April 15, 2026

The Complete CRO Audit Checklist for 2026 (Free PDF + Step-by-Step Guide)

A practical CRO audit checklist that covers analytics, UX, technical issues, copy, and testing — use it to find conversion leaks before they cost you revenue.

Most websites leak conversions in the same five places — yet teams keep launching new tests without ever auditing the foundation. A proper CRO audit fixes that. It tells you exactly where visitors drop off, why they hesitate, and what to test first so you stop guessing.

This checklist is the same one we use at PageDuel when onboarding new users. It's organized into five blocks — analytics, UX, technical, copy, and experimentation — and you can work through it in a weekend.

Why most "CRO audits" are useless

If you've ever paid an agency $5,000 for a 60-page audit deck full of generic recommendations like "improve CTAs" or "add social proof," you already know the problem. Real audits identify specific, measurable leaks tied to revenue. According to Baymard Institute, the average ecommerce checkout abandonment rate is 70.19% — and 18% of those abandoners leave because the site forced them to create an account. That's the kind of finding an audit should surface.

A useful CRO audit answers three questions:

Where are visitors dropping off?
Why are they dropping off (qualitative + quantitative evidence)?
Which fix is most likely to move the needle, and how do we test it?

Block 1: Analytics audit (90 minutes)

Before changing a single pixel, confirm you can actually measure success. You'd be surprised how often a "low conversion rate" is really a tracking bug.

Confirm GA4 (or your analytics tool) is firing on every page — check via Realtime + Tag Assistant.
Verify all conversion events: sign-ups, purchases, form submissions, downloads.
Check for duplicate page views (common with SPAs and routers).
Segment traffic by source, device, and landing page — look for any source where conversion is <25% of the average.
Confirm bot filtering is on. A surprising amount of "traffic" is automated.
Pull a 90-day funnel report and identify the largest single drop-off step.

If your analytics is broken, fix that before doing anything else. Optimizing on bad data is worse than not optimizing at all.

Block 2: UX and behavior audit (2 hours)

This is where session replay and heatmap tools earn their keep. If you don't have one, free tiers from Microsoft Clarity or Hotjar's basic plan work fine.

Watch 20 session replays of users who didn't convert. Note every hesitation, scroll-back, or rage-click.
Run heatmaps on your top 5 landing pages. Are users clicking elements that aren't clickable?
Check scroll depth — is your primary CTA above the fold visible to at least 80% of visitors?
Test the mobile experience on a real device, not Chrome DevTools. Tap targets, font sizes, sticky CTA behavior.
Run the 5-second test on your homepage with someone outside your team. Can they explain what you do?
Audit your forms — every extra field reduces conversion by ~4-7% according to HubSpot's research.

Block 3: Technical audit (1 hour)

Speed and stability kill more conversions than ugly design ever will. Walmart famously found that every 100ms of load time improvement increased conversions by 1%.

Run PageSpeed Insights on your top 5 pages. Aim for LCP < 2.5s, INP < 200ms, CLS < 0.1.
Check for layout shift on hero sections — a hero that jumps when fonts load destroys trust.
Confirm HTTPS, no mixed content warnings, no 404s in your top navigation.
Test checkout/signup on Safari, Firefox, and an older Android device.
Verify your A/B testing tool isn't causing flicker. Tools that load synchronously can blank the page for 200-500ms — read our guide on choosing a fast A/B testing tool for what to look for.

Block 4: Copy and messaging audit (1 hour)

Copy is usually the highest-ROI fix because it's free to change and easy to test. The fastest wins come from clarity, not cleverness.

Does your hero headline answer "what is this?" and "why should I care?" in under 5 seconds?
Is your primary CTA action-oriented and specific? "Get my free audit" beats "Submit" every time.
Are you using social proof above the fold (logos, counts, testimonials with photos)?
Do you reduce friction near the CTA — money-back guarantee, "no credit card required," cancel anytime?
Are objections answered before users have to scroll for them?
Is jargon stripped out? Read every page out loud — anything that sounds robotic gets rewritten.

Block 5: Experimentation readiness

An audit is only as good as the tests it triggers. Most audits die in a Notion doc because no one builds a testing pipeline around them.

Do you have a documented hypothesis format? (We recommend: "Because we observed X, we believe changing Y will cause Z, measured by metric M.")
Do you have an A/B testing tool installed and verified? PageDuel has a free tier with no traffic limits — perfect for running the tests your audit produces.
Do you have a prioritization framework (PIE, ICE, or PXL)?
Have you set up guardrail metrics so a "winning" test doesn't tank revenue elsewhere?
Can you reach statistical significance on your traffic? If not, focus tests on your highest-traffic pages first — see our landing page testing guide for the full playbook.

How to turn the audit into a 90-day roadmap

Once you've worked through all five blocks, you should have a list of 20-40 issues. Don't try to fix them all at once. Instead:

Bucket them by effort vs. impact. Tracking bugs and broken forms are emergencies — fix immediately, no testing needed.
Score the rest with ICE. Impact x Confidence x Ease, scored 1-10. Anything above 200 is your top tier.
Schedule one test per week. Most teams overestimate how many tests they can ship. One well-run test beats five sloppy ones.
Re-audit every quarter. The web changes, your traffic mix changes, and what was a top issue in Q1 may be solved (or worse) by Q3.

If you want a head start, use PageDuel's free plan to ship the first test from your audit today. The visual editor means you don't need a developer for most copy and CTA changes — paste the snippet, point and click, and you're live in under 10 minutes.

The CRO audit mistakes that waste the most time

After running this audit on hundreds of sites, the same patterns keep showing up:

Auditing without segmenting. Your overall conversion rate is meaningless. Mobile vs. desktop, paid vs. organic, new vs. returning — that's where the insights live.
Fixing things that aren't broken. If a page converts at 8% and another converts at 0.4%, audit the 0.4% page first.
Skipping qualitative research. Heatmaps and replays show the "what." Customer surveys show the "why." You need both.
Treating the audit as a one-time event. The teams that win at CRO audit continuously — it's a habit, not a project.

Reference our 2026 CRO benchmark report to see how your conversion rates stack up against your industry, and check our CRO tools roundup for the audit stack we recommend.