Security.txt checker

This check validates the pasted text against RFC 9116: required Contact and Expires, the expiry timestamp, singleton fields, URI shapes, and Canonical against the origin you name. It does not fetch /.well-known/security.txt or verify where a site actually serves the file, which needs the network path this tool deliberately does not take; the location note in the report is exactly that, a note.