Page Contents
Last updated: October 2026
A CRO audit is a structured review of your website that finds out why visitors do not convert and which fixes will pay off first. Instead of redesigning on instinct, you check your tracking, study real behavior, find the biggest leaks and turn them into tests. Done well, an audit gives you a prioritized roadmap for the next three to six months.
Top-ranking guides for this topic agree on a similar flow: set goals, verify analytics, review UX, analyze forms and the funnel, study traffic sources, add qualitative research, write hypotheses, test and monitor. Step counts vary from 5 to 12, but the logic is the same. This guide combines that consensus with clearer checks, a ready-to-use checklist table and a prioritization method you can apply today.
What Is a CRO Audit?
A CRO audit is an evidence-based examination of your site, funnel and data to explain why the conversion rate is what it is. It answers four questions: Is our data trustworthy? Where do visitors drop off? Why do they leave? What should we test first?
It differs from a general conversion rate optimization checklist for 2026, which lists what should be in place. An audit goes further by combining that checklist with analytics, recordings, heatmaps and feedback to explain what is actually happening.
Why Run a CRO Audit?
- It finds the real problem. Low sales can come from poor traffic, a weak offer, a slow page or a confusing checkout. The audit shows which one.
- It protects your budget. Fixing a leak is cheaper than buying more traffic for a leaky site.
- It produces a ranked to-do list, so the team stops debating opinions.
- It catches broken tracking, which can mislead every later decision.
Before You Start: Set Up Your Audit
- Scope: choose one site section or journey, such as the checkout or main landing pages. Auditing everything at once produces a long list nobody finishes.
- Time frame: use at least four to eight weeks of data, so weekday and weekend patterns appear.
- Tools: analytics such as GA4, plus behavior tools such as recordings and heatmaps, and a survey or feedback tool.
- Baseline: write down today’s conversion rate, revenue per visitor and abandonment rates, so you can prove progress later.
The 10-Step CRO Audit Process
1. Define Your Goals and KPIs
Decide what a conversion means: a purchase, a qualified lead, a booking. Pick one primary metric and a few supporting ones, such as average order value, revenue per visitor and cost per conversion. In GA4, conversions are called key events, and the main rates are session key event rate and user key event rate. Keep the primary list short.
2. Review Your Analytics Setup
Nothing else matters if the data is wrong. Check that each key event fires once, on every device and on every variation. Exclude internal traffic, tag campaigns with UTM parameters and make sure ad platforms and analytics count conversions in a consistent way. Compare totals with your store or CRM, and fix large gaps first. GA4 defines an engaged session as one that lasts longer than 10 seconds, includes a key event or has two or more page or screen views, and bounce rate is simply 100% minus the engagement rate, so do not compare it with old Universal Analytics numbers.
3. Research the User Experience
Walk through your main journeys on desktop and a real phone as if you were a first-time visitor. Note unclear headlines, hidden buttons, slow steps and confusing menus. Check speed against Google’s Core Web Vitals thresholds: a Largest Contentful Paint of 2.5 seconds or less, an Interaction to Next Paint of 200 milliseconds or less and a Cumulative Layout Shift of 0.1 or less, measured at the 75th percentile of page loads (see the web.dev threshold guide). Check accessibility, too: WCAG asks for at least 4.5:1 contrast for normal text (see WCAG 2.2). Use UX analysis for usability problems to organize what you find.
4. Analyze Your Forms
Forms are where many conversions die. Measure form abandonment as (interactions minus completions) divided by interactions, times 100, and use interactions, not page views, as the denominator. Look for fields that people skip or abandon, error messages that do not help and required fields you do not need. Baymard’s 2024 benchmark reported about 11.3 form fields in an average checkout, so trimming is often the easiest win. HubSpot’s analysis of more than 40,000 landing pages found that multiple text areas and drop-downs lowered conversions most.
5. Analyze the Conversion Funnel
Map the steps from first visit to goal and calculate the pass-through rate between steps. In GA4, a funnel exploration shows where users fail at each step and can be broken down by device category (see Google’s funnel exploration help). Funnels are closed by default, so users must enter at the first step, and a user who skips a step drops out of later steps. Combine it with funnel analysis to find drop-offs and compare the biggest absolute losses, not just the biggest percentages.
6. Review Campaigns and Traffic Sources
Compare conversion rate, engagement and cost per conversion by channel, campaign and device. A source with large traffic and weak results may need better targeting or message match, while a small source with strong results may deserve more budget. Check landing pages for the main campaigns with landing page metrics worth tracking.
7. Add Qualitative Research
Numbers show where; observation shows why. Use session recordings of real visitors to watch hesitation, errors and rage clicks at the weak steps. Add website heatmaps and scroll maps to see clicks and how far people read. Then ask visitors directly with short on-page surveys, exit surveys and support tickets. Five to ten users often reveal most major usability problems, based on Nielsen and Landauer’s model as summarized in secondary sources, but cannot provide reliable rates.
8. Develop Conversion Hypotheses
Turn each finding into a testable statement: “If we change X, then Y will happen, because Z.” The “because” keeps ideas tied to evidence. Example: “If we move the payment button above the keyboard on mobile, completion will rise, because recordings show people cannot find it.”
9. Prioritize and Run A/B Tests
Score ideas by impact, confidence and effort, then test the highest-ranked first. Plan sample size and duration before you start: at 95% significance and 80% power, a rough approximation is n per variant ≈ 15.7 × p × (1 − p) ÷ d², where p is your baseline rate and d is the absolute lift you want to detect. Run tests for at least one to two full business cycles. Google Optimize shut down on September 30, 2023, and GA4 has no built-in testing, so use a third-party tool.
10. Monitor Results and Iterate
Roll out winners, log every result and re-check your metrics. A test log of hypotheses, results and lessons keeps knowledge in the team. To make this repeatable, see how to build a CRO program.
CRO Audit Checklist Table
Use this table as a working sheet. Mark each row as pass, partial or fail, add evidence and assign an owner.
| Area | What to check | Evidence to collect |
|---|---|---|
| Tracking | Key events fire once; totals match store or CRM; campaigns tagged | Event debug view, order reconciliation |
| Speed | LCP 2.5 s or less; INP 200 ms or less; CLS 0.1 or less (75th percentile) | PageSpeed Insights, Search Console, field data |
| Mobile | Tap targets at least 24 by 24 CSS px; readable text; no blocking pop-ups | Real-device test, mobile recordings |
| Message | Headline states the benefit; offer matches the ad | Five-second test, bounce by source |
| Calls to action | One main action; specific text; strong contrast | Click map, click-through rate on the button |
| Forms | Few fields; clear errors; autofill works | Abandonment rate, field-level recordings |
| Trust | Reviews, policies, contact details, secure payment signals | Heatmap on proof areas, survey comments |
| Checkout | Guest checkout; costs shown early; payment options | Funnel by device, abandonment reasons |
| Accessibility | Contrast 4.5:1 for normal text; keyboard use; labels | Contrast checker, keyboard walkthrough |
| Follow-up | Response time to leads; abandoned cart or form emails | CRM timestamps, email reports |
How to Prioritize Audit Findings
You will find more problems than you can fix. Score each one for impact (how many users and how severe), confidence (how sure you are of the cause) and effort (how hard it is to fix). Start with quick wins: high impact and low effort, such as a broken button, a missing label or a slow image. Plan big bets as projects, and drop low-impact, high-effort items for now.
| Finding | Impact | Confidence | Effort | Decision |
|---|---|---|---|---|
| Payment button hidden by keyboard on mobile | High | High (recordings) | Low | Fix now |
| Checkout asks for account creation | High | Medium | Medium | Test guest checkout |
| Home page headline unclear | Medium | Medium | Low | A/B test |
| Full site redesign | High | Low | High | Plan later, validate first |
The example rows are illustrative, not findings from a real site.
How Often Should You Run a CRO Audit?
Run a full audit once or twice a year and before any major redesign, pricing change or large campaign. Between audits, review your key numbers weekly and re-audit one journey each quarter, such as checkout or the main landing page. Repeat the audit right away if conversion rate, engagement or page speed changes sharply.
Common CRO Audit Mistakes
- Skipping the tracking check, and analyzing bad data.
- Looking only at averages, which hide device and source differences.
- Auditing without qualitative data, so you know where but not why.
- Making a huge list with no priorities.
- Testing small details first, while big friction remains.
- Stopping after the report. The value is in the tests that follow.
Frequently Asked Questions About CRO Audits
What is a CRO audit?
A CRO audit is a structured review of your site, data and user behavior that finds why visitors do not convert and ranks the fixes by impact.
How long does a CRO audit take?
A focused audit of one journey often takes one to three weeks, mostly for data collection and observation. A full-site audit takes longer.
What tools do I need for a CRO audit?
Analytics, session recordings, heatmaps, a survey tool and a way to run A/B tests are enough to start.
What is the difference between a CRO audit and a UX audit?
A UX audit focuses on usability. A CRO audit includes UX but also checks tracking, funnels, traffic sources, offers and tests, with conversion as the goal.
Can I do a CRO audit myself?
Yes. Use the checklist table, collect evidence for each row and prioritize with impact, confidence and effort. Bring in specialists for advanced testing later.
Conclusion
A good CRO audit verifies your data, studies the funnel, explains behavior with recordings and feedback and ends with a ranked list of hypotheses to test. Work through the ten steps, use the checklist table, fix quick wins first and repeat the process on a regular schedule. The result is a clear plan instead of guesswork, and a team that learns with every test.
