/.well-known/security.txt
type: TechArticle
description: A standard text file at /.well-known/security.txt tells security researchers how to report vulnerabilities. It is cheap to publish and dramatically lowers the bar for responsible disclosure.
language: en
is part of: Web Specification Studio
author: Web Specification Studio
publisher: Web Specification Studio
license: https://creativecommons.org/licenses/by/4.0/
date modified: 2026-06-08T12:00:00.000Z
citation: RFC 9116 — A File Format to Aid in Security Vulnerability Disclosure
  type: CreativeWork
  publisher: IETF
citation: securitytxt.org
  type: CreativeWork
  publisher: securitytxt.org
citation: RFC 8615 — Well-Known Uniform Resource Identifiers (URIs)
  type: CreativeWork
  publisher: IETF

Web Specification Studio
type: WebSite

Web Specification Studio
type: Organization

breadcrumb
type: BreadcrumbList
item list element: Home
  type: ListItem
  position: 1
  item: https://webspecification.com/
item list element: Spec
  type: ListItem
  position: 2
  item: https://webspecification.com/spec/
item list element: Security
  type: ListItem
  position: 3
  item: https://webspecification.com/spec/security/
item list element: /.well-known/security.txt
  type: ListItem
  position: 4
  item: https://webspecification.com/spec/security/security-txt/