About
About wellknownaudit
A free, open auditor for a domain’s entire /.well-known/ directory.
The /.well-known/ directory (RFC 8615) holds machine-readable files at predictable paths so browsers, apps, mail servers and scanners find them automatically. There are good validators for individual files, but checking a domain properly means visiting a dozen tools. wellknownaudit runs them all in one pass, against the IANA Well-Known URIs registry.
For each file it checks presence, HTTP status, HTTPS, content-type and redirects, then runs that file's own conformance rules — RFC 9116 for security.txt, RFC 8461 for mta-sts.txt (including its _mta-sts DNS record), valid-JSON-and-required-keys for the app-link and identity files. Absent files are informational, never errors. It runs on Cloudflare and keeps no logs.