security.txt validator logo
RFC 9116 compliant

Validate your security.txt in seconds

Paste your security.txt content and get instant feedback on compliance.

Free forever Privacy-first Real-time validation

Enter or paste your security.txt file content. The validator will check it in real-time as you type. Required fields are Contact and Expires. Validation results will appear below the text area.

Validating...

What is security.txt?

A standard for communicating security disclosure practices, making it easy for researchers to report vulnerabilities.

Coordinated disclosure

Define clear channels for security researchers to report vulnerabilities responsibly.

Well-known location

Place the file at /.well-known/security.txt for automatic discovery.

RFC 9116 standard

An IETF-approved standard ensuring consistent implementation across organizations.

Learn more:
securitytxt.org
|
RFC 9116

Top 150[Moz]

Last updated: 2026-02-28T13:03:42Z
#1 www.google.com
Valid
#3 youtube.com
Invalid
#4 linkedin.com
Invalid
#6 cloudflare.com
Invalid
#7 microsoft.com
Valid
#8 apple.com
Valid
#9 en.wikipedia.org
Valid
#11 wordpress.org
Valid
#13 mozilla.org
Invalid
#24 whatsapp.com
Valid
#25 adobe.com
Invalid
#26 facebook.com
Valid
#29 istockphoto.com
Valid
#30 vimeo.com
Invalid
#32 github.com
Valid
#33 amazon.com
Invalid
#34 search.google.com
Valid
#35 bbc.co.uk
Invalid
#36 google.de
Valid
#42 www.yahoo.com
Invalid
#44 dropbox.com
Invalid
#47 google.com.br
Valid
#48 line.me
Invalid
#50 opera.com
Signed
Valid
#51 es.wikipedia.org
Valid
#56 paypal.com
Invalid
#59 theguardian.com
Invalid
#65 pt.wikipedia.org
Valid
#66 fr.wikipedia.org
Valid
#71 mail.google.com
Valid
#74 cpanel.net
Valid
#79 nytimes.com
Invalid
#81 ok.ru
Invalid
#82 google.es
Valid
#83 dailymotion.com
Invalid
#85 bloomberg.com
Valid
#88 wiley.com
Valid
#95 spotify.com
Invalid
#96 huffpost.com
Invalid
#97 ru.wikipedia.org
Valid
#98 google.fr
Valid
#99 webmd.com
Valid
#101 independent.co.uk
Valid
#102 amazon.co.jp
Invalid
#104 amazon.co.uk
Invalid
#110 issuu.com
Invalid
#115 usatoday.com
Invalid
#117 www.gov.uk
Invalid
#119 huffingtonpost.com
Invalid
#120 bbc.com
Invalid
#130 fb.com
Valid
#135 google.co.uk
Valid
#136 shutterstock.com
Invalid
#142 wp.com
Signed
Invalid
#146 google.it
Valid