Security-Disclosure and Transport-Security Posture of Password Manager Vendors (2026)

A reproducible point-in-time dataset (2026-07-18) of public front-domain security signals for 15 password manager vendors: HTTPS, HSTS and preload, RFC 9116 /.well-known/security.txt, Content-Security-Policy and X-Content-Type-Options. Measured with curl; fully reproducible; no fabricated values. Measures the vendor primary domain and RFC 9116 disclosure readiness, NOT the product cryptography or audit history. Compiled by PwdFortress. Related resources: pwdfortress.com and its password strength checker.