Security.txt Checker

Validate a domain's RFC 9116 vulnerability disclosure file — required fields, location, and trust signals.

Checks a domain's security.txt against RFC 9116. This tool detects whether a digital signature is present but does not cryptographically verify it — key trust is left to you, per the RFC. And per RFC 9116 §5.5, a domain having (or not having) this file neither grants nor denies permission to security-test it.