Security.txt RFC 9116 check — check your security contact file online

Lints security.txt against RFC 9116 and the EU Cyber Resilience Act reporting contact point that has applied since 11 September 2026. Runs entirely in your browser — nothing is uploaded.

as of

Free here and in the editor: lint the security.txt you have open - all 13 rules, every line, no key.
Next job: scan every security.txt across a whole workspace in one pass and export a dated JSON report you keep for the audit file.

$29 once · one licence key per person or team seat · A security consultant reviewing a disclosure contact and policy starts around $150 an hour.

Same engine as the VS Code extension, byte for byte.