← All fix guides
Website · Fix guide

Security contact file missing

The site does not publish a valid security.txt file with a Contact field.

The concept

What does this test measure?

The site does not publish a valid security.txt file with a Contact field.

Recommended action

What to do next

  1. Create a short security contact policy.
  2. Publish it at /.well-known/security.txt with Contact and Expires fields.
  3. Keep the address monitored and renew the expiry date.
Official resources

Useful links

Confirmation

How to verify the fix

Fetch the well-known URL publicly and validate its fields.

Interpret carefully

When this result may be wrong

security.txt is voluntary and its absence does not make the website insecure.

Ready to check again?

Run a fresh report after DNS caches and platform changes have had time to update.

Check a domain