security.txt not found
/.well-known/security.txt returned 404.
Why it matters
There is no published contact for coordinated vulnerability disclosure.
What to do
Add /.well-known/security.txt with a Contact field, as RFC 9116 describes.
Reference
A published security.txt supports coordinated vulnerability disclosure.