Infrastructure Audit Checklist When Clients Report They Can't Find You

The call comes in on a Tuesday afternoon. A partner at a firm you have been courting for months says: "We tried to look you up online. We couldn't really find anything about your company."

Your stomach drops. You have a website. You have social media. You have clients who can vouch for you. But somehow, to the person making the decision, you are invisible.

This is not hypothetical. I have received this call. More than once. And each time, the instinct is to panic and start fixing everything at once. That instinct is wrong. You need a systematic audit, not a scramble.

Here is the checklist I use when this happens. Ordered by severity and fix speed, because when a contract is on the line, you triage.

The emergency audit checklist

Priority	Check	What to look for	Fix time
P0	Website loads	DNS resolves, HTTPS works, no 500 errors, loads in under 3 seconds from target geography	Minutes to hours
P0	Google Business Profile	Profile exists, verified, correct address/phone/hours, not suspended	Hours to days
P1	Branded search result	Search your exact company name in Google. Is your website the #1 result? What else appears?	Days to weeks
P1	JSON-LD structured data	Organization schema on homepage, Person schema for key people, sameAs array pointing to profiles	Hours
P1	sameAs loop integrity	Every profile in your sameAs array links back to your website. Every profile has consistent NAP data	Hours to days
P2	Wikidata entry	Does your company have a Wikidata item? Are properties filled: instance of, country, official website, founder?	Days
P2	LinkedIn company page	Page exists, logo present, description matches website, employee count visible, recent activity	Hours
P2	Industry directories	Listed in relevant directories (trade associations, chamber of commerce, procurement databases)	Days to weeks
P3	ORCID / author profiles	Key people have verifiable professional profiles linking to the organization	Hours
P3	News and press mentions	Any editorial coverage in the past 24 months? Third-party mentions that are not self-published?	Weeks to months
P3	AI platform visibility	Ask ChatGPT, Gemini, Perplexity: "What is [company name]?" Document what they return	Assessment only

P0: The site itself

Before anything else, confirm your website actually works. This sounds obvious. It is not. I have seen cases where a company's hosting expired without anyone noticing because the team only ever accessed their site from a cached browser. A procurement officer in Jakarta opens the URL and gets a parking page.

Check from outside your office network. Use a VPN or mobile data. Check HTTPS specifically, because some cheap hosting setups serve the site fine on HTTP but return certificate errors on HTTPS, which modern browsers flag as dangerous.

Next, Google Business Profile. For companies doing business locally, this is often the first thing a searcher sees. If it is not verified, if the information is wrong, or if Google has suspended it for policy violations, you have a gap that no amount of structured data fixes.

P1: Entity identity signals

Once you confirm the basics work, check your entity identity layer. This is where most infrastructure failures hide.

Search for your exact company name in Google. Put it in quotes. Your own website should be the first result. If it is not, something is seriously wrong with your domain authority or your brand name is colliding with another entity. (I know this problem intimately. "Ibrahim Anwar" competes with a Malaysian Prime Minister in search results. That is why "Hibranwar" exists as a differentiator.)

Check your structured data using the Rich Results Test. You need Organization schema on your homepage with name, url, logo, description, foundingDate, address, and a sameAs array. If this is missing or broken, that is your highest-impact fix.

Then verify the sameAs loop. As discussed in closed-loop entity infrastructure, every URL in your sameAs array needs to link back to your website. If your LinkedIn page does not list your website URL, the loop is broken. Google cannot confirm the connection.

P2: External verification

This layer is about whether entities outside your control confirm you exist.

Wikidata is underrated for this. A Wikidata item for your company is not glamorous and nobody will ever see it directly. But Google's Knowledge Graph and AI systems reference Wikidata heavily. If your competitor has a Wikidata entry and you do not, that is a structural disadvantage.

Industry directories matter more than most people think. If you are in manufacturing, are you listed in the relevant trade association directory? If you hold ISO certification, is there a public listing? These are exactly the kinds of independent sources that build entity confidence.

As I detailed in the competitor entity audit methodology, run the same checks on your top three competitors. See where they are listed that you are not. That gap analysis is more useful than any SEO tool report.

P3: Authority depth

The deeper verification signals take longer to build but are what separate findable companies from invisible ones.

Does the founder or director have an ORCID, a Google Scholar profile, or published work that links to the company? For professional services firms, the individuals behind the company are often more verifiable than the company itself.

Have you been mentioned in news coverage? Not press releases you paid for. Actual editorial coverage. Even a single article in a regional news site can be a corroborating signal that AI systems pick up.

Finally, test your AI visibility directly. Ask the major AI platforms about your company by name. The responses tell you exactly what these systems believe about you. If they return nothing, you know the scope of the problem. If they return incorrect information, that is a different problem with a different fix.

The 48-hour action plan

When a client calls with this problem and there is a deal at stake, here is what I prioritize in the first 48 hours:

Hour 0 to 4: Fix any P0 issues. If the site is down, bring it up. If Google Business Profile is missing, start the verification process.

Hour 4 to 12: Fix structured data. Deploy correct JSON-LD on the homepage and key landing pages. Verify the sameAs loop is intact. This is the highest leverage fix you can make quickly.

Hour 12 to 48: Update LinkedIn company page with consistent information. Create or update the Wikidata entry. Check and correct any industry directory listings.

Everything beyond 48 hours is strategic buildout, not emergency response. The full AI visibility audit framework covers the longer-term work. But the first 48 hours are about stopping the bleeding.

If you want a systematic approach to this kind of infrastructure work rather than doing it in emergency mode, that is exactly what entity infrastructure is designed for. Build the system before the call comes in, and the call never needs to come in at all.

The companies that learn this framework through the course library tend to catch these issues during routine maintenance rather than during a crisis. That is the difference between infrastructure and improvisation.