Rideout Law Group, Engagement Report

Headline Findings

Two stories, one engagement. Read these first.

1. Executive Summary

Two co-equal headlines. First, Phase 1 closed a material legal and compliance gap that had been silently accruing risk on rideoutlaw.com. Three legally required pages (Privacy Policy, Terms of Service, Accessibility Statement) are now live, a WCAG 2.2 AA audit has been completed against the 10 highest-traffic pages, and three accessibility snippets are running site-wide. Conservatively, this work removes $50,000 to $250,000 in plausible litigation exposure that Brad was carrying without documentation. Section 2 details the dollar framing.

Second, the SEO recovery story has a substantiated baseline. The April 27 Ahrefs deep sweep confirms a 12-month erosion: DR 50 to 31, organic keywords 6,507 to 699, top-3 keyword count 184 to 48, monthly organic traffic 4,313 to 1,821. This is a multi-quarter aging-content and link-attrition pattern, not a near-term Phase 1 effect. The Phase 1 work (43 net-new pages, 25 blog posts, 3 legal pages, schema package, WCAG remediation) is the foundation. Phase 2 (Section 7) is the recovery program, with five evidence-anchored plays drawn directly from the deep-sweep data.

Phase 1 already shows measurable lift. Four keywords improved during the engagement window before any of the new pages were fully indexed: squatters rights arizona (12 to 6), what to wear to court hearing female (7 to 5), female court dress code (4 to 2), and are suppressors legal in arizona (7 to 5). The anchor profile is healthy (33.8 percent branded, 32.0 percent naked URL, 1.8 percent exact-match), which means the link decline is recoverable attrition rather than toxicity. The biggest remaining structural threat is GEO: 42 percent of Rideout's top 100 keywords now trigger a Google AI Overview, and 91 percent show People-Also-Ask. Recovery has to optimize for both ranking and citation extraction.

What Brad gets in this report. The compliance dollar framing (Section 2). A tight engagement timeline (Section 3). One consolidated deliverables table (Section 4). The deep-sweep SEO data with no narrative bloat (Section 5). The GEO threat surface and instrumentation plan (Section 6). The Phase 2 recovery plan with KPIs, five strategic plays, and the legacy refresh program (Section 7). The 10 specific items Kaizen needs from Brad to maximize Phase 2 impact (Section 8). Recommended next steps (Section 9). Caveats (Section 10).

Top-line metrics

2. Compliance and Legal Risk Mitigation

2.1 Pre-Kaizen baseline: zero compliance documentation

The site at engagement start carried three compounding categories of legal exposure:

• ADA / WCAG accessibility. No Accessibility Statement, no documented WCAG conformance target, no audit. Law firm websites are a known cottage industry of drive-by litigation. Serial filers run automated scanners against firm sites and issue demand letters keyed to the absence of a statement and visible focus indicators.
• Privacy law non-compliance. The only privacy page was a 2021 stub that referenced the wrong domain. No CCPA/CPRA disclosures (California residents browse Arizona attorney sites). No GDPR posture for any EU traffic. No cookie disclosure. No documented data-handling practices for the Gravity Forms intake.
• No Terms of Service. Without a TOS a law firm site has no contractual mechanism to limit liability, define the scope of attorney-client relationship formation, disclaim past-results inferences, set venue, or protect against unauthorized-practice-of-law claims from out-of-state visitors who fill out the contact form.

2.2 Real-dollar liability framing

The exposure is not theoretical. Industry-standard ranges for law-firm-website litigation:

• ADA accessibility lawsuit settlement: typically $5,000 to $50,000 per plaintiff. Defense costs typically $25,000 to $75,000 per case, even when the matter resolves favorably. Law firm websites are a documented target for serial plaintiffs because the presence of a sophisticated defendant raises the settlement floor.
• CCPA / CPRA penalties: up to $7,500 per intentional violation. Class-action exposure on top of statutory penalties.
• GDPR penalties (if any EU traffic and tracking is in place): nominally up to 4 percent of global turnover; in practice for a single-firm site, regulatory letters are the more common outcome but still costly to respond to.
• UPL exposure from out-of-state contact-form submissions: not directly quantifiable, but a Terms of Service with proper jurisdictional carve-outs is the standard defense.

Conservative aggregate estimate: $50,000 to $250,000 in plausible avoided exposure. The lower bound assumes a single ADA settlement with modest defense costs. The upper bound assumes one ADA matter that goes to defense plus a CCPA inquiry plus modest UPL exposure. Real exposure could be higher; this range is the floor.

2.3 Post-Kaizen baseline: deliverables now LIVE

2.4 Why Kaizen rejects overlay widgets (AccessiBe, UserWay, AudioEye)

Standing rule for all Kaizen client sites: no overlay widgets. The FTC fined AccessiBe $1M in January 2025 for false advertising. More than 800 AccessiBe customers were sued for ADA violations anyway because overlay widgets do not actually fix the underlying HTML, and DOJ guidance treats them as an inadequate remediation. Native code-level WCAG plus a published statement is the legally defensible posture. That is what was deployed here.

3. Engagement Timeline

Seven phases over roughly eight weeks. One paragraph per phase. Detailed file references retained in the source workspace; available on request.

4. Deliverables Summary

One consolidated table. Live URL counts verified via XML-RPC wp.getPosts audit on April 27 and the live https://rideoutlaw.com/sitemap_index.xml.

4.1 Live URL audit (summary statistics)

Per the April 27 XML-RPC audit and live sitemap check:

• Total net-new URLs deployed during engagement: 71 (43 practice pages + 25 blog posts + 3 legal/compliance pages).
• Live and serving HTTP 200: 100 percent of the 71 net-new URLs.
• Authored by Brad Rideout (user_id 11) on the WordPress side: 100 percent of the 25 blog posts and 3 legal pages.
• Practice subpages authored under the Brandy admin account (user_id 16): 40 of 40, deployed by Sebastian on April 19.
• Posts with valid JSON-LD in HTML: 25 of 25 blog posts (BlogPosting + FAQPage validated live; Yoast also auto-emits BlogPosting, so 3 blocks per post; consolidation recommended).
• Slug collisions cleanly resolved: 6 of 6.

The 43 practice subpage URLs and 25 blog post URLs were enumerated in v1.5; the per-URL listing is retained in the source workspace files and is available on request.

4.2 Site stack (one line)

Site stack reviewed: WordPress 6.9.4 + Astra theme + Beaver Builder + Yoast Premium + Gravity Forms + Wordfence + WPML, on Hostinger / LiteSpeed. Auth landscape: XML-RPC works for admin accounts; REST API Basic Auth fails; Application Passwords disabled by Wordfence; Theme File Editor locked at the OS layer (real theme edits require Brad's dev with SFTP).

5. SEO Performance: 12-Month Trajectory

5.1 12-Month Domain Trajectory

Interpretation. A year-long erosion, not a recent dip. The most consequential inflection is between August and October 2025, when organic keyword count fell from 6,028 to 1,726 (a 71 percent drop in two months). DR halved from 50 to 27 between April and December 2025 before stabilizing at 31. Top-3 keyword count (the leading indicator for future traffic) compressed from 184 to 48 over the 12-month window. The 12-month traffic drawdown is 58 percent from peak. This pattern pre-dates the Kaizen engagement, which began March 15, 2026.

5.2 Top declining pages (refresh program evidence)

Section C of the deep sweep documents 24 declining pages cumulatively bleeding 947 monthly visits over 6 months. The top 15 of those pages are the highest-leverage refresh queue and the foundation of the Phase 2 Legacy Content Refresh Program (Section 7.3).

5.3 Phase 1 window wins (already visible)

These are the proof points that current optimization moves the needle. Section I of the deep sweep extends this picture: 5 keywords improved 3+ positions in the last 6 weeks (curfew laws, misdemeanor probation rules, averhealth phoenix variants), all on pages where Phase 1 worked or adjacent. The page templates that produced these gains are the foundation for Section 7.2 recommendation #4.

5.4 Anchor profile health

Profile is healthy. Branded plus naked-URL anchors combined sit at 65.8 percent of tracked refdomains (defensible band: 50 to 80 percent). Exact-match commercial anchors are 1.8 percent (target: under 20 percent). The link decline (285 refdomains in October 2025 to 263 today) is attrition (legal-directory listings rolling off: justia, cornell-lawyers, oyez, onecle), not toxicity. Reclamation is straightforward; see Section 7.2 recommendation #5.

5.5 Content gap signal

Section D of the deep sweep surfaces the topical clustering of Rideout's top 50 content gaps where AZ competitors rank top-20 and Rideout has zero top-100 presence: 0 DUI-related, 25 personal-injury, 4 family-law, 4 general-criminal. Personal injury dominates by traffic volume because accidentlawgroup.com is bidding hard on PI. Brad's firm practice is approximately 20 percent personal injury (confirmed April 27, 2026). The PI gap is therefore a real expansion vector and feeds Section 7.2 recommendation #3.

6. GEO and AI Search Visibility

Generative Engine Optimization (GEO) is the visibility of a brand inside AI-generated answers from ChatGPT, Claude, Perplexity, Gemini, and Google's AI Overview. Tracking GEO is harder than traditional SEO because most AI engines do not expose source citations through APIs.

6.1 SERP feature distribution (top 100 organic keywords)

6.2 Recommended GEO instrumentation

Recommendation. Start with HubSpot's free AI Search Grader for an immediate baseline (one-time, free), then add Otterly.AI at the $29/mo tier for ongoing weekly tracking across ChatGPT, Perplexity, and Gemini. Layer in a manual prompt log on a fixed list of 10 high-intent queries to validate Otterly's data. Total Phase 2 GEO instrumentation cost: under $100 per month.

7. Phase 2: Recovery Plan

7.1 Recovery Trajectory and KPIs

The 12-month trajectory in Section 5 shows where Rideout has been. The recovery trajectory below documents where Phase 1 plus Phase 2 are designed to take the site, with concrete monthly KPIs.

Targets are conservative and predicated on Phase 2 executing the five recommendations in Section 7.2. The 12-month goal is to recover roughly 75 percent of the peak position the site held in April 2025 while building a more diversified, GEO-optimized base. Measurement cadence: weekly Ahrefs pulls on declining-page recovery, monthly full-domain rollup, quarterly competitor delta. The AI Overview presence row is expected to climb because Google is expanding AIO coverage; the strategic goal is not to suppress AIO but to be the cited source inside it.

7.2 Five Evidence-Anchored Strategic Recommendations

Each recommendation cites the specific deep-sweep section it draws from, so Brad and any future analyst can audit the chain of reasoning.

1. Refresh and re-rank the top 15 declining evergreen pages before adding new content

Section C of the deep sweep identifies 24 pages bleeding traffic over 6 months, with the top 15 alone accounting for the majority of the cumulative loss. These pages already have backlinks, indexation, and topical authority; refreshing them with answer-format intros, current-year stats, schema, and AI-Overview-friendly structure recovers traffic faster and cheaper than greenfield content. Action: pull the top 15, refresh in priority order, re-deploy with dateModified schema updated.

2. Build an AI-Overview-optimized answer layer on the top 100 organic keywords

Section G shows AI Overview triggers on 42.0 percent of Rideout's top 100 keywords; PAA on 91.0 percent. Existing pages were not built for citation extraction. Action: add a 60 to 90 word answer block at the top of each ranked page, structured as Question (H2), 1 to 2 sentence direct answer, then bulleted elaboration. Mark up with FAQPage schema. Single highest-leverage GEO move available.

3. Open a Personal Injury content vertical, anchored on the top PI gap keywords

PI is approximately 20 percent of Brad's firm practice. Section D surfaces 25 PI content gaps where AZ competitors rank top-20 and Rideout has zero top-100 presence; PI carries the highest volume in the gap basket. accidentlawgroup.com is currently harvesting traffic that should partially flow to Rideout. Action: launch a focused Personal Injury content hub with 8 to 12 supporting articles built against the highest-volume gap keywords (pedestrian injury attorney, motorcycle accident lawyer, car accident attorney terms specifically). Establishes Rideout's PI topical authority and matches the firm's actual practice mix.

4. Ride the momentum cluster: scale the page templates producing Section I gains

Section I shows 5 keywords improved 3+ positions in the last 6 weeks. The pages producing those gains are the proof-of-concept for the current optimization approach. Action: catalog the 3 to 5 page templates that produced these wins (intro structure, headers, schema, internal-link pattern, content depth), document them as the Rideout Page Spec, and migrate the next 20 underperforming pages onto that spec. Converts a one-off win into a repeatable system.

5. Tighten the link profile through directory reclamation, not new outreach

Section A shows live refdomains drifted from 285 to 263 over 6 months (net -22). Section H confirms the anchor profile is healthy (65.8 percent branded plus naked, 1.8 percent exact-match), so the link risk is low; the issue is attrition, not toxicity. The lost-backlinks data (Section E) points to legal directories (justia, cornell-lawyers, oyez, onecle) where listings rolled off. Action: audit and re-claim legal directory profiles in priority order by DR. Recovers DR-weighted equity faster than cold outreach. Reserve any cold-outreach budget for the PI and momentum content from recommendations 3 and 4.

7.3 Legacy Content Refresh Program

The page-level Ahrefs diff in Section 5.2 reveals the strategic opportunity. Rideout has accumulated roughly 200 historical blog posts over a decade. A subset of those posts established meaningful authority and ranked well, then aged out as Google's freshness signals re-weighted toward newer content. Rather than treating each declining post as a one-off fix, Phase 2 runs a structured refresh program:

• Phase 2.A (Week 1): Score every blog post on peak traffic, current-vs-peak delta, current ranking, keyword volume, age, and topical fit. Generate a refresh priority list.
• Phase 2.B (Weeks 2 to 3): Refresh the top 10 posts to current 2026 standards (BlogPosting + FAQPage schema, current statute citations, "Last updated" front-matter, refreshed internal links into the April 27 cluster, current author byline). Existing URLs preserved (no redirects, no authority loss).
• Phase 2.C (Weeks 4 to 8): Weekly Ahrefs pulls on refreshed pages. Expected pattern: position recovery within 2 to 4 weeks, full traffic recovery within 6 to 8 weeks.
• Phase 2.D (Months 3+): Refresh the next 20 posts. Establish a quarterly recurring cadence to keep the top 50 historical posts in active freshness rotation.

Legacy content refresh is one of the highest-ROI activities in 2026 SEO. The pages already have Google's trust, indexed authority, and link equity. Refresh is dramatically cheaper than ranking new content from scratch and the recovery curve is fast (2 to 4 weeks vs 3 to 6 months for net-new). Kaizen estimates 15 to 30 of Rideout's historical posts are sitting on similar latent authority.

7.4 Dev TODOs (referenced)

16 prioritized accessibility and technical TODOs are documented for Brad's developer in /data/workspace/clients/rideout-law/BB-DEV-TODOS.md, organized into P0/P1/P2 tiers (already sent to Don as a Discord attachment). Top 3 priority items:

1. Add a single <h1> to 9 landing pages via Beaver Builder (P0). WCAG 1.3.1 / 2.4.6. Most-cited item in plaintiff demand letters. Effort: 60 to 90 min.
2. Swap Gravity Forms reCAPTCHA v2 (checkbox) for v3 invisible or honeypot-only (P0). WCAG 2.1.1 / 1.1.1. Cited in roughly 40 percent of recent web-accessibility complaints. Effort: 20 to 30 min.
3. Add aria-label to every social and icon-only link (P0). WCAG 2.4.4 / 4.1.2. Eliminates every "empty link" finding from automated scanners. Effort: 30 to 45 min.

Estimated total dev effort across all 16 items: 4 to 6 focused hours. Drops lawsuit-risk profile from Moderate to Low.

8. What We Need from Brad

Ten items in priority order. Items 1 through 3 (GSC, GA4, GBP) are the highest-leverage unlocks because they instrument the entire Phase 2 measurement story.

9. Recommended Next Steps

1. Execute the Manual Remediation Playbook (4 to 6 hours of dev time). Closes all 19 unique a11y findings, drops lawsuit-risk profile from Moderate to Low. The Playbook is fully written; nothing additional needs to be authored.
2. Deploy the 3 SEO-optimized pages and the 17-template schema package. Brad bio, Scottsdale, Lake Havasu; LocalBusiness, Person, and FAQPage schemas on the practice hubs. Approved by Don. Same XML-RPC + Yoast custom_fields pattern used for the 25 blog posts. 60 to 90 minutes.
3. Establish a recurring content calendar. 4 to 8 new posts per month covering remaining clusters (juvenile detail, drug DUI, family-law deep dives, post-conviction relief), internally linked back to the April batch.
4. Stand up structured competitor monitoring. Recurring monthly checks (rankings, new content cadence, schema, page additions, backlink growth) on the 5 to 7 highest-priority competitors.
5. Plan a Beaver Builder Themer template rebuild for landing pages. The H1, heading hierarchy, and social-icon issues are page-by-page symptoms of a single root cause: every BB layout was assembled by hand without a single source of truth. A consolidated Themer template would close this gap permanently. 1 to 2 weeks of focused work, best handled as a Phase 3 engagement.
6. Operations checklist for Don: rotate post-session credentials; plan WPML production-key swap when site officially launches; run the 5 pending plugin updates during a maintenance window. (Note: confirmed all legal contact routes to brad@rideoutlaw.com; no alias mailbox needed.)

10. Evidence Caveats and Confirmation Items

Per Kaizen's no-fabrication policy, every claim in this report is anchored to a file, a memory entry, or a live URL. Items below are flagged where verification was incomplete or further confirmation is recommended.

• Pillar pages (criminal-defense, family-law, dui-defense). Live in the page-sitemap. Original-vs-rewrite history needs Sebastian's confirmation; the pillar parents may have predated the engagement and been rewritten in place.
• Schema package deploy status. Sebastian's wpcode-schemas-snippet.php is present in the workspace with a timestamp of April 27 05:38 PDT. Whether it has been pasted into WPCode and activated is pending Sebastian's confirmation.
• Cross-link insertion. CROSS-LINK-PLAN.json generated April 27. Programmatic insertion into the live posts is queued for the Phase 2 sprint.
• SEO-optimized location and bio pages (Brad, Scottsdale, Lake Havasu). Approved by Don April 26. Not yet deployed. Existing pages remain live with older content.
• Search Console and GA4 data. No access provided to Kaizen during the engagement. Audit did not include impressions, clicks, or conversion data. Listed as items 1 and 2 in Section 8.
• Attorney review of legal pages. Privacy Policy and Terms of Service are live but have not been reviewed by Arizona counsel. LEGAL-PAGES-DRAFT-NOTES.md enumerates the override checklist.
• JSON-LD duplication. Each blog post emits 3 JSON-LD blocks (Kaizen BlogPosting, Kaizen FAQPage, Yoast auto BlogPosting). Recommend consolidating via shared @id or disabling Yoast auto-output for these posts.
• Dollar-value liability range. The $50,000 to $250,000 range in Section 2.2 is a conservative industry-standard estimate; actual exposure depends on jurisdiction, plaintiff filing pattern, and defense strategy. The range is not a guarantee.