Pricing

$10.00 / 1,000 domain checkeds

Security.txt Finder & Parser - RFC 9116 Checker API

Find and parse security.txt (RFC 9116). Input: domain. Output: JSON with found flag, location URL, Contact, Encryption, Policy, Expires, and validity checks. For security researchers and agents reporting vulnerabilities. Pay-per-result at $0.01 per domain checked.

Pricing

$10.00 / 1,000 domain checkeds

Rating

0.0

(0)

Developer

Anthony Snider

Actor stats

Bookmarked

Total users

Monthly active users

11 days ago

Last modified

Security.txt Finder & Parser

Find and parse any domain's security.txt (RFC 9116) in one call — so researchers and AI agents instantly know how to report a vulnerability.

Live on the Apify Store — run it instantly or call it as an agent tool via Apify MCP.

What you get

Locates security.txt at /.well-known/security.txt (with /security.txt fallback).
Parses every RFC 9116 directive: Contact, Expires, Encryption, Acknowledgments, Policy, Hiring, Preferred-Languages, Canonical.
Validates the policy: flags an expired Expires date and any missing required fields.
Single domain or bulk — accepts a URL, a bare domain, or a list.
Skips HTML landing pages served on a 200, so a "found" result is the real thing.

Input

{
  "domain": "github.com",
  "domains": ["google.com", "cloudflare.com"],
  "maxDomains": 25
}

Provide domain (single) and/or domains (bulk). maxDomains caps the run (default 25, max 100).

Output

One dataset item per domain:

{
  "domain": "github.com",
  "found": true,
  "location": "https://github.com/.well-known/security.txt",
  "fields": {
    "Contact": ["https://hackerone.com/github"],
    "Expires": ["2026-12-31T23:00:00.000Z"],
    "Policy": ["https://github.com/security"],
    "Canonical": ["https://github.com/.well-known/security.txt"]
  },
  "expires": "2026-12-31T23:00:00.000Z",
  "expired": false,
  "valid": true,
  "missingRequired": [],
  "checkedUrls": [
    "https://github.com/.well-known/security.txt",
    "https://github.com/security.txt"
  ]
}

When nothing is found, found is false, fields is empty, and missingRequired lists the required directives.

Security.txt Checker — Security Contact Finder

q_services/security-txt-checker

Check websites for security.txt, extract security contacts, expiry, policy, hiring and compliance fields.

Q Services

Security.txt Checker - Website Security Contacts

benthepythondev/security-txt-checker

Check websites for security.txt disclosure files and extract contacts, policies, encryption keys, expiry dates and raw security metadata.

Ben

Public Security.txt Readiness Agent

jacksu/public-security-txt-readiness-agent

Check public security.txt readiness: contact, expiry, canonical, policy, encryption, risk labels, hashes, and useful-result pricing.

jack su

Ads.txt & App-ads.txt Parser - Authorized Sellers API

eliai/ads-txt-parser

Parse a publisher's ads.txt and app-ads.txt. Input: domain. Output: JSON records per authorized seller - ad system domain, publisher ID, relationship (DIRECT/RESELLER), certification authority ID. Clean structured data at $0.01 per domain checked.

Anthony Snider

Domain DNS Footprint Auditor

glowing_glove/domain-dns-footprint-auditor

Audit domain DNS, MX, TXT, SPF, DMARC, nameserver, homepage, and security.txt signals for sales, security, and deliverability workflows.

Ushba Khan

Security Disclosure Finder

toronto_777/security-disclosure-finder

Find public security.txt, responsible disclosure, bug bounty, contact, and policy signals for domains.

Steven Feng

HTTP Security Headers Inspector

aetheragent/http-header-inspector

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Grant Mitchell

Domain Expiration Date Checker

botflowtech/domain-expiration-date-checker

Check when domain registration expires via WHOIS lookup. Perfect for domain investors, website buyers, and security teams.

BotFlowTech

Security.txt Auditor

phoenix2810/security-txt-auditor

Audit a public website's security.txt vulnerability disclosure metadata. Checks discovery paths, required fields, expiration, contact methods, and returns a readiness score with recommendations.

Sanskar Jaiswal

Email Address Validator - Syntax, MX & Disposable Check

eliai/email-validator

Validate email addresses without sending anything. Input: emails (list). Output: JSON per address with RFC syntax validity, domain MX existence, role-account flag, disposable-domain flag, and an overall verdict. Cheap pay-per-result: $0.01 per email validated.

Anthony Snider