Validate any sitemap.xml.
Paste a sitemap.xml document or point at a live URL. The validator
parses the XML, detects whether it is a URL set or a sitemap index, and reports
URL count, lastmod / changefreq / priority
coverage, http vs https mix, long URLs, bad date formats, and any XML parse errors
with line and column.
Input
Past data never leaves the page; the parse happens entirely in your browser.
Fetched via the HeaderPilot worker proxy
(headerpilot-csp-checker-proxy.hpb21.workers.dev) so the request
is not blocked by CORS.
Related reading
Where sitemaps fit in the broader SEO and security baseline.
robots.txt Generator & Tester
Pair your sitemap with a robots.txt that points at it and allows the right crawlers.
Meta Tag & OpenGraph Inspector
Audit the <head> metadata of every page the sitemap lists.
Security Headers Checker
Confirm the headers your sitemap URLs are served with match your baseline.
View the live sitemap
See the sitemap that ships with headerpilot.com as a worked example.
CSP Generator
Generate a strict Content-Security-Policy for the same origin.
CSP not working
If the policy and your sitemap do not match, start here.