What is the Security.txt Downloader & Checker?
security.txt is a small file that tells people how to report a security problem on a website. It is an official standard (RFC 9116) and lives at example.com/.well-known/security.txt.
Our tool looks in both allowed places, downloads the file, and lists each field in a table. It also checks the two required fields, Contact and Expires, and warns you if the file has already expired.
How to use it
- Type or paste the website address, like
example.com. You can also paste the full link to the file. - Press the button. We look for
/.well-known/security.txtin the right place on that website. If it is not there, we also check/security.txt. - Read the simple summary to see what the file says.
- Press Download to save the file, or Copy text to paste it anywhere.
Why people like this tool
Expiry check
We read the Expires date and tell you if the file is out of date.
Required fields
Warnings if Contact or Expires is missing.
All fields listed
Contact, Encryption, Policy, Acknowledgments, Hiring and more.
PGP detection
See if the file is signed with a PGP key.