Fetch and validate a site’s /.well-known/security.txt against the RFC 9116 standard.
security.txt Checker retrieves the standard security.txt file and validates its structure and required fields, so you know exactly how to report a vulnerability — and whether the organization follows responsible-disclosure best practice.
For defenders, it is a quick conformance check; for researchers, it is the fastest way to find the right contact and policy.
It is a recommended standard (RFC 9116), not a legal requirement — but its presence signals a mature security program and gives researchers a clear reporting path.