Tool · RFC 9116
Security.txt Auditor
Check whether a public domain publishes coordinated vulnerability disclosure instructions. The auditor looks for the preferred well-known location, required Contact and Expires fields, optional program signals, canonical mismatch, and malformed lines.