Security.txt Checker — Security Contact Finder avatar

Security.txt Checker — Security Contact Finder

Pricing

from $0.50 / 1,000 checked domains

Try for free
Go to Apify Store
Security.txt Checker — Security Contact Finder

Security.txt Checker — Security Contact Finder

Try for free

Check websites for security.txt, extract security contacts, expiry, policy, hiring and compliance fields.

Pricing

from $0.50 / 1,000 checked domains

Rating

0.0

(0)

Developer

Q Services

Q Services

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

2 days ago

Last modified

Categories

Developer tools

Share

Check any list of websites for security.txt and extract structured security contact data.

Use it for vendor security reviews, bug bounty intake audits, compliance monitoring, agency reports, and scheduled checks that alert you when a site's security contact file disappears or expires.

Example result:

{
    "domain": "securitytxt.org",
    "checkedUrl": "https://securitytxt.org/.well-known/security.txt",
    "status": "found",
    "hasSecurityTxt": true,
    "contacts": ["mailto:security@example.com"],
    "expiresAt": "2027-01-01T00:00:00.000Z",
    "isExpired": false,
    "policy": ["https://example.com/security-policy"],
    "scrapedAt": "2026-07-09T10:30:00.000Z"
}

How to use it

  1. Paste one or more domains or URLs.
  2. Keep the root fallback enabled if you also want to check /security.txt.
  3. Start the Actor and export the Dataset as JSON, CSV or Excel.

Pricing

Pay per result, no subscription:

EventPrice
Run start$0.005
Per checked domain$0.0005

1,000 checked domains cost about $0.505 before Apify platform usage.

Output fields

FieldTypeAlways present
domainstringYes
checkedUrlURLYes
statusstring: found, expired, missingYes
hasSecurityTxtbooleanYes
statusCodenumber or nullNo
contactsarrayYes
expiresAtISO date or nullNo
isExpiredboolean or nullNo
encryptionarrayYes
acknowledgmentsarrayYes
preferredLanguagesarrayYes
canonicalarrayYes
policyarrayYes
hiringarrayYes
csafarrayYes
unknownFieldsarrayYes
attemptsarrayYes
scrapedAtISO dateYes

Limitations

  • It reads public security.txt files only.
  • It does not validate cryptographic signatures.
  • Missing files are returned as normal results because the absence is useful audit data.

FAQ

Why do missing files appear in the dataset? For compliance and monitoring workflows, "missing" is an actionable status.

Can I schedule it? Yes. Schedule it weekly or monthly to monitor a portfolio of domains.

Does it call private APIs? No. It only requests public website URLs.

You might also like

OSINT Website Intelligence Analyzer avatar

OSINT Website Intelligence Analyzer

onescales/website-intelligence-analyzer-osint

All-in-one website analysis tool. Run 30 OSINT checks on any URL — DNS, SSL, WHOIS, tech stack, security headers, email security, open ports, and more. Get a complete site profile in seconds.

User avatar

One Scales

111

5.0

(3)

Holehe Email OSINT - Find Registered Accounts avatar

Holehe Email OSINT - Find Registered Accounts

anshumanatrey/holehe-email-osint

Check if an email is registered on 120+ platforms (Instagram, Twitter, GitHub, Discord, etc.) without alerting the target. Perfect for OSINT investigations, security research, and email verification.

User avatar

Anshuman Atrey

1.4K

5.0

(5)

Bug Bounty Program Finder avatar

Bug Bounty Program Finder

thescrapelab/bug-bounty-program-finder

Find public bug bounty programs, vulnerability disclosure programs, security.txt contacts, rewards, scope, safe harbor notes, and disclosure policy URLs.

User avatar

Inus Grobler

2

Security.txt Checker - Website Security Contacts avatar

Security.txt Checker - Website Security Contacts

benthepythondev/security-txt-checker

Check websites for security.txt disclosure files and extract contacts, policies, encryption keys, expiry dates and raw security metadata.

User avatar

Ben

2

Email Data Breach Checker avatar

Email Data Breach Checker

lofomachines/email-breach-checker

Check if your email has been compromised in a data breach. Scan one or hundreds of emails in bulk to find leaked passwords, exposed accounts, and stolen credentials. Get a full risk score, breach history, and affected sites — fast, accurate, and affordable.

User avatar

Lofomachines

113

Bulk Domain Email Security Checker avatar

Bulk Domain Email Security Checker

automation-lab/bulk-domain-email-security-checker

Audit SPF, DMARC, MX, and DKIM DNS posture for bulk domain lists with scores, risk flags, and raw records.

User avatar

Stas Persiianenko

2

🌐 DNS Propagation Checker avatar

🌐 DNS Propagation Checker

taroyamada/dns-propagation-checker

Query up to 200 domains across 8 global resolvers to extract A, NS, and SOA records and audit worldwide nameserver propagation instantly.

User avatar

naoki anzai

6

Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd avatar

Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd

getascraper/bug-bounty-finder

Find every public bug bounty and VDP program in one run. Queries HackerOne directory, Bugcrowd engagements, and security.txt files. 22 fields per program: min/max bounty, currency, resolved reports, policy snippet, contacts, expiry. $3.99 per 1,000 results.

User avatar

GetAScraper

2

PS

Public Security.txt Readiness Agent

jacksu/public-security-txt-readiness-agent

Check public security.txt readiness: contact, expiry, canonical, policy, encryption, risk labels, hashes, and useful-result pricing.

User avatar

jack su

2

Email Finder & Verifier - B2B Email Lookup API avatar

Email Finder & Verifier - B2B Email Lookup API

clearpath/email-finder-api

Find verified business emails using first name, last name, and company domain. Tests common patterns and validates with SMTP checks. Upload CSV or Excel files for bulk processing. Returns quality-ranked results with alternative emails and confidence scores. Export to JSON or CSV.

User avatar

ClearPath

1.5K

1.4

(3)

Email & Subdomain Finder - theHarvester OSINT | 54 Sources avatar

Email & Subdomain Finder - theHarvester OSINT | 54 Sources

anshumanatrey/theharvester-osint

Cloud-hosted theHarvester OSINT tool. Harvest emails, subdomains, IPs, URLs and ASNs from 54+ public sources (Shodan, Censys, crt.sh, VirusTotal, SecurityTrails, GitHub, hunter.io). Full CLI feature parity — DNS brute force, subdomain takeover, screenshots. $0.003 per record harvested.

User avatar

Anshuman Atrey

21