The 6 Agentic AI Protocols Every SEO Needs to Know

A user asks Gemini: “Find me a task chair under $400 with lumbar support and free shipping. Order the best one.”

The AI doesn’t open a new tab. It doesn’t ask the user to click anything. Instead, it queries product databases, cross-references reviews, checks real-time inventory, compares shipping policies, and initiates a checkout — all without a human touching a single page.

These are all things the user would have done themselves, but now in a fraction of the time, with as much effort as it took to write the initial prompt.

Okay, we might not be quite at the stage where everyone is letting AI agents make all their purchases for them. But it’s no longer an unrealistic future.

What made that possible isn’t the AI models themselves. It’s the infrastructure we’re seeing become an increasingly important part of how modern websites are built. This infrastructure consists of a stack of protocols that tells AI agents how to find each retailer’s site, understand their catalog, verify their claims, and take action.

These protocols define how AI agents interact with your brand. And most SEOs have no idea they exist.

By the end of this article, you’ll understand what each protocol does, how they differ from one another, and why you need to pay attention to what’s going on underneath the hood of AI search if you want to stay visible going forward.

Why Protocols Matter for SEOs

Protocols determine whether an AI agent can interact with your brand programmatically, or whether it has to guess. Brands that can speak the agent’s language are more likely to not just be surfaced, but also recommended and, ultimately, interacted with to make purchases.

Think of how robots.txt and XML sitemaps became table stakes for search crawlers. Agentic protocols are shaping up to be that for AI agents.

Put simply: if you want agents to be able to take action on your site — whether that’s making a purchase, booking a table, or completing a form — you need to understand these protocols.

Note: We’re not suggesting that without these protocols AI agents and users will never access your site or buy from them. Agentic commerce is still pretty new, and even the protocols themselves are still evolving. But we believe that agents will increasingly act on behalf of users, and that the easier you make it for them to do that on your website, the better positioned you’ll be as agentic commerce becomes the norm.


The Protocol Stack: A Quick Map

These protocols aren’t competing standards fighting for dominance. They operate at different layers of the same stack, and most are designed to work together.

Here’s a quick breakdown of what these protocols do:

Layer What It Does Key Protocols
Agent / Tool Connects agents to external data, APIs, and tools MCP
Agent / Agent Lets agents hand off tasks to other agents A2A
Agent / Website Lets websites become directly queryable by agents NLWeb, WebMCP
Agent / Commerce Enables agents to discover products and complete purchases ACP, UCP

Note: As with everything AI, the agentic protocols we’ll give more details on below are constantly evolving. This means some platforms are yet to adopt some of the protocols, and the specifics of each protocol could also change over time.


MCP: Model Context Protocol

MCP is the universal connector between AI agents and external tools, data sources, and APIs.

How It Works

Before MCP, every AI tool needed a custom integration for every data source it wanted to access. If you wanted a chatbot to pull live pricing from your database and cross-reference it with your CMS, someone had to build a bespoke connection between those systems. Then rebuild it whenever either one changed.

MCP standardizes that connection. Think of it as USB-C for AI: one protocol that lets any agent plug into any tool, database, or website that supports it.

An agent using MCP can pull live pricing data, check inventory, read structured content from a site, or execute a workflow, all through the same interface.

The website or tool publishes an MCP server, and the agent connects to it. There’s much less need for custom integration work on either side.

Who’s Behind It

MCP was launched by Anthropic in November 2024. It has since been adopted by OpenAI, Google, and Microsoft. MCP is now governed by an open-source community under the Agentic AI Foundation (AAIF), a directed fund under the Linux Foundation.

As of early 2026, there are more than 10K MCP servers out there, making it the de facto standard for agent-to-tool connectivity.

What It Means for Your Brand

Structured data, clean APIs, and accessible HTML have always been good technical SEO. Now they’re also agent compatibility requirements. Brands with MCP-compatible data give agents something to work with. Brands without it force agents to scrape pages and infer meaning, which creates friction and can affect whether they recommend you.

A2A: Agent-to-Agent Protocol

A2A is the standard that lets AI agents from different vendors communicate, delegate tasks, and hand off work to one another.

How It Works

MCP lets an agent talk to tools. A2A lets agents talk to each other.

When a task is complex enough to need multiple specialist agents — like one for research, one for comparison, and one for completing a transaction — A2A is the protocol that coordinates them.

Each A2A-compliant agent publishes an “Agent Card” at a standardized URL (that looks like “/.well-known/agent-card.json”). This card advertises what the agent can do, what inputs it accepts, and how to authenticate with it. Other agents discover these cards and route tasks accordingly.

The result: agents from entirely different companies, built on different frameworks, running on different servers, can collaborate on a single user request. No custom-built connections required.

Who’s Behind It

Google launched A2A in April 2025 with 50+ technology partners, including Salesforce, PayPal, SAP, Workday, and ServiceNow. The Linux Foundation now maintains it under the Apache 2.0 license.

What It Means for Your Brand

As multi-agent workflows become more common, agents may evaluate your brand across multiple checkpoints before a human sees the result.

That chain might look something like this:

  • A research agent surfaces your product from a broad category query
  • An evaluation agent reads your reviews and checks the sentiment
  • A pricing agent verifies your costs against third-party sources
  • A trust agent cross-references your claims for consistency

A2A orchestrates that entire chain. If your data is inconsistent across sources, like if your pricing page says one thing and your G2 profile says another, the AI agent might filter your brand out as a contender. All before the user even sees you as an option.

NLWeb: Natural Language Web

NLWeb is Microsoft’s open protocol that turns any website into a natural language interface, queryable by both humans and AI agents.

How It Works

Right now, when an AI agent visits your website, it might have to make a lot of guesses. It scrapes your HTML, infers meaning from your content, and relies on your page being structured properly to be able to parse it effectively. There’s a lot of room for error.

Once a site implements NLWeb, any agent can send a natural language query to a standard “/ask” endpoint and receive a structured JSON response. Your site then answers the agent’s question directly, rather than the agent interpreting your HTML.

Every NLWeb instance is also an MCP server. A site implementing NLWeb automatically becomes discoverable within the broader MCP agent ecosystem without any additional configuration.

Who’s Behind It

NLWeb was created by R.V. Guha, the same person behind RSS, RDF, and Schema.org. (That’s no coincidence.) NLWeb deliberately builds on web standards that already exist, which means a lot of websites are close to NLWeb-ready right now.

Microsoft announced NLWeb at Build 2025 in May 2025. It’s open-source on GitHub. Early adopters include TripAdvisor, Shopify, Eventbrite, O’Reilly Media, and Hearst.

What It Means for Your Brand

For SEOs, NLWeb is a natural extension of work you may already be doing.

Schema markup, clean RSS feeds, and well-structured content are the foundation NLWeb builds on. Sites that have invested in structured data have a head start. Sites that haven’t are harder for agents to work with, but they can easily catch back up by implementing schema markup now.

Structured data already helps search engines, and it can make it easier for agents to understand and interact with your site too. That increases the value of technical SEO work you may have been putting off.

WebMCP

WebMCP is a proposed W3C standard that lets websites declare their capabilities directly to AI agents through the browser.

How It Works

NLWeb makes your content queryable. WebMCP goes one step further: it lets websites declare what actions they support. These actions could include “add to cart,” “book a demo,” “check availability,” and “start a trial.”

These capabilities are declared in a structured, machine-readable format. Instead of an agent scraping your UI and guessing how your checkout works, WebMCP gives it an explicit map, straight from the source (you).

Who’s Behind It

Google and Microsoft proposed WebMCP, and the W3C Community Group is currently incubating it. Chrome’s early preview shipped in February 2026, with broader browser support expected by mid-to-late 2026.

What It Means for Your Brand

WebMCP is the clearest preview of where agent-website interaction is heading.

Imagine you have two brands with similar products, similar pricing, and similar reviews. The one whose site declares clear, structured capabilities is easier for an agent to act on. The other requires guesswork.

Agents are likely to take the path of least friction, and WebMCP helps you reduce friction to a minimum.

ACP: Agentic Commerce Protocol

ACP is OpenAI and Stripe’s open standard for enabling AI agents to initiate purchases.

How It Works

ACP focuses specifically on the checkout moment. It creates a standardized way for an AI agent to complete a purchase on a merchant’s behalf, handling payment credentials, authorization, and security through the protocol itself.

Before ACP, an agent that wanted to complete a purchase had to navigate each merchant’s unique checkout flow. A different form, a different payment process, and a different confirmation step for every retailer. ACP standardizes this process.

Merchants integrate with ACP through their commerce platform, and once live, checkout becomes agent-executable. The user doesn’t have to do anything except approve.

ACP originally powered ChatGPT’s instant checkout functionality, but that has since been removed by OpenAI in favor of dedicated merchant apps. ACP may still power product discovery within ChatGPT, and may be used within these apps, but things are evolving fast.

Who’s Behind It

OpenAI and Stripe launched ACP in September 2025. It’s open-sourced under Apache 2.0, with platform support still expanding.

What It Means for Your Brand

If an agent has shortlisted your product and the user tells it to go ahead and pay, ACP is what allows the agent to complete the transaction. If your brand isn’t integrated with this workflow, you risk the AI agent getting stuck or being unable to complete that purchase.

The agent can recommend you, but it can’t buy from you. That gap will matter more as agentic commerce becomes the norm.

UCP: Universal Commerce Protocol

UCP is Google and Shopify’s open standard for the full agentic commerce journey, from product discovery through checkout and post-purchase.

How It Works

ACP focuses on the checkout moment, while UCP covers the entire shopping lifecycle.

An agent using UCP can discover a merchant’s capabilities, understand what products are available, check real-time inventory, initiate a checkout with the appropriate payment method, and manage post-purchase events like order tracking and returns. All through a single protocol.

UCP is built to work alongside MCP, A2A, and AP2 (Agent Payments Protocol), meaning it plugs into the broader agent infrastructure rather than replacing it.

Merchants publish a machine-readable capability profile. Agents then discover it, negotiate which capabilities both sides support, and proceed.

Who’s Behind It

Google and Shopify co-developed UCP, with Google CEO Sundar Pichai announcing it at NRF 2026. More than 20 launch partners signed on, including Target, Walmart, Wayfair, Etsy, Mastercard, Visa, and Stripe.

What It Means for Your Brand

When a user asks Google AI Mode to find and buy something, UCP determines whether your brand is in the conversation, and whether the agent can actually complete the transaction.

The machine-readability of your product data, the consistency of your pricing across sources, the clarity of your inventory signals: all of it feeds directly into whether an agent can successfully transact with you.

ACP vs. UCP: The Key Difference

ACP and UCP are often confused, and they do share some similarities, but here’s where they differ:

ACP UCP
Built by OpenAI + Stripe Google + Shopify
Scope Discovery and checkout layers Full journey: discovery, checkout, and post-purchase
Powers ChatGPT instant checkout and product discovery Google AI Mode, Gemini
Architecture Centralized merchant onboarding Decentralized: merchants publish capabilities at /.well-known/ucp
Status (early 2026) Live, wider rollout in progress Live, wider rollout in progress

ACP and UCP are complementary, not competing. A brand may eventually support both — one for ChatGPT’s ecosystem, one for Google’s.

For now, the practical question is: which platforms matter most to your customers, and where does your commerce infrastructure make integration easiest? Choose the protocol that aligns with your answer, or use both.

Example of Agentic Search Protocols in Action

These protocols don’t operate in isolation. Here’s what they might look like working together (note that this isn’t necessarily exactly what’s going on at each stage, and is just for illustrative purposes):

Scenario: A user asks Gemini: “Find me a comfortable task chair under $400 with lumbar support and free shipping. Order the best option.”

Gemini – Order best chair

Step 1: MCP Activates

The agent uses MCP to connect to external tools: product databases, review platforms, retailer inventory feeds. It can query live data rather than relying on cached or trained knowledge.

Step 2: A2A Coordinates

The agent then coordinates with specialist agents published by brands and review platforms via A2A. One evaluates ergonomics reviews. One checks pricing consistency across sources. One verifies free shipping claims against each retailer’s actual policy page.

Step 3: NLWeb Answers Queries Directly

The agents query each retailer’s site. Brands with NLWeb implemented respond to the agent’s /ask query with structured data. This includes things like accurate inventory, real-time pricing, and product attributes. Brands without it force the agent to scrape and infer, slowing it down and potentially leading to them being skipped altogether.

Step 4: WebMCP Declares Available Actions

The “winning” retailer’s site has declared its checkout capabilities via WebMCP. The agent knows exactly what actions are available and how to initiate them without any guesswork.

Step 5: UCP Completes the Transaction

The purchase is executed via UCP, entirely within Google’s AI experience. The merchant’s backend communicates through the standardized API. The user gets an order confirmation, and they never visited a single product page.

Obviously this is the fully agentic scenario. In reality, not every purchase is going to be left entirely to an AI agent.

But even when a human wants to evaluate options before clicking buy, making it as easy as possible for the agent to make recommendations is still good practice. That’s why these protocols are worth paying attention to.

What SEOs Should Do Now

Understanding the protocol layer is step one. Here’s where to focus next:

1. Prioritize Machine-Readable Content Over Volume

Before adding more pages, make sure your existing pages can be parsed cleanly by an agent. That means:

  • Having your pricing in plain text, not locked behind JavaScript drop-downs
  • Using feature lists that don’t require interaction to reveal
  • Including FAQ content that renders server-side
  • Using schema markup on product and organization pages

An agent that can’t read your page can’t recommend or buy your products.

2. Audit Your Structured Data

NLWeb builds on Schema.org, RSS, and structured content that sites already publish. If you’ve invested in schema markup, you have a head start on NLWeb compatibility.

If you haven’t, this is now a double reason to prioritize it: it improves your search visibility and makes your site more easily queryable by agents.

3. Check Your Consistency Across Sources

Agents verify claims by cross-referencing your site, review platforms, and third-party content. If your pricing page says one thing and your Capterra profile says another, agents can flag the discrepancy and lose confidence in your brand, making the recommendation or purchase less likely.

Audit for cross-source consistency the same way you’d audit NAP consistency in local SEO. It’s the same underlying principle, just for a different kind of crawler.

4. Get on the ACP and UCP Waitlists Now

These protocols are in active rollout. Early adopters benefit from lower competition in agent-mediated commerce while the rest of the ecosystem catches up. Join Stripe’s waitlist for ACP access. And join Google’s UCP waitlist too.

For other protocols like MCP, talk to your dev team about making sure your site supports them.

5. Monitor Your AI Footprint as a Regular Practice

Search your brand in ChatGPT, Perplexity, and Google AI Mode. Are agents describing your product accurately? Is your pricing consistent with what they’re surfacing? Are competitors appearing where you aren’t?

This is the new version of checking your SERP presence, and it needs to become a recurring part of your workflow, not a one-time audit.

Understand how your brand is appearing in AI search right now with Semrush’s AI Visibility Toolkit. It shows you where you’re showing up, where you’re behind your rivals, and exactly what AI tools are saying about your brand.

Brand Performance – Backlinko – Key Business Drivers

What’s Next for Agentic Search Protocols?

The protocols we’ve discussed here are already live, but they’re still evolving.

WebMCP is still in early preview. ACP and UCP are mid-rollout. New protocols — for agent payments, agent identity, agent-to-user interaction — are still being drafted and debated.

But the SEOs that understand and implement these protocols correctly are the ones most likely to see success.

Find out where your brand stands right now with our free AI brand visibility checker.

The post The 6 Agentic AI Protocols Every SEO Needs to Know appeared first on Backlinko.

Read more at Read More

Web Design and Development San Diego

Google Ads MCC hacked? Here’s what to do immediately

Google Ads MCC hacked? Here’s what to do immediately

At midnight on Jan. 5, hackers took over our Google Ads Manager Account (MCC). We weren’t alone. While it’s hard to get an exact count, hundreds, if not thousands, of agencies have been affected by the hacks, in turn affecting tens of thousands of accounts. 

While I wouldn’t wish this experience on our worst enemy, having been through it, I have some insights that I hope can help you prevent the same experience from happening to your MCC account.

How we were hacked

Despite having two-factor authentication (2FA) and allowed domains enabled, the hackers were able to get into our account via an employee’s email address. It was clearly a targeted hack: the night of the hack, the hackers tried to get in via two other email accounts at our company before they succeeded with the third.

While phishing or compromised passwords may have originally gotten them into the system — we still don’t know which — we later learned that the account the hackers used had been compromised for months and that they had created their own 2FA that they had been using all along.

Once they gained access to our account, the hackers removed everyone else’s access to the MCC. They then changed the allowed domain to Gmail and granted access to over a dozen people. The hackers then created a new MCC in our company’s name and invited most of our clients. Luckily, none of them accepted.

In the few hours they were in the MCC, the hackers proceeded to create chaos. They removed all the users from some accounts and changed the payment method in others. They launched new campaigns on only a few accounts, yet somehow also attempted half-million-dollar credit card charges on two others (despite not running any ads in those accounts).

Your customers search everywhere. Make sure your brand shows up.

The SEO toolkit you know, plus the AI visibility data you need.

Start Free Trial
Get started with

Semrush One Logo

What happened after the hack

We were very lucky. The hackers were locked out within eight hours, and we regained access in just over a week. They spent only about $100 across the MCC. Neither crazy credit card charge went through. We were fully recovered from the hack within two weeks. How did we do this? Let’s take a look at the steps we took.

Step 1: We contacted Google

When we were hacked, we immediately contacted our reps at Google. We’re incredibly lucky to have wonderful Google reps with whom we’ve built longstanding relationships, including one we’ve worked with for over three years. 

These long-term relationships helped, and our reps went to bat for us. They continued to put pressure on the support cases until they were resolved and helped connect us to the resources we needed. Not everyone has their own reps, but you can also take these steps on your own.

Step 2: Fill out the forms

Our Google reps immediately directed us to their “What to do if your account is compromised” resource. From there, we filed Account Takeover Forms, alerting Google to the hack. We were directed to file a form for each of our accounts that had been hacked.

We first filed one for our MCC, even though the form, at the time, said not to use it for MCCs. It looks like that language has since been changed, which is great — don’t skip this step. Getting back into the MCC makes it easier to resolve all issues, rather than having to file tickets and coordinate access for each account.

Step 3: Contact clients

At the same time, we directed any clients who still had access to their accounts to disconnect them from our MCC, and to grant access to a non-compromised email account. That way we were able to secure the accounts, work on them, and mitigate any damages immediately. We were also able to triage our accounts to figure out which we were still able to access, and which had no admins left with access.

Step 4: Reset billing

Disconnecting from our MCC wound up being a very important step. That’s because when our accounts were disconnected from the MCC, we were easily able to reset the billing by editing the payment manager and undoing all of the payment chaos that the hackers had created. We were then able to reconnect them without issue.

Step 5: Check change history

When we eventually did get back into the accounts, we immediately checked the change history, which we were able to do at the MCC level for additional speed. All the changes the hackers made during that time were there with time stamps, allowing us to put together a timeline of the hack and remediate any remaining issues.

Get the newsletter search marketers rely on.


Best practices for recovering from a hack

During all this activity, a few things were especially critical to our success in recovering the account and mitigating damage. Here’s a quick rundown of best practices to keep in mind.

Make sure clients have access

This isn’t just a best practice, but something we believe should always be the case for ethical reasons. Having additional admins in the account let us regain access immediately, despite being locked out of the MCC, and remediate issues without losing time or momentum. 

Google also pushed back on any access or billing changes that didn’t have approval from an existing admin, so having people still in the accounts was critical.

Keep your MCC clean

Remove old clients, and any other MCCs for tools you’re no longer using. We didn’t do this, and wish we had. We’ve made it a best practice for our accounts moving forward.

Limit team access

Make sure your team only has the minimum access they need. Standard access is great. Admin access should be reserved for as few people as possible. The compromised account belonged to a junior team member who didn’t need admin-level access. 

This isn’t to say they wouldn’t have gotten in through a more senior team member’s account — as mentioned, they did try to get in through several before succeeding — but it would have mitigated risk.

Use credit cards or invoices

Never connect your bank accounts to your MCC. We’ve heard of companies that have lost hundreds of thousands of dollars with this same kind of hack. Because our clients were all either on invoice or credit cards, the hackers couldn’t quickly spend money in a way that hit their accounts. 

As noted earlier, the credit card companies rejected the very suspicious half-million-dollar charges the hackers attempted to make, and notified the credit card holders. The clients we were invoicing were never charged, and everything was captured on the invoices before billing.

Invest in relationships

It’s important to invest in your relationships with your Google reps, and fellow agency owners. We remain incredibly grateful to all of the people who helped us, or even just commiserated with us along the way. This experience would’ve been even more painful if we’d had to go through it alone.

How to prevent being hacked

For those who have yet to be hacked, congratulations! Let’s try to keep it that way. Here are some things you can do to make it much less likely that this will ever happen to your accounts.

Start with a clean reset

Begin by kicking every single user out of your account, and have everybody on the accounts reset their passwords. Make sure you log everyone out of every session they were in on every device. 

Our hackers were sitting around auto-logging in and keeping their sessions open for over two months prior to the night they took over the MCC. If we’d forced a reset and logged everyone off, we would’ve removed their access without even realizing it.

Enable 2FA and allowed domains

Make sure there’s only one 2FA per person. 2FAs that use authenticators or physical keys are better than pinging a device. The hackers had created their own 2FA to get into our employees’ accounts, and we never even had an idea that it was happening.

Audit and limit access

Make sure the minimum number of people have the minimum access they need to the MCC. This reduces your risk.

Enable multi-party approval

Google rolled out this new feature quite recently to help prevent account takeovers. Essentially, the feature requires that a second admin verifies any big changes before they happen. If you’d like to read up on this feature, here’s a great guide introducing multi-party approval.

Back up your accounts

You can copy and paste your accounts into your preferred spreadsheet app via Google Ads Editor. Make a habit of doing this periodically so that you’ll always have a copy of how things were in case of a hack. With the backups, you can easily revert back if you need to.

Use strong passwords

It’s important to use unique passwords that aren’t being used anywhere else. That way, if one site gets hacked, your MCC is still not at risk. We’re still not sure how the hackers passed the initial password stage to be able to create their own 2FA.

Invest in security monitoring

If you want to be extra careful, invest in security software and/or a cybersecurity expert to monitor your system. We have now done this, and it’s been amazing (and scary) to see how many phishing attempts have already been caught in the six weeks since we did it.

A note for clients: If you’re a client and another team is managing your Google Ads, do not accept any Google Ads MCC access requests that you aren’t expecting. Please make sure you always know who and what you’re giving access to. When in doubt, double-check with the team that is managing your account. A little caution can go a long way.

See the complete picture of your search visibility.

Track, optimize, and win in Google and AI search from one platform.

Start Free Trial
Get started with

Semrush One Logo

Stay safe out there

The good news is that Google knows about these issues, and is actively finding ways to tighten their systems to prevent hacks. In the meantime, I hope this article has helped make our loss your gain. With an ounce of prevention, you’re likely to prevent a pound of pain.

Read more at Read More

Web Design and Development San Diego

How Google’s removal tools work for SEO and reputation management by Erase Technologies

When a client calls about a damaging search result, you might typically default to one of two responses: “we can suppress it” or “there’s nothing we can do.” Both skip the middle ground — where Google’s removal tools live.

Google provides tools to remove or deindex content from search results. They’re underused, frequently misunderstood, and often conflated.

This guide breaks down what each tool does, when to use it, and what it can’t do — so you can triage client situations accurately and set expectations that hold.

The distinction that changes everything: removal vs. deindexing

Before you use any tool, get one thing right with clients: the difference between two outcomes that look the same but aren’t.

  • Removal at source: The content is deleted from the site where it lives. Once removed, Google will drop it from its index as it re-crawls the page. This is the cleanest outcome — but it requires the site owner to act. Google’s tools can’t force it.
  • Deindexing: Google removes the URL from its index, so it won’t appear in search results — even if the page still exists. Anyone with the direct URL can still access it. This is what most of Google’s self-service tools do.

The practical implication: deindexing fixes a search problem, not a content problem. If the content is the liability — a news article, court record, or damaging forum post — deindexing reduces risk but doesn’t eliminate it. That context matters when you advise clients.

Google’s removal tools, explained one by one

1. The URL removal tool (Search Console)

In Google Search Console under Index > Removals, this tool lets you temporarily hide a URL or directory from search results. Removal lasts about six months. If the URL still exists, it may reappear.

  • Who it’s for: You, if you control the site in Search Console. You can’t use it to remove someone else’s content.
  • Common use case: Your site has an outdated page you don’t want surfacing — old press releases, deprecated product pages, or pages you’ve updated or removed.
  • What it won’t do: Remove content from a site you don’t control. This misconception causes significant client frustration.

2. The outdated content removal tool

This is the public tool to request deindexing of pages already removed or significantly changed at the source.

  • When it works: The content is gone (the page 404s or the content is removed), but Google still shows a cached version. You submit the URL, Google recrawls it, and if the content is gone, it removes the result and cached snippet.
  • When it doesn’t: The page still exists and the content is live. Google will verify it and reject the request.
  • Practical use: After you’ve removed content at the source, use this to speed up deindexing instead of waiting for the next crawl. It’s not a removal tool — it triggers a recrawl.

For a more technical breakdown, see this step-by-step guide to Google’s removal tools.

3. The Results about you tool

Launched in 2022 and expanded in August 2023, the Results About You tool lets you request the removal of specific categories of personal information from Google Search. It added proactive alerts and broader coverage, then expanded again in early 2026 to include government-issued IDs, passport data, Social Security numbers, and improved reporting for non-consensual explicit imagery, including AI-generated deepfakes.

  • What it can remove:
    • Home addresses and precise location data
    • Phone numbers
    • Email addresses
    • Login credentials and passwords
    • Credit card and bank account numbers
    • Images of handwritten signatures
    • Medical records
    • Personal identification documents (passports, driver’s licenses)
    • Explicit or intimate images shared without consent
  • What it can’t remove: General information that falls outside these categories — news articles, reviews, social posts, court records, or professional information. Those require different paths.
  • Why it matters: If you’re dealing with doxxing, data broker sites, or exposed sensitive data, you now have a self-service path. Managing this tool is increasingly part of ORM work.

4. Legal removal requests

For content outside self-service categories, you can submit legal removal requests to Google:

  • Defamation: False statements of fact about an identifiable person.
  • Copyright (DMCA): Unauthorized use of copyrighted material.
  • Court orders: Legally binding orders requiring removal.
  • Right to be Forgotten (EU/UK): Requests under GDPR and UK law, based on the 2014 Google Spain v. AEPD ruling.
  • Other legal grounds: Harassment, illegal imagery, or other violations.

Google’s legal team reviews these requests; they aren’t automatic, and approval isn’t guaranteed. Defamation has a high bar: the content must be false, not just negative. A bad review isn’t defamation; an inaccurate factual claim may be.

Right to be Forgotten applies only if you’re in the EU or UK. It allows deindexing from Google’s European search properties. It doesn’t remove content globally or impact U.S. search.

5. The personal content removal form

Separate from Results About You, this Google form handles requests to remove non-consensual explicit images, doxxing content, and certain sensitive information on other sites.

This process is more manual. Google reviews the external site content rather than just deindexing a URL. Approval rates are higher for explicit imagery than for other categories, but the process is slower and less predictable.

What none of these tools do

Understanding the limits matters as much as knowing the tools. None of Google’s removal tools will:

  • Force a third-party site to delete content.
  • Remove content from other search engines (Bing, Yahoo, DuckDuckGo).
  • Remove content from Google Images, News, or Maps without separate requests.
  • Permanently fix the underlying content problem.
  • Remove results that are accurate, lawful, and in the public interest.

That’s why suppression remains core to reputation management: when you can’t remove content, you push it down with authoritative, well-optimized content.

How to triage a client removal situation

A practical decision flow for incoming removal requests:

Step 1: Can the client control the source site? 

If yes, remove it at the source, then use the outdated content tool to speed up deindexing.

Step 2: Is it personal information in Google’s covered categories? 

Use Results About You.

Step 3: Is there a legal basis? 

Defamation, copyright, court order, or GDPR right to be forgotten. If yes, file the appropriate request and set realistic timelines (weeks to months, not days).

Step 4: Is it none of the above? 

Suppression is likely the primary path. Build a content and link strategy around the branded SERP to displace the result over time. 

For high-stakes cases — like non-consensual content or permanent court records — firms like Erase.com handle direct outreach and legal escalation on a pay-for-success basis, bridging the gap between DIY tools and litigation.

Setting realistic client expectations

The most common client mistake is expecting Google to act like a content moderator. It isn’t. 

Google’s removal tools cover specific, narrow categories. Outside them, Google defaults to indexing what exists on the web.

Set this expectation upfront to protect the client relationship. It also positions suppression not as a fallback, but as the right tool for most ORM situations.

When removal is viable, these tools have improved over the past two years. Results About You has expanded and should be included in your standard ORM audit. The outdated content tool remains underused and is a quick win when source removal has already happened.

Know the tools. Use them where they apply. Suppress where they don’t.

Read more at Read More

Three new tasks, better navigation, and a bug fix in the Yoast SEO Task List 

We launched the Yoast SEO Task List in December to give you a clear, actionable to-do list for your site’s SEO. In this update, we’ve added two new tasks, improved how you navigate to fixes, and resolved a bug that was showing tasks in the wrong language. 

A quick recap: what does the Task List do? 

The Task List scans your site and surfaces specific content that needs attention, ranked by priority with an estimated time to fix. Instead of guessing what to work on next, you click a task and Yoast takes you directly to the right place to make the improvement. Think of it as a personal SEO assistant that knows your site. 

What’s new in this update 

New task: improve your meta descriptions 

Meta descriptions are the short snippets that appear under your page title in Google search results. They don’t directly affect rankings, however they have a significant impact on whether someone clicks your link. The Task List will now flag recent posts where the meta description is missing or could be stronger, and point you to where you can fix it. Premium users can use the AI Generate button to write one in seconds. 

New task: delete your sample page 

Every new WordPress site comes with a default “Sample Page” that most people never delete. It adds no value and can create unnecessary noise for search engines. The Task List will now remind you to remove it if it’s still there. It’s a two-minute job that’s easy to overlook. 

New task: set social sharing images  

Available with Yoast SEO Premium, Yoast WooCommerce SEO, and Yoast SEO AI+

When someone shares your content on Facebook or X, the image that appears alongside it can make a real difference to whether people click. The Task List will now remind you to set a custom social sharing image for your posts and pages, so your content looks its best every time it gets shared. 

Go directly to the right place in the editor 

Previously, clicking a task would open the post editor and leave you to find the right section yourself. Now, Yoast takes you to the exact part of the editor you need: the SEO tab, the readability panel, or the meta description field. Less scrolling, faster fixing. 

Bug fix: tasks now appear in your language 

We fixed a bug where task descriptions were showing up in the site’s language rather than the logged-in user’s language. If you manage a multilingual site, or your personal language settings differ from your site’s default, tasks will now display correctly for you. 

Also in this release 

  • We’ve added a new Yoast tab to the WordPress Plugins screen that groups all your installed Yoast plugins in one place. This requires WordPress 7.0+. 
  • We fixed a bug where alt text changes made via the inline image editor in How-to and FAQ blocks weren’t saving correctly to the frontend. Thanks to @param-chandarana for the report. 

What’s coming next 

We’re continuing to expand the Task List with improvements that surface high-impact changes specific to your content. Users of paid plans will see additional tasks in upcoming releases.

Update to Yoast SEO 27.4 to get these improvements automatically, or download the latest version from the WordPress plugin directory. 

The post Three new tasks, better navigation, and a bug fix in the Yoast SEO Task List  appeared first on Yoast.

Read more at Read More

Web Design and Development San Diego

Google simplifies Analytics and Ads consent rules

How to use Performance Planner and Reach Planner in Google Ads

Google is changing how Google Analytics and Google Ads share consent signals — a shift that could have major implications for marketers’ tracking setups starting this summer.

What’s happening. Beginning June 15th, Google Ads data collection will rely solely on the ad_storage consent setting, removing a layer of complexity that previously came from linked Google Analytics configurations.

Until now, ad data flows between Analytics and Ads were influenced by both Consent Mode and Google Signals settings inside GA. That created confusion for marketers, especially because some of the controls were buried in Analytics settings rather than clearly surfaced in ad consent banners or tag implementations.

Starting in June, Google is simplifying that structure. Google Analytics data collection will still be governed by Google Signals, but Google Ads will look only at whether users have granted ad_storage consent.

That means a linked Google Analytics tag will no longer affect whether Google Ads can collect or use advertising identifiers.

What changes. For many advertisers, the update will effectively create a cleaner — but more rigid — consent framework.

If ad_storage is granted, Google Ads may use all available advertising signals, including linking activity to a user’s signed-in Google account when possible. If ad_storage is denied, Google will be limited to less persistent signals, such as URL parameters like gclid.

There appears to be little middle ground. Marketers will have less ambiguity about what drives ads data collection, but they will also have fewer ways to fine-tune what gets shared.

Why we care. This change makes consent settings much more consequential for measurement, attribution and audience targeting. From June, whether Google Ads can use identifiers will depend almost entirely on the ad_storage signal, so any gaps or errors in consent mode setup could directly affect campaign performance data.

It also removes some hidden complexity from linked Google Analytics settings, giving advertisers clearer rules — but less flexibility.

Between the lines. The move reflects Google’s broader push to make consent systems easier to understand for advertisers and regulators.

A single source of truth for ad consent could reduce implementation errors and make compliance easier to explain. But it also puts more pressure on brands to ensure their Consent Mode setup is working properly.

If consent updates are delayed, misconfigured or incomplete, marketers could see gaps in measurement, attribution and audience targeting.

What marketers should do now. Audit your consent implementation before the June deadline.

Teams should confirm that Consent Mode update calls are firing correctly and that ad_storage settings accurately reflect user choices. Brands with Google Signals turned off should pay particular attention: under the new setup, they could see more Ads-linked data than before if users grant ad consent.

For marketers, the takeaway is simple: cleaner rules are coming, but getting consent right will matter more than ever.

Dig deeper. Updates to Google Analytics Data Controls

Read more at Read More

Web Design and Development San Diego

Google is bringing back a familiar name: Data Studio

In an AI-driven economy, companies have more data than ever but still struggle to turn it into useful daily decisions. Google is betting that a revamped Data Studio can become the place where users quickly explore, organize and act on data across its ecosystem.

Why the switch back. Google says the new Data Studio will serve as a central hub for a range of assets, from traditional reports and dashboards to data apps built in Colab and BigQuery conversational agents. The idea is to give users one place to work with the tools and information that shape their business each day.

Flashback. Three years ago, Google folded Data Studio into its broader analytics push by rebranding it as Looker Studio. Now, it is separating the products again as customer needs evolve.

Two versions. Google is launching two versions of the product.

  • Data Studio will remain free for individuals and small teams that need quick analysis and visualization.
  • Data Studio Pro, meanwhile, is aimed at larger organizations that need stronger security, compliance, management controls and AI capabilities, with licenses sold through the Google Cloud and Workspace admin consoles.

Why we care. The (kind of) new Data Studio could make it much easier to pull together campaign, audience and performance data from across Google’s ecosystem in one place. That means faster reporting, easier ad hoc analysis and quicker answers without relying as heavily on analysts or engineering teams. For brands already using Google Ads, BigQuery or Sheets, it could streamline how teams track performance and make day-to-day budget and creative decisions.

Where Looker fits in. Under the new structure, Looker will remain Google Cloud’s enterprise business intelligence platform, focused on governed data, semantic modeling and large-scale analytics. Data Studio, by contrast, is being positioned as the faster, more flexible option for personal exploration, ad hoc reporting and lightweight dashboards across services like BigQuery, Google Sheets and Ads.

What’s next. For existing users, Google says the transition should be seamless. Current reports, data sources and assets will carry over automatically, with no action required.

Google plans to share more about the relaunch and its broader analytics strategy at Google Cloud Next ’26 later this month.

Dig deeper. Data Studio returns as new home for Data Cloud assets

Read more at Read More

Web Design and Development San Diego

Introducing a new spam policy for “back button hijacking”

Today, we are expanding our spam policies
to address a deceptive practice known as “back button hijacking”, which will become an explicit
violation of the “malicious practices”
of spam policies, leading to potential spam actions.

Read more at Read More

Sundar Pichai sees Google Search evolving into an ‘agent manager’

Google Search agent manager

Google Search is evolving beyond links and answers into a system that completes tasks, potentially fundamentally changing how users interact with the web. That’s according to Alphabet CEO Sundar Pichai, speaking on the Cheeky Pint podcast.

Why we care. Google is signaling a move from information retrieval to task execution.

Search becoming agentic. Traditional search behavior is already changing and will continue to, Pichai said.

  • “If I fast-forward, a lot of what are just information-seeking queries will be agentic in Search. You’ll be completing tasks. You’ll have many threads running.”

Pichai also described a future where Google Search acts less like a list of results and more like a system that coordinates actions:

  • “Search would be an agent manager in which you’re doing a lot of things. I think in some ways, I use Antigravity today, and you have a bunch of agents doing stuff. I can see search doing versions of those things, and you’re getting a bunch of stuff done.”

AI Mode is already changing queries. Users are already adapting their behavior in Google’s AI-powered search experiences, Pichai said:

  • “But today in AI Mode in Search, people do deep research queries. That doesn’t quite fit the definition of what you’re saying. But people adapted to that. I think people will do long-running tasks.”

Search vs. Gemini overlap. Despite the rise of Gemini, Pichai said Google isn’t replacing Search with a chatbot. Instead, the two will coexist — and diverge (echoing what Liz Reid said last month):

  • “We are doing both Search and Gemini. They will overlap in certain ways. They will profoundly diverge in certain ways. I think it’s good to have both and embrace it.”

The interview. The history and future of AI at Google, with Sundar Pichai

Read more at Read More

Google AI Overviews: 90% accurate, yet millions of errors remain: Analysis

Google AI Overviews accuracy

Google’s AI Overviews answered a standard factual benchmark correctly 91% of the time in February, up from 85% in October, according to a New York Times analysis with AI startup Oumi.

However, Google handles more than 5 trillion searches per year, so that means tens of millions of answers every hour may be wrong.

Why we care. We’ve watched Google shift from linking to sources to summarizing them for more than two years. This report suggests AI Overviews are improving, but still mix correct answers, weak sourcing, and clear errors in ways that can mislead searchers and reshape which publishers get visibility and clicks.

The details. Oumi tested 4,326 Google searches using SimpleQA, a widely used benchmark for measuring factual accuracy in AI systems, the Times reported. It found AI Overviews were accurate 85% of the time with Gemini 2 and 91% after an upgrade to Gemini 3.

  • The bigger problem may be sourcing. Oumi found that more than half of the correct February responses were “ungrounded,” meaning the linked sources didn’t fully support the answer.
  • That makes verification harder. The answer may be right, but the cited pages may not clearly show why.

What changed. Accuracy improved between October and February, but grounding worsened. In October, 37% of correct answers were ungrounded; in February, that rose to 56%.

Examples. The Times highlighted several misses:

  • For a query about when Bob Marley’s home became a museum, Google answered 1987; the correct year was 1986, according to the Times, and the cited sources didn’t support the claim or conflicted.
  • For a query about Yo-Yo Ma and the Classical Music Hall of Fame, Google linked to the organization’s site but still said there was no record of his induction.
  • In another case, Google gave the correct age at Dick Drago’s death but misstated his date of death.

Google’s response: Google disputed the Times analysis, saying the study used a flawed benchmark and didn’t reflect what people actually search. Google spokesperson Ned Adriance told the Times the study had “serious holes.”

  • Google also said AI Overviews use search ranking and safety systems to reduce spam and has long warned that AI responses can contain mistakes.

The report. How Accurate Are Google’s A.I. Overviews? (subscription required)

Read more at Read More

Google starts showing sponsored ads in the Images tab on mobile search

In Google Ads automation, everything is a signal in 2026

Google has begun placing sponsored ad units directly inside the Images tab of mobile search results — a new placement that eligible campaigns can access without any changes to existing keyword targeting.

What’s happening. When a user navigates to the Images tab within Google Search on mobile, they may now see sponsored units appearing within the image grid. Each unit shows a full image creative as the primary visual alongside text, and is clearly labelled “Sponsored” — consistent with how Google labels ads elsewhere in search results.

How it works. Eligible campaigns can serve into the Images tab without any changes to keyword targeting or campaign structure. The placement draws from existing image assets, meaning advertisers running Search or Performance Max campaigns with strong visual creative are best positioned to benefit. No separate image-only campaign setup is required.

Why we care. This is a meaningful expansion of Google’s paid search real estate. For product-led and catalog-heavy advertisers, the Images tab is where purchase-intent discovery often starts — and now ads can appear right in that moment. If your campaigns already use strong image assets, you may be picking up incremental impressions without lifting a finger.

The big picture. Early indications suggest this placement behaves more like a visual discovery surface than classic paid search. Expect high impression volume but lower click-through rates — more in line with display or Shopping than traditional text ads. That said, the assist value in multi-touch conversion paths could be significant, particularly for retail and direct-to-consumer brands. Treat it as upper-funnel reach, not a last-click channel.

What to watch. Google has not made a formal announcement, and there is no dedicated reporting breakdown for Images tab placements yet. Monitor your impression share and segment data closely to understand whether this placement is contributing — and whether it’s eating into organic image visibility for competitors.

First seen. The placement was spotted by Google Ads Expert – Matteo Braghetta, who shared seeing this update on LinkedIn. No official documentation has been published by Google at the time of writing.

Read more at Read More