FALKEN'S MAZE / CHECKS / SECURITY.TXT

security.txt

What Joshua checks

Checks for a /.well-known/security.txt file with a contact and an expiry date.

Why it matters

Gives people who find a security problem a way to tell you, instead of leaving them to guess or go public.

How to fix it

Publish /.well-known/security.txt with a "Contact:" line (an email or a web form) and an "Expires:" date less than a year ahead.

In the Maze Score

Worth

2 points (half for a warning)

Severity

Info

Runs on

Every scan, including the free report card

Related checks

• Server version leakagePro (Watchtower)
• robots.txtFree
• PHP versionPro (Watchtower)