Server-side fetch · Public hosts only
security.txt fetcher
Standard locations for coordinated vulnerability disclosure. Many AI and cloud vendors publish contacts here.
Tries /.well-known/security.txt then /security.txt over HTTPS (RFC 9116). Useful for disclosure and AI / security contact workflows.