Forensic SEO borrows vocabulary from investigative work and technical SEO alike, which means newcomers often hit unfamiliar terms mid-explanation. This glossary defines the terms we actually use at Salterra during real investigations, grouped by category so you can find what you need quickly.
Each definition is written the way we’d explain it to a client on a call, not the way it might read in a textbook.
Core Investigation Terms
- Forensic SEO — the practice of diagnosing a specific change in a site’s search performance by reconstructing a timeline of site changes, algorithm events, and performance data, rather than running a generic best-practices audit.
- Root cause — the specific, evidence-backed change responsible for a performance shift, as opposed to a plausible-sounding guess. In forensic SEO, a root cause isn’t accepted until it’s supported by at least two independent data sources.
- Timeline correlation — the process of lining up performance data, site change history, and known external events (like algorithm updates) on a shared calendar to find what moved together.
- Crawl diff — a side-by-side comparison of two crawls of the same site taken at different points in time, used to spot exactly what changed on-page, in headers, or in internal linking.
- Confirmation bias — the investigative trap of deciding on a cause before gathering evidence, then only noticing data that supports it. The single most common way forensic SEO investigations go wrong.
Technical & Crawl Terms
- Canonical tag — an HTML tag telling search engines which URL is the “master” version of a page when duplicate or near-duplicate content exists. Misconfigured canonicals — often pointing every page to the homepage — are one of the most common causes of post-migration ranking collapse.
- Server log analysis — reviewing a website’s raw server logs to see exactly how search engine crawlers (like Googlebot) accessed the site, independent of any third-party dashboard’s interpretation.
- Crawl budget — the number of pages a search engine will crawl on a given site within a given timeframe. Large sites with excessive low-value pages can waste crawl budget that should be spent on important content.
- Render diff — comparing what a page’s raw HTML contains versus what actually renders after JavaScript executes, used to catch content that’s invisible to crawlers despite appearing fine to human visitors.
- Redirect chain — a sequence of multiple redirects a URL passes through before reaching its final destination, which can dilute ranking signal and slow crawling if left unresolved.
Algorithm & Penalty Terms
- Manual action — a penalty applied to a site by a human reviewer at Google, visible in Search Console’s Manual Actions report, as opposed to an algorithmic ranking change.
- Algorithmic impact — a change in rankings caused by a broad or targeted algorithm update rather than a manual review, and therefore not reversible by simply requesting reconsideration.
- Broad core update — Google’s term for periodic, wide-reaching changes to its core ranking systems, which can shift rankings across many sites and industries simultaneously without targeting any single site.
- Negative SEO — deliberate attempts by a third party (often a competitor) to damage a site’s rankings, typically through spammy link building aimed at the target site or fraudulent review or listing manipulation.
- Link disavow — a Search Console tool used to tell Google to ignore specific inbound links when evaluating a site, generally reserved for confirmed spam or negative SEO link patterns rather than used preemptively.
Local SEO Terms
- NAP consistency — the practice of keeping a business’s Name, Address, and Phone number identical across its website and all directory listings; inconsistency confuses local ranking systems and erodes trust signals.
- Google Business Profile suspension — the removal or disabling of a business’s Google Business Profile listing, often triggered by suggested-edit abuse, guideline violations, or automated spam detection, and a frequent hidden cause of local pack disappearance.
- Citation — any online mention of a business’s name, address, and phone number, typically on directory sites, used by local search algorithms as a trust and consistency signal.
- Local pack — the map-based block of (usually three) local business results shown for location-relevant searches, distinct from the standard organic results below it.
AI Search & Emerging Terms
- AI Overview — Google’s AI-generated summary shown above traditional organic results for many queries, which can absorb clicks even when a site’s ranking position hasn’t technically changed.
- Visibility drop vs. ranking drop — a distinction forensic SEO makes explicitly: a site can lose clicks and visibility because an AI-generated feature now occupies the top of the results page, without the site’s actual ranking position having moved at all.
- Answer engine — a general term for AI-driven tools (chat-based assistants, AI Overviews, and similar features) that synthesize an answer directly rather than sending the user to a list of links, changing what “ranking well” even means for some queries.
Reporting & Deliverable Terms
- Investigation report — the written deliverable of a forensic SEO engagement: a documented timeline, the evidence gathered, the confirmed root cause, and a prioritized fix list, distinct from a generic audit checklist.
- Evidence strength — an informal ranking of how confidently a piece of data supports a hypothesis; a single anecdotal data point is weak evidence, while two or three independent data sources aligning on the same date is strong evidence.
- Recovery curve — the pattern of performance data (clicks, impressions, position) following a fix, tracked to confirm whether the diagnosed root cause was correct.
How to Use This Glossary
If you’re new to forensic SEO, start with the Core Investigation Terms section — those five concepts underpin everything else on this page. If you’re actively working through a suspected ranking issue, the Technical & Crawl Terms and Algorithm & Penalty Terms sections will come up constantly, since most investigations eventually hinge on one term from each.
Local business owners should pay special attention to the Local SEO Terms section; a surprising share of “SEO problems” reported to us at Salterra turn out to be Google Business Profile or citation issues wearing an SEO problem’s clothing.
Frequently Asked Questions
What's the difference between a forensic SEO audit and a technical SEO audit?
A technical audit inventories current-state issues across a whole site. A forensic investigation starts from a specific performance change and works backward through historical evidence to find its cause.
Is "negative SEO" a real, common problem or mostly a myth?
It's real but less common than site owners often assume. Most ranking drops trace back to self-inflicted technical issues or algorithm updates; negative SEO should be considered only after those more common causes are ruled out with evidence.
What does "manual action" mean, and how do I know if I have one?
A manual action is a penalty applied by a human reviewer at Google. Check the Manual Actions report inside Google Search Console directly — it's the only authoritative source, and it's free to check.
Why does this glossary distinguish "visibility drop" from "ranking drop"?
Because AI-driven SERP features can reduce clicks to a site without the site's actual position in the rankings changing at all. Confusing the two leads to chasing the wrong fix.
Do I need to understand server logs to do basic forensic SEO?
No. Server logs add confirmation but many investigations can reach a confident root cause using Search Console, crawl diffs, and the Wayback Machine alone. Logs become more valuable on larger or more ambiguous cases.
What is a "recovery curve" and why does it matter?
It's the performance trend after a fix is applied. Tracking it confirms whether the diagnosed root cause was actually correct — if the curve doesn't recover as expected, the investigation isn't finished.
Terry has 30+ years in software and SEO. He’s the founder of Salterra Digital Services and SEO Spring Training, host of the Roundtable SEO Mastermind, and lead instructor at SEO University — teaching the exact tactics his team uses on client work.
Continue learning
Ready to master this?
This guide is one lesson from the Forensic SEO course. Get every lesson, framework and checklist — plus the full 38-course catalog — inside SEO University.
Practitioner-focused training across the full digital marketing stack — from technical SEO to conversion optimization and the AI search era. By Salterra Digital Services, since 2011.