RFC 9116
A cybersecurity standard specification formally published by the IETF in 2022. It defines the standard format for the security.txt file, used to standardize vulnerability disclosure channels for websites. Standard fields include contact information, expiration date, encryption public keys, and vulnerability disclosure policies.
Core Facts
Timeline (last 90 days)
security.txt is an industry standard defined by RFC 9116.
security.txt is a standardized text file placed in a website's root directory (typically at /.well-known/security.txt), conforming to RFC 9116, and is used to provide security researchers with a channel for reporting vulnerabilities.
RFC 9116 was officially published by the IETF in 2022 and specifies the standard format for security.txt files, including fields such as Contact, Expires, Encryption, and Policy.
All Facts (3)
security.txt is a standardized text file placed in a website's root directory (typically at /.well-known/security.txt), conforming to RFC 9116, and is used to provide security researchers with a channel for reporting vulnerabilities.
70%Unverifiedsecurity.txt is an industry standard defined by RFC 9116.
50%UnverifiedRFC 9116 was officially published by the IETF in 2022 and specifies the standard format for security.txt files, including fields such as Contact, Expires, Encryption, and Policy.
50%