Finding: sitemap.xml Not Found
This finding means Nivaronix requested /sitemap.xml on your domain and did not get back a usable XML sitemap. It is an SEO/crawl-discovery signal, not a security finding.
Last updated August 12, 2026.
What it means
A sitemap.xml lists the URLs on your site you want search engines to discover and index. Nivaronix requested /sitemap.xml and either got a non-200 response, or a 200 response whose body contains neither a <urlset> nor a <sitemapindex>element — i.e. it doesn't look like a real sitemap.
Why it matters
Search engines can still discover pages by following links without a sitemap, but a sitemap makes discovery faster and more complete — especially for pages with few inbound links, a large site, or content that changes often. Its absence is a missed discovery opportunity, not a vulnerability.
Does this affect your Nivaronix security score?
This is an SEO/visibility signal, not a security finding. Nivaronix reports it at Info severity, and Info-severity findings carry a 0-point deduction — this result does not change your Nivaronix security score.
What Nivaronix checks
Nivaronix requests /sitemap.xml over HTTP(S) and requires an HTTP 200 response containing a recognisable <urlset> or <sitemapindex>element. This is a presence-and-shape check — it does not validate that every URL listed in the sitemap actually resolves, or that the sitemap is complete relative to your site's real page count.
Example evidence (illustrative — not live scan data)
GET https://example.com/sitemap.xml: HTTP 404
How to fix it
- Generate an XML sitemap listing your site's indexable URLs — most frameworks and CMSs have a built-in or plugin-based generator.
- Serve it at
/sitemap.xmlwith anapplication/xmlcontent type. - Reference it from your robots.txt with a
Sitemap:line. - Submit it in Google Search Console / Bing Webmaster Tools for faster pickup.
How to verify the fix
Load https://yourdomain.com/sitemap.xml directly in a browser and confirm it returns valid XML, then re-run the Nivaronix scanner and confirm it now reports sitemap.xml as present.