Check the publicly available .well-known/security.txt resource for a website.
.well-known/security.txt