You take over a site and the backlink profile is a mess: hundreds of links from an old agency that bought whatever was cheap, a few directory dumps, and some placements on sites that clearly sell to anyone. The instinct is to disavow it all. Resist that. Aggressive disavowing does more damage than most bad links, and Google is better at ignoring junk than the panic suggests.
First, understand what Google already does
Google has said for years that it ignores most low-quality links rather than penalizing for them. Manual penalties for links are rare now and usually reserved for egregious, obvious manipulation. So the goal of an audit is not to scrub every imperfect link. It is to find the small set that genuinely threatens the site and to understand what your profile is missing.
Pull a complete picture
Combine sources. No single tool sees every link. Export from Ahrefs and Semrush, then add the links Google itself reports in Search Console. Deduplicate to referring domains, because domains matter more than raw link counts. You want one clean list of every site linking to you.
Categorize every referring domain
Sort each domain into one of four buckets. Most links land in the first two, and those need nothing done.
| Bucket | What it looks like | Action |
|---|---|---|
| Good | Relevant, real traffic, editorial | Keep and build more like it |
| Neutral | Low quality but harmless, no pattern | Ignore; Google discounts these itself |
| Risky | Clear paid-link footprints, spam networks | Investigate; consider disavow only if severe |
| Toxic / unnatural | Obvious link scheme tied to a penalty risk | Disavow if part of a real pattern |
The vetting criteria for the good and risky buckets are the same ones we use to vet a guest post site: organic traffic, relevance, outbound link density, and indexation.
When disavowing is actually justified
Reach for the disavow file in a narrow set of cases: you have a manual action citing unnatural links, or you can see a deliberate scheme in your history, like a bulk buy of hundreds of links from a single network. In those cases, disavow at the domain level and keep the file conservative. If you are disavowing thousands of domains "to be safe," you are almost certainly removing links that were helping you.
- Do disavow when there is a manual action or a clear, deliberate scheme.
- Do not disavow ordinary low-quality links with no pattern.
- Disavow at the domain level, not URL by URL, when you do act.
- Document why each domain is on the list, so a future audit understands it.
The part everyone skips: what is missing
A cleanup audit that only looks for bad links misses half the value. The more useful question is what strong, relevant links your competitors have that you do not. That is a gap analysis, and it turns a defensive audit into an offensive plan. Cleaning up junk rarely moves rankings much. Adding relevant authority does.
Rebuild trust the slow way
If a profile is genuinely skewed, the durable fix is dilution, not deletion. Build a steady stream of relevant, editorial links with natural anchors, and the old junk becomes a smaller and smaller share of the whole. Over six to twelve months the profile reshapes itself around the good links. This is slower than a disavow file, and far safer.
A realistic audit sequence
- Combine link data from Ahrefs, Semrush, and Search Console into one domain list.
- Categorize every domain into good, neutral, risky, or toxic.
- Disavow only where there is a manual action or a clear scheme.
- Run a competitor gap analysis to see what authority you are missing.
- Start building relevant links to dilute the old profile and fill the gaps.
This whole process is the first thing we run for a new client with an inherited profile, inside our backlink audit and gap analysis. Most of the time the message is reassuring: the profile is messier than it is dangerous, and the real work is building forward, not cleaning up.