Checks

security.txt contact published

security.txt includes a Contact field.

Why it matters

That is the address for coordinated disclosure.

What to do

No change is required if the contact is monitored.

Reference

A published security.txt supports coordinated vulnerability disclosure.

RFC 9116 — security.txt