What the Links, Manual Actions, and Security Reports in Google Search Console Tell You

Three reports in Google Search Console share a common diagnostic purpose: they are the reports you open when something is wrong, or when you are stress-testing your site’s authority and safety standing with Google. The Links report shows which of your pages attract external backlinks, which external domains link to you most frequently, and how your internal linking is distributed across the site. The Manual Actions report shows whether a human reviewer on Google’s spam team has issued a penalty against your site. The Security Issues report flags active compromises — malware, hacked content, or social engineering — that Google has detected and is warning users about. These are not growth-measurement reports. Each answers a distinct diagnostic question, and each carries documented limits that are frequently misread.

The two highest-consequence misconceptions practitioners bring to these reports: the Links report shows all backlinks (it does not — it shows a sample, as Google’s own documentation states); and GSC has a dedicated broken-links report (it does not — 404 errors surface in the Page indexing report under the “Not found (404)” reason category, not in the Links report). Both corrections have real operational consequences for how you diagnose and fix site problems.

All three reports live in GSC’s left-rail navigation. The SEO glossary covers the broader vocabulary. Readers in triage — a Manual Actions or Security Issues notification is open right now — can skip directly to the reference tables below.

Key Takeaways

• The Links report is a sample — Google’s own documentation uses that word. Main-view tables cap at 1,000 rows; exports reach 100,000. Neither is a complete backlink database, and the report does not expose nofollow status.
• GSC has no dedicated broken-links report. URLs returning 404 errors surface in the Page indexing report under “Not found (404)” — with a rolling one-month lookback window, not a cumulative list.
• A manual action is a human decision by Google’s spam team, not an algorithmic filter. Algorithm changes do not appear in the Manual Actions report. The penalty requires a reconsideration request to lift.
• The disavow tool is separate from the Links report — a different URL, not linked from the GSC dashboard — and it does not support Domain properties. Most sites do not need it.
• Security Issues error-level flags trigger user-visible warning interstitials in search results, suppressing affected pages until Google’s review confirms the site is clean.

The Links Report: Structure, Limits, and What It Does Not Show

The Links report divides into External links and Internal links. External links contains three named sub-reports: Top linked pages (your pages with the most inbound backlinks), Top linking sites (external root domains linking to you most frequently, grouped at root-domain level), and Top linking text (anchor text distribution across all inbound external links). Internal links contains one sub-report: Top linked pages from within your own site, showing which pages receive the most internal link weight. Each sub-report answers a different question. Top linking sites is the authority-signal view. Top linking text is the anchor-text audit — unexpected distributions here can precede an unnatural-links manual action. Top internally linked pages is the site architecture view: if your highest-value pages do not appear near the top, internal linking is not reinforcing what matters.

Google’s official Links report documentation uses one word to describe the data: “a sample.” Tables in the main view cap at 1,000 rows; exports (CSV or Google Sheet) extend to 100,000 rows. Neither figure is Google’s complete link graph. The report also does not indicate whether a link carries a nofollow attribute — that is confirmed explicitly in the documentation, not inferred. Linking domains are grouped by root domain, stripping subdomain and subdirectory information, so www.example.com and blog.example.com both display as example.com. Different top-level domains are kept separate.

A documented outage on 21 May 2026 made the “sample” limitation concrete. The Links report began showing zero or 87–90% fewer backlinks for many sites. Search Engine Roundtable confirmed John Mueller acknowledged the issue and reverted to prior-week data. oPositive and ALM Corp confirmed third-party tools showed no corresponding drop. The links existed; the report was not surfacing them. For directional analysis of which domains link to you and what anchor text dominates, the Links report is reliable. For comprehensive link prospecting, gap analysis, or building a disavow file, use a dedicated backlink tool with its own crawler.

There Is No Broken Links Report in Google Search Console

GSC has no dedicated broken-links report. There is no tab, section, or report in the current GSC interface that surfaces broken internal links as a standalone list. URLs returning 404 errors appear in the Page indexing report under the “Not found (404)” reason category — and only those Googlebot has attempted to crawl in the past month. Google’s Page indexing documentation states this directly: “To avoid showing you an eternally growing list of 404 errors, the Page indexing report shows only URLs that have shown 404 errors in the past month.” This is a rolling one-month window, not a cumulative historical record.

Site owners who expect a broken-links section and do not find one sometimes conclude their site has no broken links — a false negative. The correct workflow: Page indexing report → Not indexed tab → “Not found (404)”. Address only those 404s you actively link to or have listed in a sitemap — not every URL in the list. For external domains linking to your 404 pages, GSC surfaces nothing; a third-party backlink tool is required for redirect recovery. After fixing 404s, URL Inspection lets you request re-indexing of corrected pages individually.

Manual Actions Reference: Types, Triggers, and Fix Paths

The table below covers all General web search manual action types listed in Google’s Manual Actions help documentation as of June 2026, using the exact labels as they appear in the GSC interface. A manual action is issued by a human reviewer on Google’s spam team — it is not an algorithmic adjustment. Algorithm ranking changes are entirely separate and do not appear here. An unexplained rankings drop that predates a confirmed manual action often shows up first in the Performance report — cross-referencing both is the correct diagnostic sequence. News and Discover publishers have an additional set of action types not covered here; they apply only to those surfaces.

Security Issues Reference: Complete Type List and Remediation Path

The Security Issues report in GSC flags compromises and Safe Browsing violations that Google has detected on your site. Google’s Security Issues documentation groups issues into Error-level — these trigger user-visible warning interstitials in search results, effectively suppressing affected pages until the review is complete — and Warning-level, which are flagged in GSC but do not immediately trigger interstitials. Both levels require prompt remediation. After cleaning the compromise, use the URL Inspection tool to verify cleaned pages are accessible to Googlebot, then request a review through the Security Issues report.

Data and methodology: Search volume figures from Ahrefs, June 2026 (operator-supplied). Manual action type labels from Google Search Console Help (support.google.com/webmasters/answer/9044175), fetched June 2026, using exact labels as they appear in the GSC interface. Security issue types from the GSC Security Issues help page (support.google.com/webmasters/answer/9044101), fetched June 2026. Links report structure and data-limitation language from the official Links report help page (support.google.com/webmasters/answer/9049606). 404/Page indexing correction from support.google.com/webmasters/answer/7440203. Disavow tool status and Domain property limitation confirmed from support.google.com/webmasters/answer/2648487. May 2026 outage documented by Search Engine Roundtable. Reviewed by MB Adv Agency, June 2026.