Baseline and value.
Which revenue, leads, demand or strategic journeys depend on organic search, how concentrated that value is and which evidence supports the baseline.
SEO risk,
assessed.
A defensive SEO risk audit for businesses that depend on organic search. Establish what existing value depends on, where it is exposed and what ought to be protected before a loss forces the question.
Good performance can still be fragile.
A healthy chart can depend on a few queries, pages, systems or people.
Discern maps the commercial value already being produced, the dependencies behind it and the controls intended to protect it. The result is a clear view of where organic performance could fail, how material that failure would be and which protections are justified.
What the work tests.
Four questions behind existing organic value.
The scope follows the business, but every risk audit establishes the same four things.
Failure paths.
The technical, content, link, platform, people, supplier and operating dependencies through which existing performance could fail.
Structural exposure.
How competition, demand change, search-result features, algorithm changes and AI-generated answers could weaken value without a conventional technical failure.
Controls and priorities.
What monitoring, ownership, change controls, documentation and response capability exist, and what should be protected, remediated, monitored or accepted.
Scope and fees.
The fee reflects the value, dependencies and estate in scope.
SEO Risk Audit
From £5,000
Focused scope · usually 7–14 working days from accessFor one principal site or market, with a risk report, working register, treatment priorities and readout.
Complex Risk Audit
From £8,000
Complex, international or multi-domain scopeFor businesses with several markets, platforms, brands or material operating dependencies requiring deeper testing.
Portfolio Review
POA
Comparable review across several assetsA consistent risk view across a portfolio, with estate-level themes and one concise assessment per asset.
The business, organic contribution, estate complexity and available evidence are reviewed first. You receive a written scope, access list, delivery date and fixed fee before work begins.
What you receive.
A practical view of what could break.
The work is designed to support protection and oversight, not to manufacture a backlog of generic SEO improvements.
Risk report.
A concise account of the organic value exposed, the material failure paths, existing safeguards and the implications for management.
Working register.
The dependencies, control tests, evidence, findings, actions, unresolved questions and acceptance evidence behind the report.
Treatment plan and readout.
A sequenced response proportionate to risk: what should be protected, remediated, monitored or accepted, and how each action will be verified.
It is a defensive audit, not a growth audit. The subject is value already being relied on.
How the risk audit runs.
Exposure is only useful when it is tied to value and evidence.
Establish the baseline.
The commercial journeys, outcomes and concentration that materially depend on organic search are made explicit before risk is assessed.
Map the failure paths.
Queries, pages, systems, content, links, people, suppliers, operating practices and external conditions behind that value are traced.
Test exposure and controls.
Structural threats, monitoring, ownership, change controls and response capability are checked against the failure paths that matter.
Prioritise treatment.
Evidence strength, likelihood and impact remain separate as each risk is assigned a proportionate response and verification test.
See the analysis behind the conclusion.
The sample shows how organic value, dependencies, structural exposure, controls and treatment priorities are presented, supported by an illustrative working register. The actual audit follows the business and the value at risk rather than a generic SEO checklist.
Illustrative sample report coming soon.
Questions. Answered.
Scope and fit
What do you assess in an SEO risk audit?
The work assesses organic value at risk, concentration, technical and operational dependencies, algorithmic, competitive and market exposure, exposure to AI-generated answers, existing monitoring and controls, and the business's ability to detect and respond to material change.
How is this different from a standard SEO audit?
A standard audit usually looks for opportunities to improve rankings and traffic. This engagement is defensive: it tests what existing performance depends on, where it could fail and what should be protected. It does not produce a generic growth backlog.
When is a risk audit most useful?
Before a period of investment, planning or material change; when organic search contributes meaningfully to revenue or demand; when management lacks an independent view of agency or internal claims; or when concentration and exposure to AI-generated answers are not yet understood.
Is this the same as SEO due diligence?
The method overlaps, but the decision is different. Due diligence assesses organic performance in a transaction, including what transfers at completion. A risk audit assesses a business that is already owned and operated, without a deal needing to be underway.
Access and working together
What access is required?
Normally read-only access to Search Console and analytics, plus relevant technical records, release processes, reporting, supplier information and commercial context. The precise list follows the risk question and is agreed during scoping.
Can the audit sit alongside an existing SEO strategy?
Yes. It provides a defensive baseline against which a growth strategy and its execution can be tested. Discern can work alongside the internal team or agency while remaining independent of implementation.
Will you tell us what to fix?
Yes, where a protection or control is justified by the evidence. Recommendations are proportionate to risk and written for the team responsible. The engagement does not include implementation or an open-ended growth roadmap.
Is the work confidential and insured?
Yes. Contractual confidentiality and data-handling terms are supplied with the engagement scope, and Discern carries professional indemnity insurance appropriate to the work.
Does the business depend on organic search more than its controls suggest?
Send the domain and a short outline of what the business relies on. A clear scope and fixed fee follow before work begins.
Discuss a risk audit