“Index of /”
The web server found the folder for your site but no page to show for it, so it listed the folder's files instead. Visitors see file names, sizes and dates in place of your site, and anyone can open or download any of those files, including ones you never meant to publish.
Is your site showing it right now?
The free scan loads your page like a visitor and checks for this message, plus broken links, script errors and phone layout. It also walks your signup, booking or contact form, without sending anything.
Free, no signup. Usually done in about a minute.Why it happens
- The folder has no index.html, index.php or other default file: the files were deleted, moved, or uploaded into the wrong folder
- Directory listing is switched on ("autoindex" in nginx, "Options Indexes" in Apache), so the server lists files whenever there's no index file
- A deploy that hasn't finished, or that copied the site into a subfolder instead of the web root
- The domain points at the wrong folder on the server
How to fix it
Check the web root for an index file
Open the folder the domain serves (often public_html, www or htdocs) in your host's file manager or over SFTP. It should contain index.html or index.php. If your files landed in a subfolder, move them up.
Re-run the deploy
If the site is deployed by a build or a script, check its last run. A build that failed halfway can leave the folder empty or half-copied; run it again and watch for errors.
Turn directory listing off
In Apache, add "Options -Indexes" to the site's .htaccess or its config. In nginx, make sure "autoindex off;" is set (it's the default). Then a folder with no index file shows a 403 instead of your files.
Check the domain's document root
In your hosting panel, confirm the domain points at the folder your site lives in. Added domains and subdomains sometimes get a new, empty folder of their own.
Questions
Is this a security problem?
It can be. The listing shows every file in the folder, so backups, config files and uploads are one click away. Fix the index file and turn listing off, then check that nothing sensitive sits in a public folder.
Only one folder shows a listing, not the homepage. Does it matter?
Yes, for the same reason: anything in that folder is open to the public. Turning directory listing off covers every folder at once.
Can Page Canary tell me if this comes back?
Yes. Page Canary checks your key pages every day for this message and others like it, confirms it on a second check, and emails you with the fix. One site is free.