RFC 9116 · continuous collection

Every domain's security.txt, in one place.

We fetch /.well-known/security.txt from registered domains and keep each file exactly as it is published: contacts, policies and keys for reporting vulnerabilities.

• Original content, unedited
• Search inside the files
• No sign-up