Skip to content

Test your website now

Free, no card. We read only public pages.

Run free audit →

SEO · Critical severity

Robots.txt Blocking the Entire Site: Check Effective Crawl Rules

Fix unintended robots.txt blocking. Inspect effective Googlebot rules, protect private environments properly, and verify important paths beyond the homepage.

Published · Updated

What the check tests

Check
seo.robots-txt.not-blocking-all - robots.txt does not block the whole site
Passes when
robots.txt must not contain a global 'User-agent: * / Disallow: /' rule on production.
Scope
graded once per site
Severity
Critical
Fix effort
small - under an hour
Impact when fixed
high

In one paragraph

Robots.txt blocking the entire site means this check found that the effective rules deny Googlebot access to the site's root URL. That can indicate a broad accidental block, but the root test alone does not prove every page is disallowed. Inspect the complete rule set and intended environment, then restore required crawl access without exposing private content or confusing crawling with indexing.

Why it matters

Robots rules ask supporting crawlers not to retrieve specified URLs. A broad disallow can prevent Google from reading content, rendered resources, canonical information, and indexing directives. Known blocked URLs can still appear in results based on other signals, so this is not a reliable removal or privacy mechanism.

The effective group and matching path matter. A specific Googlebot group can differ from the wildcard group. A rule can block the root yet allow another path, or allow the homepage while preventing most of a catalogue from being fetched. The page title describes an important risk, not a complete site-wide proof.

A common cause is environment configuration copied from staging, but do not infer that every CMS discouragement setting generates exactly the same robots file. Inspect the real deployed response and any separate noindex output.

How WebAuditOS evaluates this finding

The supplied rule asks its robots parser whether Googlebot may fetch /. Allowed passes; disallowed fails at critical severity. A missing 404/410 file or an unavailable file is not graded here.

The crawler also enforces its own robots policy. If WebAuditOSBot is blocked at the root, or the documented fetch encounters blocking error conditions, the scan can stop before a normal report exists. When a report is generated, its Googlebot-root verdict still does not assess every section or other crawler. A homepage exception can conceal broad restrictions elsewhere.

How to fix it

  1. Retrieve robots.txt from the exact production scheme, hostname, and port. Check the public status and body rather than trusting a repository file or a CMS preview.
  2. Identify the group applicable to Googlebot and inspect path-specific allow and disallow rules. Use Google's current matching guidance and test important content and resource URLs, not only /.
  3. Confirm intended exposure. Public production content and private staging need different controls. For private environments use authentication or appropriate network restrictions; robots.txt is a public file and not an access barrier.
  4. Remove or narrow unintended broad rules at their source. A deliberately permissive illustration is:
User-agent: *
Disallow:
Sitemap: https://example.com/sitemap.xml

Replace the sitemap address with a real one or omit it until available. Do not erase deliberate section restrictions without understanding their purpose.

  1. Check delivery ownership. Physical static files, framework-generated routes, server blocks, CDN workers, and CMS plugins can override one another. Purge relevant cached output after updating the component actually serving production.
  2. Review indexing directives separately. Restoring crawling does not cancel a noindex in the page or response header. Likewise, adding noindex to robots.txt is not a supported way to exclude content from Google Search.
  3. Inspect current robots information in Search Console where available and test representative public URLs. Allow time for cached robots data and recrawling. Requesting processing is not a promise of immediate indexing or recovery.
  4. Rescan after the scanner's own access is allowed and maintain an environment-specific deployment check. Confirm important sections and required rendering resources remain accessible to intended crawlers.

What the fix can break

Lifting a shared block can expose public copies of a staging environment or unreviewed URL spaces. Decide access and indexing policy before treating a permissive example as universally correct.

Overbroad path blocks can stop resources necessary for page understanding. Test relevant scripts and styles rather than blocking asset directories wholesale.

Do not replace a crawl block with a public promise that the whole site is now indexed. Google must still discover, retrieve, evaluate, and select pages, and some URLs may intentionally remain excluded.

Questions

Does disallow remove an indexed URL reliably?

No. It prevents crawling, not necessarily URL inclusion. Google needs access to read a noindex when that is the intended removal method.

Why did the scan stop instead of showing the finding?

The documented crawler respects its own robots restrictions and can stop before a report is built.

Does a passing homepage prove all sections are crawlable?

No. The rule tests the root. Review important paths, resources, and other crawler scopes separately.

Review noindex, sitemaps, and the indexing checklist.

In the report

Test this on your own site

Every scan runs seo.robots-txt.not-blocking-all on every page it crawls, on every plan. The finding carries this id, so a line in a report can be matched to the explanation above - and the free scan needs no account.