Validate /.well-known/security.txt presence and fields.
Validate /.well-known/security.txt — Contact, Expires, Canonical, Policy, and related fields.
This score is a defensive configuration review — not a penetration test, CVE audit, or guarantee of security.
This scanner is part of the Cyber Security PRO add-on.
Scanning…
More from the same category
Full defensive configuration scan: TLS, headers, cookies, DNS and email auth.
Detect WordPress and review public exposure/config signals without fake CVEs.
Passive API configuration audit — HTTPS, headers, CORS signals (no exploitation).
Analyze CSP, HSTS and related HTTP security headers with remediation snippets.
Inspect Secure, HttpOnly and SameSite flags on public Set-Cookie headers.
Certificate health and TLS posture using the shared SSL engine.
Learn more — open a section when you need details
Validate /.well-known/security.txt — Contact, Expires, Canonical, Policy, and related fields.
Enter a public URL or domain.
Click Scan.
Review findings with evidence and remediation.
Defensive configuration review — not exploitation.
Light tool — does not debit full-scan allowance.
Prefer NOT CHECKED over guessing.