White hat vs grey hat link building, scoped to the algorithmic thresholds that score each surface.
Penguin 4.0 evaluates anchor profiles at the URL level in real time. SpamBrain reads link schemes from the link-graph network at the network level. The March 2024 link spam update was substantially a SpamBrain enforcement cycle. The recovery math turns grey-hat operationally bankrupt across any sustained campaign horizon.
White hat vs grey hat vs black hat, row by row.
- Outreach pattern
- Manual outreach, relationship-led editorial placement.
- Anchor-text profile
- Allocated per URL against the per-vertical Penguin 4.0 baseline (5-15% exact-match ceiling).
- FTC §255 compliance
- Disclosure handled at the placement level; rel="sponsored" on paid placements.
- SpamBrain detection surface
- Outreach fingerprints as organic editorial; prospect-list vetted against TrustRank seed-set proximity.
- Link decay profile
- 10-20% annual baseline; scoped into the retainer net-target math.
- Algorithm-update risk
- Built to compound through the next update; signal-per-placement protected.
- Manual-action surface
- No manual-action exposure; placements clear editorial threshold.
- Recovery cost
- Not applicable; no demotion to recover from.
- Best fit
- Sustained campaign building toward compounding brand-strength signal.
- Outreach pattern
- Scaled-template outreach to a wider publisher set with thin editorial review.
- Anchor-text profile
- Higher exact-match concentration than the natural baseline; tracked at the URL level by Penguin 4.0.
- FTC §255 compliance
- Inconsistent; paid placements often missing disclosure or attribute.
- SpamBrain detection surface
- Patterns drift into footprint detection as scale grows: source-domain + destination + anchor + timing.
- Link decay profile
- Decay accelerates as outlets clean up scaled-guest-post residue.
- Algorithm-update risk
- Per-update exposure; some placements get discounted while others survive.
- Manual-action surface
- Periodic "Unnatural links to your site" exposure on paid placements without rel="sponsored".
- Recovery cost
- Selective disavow against tracked placement subset.
- Best fit
- No legitimate operational best fit; methodology either holds the editorial bar or moves to detection-surface territory.
- Outreach pattern
- Automated tools, marketplace sourcing, blog-network placements, link-scheme participation.
- Anchor-text profile
- Exact-match-heavy anchor profiles fingerprinting as commercial-query saturation.
- FTC §255 compliance
- Paid placements without disclosure; testimonials without material-connection notice.
- SpamBrain detection surface
- Network-level fingerprint: shared C-class IP, whois-history overlap, content-template overlap across the network graph.
- Link decay profile
- Decay accelerated by algorithm updates that drop entire network nodes at once.
- Algorithm-update risk
- Update-cycle risk extreme; March 2024 link spam update targeted entire surface categories.
- Manual-action surface
- "Pure spam" or "Unnatural links to your site" manual actions; reconsideration requests required.
- Recovery cost
- Full inbound profile audit, large-scope disavow, reconsideration request, months-to-years rebuild.
- Best fit
- No legitimate operational best fit; entire surface targeted by SpamBrain at network level.
INDUSTRY BASELINES · PENGUIN 4.0 · SPAMBRAIN · MARCH 2024 LINK SPAM
Penguin 4.0, SpamBrain, TrustRank, and the recovery math that compounds against grey-hat campaigns.
The detection layer compounds every algorithm update. Penguin 4.0 is real-time URL-level. SpamBrain is network-level neural classification. TrustRank is graph-distance to a seed set of high-trust sites. Each signal compounds the placement-value differential between white-hat and grey-hat campaigns beyond what individual placement quality suggests.
Penguin 4.0 made the URL-level evaluation real-time.
Before Penguin 4.0 (released 2016-09), anchor-text evaluation ran at the root-domain level on update cycles. Site-wide remediation could undo a Penguin demotion across the next update. The 4.0 release moved evaluation to the URL level in real time: a single landing page that accumulates exact-match commercial anchors past the per-vertical baseline gets those anchors discounted the next time Google crawls them, even when the root domain looks natural. Grey-hat tactics that scaled past the baseline at the URL level became immediately less viable.
SpamBrain reads the link-graph network, not the destination quality.
SpamBrain is a neural detector that reads link schemes from the link-graph network rather than from per-placement quality signals. A campaign that pitches the same vertical from the same outreach mailbox across 80 publishers in 30 days lights up the same fingerprint as a private blog network footprint regardless of placement quality. The March 2024 link spam update was substantially a SpamBrain enforcement cycle that targeted entire scaled-tactic categories at once: scaled guest-post networks, link scheme participation surfaces, attorney-mill and content-farm citation packs.
TrustRank seed-set proximity rewards the clean side.
TrustRank assigns trust scores based on link distance from a manually-curated seed set of high-trust sites. Placements close to the seed set inherit trust; placements deep in the spam neighborhood inherit anti-trust (spam mass). Editorial placements at vetted publishers sit close to the seed set. Grey-hat and black-hat placements sit closer to the spam neighborhood by graph distance, regardless of individual placement quality. The seed-set proximity signal compounds the placement value differential beyond the individual link weight.
The recovery math turns grey-hat operationally bankrupt.
Even when grey-hat tactics produce ranking lift on a single update cycle, the recovery math compounds against the buyer over the lifecycle: at the next update the placements get discounted or the domain gets demoted, the disavow scope absorbs months of remediation work, the reconsideration request process consumes more cycles, and the rebuild from a conservative anchor distribution baseline takes two-to-four campaign quarters. The total cost of grey-hat outweighs the white-hat retainer cost over any sustained campaign horizon.
Methodology questions we get during the audit conversation.
What's the cleanest definition of the white-hat versus grey-hat line?
The line is editorial vs. transactional. Editorial placement is a publisher choosing to link to a page because the content fits an editorial decision. Transactional placement is paid or coerced placement that the publisher would not have made on merit. Penguin 4.0 evaluates the anchor profile at the URL level and discounts placements whose pattern reads as transactional. SpamBrain reads the link-graph network at the network level and demotes domains whose inbound profile fingerprints as scheme-coordinated. Both algorithms reward placements that meet the editorial threshold.
Are scaled guest posts always grey-hat?
Scaled guest posting on thin publisher networks fingerprints as link-scheme participation regardless of individual placement quality. The pattern Google reads is the scaled-template + source-domain repetition + cross-vertical destination + anchor repetition at the link-graph network level. Vetted-publisher editorial guest posting at restrained volume with editorial-fit review sits outside the scaled-template pattern and clears the editorial threshold. The pitch-shape distinction (editorial-fit vs. content-slot-filler) is the operational line. Any paid placement still requires rel="sponsored" attribution.
How does SpamBrain detect a private blog network?
SpamBrain reads several network-level signals: shared C-class IP across multiple network nodes, whois-history overlap or registrant-pattern repetition, content-template overlap across the network, anchor-text distribution repetition, cross-linking graph structure within the network, outbound-link patterns that converge on a small set of beneficiary domains. The neural detector reads these signals together; the pattern is structurally distinguishable from organic editorial graph structure at the link-graph network level. The March 2024 link spam update was substantially an enforcement cycle against this detection pattern.
What happens when a buyer comes off a grey-hat campaign?
Recovery work runs first, link acquisition second. The inbound profile gets audited for the placements driving the SpamBrain demotion or manual action signal. Disavow file scoped against the diagnosis and submitted. Reconsideration request drafted if a manual action applies. New link acquisition pauses until Search Console signals the demotion has lifted. After the signal clears, the rebuild starts with conservative anchor distribution and paced velocity for two-to-four campaign quarters. The transition is structurally a separate engagement scope; the page on link building for penalty recovery documents the rebuild methodology.
The recovery math turns grey-hat operationally bankrupt across any sustained campaign horizon.
The audit pulls the inbound profile, surfaces the placements Penguin 4.0 is discounting and the patterns SpamBrain is fingerprinting, and names the recovery scope or the white-hat rebuild path. Inside two weeks.