Hatch.
See if anyone can actually reach you before a regulator makes you find out the hard way.
Article 14's vulnerability-disclosure duty took effect 2026-09-11. This free check tells you whether your domain has a working, standards-compliant disclosure channel (RFC 9116 security.txt) right now — no signup. More checks are on the way; this page will say so honestly when they land.