Robots.txt Security Checker
Scan robots.txt for accidental disclosure of sensitive paths.
robots.txt
Paste your robots.txt content
Analysis
- Admin panelhigh
Line 2: Disallow: /admin/
Listing this path in robots.txt tells everyone it exists — consider removing it and relying on proper authentication instead.
- Admin panelhigh
Line 3: Disallow: /wp-admin/
Listing this path in robots.txt tells everyone it exists — consider removing it and relying on proper authentication instead.
- Backup or database dumphigh
Line 4: Disallow: /backup/
Listing this path in robots.txt tells everyone it exists — consider removing it and relying on proper authentication instead.
- Version control / env filehigh
Line 5: Disallow: /.env
Listing this path in robots.txt tells everyone it exists — consider removing it and relying on proper authentication instead.
About the Robots.txt Security Checker
Paste a robots.txt file and flag Disallow/Allow rules that inadvertently reveal sensitive paths like admin panels, backups, config files, or credentials — since robots.txt is public and only advisory, not access control.
Examples
Flag an admin path
Disallow: /wp-admin/Output
Admin panel disclosed on line 1Keyboard shortcuts
- Copy the main outputCtrl / ⌘ + Shift + C
- Download the resultCtrl / ⌘ + S
- Share this toolCtrl / ⌘ + Shift + S
- Reset the inputsAlt + R
- Open the tool search paletteCtrl / ⌘ + K
Related tools
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Permissions-Policy Header Generator
Security
Build a Permissions-Policy header controlling camera, geolocation and more.
Referrer Policy Generator
Security
Pick a Referrer-Policy value and get header/meta/server snippets.
Security Headers Auditor
Security
Grade HTTP response headers against security best practices.
X-Frame-Options / Clickjacking Checker
Security
Check if X-Frame-Options and CSP frame-ancestors block framing.
Frequently asked questions
Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser