What it reads
The file at /.well-known/security.txt, or the older /security.txt. A page without a Contact, Expires or Email line does not count.
Check 38 of 54 · Domain and registration
security.txt, explained.
A file telling researchers how to report a vulnerability to you.
Engine 1.57.0, read 25 October 2026
Free checkAdviceReliability: High
Could you lose the domain, or part of it?
What the check does, and where it stops.
Why it matters
When someone finds a problem, this is how they find you before they find a journalist.
What a finding looks like
What it finds is shown with a recommendation. It is advice, so it never lowers your score. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Where its limits are
Reported as unknown when a request for the file gets no answer. If your website does not answer at all, it is left out.
ReliabilityHigh: narrow, known blind spots
Check 38 is one of 10 in Domain and registration. See it in its row on the scanner page, beside the rest of Domain and registration.
See how your domain does.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.