Tools / security.txt

security.txt checker

Look for the vulnerability disclosure contact file at the RFC 9116 well-known location and review its key fields.

Fields reviewed

Contact, Expires, and Canonical are highlighted alongside Policy, Encryption, Acknowledgments, and preferred languages when present.

The checker tries /.well-known/security.txt first, then /security.txt. It checks presence and basic fields, not full RFC conformance.