Sitemap Validator

Check whether an XML sitemap is well-formed and every entry has a valid URL.

What this tool does

Fetches an XML sitemap and checks that it is well-formed, correctly structured as a urlset or sitemapindex, and that every entry has an absolute URL and a parsable lastmod date.

How to use it

Enter a sitemap's URL. The checker fetches it, parses the XML, identifies whether the root is a urlset (a list of pages) or a sitemapindex (a list of other sitemaps), and validates every entry's <loc> and, if present, <lastmod>.

Example

For a urlset with four <url> entries where one has a relative loc and another is missing loc entirely, the checker reports 2 entries with issues out of 4 total, with the exact problem named for each.

Validation and safety

A <loc> must parse as an absolute http or https URL; a <lastmod>, when present, must parse as a date. The checker also flags a root element that is neither urlset nor sitemapindex, and warns if the entry count exceeds the 50,000-URL limit defined by the sitemap protocol.

How to interpret the result

Passing this check means the file is structurally valid and its listed URLs and dates are well-formed — it does not confirm that every listed URL actually returns 200, that the sitemap is linked from robots.txt, or that it has been submitted to any search engine.

Limitations

Only <loc> and <lastmod> are validated; <changefreq> and <priority> values are not checked, since search engines already largely ignore them. Sitemaps larger than 10MB are not read in full, matching common server-side size limits for this kind of check.

Privacy

This tool sends the address you enter to Quiklio's own server, which makes the network request on your behalf — the target address is not sent to any third party beyond what a normal request to that address would reveal.

Frequently Asked Questions

What does Sitemap Validator do?
Fetches an XML sitemap and checks that it is well-formed, correctly structured as a urlset or sitemapindex, and that every entry has an absolute URL and a parsable lastmod date.
Can this be used to probe internal or private addresses?
Yes, this is blocked. Requests to localhost, private IP ranges and cloud metadata addresses are refused before any check runs, and the resolved IP is re-checked after DNS lookup to prevent bypassing this with a hostname that points to a private address at request time.
Is the checked address shared with anyone else?
This tool sends the address you enter to Quiklio's own server, which makes the network request on your behalf — the target address is not sent to any third party beyond what a normal request to that address would reveal.