Crawlability is the ability of a search engine bot to reach and inspect a page or resource. If a URL is crawlable, automated crawlers can follow it, read its content, and potentially add it to a search index. If it is blocked, hidden behind authentication, or marked with controls like noindex, the bot should not expose it in search results.
In cyber security, crawlability matters because anything crawlable may become discoverable by strangers, including shared documents, test pages, admin panels, or AI chat links. Attackers use search queries and crawler-accessible pages to find exposed content without breaking into a system. Defenders reduce risk by protecting sensitive resources with strong access controls, checking robots and noindex settings, and avoiding public links for private material. Crawlability is not a breach by itself, but it can turn accidental exposure into searchable evidence.