# robots.txt is a crawl directive, not a security mechanism. Private routes # are also noindex and excluded from sitemaps; access control is enforced by # authentication and the API, never by this file. User-agent: * Allow: / Disallow: /login Disallow: /register Disallow: /forgot Disallow: /reseting-password Disallow: /account Disallow: /account-deletion Disallow: /delete-account Disallow: /admin Disallow: /oauth-callback Disallow: /oauth2callback Disallow: /api/ Sitemap: https://www.fortaify.com/sitemap.xml