Search Engine Guidelines
What is allowed in SEO, and what costs you visibility? A walkthrough of Google Search Essentials, the main spam policies, penalties and the way back.
Search engines want to show your content, but they have house rules. The guidelines describe what it takes to be found and displayed, and what can cost you your visibility. Know them, and you can work ambitiously without gambling with your most important channel. You can also see straight through a supplier promising shortcuts.
What the guidelines are
Google's rulebook is called Search Essentials, previously the Webmaster Guidelines, and it has three parts: the technical requirements for being indexed at all, the spam policies describing what Google actively works against, and best practices for content and structure. Bing maintains an equivalent set of Webmaster Guidelines, and in practice the principles are the same across search engines.
The most important point sits between the lines: the guidelines are a minimum. Meeting them does not give you rankings. It gives you the right to compete for them.
Spam policies: what search engines actively work against
Link spam
Links remain one of the strongest authority signals, which makes manipulating them the classic violation: paid links that pass value, systematic link exchanges, and networks of sites built purely to link. Google's spam systems have become good at recognizing the patterns and neutralizing the value, so the money spent buys nothing and the risk stays. Our principle across all link work is simple: your links should not look natural, they should be natural.
Mass-produced content without value
The scaled content abuse policy targets content produced at scale with the primary purpose of capturing search traffic, without real value for the reader. Note the wording. It is the purpose the policy targets, and it applies whether the content was written by people, by AI, or by a combination of both. A thousand thin pages are spam whether they were written by hand or generated in a minute.
Borrowing someone else's authority
Two newer policies close loopholes of the same kind. Site reputation abuse targets third-party content published on strong domains purely to ride on their authority. Expired domain abuse targets buying up lapsed domains and reusing them as traffic machines for content with no connection to the domain's history.
Technical manipulation
The oldest tricks are still against the rules: cloaking, meaning showing the search engine different content than the user, doorway pages built only for search engines, hidden text and hidden links. There is a reason they belong to the past, and they still turn up in audits.
Manual actions and algorithmic demotions
Consequences arrive along two paths, and the difference matters:
- Manual actions are issued by Google staff after a specific review. You are notified in Search Console with the reason stated, and there is a formal way back: clean up, document, and submit a reconsideration request.
- Algorithmic demotions happen automatically, through the SpamBrain spam system and the ongoing updates. There is no notification and no submit button. Visibility returns once the problem is genuinely solved and the systems have reassessed the site, typically in connection with a later update. Our guide to algorithm updates covers how those roll out and how to read them.
An honest caveat: most sites that lose visibility have not been penalized at all. They have simply stopped being rewarded, because competitors are doing it better or because the bar for quality has risen. In our experience the sinking feeling is identical in both cases, and the cure is completely different. So start by establishing which situation you are actually in, for example with a technical SEO audit.
The way back after a penalty
If you are dealing with a real penalty, the process is laborious and well documented.
Do not panic in week one. Google changes and experiments constantly. Give it a week or two of monitoring before you build a plan, or you will spend the month fixing something that was never broken.
Establish what was hit. Pull the affected URLs and queries out of Search Console and GA4 with a comparison period, then look at the new top results for those queries and work out what they do that you do not. This is the step that turns a traffic drop into a diagnosis.
Identify the exact violation and fix it consistently. Half-hearted cleanup only extends the process. Sort the work into content, links and technical issues, because those are three different teams: writers and editors, the people who own outreach and partnerships, and your developers.
Document, then submit. For manual actions you file a reconsideration request with the work described. Google's disavow tool, where you ask Google to ignore specific links, is relevant for manual link actions and clearly unnatural link profiles, but it should be used with care. Applied broadly, it also removes value that was real.
Expect months rather than weeks, and monitor URL by URL as you go.
AI content and the guidelines
Google's position is unambiguous by now: content is judged on quality and value, regardless of how it was produced. AI-assisted content is welcome when it is accurate and genuinely useful, and in the danger zone when it is a generic restatement of what already exists. The quality framework behind that judgment is E-E-A-T: experience, expertise, authoritativeness and trustworthiness. It is not a direct ranking factor, but it is the yardstick Google's systems and quality raters are calibrated against, and it is worth knowing properly. Read more in our walkthrough of E-E-A-T.
The practical implication for anyone producing at volume: test before you scale. A batch of pages published and measured tells you whether the format earns visibility. A thousand pages published at once tells you nothing until the damage is done.
The same logic applies in AI search
AI assistants like ChatGPT, Copilot and Perplexity do not publish spam policies in the same way, but the dynamic is identical. They cite and recommend sources they have reason to trust. Credibility built by the rules therefore pays twice, in the classic results and in the answers the AI surfaces give.
The guidelines reward those who build correctly from the start. If you are unsure whether your site has actual violations or simply unrealized potential, we uncover both in a free SEO analysis, and the wider picture of how the rules fit together lives in our SEO knowledge hub.
