Phase 1: Incident Characterization
Before diagnosing cause, characterize the incident precisely.
Timeline Extraction
From Google Search Console:
- GSC → Performance → Date range: 90 days → Click "Compare" → previous period
- Identify exact date traffic started declining (not the date you noticed it)
- Check impressions separately from clicks — did both drop, or clicks only?
Impressions drop + clicks drop = rankings dropped (organic visibility loss) Impressions stable + clicks drop = CTR problem (SERP feature change, title/meta issue, snippet competition) Clicks drop on specific pages only = page-level issue Clicks drop site-wide = domain-level issue
Cross-Reference with Google Update Calendar
Compare the exact drop date to the Google update calendar:
- Search Google's official Search Status Dashboard:
https://status.search.google.com/ - Check third-party tracking: Semrush Sensor, MozCast, Algoroo
- Key update types: Core Update, Spam Update, Helpful Content Update, Link Spam Update, Product Reviews Update
If drop date aligns with a named update → algorithmic cause If drop date does NOT align with any update → technical cause, manual action, or competitor growth
Phase 2: Update Type Fingerprinting
Panda Fingerprint (Content Quality)
- Site-wide traffic drop
- Low-quality pages (thin, duplicate, keyword-stuffed) exist on domain
- Recovery: 2 core updates minimum (6-12 months)
- Diagnosis: run
panda-quality-score-audit
Helpful Content System Fingerprint (HCU)
- Site-wide traffic drop to information-heavy content
- Content exists primarily to rank, not to help
- Drop coincides with HCU update date
- Recovery: full content audit + Who/How/Why framework applied
- Diagnosis: run
eeat-audit --phase hcu
Penguin Fingerprint (Link Spam)
- Drop in link-dependent rankings
- Sudden spike in low-quality link acquisition preceded drop
- Recovery: disavow + clean link profile
- Diagnosis: run
dataforseo-backlinksaudit
Core Update Fingerprint (Authority/Relevance)
- Rankings redistributed (some pages up, some down)
- Competitors with stronger E-E-A-T gained at your expense
- No clear pattern by page type
- Recovery: E-E-A-T improvement, topical authority strengthening
Phase 3: Manual Action Check
GSC → Security and Manual Actions → Manual Actions. If a manual action is present:
- Document the exact action type
- Do NOT attempt to recover algorithmically — manual actions require a reconsideration request
- Fix the specific violation cited, submit reconsideration
Phase 4: Technical Cause Ruling Out
If drop does NOT align with any update AND no manual action:
Checklist:
- [ ] Was there a site migration or domain change near the drop date?
- [ ] Were there robots.txt changes near the drop date?
- [ ] Were there canonical changes?
- [ ] Did server hosting change?
- [ ] Did site go down for any period? (Check uptime monitoring logs)
- [ ] Did competitor gain significant links to outpace you? (check
dataforseo-backlinksfor competitor)
Phase 5: Recovery Playbook
| Cause | Recovery Steps | Timeline | |-------|---------------|----------| | Panda / HCU | Content audit → consolidate thin pages → rewrite weak content → noindex lowest-quality section | 2-3 core updates (6-18 months) | | Core Update (authority) | E-E-A-T improvements → topical authority expansion → link building | 1-2 core updates (3-9 months) | | Penguin / link spam | Identify bad links → disavow file → clean acquisition → reconsider | 1-2 spam updates (3-6 months) | | Technical (robots, migration) | Fix root cause → re-crawl via GSC → monitor recovery | Weeks to months | | CTR / snippet loss | Rewrite titles and meta → add schema → test featured snippet capture | 2-6 weeks |
Phase 6: Post-Recovery Monitoring
After implementing recovery steps:
- GSC → Performance → monitor weekly (not daily — too granular)
- Compare to pre-incident baseline, not just to low point
- Do NOT make additional changes during the next core update period (changes take effect at updates, cannot evaluate mid-update)
Cross-References
panda-quality-score-audit— Panda fingerprinting and remediationeeat-audit— E-E-A-T and HCU scoringgoogle-update-proofing— proactive update resilience (run before incidents)dataforseo-onpage— technical SEO audit during phase 4dataforseo-backlinks— link profile audit for Penguin diagnosis
#seo-sop #seo #incident-response #traffic-drops #algorithm-updates #forensics