives that screen. Those get the full ten-step process. The businesses that come out the other side clean are the ones I actually bid on, and by then I know more about the traffic than the seller usually does.
That knowledge asymmetry is the entire edge. Most buyers competing for the same listing on Empire Flippers or Flippa are looking at the same P&L you are. Very few of them have plotted the traffic against update dates or bucketed the keyword export. Do the work nobody else does, and you will either win the good deals at a fair price or discover why the cheap ones were cheap. Both outcomes make you money. You can start building your filtered deal flow at Deal Alert AI.
By Sophal Lanh, Founder of Deal Alert AI
We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.