Categories

A parser and scanner for security.txt files for security researchers. These help security researchers know how to contact a vendor when they find a security vulnerability. The extension will search for this file, and display it in a pretty way.

security.txt is a proposed web standard for communicating information about how to get in touch with a vendor regarding a security issue.

This extension is designed to make it faster for security researchers to get in touch with relevant vendors, by searching automatically for the /.well-known/security.txt file (and, as a fallback, the /security.txt file). It then collapses most of the information (save for the contact details), provides helpful warnings, and makes links clickable.