Exposure · Check
robots.txt declares a Sitemap — what to verify
Declaring a `Sitemap:` line in robots.txt is the canonical way for search engines to find your sitemap. This is a positive signal — verify the URL resolves with HTTP 200 and is current.
Real-world risk
Sitemap hints increase URL discoverability—usually desirable, but they expose structure to competitors and scanners.
Fix steps (in order)
- Ensure sitemap URLs only list content you intend to be public and crawlable.
Verify the fix in 30 seconds
Run a Scorifya scan on the affected host after deploy. The same finding id (robots_txt_sitemap_declared) clears once the externally-observable signal is in place.