Robots.txt Security Checker
Scan robots.txt for accidental disclosure of sensitive paths.
robots.txt
Paste your robots.txt content
Analysis
- Admin panelhigh
Line 2: Disallow: /admin/
Listing this path in robots.txt tells everyone it exists — consider removing it and relying on proper authentication instead.
- Admin panelhigh
Line 3: Disallow: /wp-admin/
Listing this path in robots.txt tells everyone it exists — consider removing it and relying on proper authentication instead.
- Backup or database dumphigh
Line 4: Disallow: /backup/
Listing this path in robots.txt tells everyone it exists — consider removing it and relying on proper authentication instead.
- Version control / env filehigh
Line 5: Disallow: /.env
Listing this path in robots.txt tells everyone it exists — consider removing it and relying on proper authentication instead.
About the Robots.txt Security Checker
Paste a robots.txt file and flag Disallow/Allow rules that inadvertently reveal sensitive paths like admin panels, backups, config files, or credentials — since robots.txt is public and only advisory, not access control.
Examples
Flag an admin path
Disallow: /wp-admin/Output
Admin panel disclosed on line 1Related tools
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Htpasswd Generator
Security
Generate .htpasswd lines using SHA-1 or plain text.
JWT Inspector
Security
Decode a JWT and audit its claims for common issues.
Password Strength Checker
Security
Estimate password entropy, crack time, and get actionable advice.
Secret Scanner
Security
Scan pasted code or text for likely leaked secrets.
Frequently asked questions
Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser