Security.txt Checker API

Find a site's security.txt (/.well-known/security.txt, then /security.txt) and validate it against RFC 9116, or validate content you pass in.

POST /api/v1/tools/security-txt-checkerMCP security_txt_checkerSecurity & PrivacyRandom outputLive network check

Fetch a site's security.txt from /.well-known/ and check it against RFC 9116: Contact and Expires present, not expired, Canonical, encryption, policy and signature.

Input

Send these as a JSON object. Unknown fields are rejected.

site: Site to check, such as example.com. Leave out to validate content instead. (string, up to 2048 characters)
content: security.txt content to validate instead of fetching one. (string, up to 65536 characters)

Try it in the browser JSON Schema Get an API key

curl https://pithlab.com/api/v1/tools/security-txt-checker \n  -H "Authorization: Bearer $PITHLAB_KEY" \n  -H "Content-Type: application/json" \n  -d '{"content":"Contact: mailto:[email protected]\nExpires: 2030-01-01T00:00:00.000Z"}'