Vulnerability disclosure discovery
Check whether researchers can find the right security contact.
Validate a public domain, paste an existing file, or generate a clean RFC 9116 starter with Contact, Policy, Canonical, Preferred-Languages, and Expires fields.
/.well-known
Contact
Policy
Expires
Findings
Run a check or paste a file.
Starter file
Generated output will appear here.
Paste analyzer
Ready
Generator
Techclick next step
Turn disclosure hygiene into interview-ready evidence.
Use the result to explain vulnerability disclosure scope, safe reporting channels, policy freshness, and the difference between a machine-readable contact file and a complete VDP.