Checks

security.txt Expires is invalid

Expires is present but not a date this scan recognizes.

Why it matters

Readers and tooling may ignore an unparseable expiry.

What to do

Set Expires to an ISO-8601 timestamp.

Reference

A published security.txt supports coordinated vulnerability disclosure.

RFC 9116 — security.txt