Security.txt Validator
Check security.txt fields, contacts, canonical URLs and expiration locally.
Validate security.txt locally
The validator checks required Contact and Expires fields plus common URI and date errors.
Deployment location, HTTPS behavior and digital signatures still need to be checked on the live website.