Pricing

$20.00 / 1,000 domain inspecteds

Security.txt + Well-Known Inspector

Bulk domain inspector for security.txt and useful .well-known trust/security endpoints: change-password, OpenID config, assetlinks, Apple app-site association, MTA-STS, host-meta, and more.

Pricing

$20.00 / 1,000 domain inspecteds

Rating

0.0

(0)

Developer

Mack

Actor stats

Bookmarked

Total users

Monthly active users

6 days ago

Last modified

Checks

For each domain, the actor checks:

/.well-known/security.txt
/security.txt fallback
/.well-known/change-password
/.well-known/openid-configuration
/.well-known/assetlinks.json
/.well-known/apple-app-site-association
/.well-known/webfinger
/.well-known/host-meta
/.well-known/nodeinfo
https://mta-sts.<domain>/.well-known/mta-sts.txt

For security.txt, it parses common RFC 9116 fields such as Contact, Expires, Policy, Encryption, Acknowledgments, and Canonical.

Example input

{
  "domains": ["github.com", "google.com"],
  "maxDomains": 50
}

Example output fields

{
  "domain": "example.com",
  "score": 62,
  "verdict": "partial well-known posture",
  "present_keys": ["security_txt_well_known", "change_password"],
  "security_contacts": ["mailto:security@example.com"],
  "risk_flags": [],
  "checks": [{"key": "security_txt_well_known", "status": 200, "parsed": {}}]
}

Pricing

Charged per valid domain inspected: $0.02 / domain.

Limitations

Surface-level HTTP discovery only; not a full compliance audit.
Missing files are not proof the organization lacks the underlying capability.
Some .well-known endpoints intentionally redirect, require query parameters, or behave differently by user agent.
Use the output as triage evidence and manually inspect high-impact findings.

Well-Known URI Prober - Scan /.well-known/ Endpoints API

eliai/well-known-prober

Probe a domain's /.well-known/ endpoints. Input: domain. Output: JSON per endpoint (security.txt, change-password, mta-sts, openid-configuration, apple-app-site-association, assetlinks, dnt-policy) with URL, status, and found flag. $0.01 per domain checked.

Anthony Snider

Security.txt Checker — Security Contact Finder

q_services/security-txt-checker

Check websites for security.txt, extract security contacts, expiry, policy, hiring and compliance fields.

Q Services

Security.txt Checker - Website Security Contacts

benthepythondev/security-txt-checker

Check websites for security.txt disclosure files and extract contacts, policies, encryption keys, expiry dates and raw security metadata.

Ben

HTTP Security Headers Inspector

aetheragent/http-header-inspector

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Grant Mitchell

Well-Known File Inventory

junipr/well-known-file-inventory

Inventory common `.well-known` files across domains and report reachability/content hints.

junipr

Operational Asset Monitor

silicon1235/operational-asset-monitor

Monitor public HTTPS endpoints, domains, DNS/email posture, SPF, DMARC, MTA-STS, TLS-RPT, CAA, security.txt, and security headers for operational alerts.

X L

Domain DNS Footprint Auditor

glowing_glove/domain-dns-footprint-auditor

Audit domain DNS, MX, TXT, SPF, DMARC, nameserver, homepage, and security.txt signals for sales, security, and deliverability workflows.

Ushba Khan

Public Security.txt Readiness Agent

jacksu/public-security-txt-readiness-agent

Check public security.txt readiness: contact, expiry, canonical, policy, encryption, risk labels, hashes, and useful-result pricing.

jack su

security.txt Auditor

junipr/security-txt-auditor

Audit security.txt auditor inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

junipr

Security.txt Auditor

phoenix2810/security-txt-auditor

Audit a public website's security.txt vulnerability disclosure metadata. Checks discovery paths, required fields, expiration, contact methods, and returns a readiness score with recommendations.