robots.txt Exposure Scanner
Detects sensitive paths (admin, backups, .git) listed in robots.txt that signal them to attackers.
What it checks
This scanner reads your robots.txt file and looks for sensitive paths listed inside it, such as admin panels, backup folders or directories like .git. It flags when those paths are written out in a publicly readable file.
Why it matters
The robots.txt file is public and anyone can read it, including attackers. By listing your private paths there you are not hiding them at all; you are handing over a direct map of where to look for interesting parts of your site.
How to fix it
Do not rely on robots.txt to hide sensitive paths; protect them for real with authentication or access restrictions. If you need an area to stay out of search results, use noindex headers or restrict access instead of naming it in a public file.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free