# Public marketing site (www.fortiorapp.com / fortiorapp.com).
# admin.fortiorapp.com and app.fortiorapp.com serve their own
# "Disallow: /" robots.txt from functions/_middleware.js, never this file.
#
# The public marketing pages are meant to be indexed, so crawling is allowed.
# The pages that must stay out are excluded where the decision is
# authoritative rather than here: admin.fortiorapp.com and app.fortiorapp.com
# send X-Robots-Tag on every response, /settings and any unknown path get one
# from functions/_middleware.js, and /demo/ carries its own noindex meta.
# A Disallow alone would not prevent indexing anyway — a blocked URL can still
# be indexed from external links, and blocking it stops a crawler from ever
# seeing the noindex that would have excluded it properly.
User-agent: *
Disallow: /admin
Disallow: /api/
Disallow: /app/
Disallow: /webapp/
Allow: /

Sitemap: https://www.fortiorapp.com/sitemap.xml