When an SEO company reports on rankings, it shows you where your pages appear in search results for the keywords that matter to your business, how those positions change over time, and what those positions actually mean for visibility and traffic. A useful ranking report does more than list numbers. It explains how the data was collected and how to read it without drawing the wrong conclusions.

What goes into a rankings report

Most agencies build the ranking section of a report from a dedicated rank tracking tool. These tools run automated checks on a set of keywords you have agreed on, then record the position your site holds for each one. A good report groups those keywords in a way that is easy to follow, often by topic, by service, or by priority, rather than presenting one long undifferentiated list. It typically shows the current position, the previous position, and the direction of change, so you can see movement at a glance.

The report should also state the conditions under which the checks were run. Rankings are not a single fixed value, so the agency should tell you the location the tool simulated, whether it measured mobile or desktop results, and how often it checked. Daily checks capture volatility that a weekly snapshot can hide. If those details are missing, a position number is hard to interpret.

The limits of rank tracking

A position from a rank tracking tool is a controlled measurement, not a universal truth. Google personalizes and localizes results. Two people searching the same keyword can see different results depending on their location, device, search history, and whether they are signed in. Rank trackers deliberately strip out personalization to produce a stable, repeatable number, which means the tracked position may differ from what an individual searcher sees on their own screen.

Location matters even more for businesses that serve a specific area. Checking a single point, such as one city center or one ZIP code, can misrepresent how you rank across a wider service area, since results shift from one neighborhood to the next. Some agencies address this with grid based local tracking, which checks many points across a map and reports a range rather than one figure. A careful report acknowledges this and frames a tracked position as a directional indicator rather than a guarantee.

Why impressions and clicks belong in the report

Because tracked positions have these limits, a strong rankings report does not stop at position numbers. It combines them with data from Google Search Console, which records the impressions and clicks your site actually received in real searches. Impressions show how often your pages appeared, clicks show how often people chose them, and the ratio between the two, the click through rate, shows how compelling your listing was once it appeared.

This pairing matters because position and visibility are not the same thing. A page can hold a high tracked position for a keyword that few people search, or it can rank a little lower yet earn a strong volume of impressions and clicks because it matches a broader set of related queries. Search Console also surfaces the full mix of queries bringing people to your site, including terms no one thought to track. Reading positions and Search Console data together gives a more honest picture than either source alone.

Questions to ask

When reviewing how an SEO company reports on rankings, ask which keywords are being tracked and why, what location and device settings the tool uses, and how often it checks. Ask whether the report pairs tracked positions with impressions and clicks from Search Console, and whether positions ultimately connect to traffic and business outcomes. Clear answers to those questions are a sign that the agency understands both the value and the limits of ranking data, and is reporting it in a way you can trust.

You can tell an SEO company is ethical by checking its work against one fixed standard: Google’s published rules. Google calls these rules Search Essentials (the documentation was formerly named the Webmaster Guidelines) and pairs them with a public set of spam policies. An ethical company does work that holds up when measured against those documents. An unethical one does work that only holds up while it goes undetected. That difference is something you can verify before you sign anything, and you do not need to be an SEO expert to do it.

Ask them to map their plan to Google’s own rules

The most direct test is to ask the company to explain how its proposed work fits Google’s Search Essentials. An ethical company will be comfortable doing this. It will describe specific tasks, such as improving page content, fixing technical crawl issues, or earning links by producing material other sites genuinely want to cite, and it will be able to point to the part of Google’s documentation that supports each task. A company that cannot or will not connect its plan to those rules is asking you to take its methods on faith, which is the opposite of ethical practice.

Google’s spam policies name the practices that cross the line: cloaking (showing Google different content than people see), sneaky redirects, doorway pages, keyword stuffing, hidden text, scaled or machine-generated content made only to rank, and link schemes such as buying links or trading them in bulk. If anything in the company’s plan resembles these, that is a clear signal the work is not ethical. Ethical SEO is sometimes called “white hat” SEO precisely because it stays inside these published boundaries.

Watch how they talk about results and risk

Ethical companies are honest about what SEO can and cannot do. Google states plainly that no one can guarantee a number one ranking, because rankings depend on Google’s algorithms, which the company does not control. A firm that guarantees specific positions, or promises results on a fixed timeline, is either misinformed or willing to mislead you. Neither is acceptable.

An ethical company will also tell you about risk. Practices that violate Google’s spam policies can trigger a manual action or an algorithmic devaluation that removes a site’s rankings, and recovery is slow and uncertain. A company that never mentions any downside, or treats every tactic as perfectly safe, is not giving you a complete picture.

Check their own reputation the way Google checks websites

Google’s quality guidelines tell its own raters to judge a site by looking for independent, outside information about it, and to trust reputable external sources over what the site says about itself. Apply that same method to the SEO company. Look for reviews, case studies you can independently confirm, and references you can actually call. Ask to speak with a current client. An ethical company will have a verifiable track record and will let you see it. Be skeptical of a firm whose only evidence is its own marketing.

Look for transparency you can confirm

An ethical company will tell you exactly what it will do, in plain language, and will give you reporting that shows the actual work performed, not just a rising graph. You should be able to see which pages were changed, which technical fixes were made, and where any new links came from. If a company keeps its methods secret, refuses to name the sites it builds links on, or controls all access to your own analytics and search console accounts, you cannot verify that the work is clean. Ethical practice survives inspection. If you are not allowed to inspect it, treat that as your answer.

The underlying test

Every check above comes down to one question: is the work being done for real people, or only to trick a search engine? Ethical SEO improves the site for the people who use it, which is also what Google’s systems are built to reward. Unethical SEO targets the algorithm and treats users as an afterthought. When a company’s plan, its promises, and its reporting all point toward genuine improvement that you can verify against Google’s published rules, you are dealing with an ethical company. When any of those three fall apart under questioning, you have your answer there too.

For most engagements, building the actual SEO strategy takes somewhere between one and four weeks once onboarding and the audit are complete. This is the planning step that sits after the company has reviewed your site and your goals, and before any optimization work begins. Smaller local sites tend to fall at the short end of that range, while large or competitive sites often need three to four weeks or longer. The numbers below are general ranges, not fixed rules, so treat any timeline a company gives you as an estimate tied to your specific situation.

What the strategy step actually involves

The strategy phase is separate from the audit that comes before it and the execution that comes after. By this point the company already knows what is technically wrong with the site and what your priorities are. The strategy step turns that information into a plan: which keywords and topics to target, how to group them into pages and clusters, which technical fixes to tackle first, what content needs to be created or rewritten, and how internal linking and site structure should be arranged. It usually also includes a rough order of operations and a way to measure progress.

Most of this work is research and analysis rather than production. The company maps your current pages against the keywords you can realistically compete for, looks at how competing sites are organized, and decides where the effort will produce the most return. Because it is planning work, it generally moves faster than the months of execution that follow.

What changes the timeline

Several factors push the strategy phase toward the longer end of the range. Site size matters most: a 20-page service business is far quicker to plan for than a site with thousands of URLs, multiple product lines, or several locations. A more competitive market means more analysis, since the company has to study stronger competitors and find realistic openings. The clarity of your goals also matters. If your objectives, target audience, and priority services are well defined, planning is faster. If they are still being worked out, the company may need extra rounds of discussion.

Internal process adds time too. Many companies build a draft, review it internally, then present it to you for feedback before finalizing. Each review cycle can add several days, especially if approvals on your side involve more than one person. Agencies also balance the strategy work against their other clients, so their current workload affects how quickly your plan is delivered.

A realistic expectation

A practical way to think about it: a focused local or small business strategy is often ready within one to two weeks of the audit being finished. A mid-sized business site commonly takes two to three weeks. A large, multi-section, or highly competitive site can take a month or more, particularly when several stakeholders need to sign off.

It is reasonable to ask a company for a specific timeline before you sign, and to ask what the finished strategy will include. A clear plan should name the priority pages or topics, explain the reasoning behind those choices, and set out the first phase of work. If a company promises a complete strategy in a day or two for a large site, or cannot explain what the document will contain, that is worth questioning. Spending adequate time here is not a delay. The strategy guides every later decision, and a rushed plan tends to cost more time later in reworked content and misdirected effort.

Keep in mind that finishing the strategy is not the same as seeing results. Once the plan is approved, execution begins, and visible ranking and traffic changes generally take several months to appear. The strategy phase is a small part of the overall timeline, but it is the part that determines whether the rest of the work is pointed in the right direction.