security.txt validator logo
RFC 9116 compliant

Validate your security.txt in seconds

Paste your security.txt content and get instant feedback on compliance.

Free forever Privacy-first Real-time validation

Enter or paste your security.txt file content. The validator will check it in real-time as you type. Required fields are Contact and Expires. Validation results will appear below the text area.

Validating...

What is security.txt?

A standard for communicating security disclosure practices, making it easy for researchers to report vulnerabilities.

Coordinated disclosure

Define clear channels for security researchers to report vulnerabilities responsibly.

Well-known location

Place the file at /.well-known/security.txt for automatic discovery.

RFC 9116 standard

An IETF-approved standard ensuring consistent implementation across organizations.

Learn more:
securitytxt.org
|
RFC 9116

Top 150[Moz]

Last updated: 2026-03-02T18:01:37Z
#1 www.google.com
Valid
#3 www.youtube.com
Invalid
#4 www.linkedin.com
Invalid
#6 www.cloudflare.com
Invalid
#7 www.microsoft.com
Valid
#8 www.apple.com
Valid
#9 en.wikipedia.org
Valid
#11 wordpress.org
Valid
#13 www.mozilla.org
Invalid
#24 whatsapp.com
Valid
#25 www.adobe.com
Invalid
#26 www.facebook.com
Valid
#29 www.istockphoto.com
Valid
#30 vimeo.com
Invalid
#32 github.com
Valid
#33 www.amazon.com
Invalid
#34 www.google.com
Valid
#35 www.bbc.co.uk
Invalid
#36 www.google.de
Valid
#42 www.yahoo.com
Invalid
#44 www.dropbox.com
Invalid
#47 www.google.com.br
Valid
#48 line.me
Invalid
#50 opera.com
Signed
Valid
#51 es.wikipedia.org
Valid
#56 www.paypalobjects.com
Invalid
#59 www.theguardian.com
Invalid
#65 pt.wikipedia.org
Valid
#66 fr.wikipedia.org
Valid
#71 www.google.com
Valid
#74 www.webpros.com
Valid
#79 www.nytimes.com
Invalid
#81 ok.ru
Invalid
#82 www.google.es
Valid
#83 www.dailymotion.com
Invalid
#85 www.bloomberg.com
Valid
#88 www.wiley.com
Valid
#95 www.spotify.com
Invalid
#96 www.huffpost.com
Invalid
#97 ru.wikipedia.org
Valid
#98 www.google.fr
Valid
#99 webmd.com
Valid
#101 www.independent.co.uk
Valid
#102 www.amazon.co.jp
Invalid
#104 www.amazon.co.uk
Invalid
#110 issuu.com
Invalid
#115 usatoday.com
Invalid
#117 vdp.cabinetoffice.gov.uk
Invalid
#119 www.huffpost.com
Invalid
#120 www.bbc.com
Invalid
#130 www.facebook.com
Valid
#135 www.google.co.uk
Valid
#142 automattic.com
Signed
Invalid
#146 www.google.it
Valid