Unverified50% confidenceFactExact time
security.txt is an industry standard defined by RFC 9116.
1
Sources
50%
Confidence
Long-term
Relevance
9/12/2026
First Seen
Sources
Related Entities
Related Claims
Unverifiedsecurity.txt is a standardized text file placed in a website's root directory (typically at /.well-known/security.txt), conforming to RFC 9116, and is used to provide security researchers with a channel for reporting vulnerabilities.78% similarUnverifiedRFC 9116 was officially published by the IETF in 2022 and specifies the standard format for security.txt files, including fields such as Contact, Expires, Encryption, and Policy.75% similarUnverifiedThe prevalence of security.txt is often used as a reference indicator for measuring a company's security maturity.72% similarUnverifiedThe NIST SP 800-161 supply chain security framework recommends that enterprises implement strict version management, change auditing, and vulnerability subscription mechanisms for critical security components.71% similarUnverifiedA security.txt file typically contains core fields such as Contact, Expires, Encryption, Policy, and Acknowledgments.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/916421API
curl https://kongchang.com/api/v1/knowledge/claims/916421MCP
get_claim(id=916421)