Skip to content
Check a domain

Security contact check

Runs in every scan · 2 checks

Check your security.txt fileand give people a clear way to reach you.

A two-line text file that tells anyone who spots a problem on your site exactly where to send it.

  • $8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax)
  • No subscription

What we check

What we look at.Each with evidence and a fix.

Part of every Quick Scan, alongside the other checks.

  • security.txt published

    A file at /.well-known/security.txt on your site.

  • A ready-made fix

    The two lines every file needs, written out for you.

Why it matters

Small settings.A big difference for your visitors.

  • Reports reach you

    Not a contact form, a sales inbox or nowhere.

  • Quicker fixes

    The right person hears first.

  • A good first impression

    Shows researchers you welcome their help.

What a finding looks like

Plain English.With the evidence behind it.

Open the full sample report

F6 · crawler-files

Publish a way to report a security problem

Low Confirmed Minutes

What it means
A security.txt file gives anyone who spots a problem with your site a clear, safe way to tell you.
Evidence
GET /.well-known/security.txt → 404
Fix
Publish /.well-known/security.txt with a Contact: line and an Expires: date.

How to fix it

A few clear steps.In the order to take them.

Your report has the exact fix for your site, ready to forward to whoever looks after it.

  1. Choose an address that a person reads, such as security@ your domain.

  2. Create a text file with a Contact line and an Expires date, a year or less ahead.

  3. Publish it at /.well-known/security.txt and put a reminder in your calendar to renew the date.

/.well-known/security.txt
Contact: mailto:security@example.com
Expires: 2027-10-01T00:00:00Z
Preferred-Languages: en

Questions

Security contact questions.

Something else? support@scandefend.com

What is security.txt?

A standard (RFC 9116) for a small text file that tells people how to report a security problem with your website. Think of it as a doorbell for the people who want to help.

What must a security.txt file contain?

At least one Contact line (an email address or web page) and an Expires date. Preferred-Languages, Policy and Acknowledgments are useful extras.

Where does security.txt go?

At /.well-known/security.txt on your website, served over HTTPS.

Does a small website need one?

It takes a few minutes and costs nothing. If someone does spot a problem, it means the message reaches you instead of getting lost.

Keep exploring

Also useful: What we check Sample report Pricing For web agencies

See what your website shows.Know what to fix first.

See pricing