security.txt Checker

RFC 9116 asks for one plain text file saying where to report a vulnerability. Without it, whoever finds a hole in your site has to guess, and guessing tends to end somewhere public.

Domain: Scheme and path are optional — https://example.com/page works too.

Check security.txt