Free tool
security.txt checker
security.txt (RFC 9116) is a small text file that tells security researchers where to send reports. If someone finds a problem with your site and cannot find a contact, they often say nothing. This checker looks for the file and generates one for you.
What this checks
- /.well-known/security.txt exists and has a Contact field
- Mixed-content indicators on the homepage
How to use it
- Enter your domain.
- Copy the suggested file.
- Publish it at /.well-known/security.txt and keep Expires current.
Methodology and limitations
PixelPrivate performs passive checks against publicly visible configuration only. It does not test for exploitable vulnerabilities, so a clean result is not a guarantee of security. Read the full security methodology.
Key terms
- security.txt — security.txt is a plain-text file at /.well-known/security.txt that tells security researchers how to report vulnerabilities to your organization..
Frequently asked questions
Does security.txt expose me to attacks?
No. It publishes only a contact address. Use a monitored role mailbox rather than a person’s inbox.
Keep this check running automatically
Create a free account to save results, track your score and get alerted when something changes.
Create free account