Pricing

$20.00 / 1,000 domain inspecteds

Security.txt + Well-Known Inspector

Bulk domain inspector for security.txt and useful .well-known trust/security endpoints: change-password, OpenID config, assetlinks, Apple app-site association, MTA-STS, host-meta, and more.

Pricing

$20.00 / 1,000 domain inspecteds

Rating

0.0

(0)

Developer

Mack

Actor stats

Bookmarked

Total users

Monthly active users

6 days ago

Last modified

Categories

Developer tools

Automation

SEO tools

You can access the Security.txt + Well-Known Inspector programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "domains": [
12        "github.com",
13        "google.com"
14    ]
15};
16
17// Run the Actor and wait for it to finish
18const run = await client.actor("wiggly_book/well-known-inspector").call(input);
19
20// Fetch and print Actor results from the run's dataset (if any)
21console.log('Results from dataset');
22console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
23const { items } = await client.dataset(run.defaultDatasetId).listItems();
24items.forEach((item) => {
25    console.dir(item);
26});
27
28// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Security.txt + Well-Known Inspector API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Security.txt + Well-Known Inspector API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Security.txt + Well-Known Inspector API in Python

Security.txt + Well-Known Inspector API through CLI

Security.txt + Well-Known Inspector OpenAPI definition

Security.txt + Well-Known Inspector API

Well-Known URI Prober - Scan /.well-known/ Endpoints API

eliai/well-known-prober

Probe a domain's /.well-known/ endpoints. Input: domain. Output: JSON per endpoint (security.txt, change-password, mta-sts, openid-configuration, apple-app-site-association, assetlinks, dnt-policy) with URL, status, and found flag. $0.01 per domain checked.

Anthony Snider

Security.txt Checker — Security Contact Finder

q_services/security-txt-checker

Check websites for security.txt, extract security contacts, expiry, policy, hiring and compliance fields.

Q Services

Security.txt Checker - Website Security Contacts

benthepythondev/security-txt-checker

Check websites for security.txt disclosure files and extract contacts, policies, encryption keys, expiry dates and raw security metadata.

Ben

HTTP Security Headers Inspector

aetheragent/http-header-inspector

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Grant Mitchell

Well-Known File Inventory

junipr/well-known-file-inventory

Inventory common `.well-known` files across domains and report reachability/content hints.

junipr

Operational Asset Monitor

silicon1235/operational-asset-monitor

Monitor public HTTPS endpoints, domains, DNS/email posture, SPF, DMARC, MTA-STS, TLS-RPT, CAA, security.txt, and security headers for operational alerts.

X L

Domain DNS Footprint Auditor

glowing_glove/domain-dns-footprint-auditor

Audit domain DNS, MX, TXT, SPF, DMARC, nameserver, homepage, and security.txt signals for sales, security, and deliverability workflows.

Ushba Khan

Public Security.txt Readiness Agent

jacksu/public-security-txt-readiness-agent

Check public security.txt readiness: contact, expiry, canonical, policy, encryption, risk labels, hashes, and useful-result pricing.

jack su

security.txt Auditor

junipr/security-txt-auditor

Audit security.txt auditor inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

junipr

Security.txt Auditor

phoenix2810/security-txt-auditor

Audit a public website's security.txt vulnerability disclosure metadata. Checks discovery paths, required fields, expiration, contact methods, and returns a readiness score with recommendations.