A CRO audit — Conversion Rate Optimisation audit — is a structured review of your website designed to identify where customers are dropping off, why they're not converting, and what changes are most likely to improve performance. It replaces guesswork with evidence and gives you a clear, prioritised action plan rather than a list of things that might help.
For ecommerce businesses especially, a well-run CRO audit is one of the highest-return activities available. The alternative — spending more on traffic to compensate for a leaking conversion funnel — is significantly more expensive and addresses the wrong problem entirely.
Why Run a CRO Audit?
Most businesses focus their growth efforts on acquisition — more traffic, more ad spend, more channels. But if 97 out of every 100 visitors leave without buying, the problem isn't traffic volume. It's what happens to visitors once they arrive.
The 5-Step CRO Audit Process
The first step is understanding how users actually move through your site and where conversion happens — or fails to happen. This means mapping the key commercial pages: homepage, category pages, product pages, basket, checkout, and confirmation. At each stage you're asking the same question: where are customers dropping off, and how many?
Start with your conversion funnel in GA4. Look at add-to-basket rates, checkout initiation rates, and checkout completion rates separately. A business with a 60% basket abandonment rate has a different problem to one with a 20% checkout drop-off — even if the overall conversion rate looks the same.
Not all traffic behaves the same way — and conversion rate varies significantly by source. A visitor arriving from a branded search term is far more likely to convert than someone clicking a broad social media ad. Aggregating all traffic into a single conversion rate hides the performance differences that matter most.
Segment your traffic by acquisition channel — organic, paid search, paid social, email, direct — and compare conversion rates, bounce rates, and average session depth across each. This tells you which channels are bringing high-intent traffic and which are inflating your session numbers while contributing little to revenue. It also tells you where the biggest opportunity lies: fixing the channel with the worst quality traffic, or improving the experience for the channel with the best.
Once you understand where users are dropping off and which traffic sources are underperforming, the next step is forming hypotheses and testing solutions. This is where CRO becomes an experimental discipline rather than a design exercise.
Good CRO testing starts with a clear hypothesis: "We believe changing X will improve Y because of Z evidence." Every test should have a defined success metric and a minimum runtime to achieve statistical significance. Common high-impact test areas include product page headlines and imagery, CTA copy and placement, delivery and returns messaging, trust signals near checkout, and form field reduction on lead or registration pages.
Small changes can have meaningful impact — but only if you test properly. Changing five things at once and seeing conversion go up tells you nothing useful about what worked.
The structure and design of a page is a conversion lever in its own right — separate from messaging or traffic quality. If a site is visually confusing, hard to navigate on mobile, or buries the key action below the fold, users will abandon regardless of how good the product or price is.
Common layout issues that damage conversion include: unclear visual hierarchy that doesn't guide the eye toward the CTA; competing elements that distract from the primary action; trust signals placed too late in the journey to reduce hesitation; and mobile experiences that were adapted from desktop rather than designed for thumb use from the start.
Reviewing pages through session recordings — watching real users interact with your site — is one of the fastest ways to identify layout problems that analytics alone won't surface. When you see a user repeatedly tapping something that isn't a link, or scrolling past a CTA multiple times, that's a layout problem, not a traffic problem.
A CRO audit is a starting point, not a destination. The businesses that consistently improve conversion over time are the ones that treat it as a continuous process — a rolling cycle of hypothesis, test, measurement, and learning — rather than a project that gets done once and filed away.
After each test, document what you learned — not just whether conversion went up, but why you think it happened and what it tells you about customer behaviour. These learnings compound. A test that fails still generates insight if you've run it correctly. Over 12 months of consistent testing, a business develops a genuine understanding of what its customers respond to that no competitor can easily replicate.
Set a regular cadence: new test every two to four weeks, results reviewed monthly, priorities adjusted quarterly based on cumulative learnings. The compounding effect of consistent CRO over a year is almost always larger than any single test would suggest.
CRO isn't really about tools or tactics — it's about understanding how people behave and making it easier for them to take action. The businesses that do this consistently are the ones that improve performance year after year without simply relying on more traffic or increased spend. It wasn't about complex solutions at the businesses where I've run this process. It was about understanding the customer and making the experience better.
- Step 1 — Identify touchpoints: map the funnel, find where customers drop off, quantify the gaps
- Step 2 — Analyse traffic sources: segment by channel, find which traffic converts and which doesn't
- Step 3 — Test messaging and journeys: form clear hypotheses, test one change at a time, measure properly
- Step 4 — Improve layout and UX: watch session recordings, fix what analytics alone can't show you
- Step 5 — Measure and iterate: treat CRO as a continuous discipline, not a one-off project
