Free SEO audit with 10 action points - $2K worth of value
Rasesh Koirala
5.0 on Google · 10+ years in SEO

SEO for M&A: Due Diligence, Integration and Migration

When you buy a business that wins customers from Google, you are buying its organic traffic. Check it is real before you pay, then protect it after settlement.

  • SEO due diligence before the deal
  • Integration strategy for two brands
  • Migration that keeps your rankings
Talk about your deal See the three phases
Rasesh Koirala, SEO consultant and trainer in Sydney
10+ Yearsof SEO Experience
Phases
Diligence, integration, migration
For
PE, brokers, acquirers
Turnaround
1 to 3 weeks
Confidential
NDA signed

There are three phases to it. Most agencies only know the third one, the migration. I work across all three, so the person who priced the risk is the same person who plans the merge and runs the move.

Why the Organic Channel Needs Its Own Due Diligence

Financial due diligence checks the books. Legal checks the contracts. Tech diligence checks the code. Nobody in that line-up asks whether the traffic that produces the revenue will still be there in 12 months.

Two businesses can show the same organic revenue today and be worth very different amounts. One has diversified rankings, clean links and a brand people search for. The other leans on five keywords, a pile of paid links and content that a core update is about to catch up with. The spreadsheet looks the same. The risk is not.

Furthermore, the risk has grown since AI Overviews and LLM answers arrived. A site can hold its rankings and still lose clicks, because Google now answers the question before anyone visits. In my study of keywords that trigger AI Overviews, informational queries were the most exposed. If a target's traffic is mostly informational, that exposure belongs in the valuation.

Phase 1: SEO Due Diligence Before the Acquisition

The buyer is paying for organic traffic as an asset, so the job is to prove whether that traffic is real and durable. I work from Search Console, analytics, crawl data and backlink data, and I answer one question: what is this channel actually worth after the risks are priced in?

01

Traffic trends and concentration

I pull at least 16 months of Search Console data and as much analytics history as exists. Then I break traffic down by keyword, page, topic cluster and market.

The question that matters most is concentration. If 60% of organic revenue comes from five keywords, one ranking loss changes the deal. I also check seasonality, so a seasonal peak is not sold to you as growth.

02

Brand vs non-brand split

Branded traffic comes from people who already know the business. It is fairly stable, but SEO did not create it. Non-brand traffic is what SEO actually won, and it is the part competitors can take back.

A target that looks SEO-driven but is 80% branded has a weaker moat than the pitch deck suggests. On the other hand, if the brand name is leaving with the seller, branded traffic may not transfer at all.

03

Penalty history and algorithm update exposure

I check Search Console for active and past manual actions. Next, I overlay the traffic history against confirmed Google updates, including core updates, spam updates and the helpful content changes.

Algorithmic hits leave no notice. They only show up as drops that line up with update dates. A site that fell during a quality update and never recovered usually still carries whatever caused the fall.

04

Backlink toxicity and bought links

Links are often the most valuable SEO asset in an acquisition. They can also be the biggest liability. I look at link velocity, anchor text, referring domain quality and the footprints of PBNs, link farms and paid guest posts.

Bought links that have not been penalised yet are a time bomb you inherit at settlement. I use the same framework I use to evaluate backlink domains, applied across the whole profile.

05

Thin, AI-spun or scaled content

Pages can rank today and still be a liability. I sample content across every section and check publishing velocity against the team size the seller discloses. If 400 articles went live in three months with a two-person team, that content needs a closer look.

The output here is not a vibe. It is an estimate of how much organic traffic sits on content that is at risk, and what it would cost to fix or prune.

06

AI Overview and LLM visibility risk

I check how much of the target's traffic comes from queries that already trigger AI Overviews. I also test whether ChatGPT, Gemini, Perplexity and Google's AI Mode mention or cite the brand for its core topics.

A business that LLMs already recommend has a channel that is getting stronger. A business whose traffic depends on answers AI now gives for free has a channel that is shrinking.

07

What you get: a risk-adjusted valuation of the organic channel

The deliverable is written for a deal team, not a marketing team. It includes:

  • An executive summary with a red, amber and green risk rating by area
  • Verified organic traffic and revenue, with brand and non-brand separated
  • A traffic sustainability discount you can apply to the organic share of value
  • Remediation costs for technical debt, content and link cleanup
  • Red flags to negotiate before signing, including warranty and earnout points
  • A 12 to 36 month traffic projection under different investment scenarios

Actionable tip: if the seller will not grant read access to Search Console, treat that as a finding. I can run an external assessment from third-party data before the LOI, but it should be flagged as an estimate until data room access is granted.

Phase 2: Integration Strategy After the Deal

Once the deal closes, someone has to decide what happens to the two websites. That decision is usually made by a brand team without SEO in the room. As a result, it is also where most of the traffic loss starts.

01

Keep both brands, merge, or run a hub with sub-brands

There are three realistic options:

  • Keep both brands separate. Both sites keep ranking and can hold two positions on the same results page. There is no migration risk, but you carry two sites, two link profiles and some cannibalisation.
  • Merge into one domain. Link equity and topical authority consolidate on one site. There is a short-term dip, but the combined site usually ends up stronger than either was alone.
  • Run a hub with sub-brands. The acquired brand moves into a subfolder or section on the parent domain, keeping its name while sharing the parent's authority.

The right choice depends on the audience overlap, the brand equity of each name and how much risk the business can carry this year. I put numbers against each option so the decision is made on data.

02

Keyword overlap and cannibalisation modelling

I map every ranking keyword from both sites and find where they compete for the same queries. Where both sites rank for the same term, I decide which page wins and which page merges into it.

This step also shows where the two sites complement each other. Coverage gaps one site fills for the other are often the hidden upside of the deal.

03

Which URLs carry the equity

Not every page is worth moving. I score each URL on organic traffic, conversions, referring domains and internal link weight. The result is a short list of pages that must be protected at all costs, and a long list that can be merged or retired.

04

The realistic traffic dip and recovery curve

Leadership needs a forecast before the move, not an explanation after it. I model the expected dip and recovery for the chosen option, based on the size of the sites, how much content changes and how clean the redirects can be.

A well-run consolidation typically dips in the first weeks, stabilises within a few months and grows past the combined baseline after that. A badly run one can take more than a year to recover, and some never do.

Phase 3: Migration Execution

This is the part most agencies sell. It still matters, and the plan from phases 1 and 2 makes it far safer. My website migration service covers the standard move. A post-acquisition migration adds a second site, a second brand and a second link profile.

01

URL mapping at scale and 301 redirects

Every URL with traffic, links or conversions gets a one-to-one 301 redirect to its closest equivalent. No mass redirects to the homepage, because Google treats those as soft 404s and the equity is lost.

On large sites I build the map with crawl data and scripts rather than by hand, then test every redirect for chains, loops and wrong destinations before launch.

02

Canonicals and duplicate content consolidation

Where both brands had a page on the same topic, I merge the best of both into the winning URL and redirect the other. Canonicals are then reset across the combined site, so Google knows which version to index.

03

Search Console change of address

When one domain moves to another, the Change of Address tool in Search Console tells Google the move is permanent. I verify both properties, submit the change and keep the old domain's redirects live for years, not months.

04

Google Business Profile merges and closures

Mergers often mean overlapping locations. Duplicate profiles at the same address get merged or closed, reviews are protected where possible, and every listing is updated with the new name, website and categories. Citations across directories are then cleaned up, so NAP details match.

05

Schema and entity updates for Google and LLMs

Search engines and LLMs need to understand that the two businesses are now one. I update Organization schema with parentOrganization, subOrganization and sameAs relationships, and update the About page, Wikidata entries and key profiles to state the new relationship clearly.

If this step is skipped, ChatGPT and AI Overviews can keep describing the old brand as a separate company for months.

06

Monitoring for 3 to 12 months

I set a baseline before launch and track traffic, rankings, indexation, redirects and lost links against it. Weekly in the first month, then monthly until the combined site is back above baseline. If something drops, I find out why before it becomes a trend.

Actionable tip: keep paying for the acquired domain even after it redirects. Expired domains get picked up by competitors and spammers, and every backlink pointing at them goes with it.

Who This Service Is For

I have particular depth in ecommerce, including Shopify, WooCommerce and BigCommerce stores, where product and collection URLs make mapping complex.

SEO Due Diligence vs a Standard SEO Audit

An SEO audit asks how to rank higher. SEO due diligence asks whether the traffic is real, whether it will last and what it is worth. The audit produces a to-do list for a marketing team. Due diligence produces numbers a deal team can put in a valuation model and a share purchase agreement.

That is why I price due diligence per engagement, not as part of a monthly retainer. Integration and migration can then roll into an SEO consulting arrangement for the months after settlement.

How an Engagement Works

01

Scope and NDA

We agree which domains and markets are in scope and what the deal team needs answered. I sign your NDA, or provide one.

02

Data access

Read-only access to Search Console, GA4 and the CMS. Backlink and ranking data comes from my own tools.

03

Analysis

Traffic, links, content, technical health, penalties and AI visibility, each scored with evidence.

04

Report and call

An executive summary and full report, walked through with the deal team. Critical findings are raised the same day, not saved for the report.

05

Integration and migration

If the deal proceeds, I plan the merge and run the move, with monitoring through the first year.

Frequently asked questions

When should SEO be involved in an acquisition?

Before the deal closes. SEO findings can change the price, the warranties and the integration timeline. If SEO only joins after settlement, those decisions have already been made.

How long does SEO due diligence take?

A focused assessment can be turned around inside a week for tight deal timelines. A full assessment on a larger site typically takes two to three weeks from data access.

Can you assess a target without access to their data?

Yes. An external assessment uses third-party traffic, ranking and backlink data. It is useful before an LOI, but the findings are estimates. Search Console access is needed for firm numbers.

Will a penalty on the acquired site affect our main site?

It can. Redirecting a penalised domain into your main site can pass the problem across. Any manual action should be resolved before consolidation, and toxic links dealt with first.

How much traffic will we lose when the sites merge?

Some dip is normal while Google processes the redirects. The size depends on how much content changes and how clean the mapping is. I give you a forecast for your specific sites before the move, so there are no surprises.

Do you work with clients outside Sydney?

Yes. I am based in Sydney and work with buyers, advisers and businesses across Australia and overseas. Due diligence is done remotely from data access.

The bottom line

Organic traffic is an asset on the balance sheet, even if it never appears there. SEO for M&A means pricing that asset honestly before you buy, choosing the right structure after you buy, and moving it without losing what you paid for.

Talk about your deal See packages