Security.txt file detected
Description
A security.txt file (RFC 9116) was found on the target. This is a plain-text file, served from /.well-known/security.txt (or the site root for legacy reasons), that defines a standard way for organizations to publish their vulnerability disclosure process. It typically lists a security contact and policy so that researchers know how to report issues responsibly. The file is identified by its RFC 9116 directives; any missing mandatory field (Contact, Expires) or stale expiration date is reported as a compliance issue.
Remediation
No action is required to remediate the presence of the file. Ensure the information it exposes is intended to be public, keep the Expires field no more than one year in the future and refresh it before it lapses, and consider signing the file (and referencing the signature via the Signature field) to protect its integrity.