security.txt
What it can report
- ! low no file at /.well-known/security.txt, /security.txt or over http (low) How to fix it
- ! low served at /security.txt only (low) How to fix it
- ! low served over http only, or redirected to http (low) How to fix it
- ! low not text/plain, or a charset other than utf-8 (low) How to fix it
- ! low no Contact field (low) How to fix it
- ! low Contact is not a mailto:, tel: or https: URI (low) How to fix it
- ! low no Expires field (low) How to fix it
- ! low Expires is not an RFC 3339 date-time (low) How to fix it
- ! low Expires is in the past (low) How to fix it
- · info Expires is within 30 days (info) How to fix it
- · info Expires is more than a year ahead (info) How to fix it
- ! low duplicate Expires or Preferred-Languages, an http URI in a web field (low) How to fix it
- ! low Canonical lines do not name the address the file is read from (low) How to fix it
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 1 within Hygiene. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.