nis2
How to fix: Sitemap.xml (availability signal)
NIS2 Art. 21(2)(a)
Why this matters
A structured sitemap signals the organisation maintains its web presence actively — a hygiene proxy rather than a security control per se.
Background
A reachable sitemap is a basic availability + service-discovery signal. Search engines (and many AI crawlers) use it to track which pages exist. Same fix as tech.sitemap; framed under NIS2 here.
References
NIS2 Art. 21(2)(a) — availability of essential services · sitemaps.org protocol
How to fix
Code snippet for each stack we cover. Pick the one matching your server / framework.
nginx
No server config — generate sitemap.xml.
apache
Same.
cloudflare
Same.
wordpress
Yoast / RankMath both generate /sitemap.xml automatically. Confirm in plugin settings.
flask
Add /sitemap.xml route that emits XML from your URL model.
express
Same.
rails
sitemap_generator gem.
Verify it's working
curl -s https://your-site/sitemap.xml | head -3 — should start with <?xml + <urlset.
Want to know if your site has this issue?
Run a free 53-check audit — security, GDPR, NIS2, and technical SEO.
Audit my site →