Free Tool
Security.txt Checker
Check if a website has a security.txt file (RFC 9116) with vulnerability disclosure contact information and policy details.
What is Security.txt?
Security.txt (RFC 9116) is a proposed internet standard that allows organizations to define security policies and provide contact information for responsible disclosure of security vulnerabilities. When security researchers find a bug on your website, security.txt tells them exactly how and where to report it — preventing responsible disclosures from getting lost.
Security.txt Format Example
# security.txt for example.com # See https://securitytxt.org for reference Contact: security@example.com Contact: https://example.com/security Expires: 2026-12-31T23:59:59.000Z Encryption: https://example.com/pgp-key.asc Policy: https://example.com/security-policy Preferred-Languages: en Canonical: https://example.com/.well-known/security.txt Acknowledgments: https://example.com/hall-of-fame