Domain Tools
Check whether a website publishes a valid security.txt file as defined by RFC 9116. A security.txt file tells security researchers how to responsibly disclose vulnerabilities to your organisation.
/.well-known/security.txt allows security researchers to quickly find the right contact without guessing. Required fields are Contact and Expires. The Expires field prevents stale contact information from being relied upon after staff changes or policy updates.